Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Mv0o7JAHrwv1ySkbHHpX82AxixQ.roa
File: Mv0o7JAHrwv1ySkbHHpX82AxixQ.roa (raw, json)
Hash identifier: FVJ69Ep9G6h5i1a2sbws4gz0PQ4PL+qZVU3066wY9d8=
Subject key identifier: 32:FD:28:EC:90:07:AF:0B:F5:C9:29:1B:1C:7A:57:F3:60:31:8B:14
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16DF2071
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Mv0o7JAHrwv1ySkbHHpX82AxixQ.roa
Signing time: Sat 01 Jan 2022 12:01:37 +0000
ROA not before: Sat 01 Jan 2022 12:01:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197998
IP address blocks: 141.101.212.0/23 maxlen: 23
141.101.207.0/24 maxlen: 24
141.101.214.0/23 maxlen: 23
141.101.140.0/23 maxlen: 23
37.230.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383721585 (0x16df2071)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32fd28ec9007af0bf5c9291b1c7a57f360318b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:0e:da:57:e2:32:49:fb:d6:b5:6d:db:6d:
af:15:25:ff:7a:c1:a6:69:d4:d1:f0:82:2c:5e:60:
fb:ce:4b:8c:8f:d2:53:0e:53:4f:54:7f:e3:d1:7b:
07:d5:2a:11:79:0f:ac:9b:f8:cb:47:2d:7d:d8:87:
3d:d0:6f:29:16:9c:f1:b5:a6:b0:47:c0:37:7e:a7:
d6:ec:0d:ae:4a:95:38:a1:80:60:e1:01:2a:ac:64:
90:80:0b:1b:43:e4:10:49:43:cd:c9:82:6a:d5:ca:
79:99:45:67:cd:eb:90:4e:0d:3f:f4:26:81:3f:19:
cf:3b:81:f4:5f:18:5c:f2:4c:69:0a:f6:81:95:ca:
bc:2f:05:c9:3d:59:f7:55:aa:76:75:36:9c:a6:6e:
ca:54:d6:e9:e3:12:42:e0:68:a1:74:13:67:ab:db:
8e:40:05:33:68:99:02:18:52:d9:a8:cd:0f:e5:97:
27:70:aa:a8:83:e4:94:b3:9b:33:ce:6b:2f:94:0e:
72:a4:75:6d:9d:1f:a6:65:c5:c8:23:ec:b2:d1:92:
50:de:87:85:2a:58:90:22:85:b8:74:88:16:da:24:
df:dd:40:84:c4:a5:b9:4d:2c:d5:b7:3c:5f:ff:99:
30:88:23:1d:de:e8:d9:64:c6:f4:a5:ea:3e:e6:d9:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FD:28:EC:90:07:AF:0B:F5:C9:29:1B:1C:7A:57:F3:60:31:8B:14
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Mv0o7JAHrwv1ySkbHHpX82AxixQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.223.0/24
141.101.140.0/23
141.101.207.0/24
141.101.212.0/22
Signature Algorithm: sha256WithRSAEncryption
36:88:13:c2:b8:47:45:80:48:2b:24:1f:7a:16:c3:5d:91:0f:
53:60:16:78:7f:cd:4d:56:d8:0f:16:f0:d0:c2:97:f7:cc:66:
02:22:41:e2:da:f2:88:91:00:ff:cf:fc:b8:a6:41:87:a6:68:
37:16:2b:86:cb:79:11:26:b2:18:49:90:3c:c6:e9:b4:10:8f:
2c:57:42:e7:6d:06:26:c9:3d:53:0f:66:91:6a:a7:1a:18:e9:
62:bf:1b:41:d7:68:82:d9:6f:0e:a2:a6:11:e5:c8:8a:86:9a:
14:b0:5c:03:f3:6d:68:49:ac:60:17:83:f6:a8:d4:9b:51:42:
90:c1:ca:03:e3:60:c7:c4:60:df:fc:e8:e2:df:66:0f:0b:53:
e9:35:c2:e5:11:5f:3c:92:31:99:d1:90:b7:aa:1e:42:5e:75:
97:c7:29:e9:ca:cd:b8:11:79:8e:30:58:2f:9c:b4:4e:36:93:
40:60:0c:af:74:18:3a:38:7c:e8:da:93:7f:41:d5:ce:50:d4:
0a:8b:fa:d3:0d:4a:fe:ea:a0:65:a9:8d:08:cc:85:0e:e3:7b:
1c:d6:11:83:d7:a5:a7:84:5f:ad:e7:00:88:f2:ac:ed:8f:d1:
13:e6:7f:f5:7a:6a:37:bf:fc:3e:a3:30:ea:d1:f5:a8:41:07:
a9:88:31:9a
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEFt8gcTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ODg1ZTg4NGMyZmM3YTc1ZDEyZGQxZGVhNDljZTIzNDljNDcwNjdlMB4XDTIyMDEw
MTEyMDEzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzJmZDI4ZWM5MDA3
YWYwYmY1YzkyOTFiMWM3YTU3ZjM2MDMxOGIxNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKG+DtpX4jJJ+9a1bdttrxUl/3rBpmnU0fCCLF5g+85LjI/S
Uw5TT1R/49F7B9UqEXkPrJv4y0ctfdiHPdBvKRac8bWmsEfAN36n1uwNrkqVOKGA
YOEBKqxkkIALG0PkEElDzcmCatXKeZlFZ83rkE4NP/QmgT8ZzzuB9F8YXPJMaQr2
gZXKvC8FyT1Z91WqdnU2nKZuylTW6eMSQuBooXQTZ6vbjkAFM2iZAhhS2ajND+WX
J3CqqIPklLObM85rL5QOcqR1bZ0fpmXFyCPsstGSUN6HhSpYkCKFuHSIFtok391A
hMSluU0s1bc8X/+ZMIgjHd7o2WTG9KXqPubZdNECAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBQy/SjskAevC/XJKRscelfzYDGLFDAfBgNVHSMEGDAWgBRYheiEwvx6ddEt
0d6knOI0nEcGfjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dJWG9oTUw4ZW5YUkxkSGVwSnppTkp4SEJuNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODYvNmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8x
L012MG83SkFIcnd2MXlTa2JISHBYODJBeGl4US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYv
NmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8xL1dJWG9oTUw4ZW5Y
UkxkSGVwSnppTkp4SEJuNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEACXm3wMEAY1ljAMEAI1lzwMEAo1l
1DANBgkqhkiG9w0BAQsFAAOCAQEANogTwrhHRYBIKyQfehbDXZEPU2AWeH/NTVbY
Dxbw0MKX98xmAiJB4tryiJEA/8/8uKZBh6ZoNxYrhst5ESayGEmQPMbptBCPLFdC
520GJsk9Uw9mkWqnGhjpYr8bQddogtlvDqKmEeXIioaaFLBcA/NtaEmsYBeD9qjU
m1FCkMHKA+Ngx8Rg3/zo4t9mDwtT6TXC5RFfPJIxmdGQt6oeQl51l8cp6crNuBF5
jjBYL5y0TjaTQGAMr3QYOjh86NqTf0HVzlDUCov60w1K/uqgZamNCMyFDuN7HNYR
g9elp4RfrecAiPKs7Y/RE+Z/9XpqN7/8PqMw6tH1qEEHqYgxmg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:55 2023 by rpki-client on console-fra.rpki-client.org