Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c78fd1-d125-4e6b-99b8-3a91172b6811/1/Yu63EfM-7hTnAZpbFjxJ-U7OzuQ.roa
File: Yu63EfM-7hTnAZpbFjxJ-U7OzuQ.roa (raw, json)
Hash identifier: 4iHZeebKiqNj3Y8Mq71o1aluJ/qsaVgnOFNbnsUW4O0=
Subject key identifier: 62:EE:B7:11:F3:3E:EE:14:E7:01:9A:5B:16:3C:49:F9:4E:CE:CE:E4
Certificate issuer: /CN=cc0e008fdca5f88df7dc71bbf5999b013d5fdd12
Certificate serial: 065CE8B1
Authority key identifier: CC:0E:00:8F:DC:A5:F8:8D:F7:DC:71:BB:F5:99:9B:01:3D:5F:DD:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zA4Aj9yl-I333HG79ZmbAT1f3RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c78fd1-d125-4e6b-99b8-3a91172b6811/1/Yu63EfM-7hTnAZpbFjxJ-U7OzuQ.roa
Signing time: Sat 01 Jan 2022 06:52:17 +0000
ROA not before: Sat 01 Jan 2022 06:52:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203744
IP address blocks: 185.125.123.0/24 maxlen: 24
185.125.122.0/24 maxlen: 24
185.125.121.0/24 maxlen: 24
185.125.120.0/22 maxlen: 22
185.125.120.0/24 maxlen: 24
2a0e:8ac0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106752177 (0x65ce8b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0e008fdca5f88df7dc71bbf5999b013d5fdd12
Validity
Not Before: Jan 1 06:52:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62eeb711f33eee14e7019a5b163c49f94ececee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:0e:e7:9c:12:b0:e0:bb:f2:cc:2c:a1:f1:
41:55:55:3e:f3:60:c6:29:7c:88:0e:4a:95:a7:1d:
8e:80:6e:29:e1:da:b8:88:89:f3:a9:20:2e:2a:87:
33:7b:db:2c:3a:63:32:27:8f:d7:d1:97:3d:77:e4:
06:36:b7:89:9d:4e:d1:d3:15:47:22:3e:13:4b:25:
b5:d8:69:17:4a:2b:04:54:f9:da:a3:68:18:ba:20:
c8:56:2b:2f:f4:57:63:ca:23:da:a5:c7:ac:72:1a:
77:4b:87:37:a4:3f:74:16:55:f2:39:48:c4:b3:f0:
92:07:4f:1a:28:2e:3f:dd:bc:59:73:c1:55:a8:8c:
31:2b:ca:95:87:77:89:e3:e9:04:8d:52:8a:67:f8:
2a:1c:a8:fa:d2:b8:f7:98:72:6c:c6:11:58:d9:2c:
d9:bf:67:34:03:00:3a:e5:29:ed:95:5b:f8:62:19:
29:08:50:f5:9a:23:2e:3d:0e:4b:28:77:6c:b7:fe:
6b:4d:0d:f0:64:2b:ea:ee:23:49:b2:72:43:04:11:
10:5d:44:23:a9:ae:3f:87:8b:27:94:9b:f6:48:5c:
1a:96:a8:d0:25:09:67:81:29:9b:61:99:e0:69:01:
07:df:14:2b:e0:4e:0a:91:e9:ce:4d:0e:a6:a1:ca:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EE:B7:11:F3:3E:EE:14:E7:01:9A:5B:16:3C:49:F9:4E:CE:CE:E4
X509v3 Authority Key Identifier:
keyid:CC:0E:00:8F:DC:A5:F8:8D:F7:DC:71:BB:F5:99:9B:01:3D:5F:DD:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zA4Aj9yl-I333HG79ZmbAT1f3RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c78fd1-d125-4e6b-99b8-3a91172b6811/1/Yu63EfM-7hTnAZpbFjxJ-U7OzuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c78fd1-d125-4e6b-99b8-3a91172b6811/1/zA4Aj9yl-I333HG79ZmbAT1f3RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.120.0/22
IPv6:
2a0e:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
19:d1:a2:cb:d5:e7:64:96:ba:2d:c3:ed:bf:00:7b:2e:e3:54:
d6:9a:d9:fa:05:61:b7:95:73:ad:c9:76:79:c5:5d:54:17:c9:
bc:67:5a:43:5c:ec:dd:d5:c2:2b:fb:67:c8:a2:6a:0a:8a:0f:
ef:ec:9c:38:6c:b1:78:db:de:8f:74:ee:db:10:37:20:27:87:
eb:74:61:1b:50:5d:2f:a4:6c:00:13:48:61:5c:3b:6d:69:ee:
70:1b:37:3c:28:ea:bd:18:3c:0a:23:31:59:e4:10:11:3b:12:
d9:7c:4b:bb:b9:ad:a1:7b:d1:b2:78:2f:82:5d:21:6a:3d:69:
b7:4d:2c:42:fa:6e:39:12:f4:b9:67:3a:2a:c3:01:9b:61:c3:
d6:15:89:6d:03:37:e2:df:dd:2e:44:a2:3f:99:85:a8:b9:99:
ee:7e:e9:f6:e6:e6:a8:d0:03:a7:33:26:66:20:76:03:1a:4c:
17:24:cb:2c:4d:28:b5:b1:16:34:2f:24:23:e7:d2:f4:68:e8:
62:8d:18:c6:75:30:b6:ba:b8:03:d5:9e:e9:10:9d:59:1a:f6:
23:e5:d1:90:27:50:e8:e9:34:70:75:84:b9:fa:da:a6:1d:49:
91:f5:59:2b:b2:ad:38:8f:29:f5:fc:cf:8a:76:18:db:0b:4d:
c0:de:b6:45
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBlzosTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
YzBlMDA4ZmRjYTVmODhkZjdkYzcxYmJmNTk5OWIwMTNkNWZkZDEyMB4XDTIyMDEw
MTA2NTIxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjJlZWI3MTFmMzNl
ZWUxNGU3MDE5YTViMTYzYzQ5Zjk0ZWNlY2VlNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMovDuecErDgu/LMLKHxQVVVPvNgxil8iA5KlacdjoBuKeHa
uIiJ86kgLiqHM3vbLDpjMieP19GXPXfkBja3iZ1O0dMVRyI+E0sltdhpF0orBFT5
2qNoGLogyFYrL/RXY8oj2qXHrHIad0uHN6Q/dBZV8jlIxLPwkgdPGiguP928WXPB
VaiMMSvKlYd3iePpBI1Simf4Khyo+tK495hybMYRWNks2b9nNAMAOuUp7ZVb+GIZ
KQhQ9ZojLj0OSyh3bLf+a00N8GQr6u4jSbJyQwQREF1EI6muP4eLJ5Sb9khcGpao
0CUJZ4Epm2GZ4GkBB98UK+BOCpHpzk0OpqHKpmUCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRi7rcR8z7uFOcBmlsWPEn5Ts7O5DAfBgNVHSMEGDAWgBTMDgCP3KX4jffc
cbv1mZsBPV/dEjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pBNEFqOXlsLUkzMzNIRzc5Wm1iQVQxZjNSSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODUvYzc4ZmQxLWQxMjUtNGU2Yi05OWI4LTNhOTExNzJiNjgxMS8x
L1l1NjNFZk0tN2hUbkFacGJGanhKLVU3T3p1US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUv
Yzc4ZmQxLWQxMjUtNGU2Yi05OWI4LTNhOTExNzJiNjgxMS8xL3pBNEFqOXlsLUkz
MzNIRzc5Wm1iQVQxZjNSSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArl9eDANBAIAAjAHAwUDKg6KwDAN
BgkqhkiG9w0BAQsFAAOCAQEAGdGiy9XnZJa6LcPtvwB7LuNU1prZ+gVht5Vzrcl2
ecVdVBfJvGdaQ1zs3dXCK/tnyKJqCooP7+ycOGyxeNvej3Tu2xA3ICeH63RhG1Bd
L6RsABNIYVw7bWnucBs3PCjqvRg8CiMxWeQQETsS2XxLu7mtoXvRsngvgl0haj1p
t00sQvpuORL0uWc6KsMBm2HD1hWJbQM34t/dLkSiP5mFqLmZ7n7p9ubmqNADpzMm
ZiB2AxpMFyTLLE0otbEWNC8kI+fS9GjoYo0YxnUwtrq4A9We6RCdWRr2I+XRkCdQ
6Ok0cHWEufraph1JkfVZK7KtOI8p9fzPinYY2wtNwN62RQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:53 2023 by rpki-client on console-fra.rpki-client.org