Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/qaD9wls0FuRNcLE6iWdw0MvBSxQ.roa
File: qaD9wls0FuRNcLE6iWdw0MvBSxQ.roa (raw, json)
Hash identifier: 5JqHu4JDFai6EFY/2NWBVdXkDFJWW70EkQ5iJKgW3RU=
Subject key identifier: A9:A0:FD:C2:5B:34:16:E4:4D:70:B1:3A:89:67:70:D0:CB:C1:4B:14
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1B63EC53
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/qaD9wls0FuRNcLE6iWdw0MvBSxQ.roa
Signing time: Sat 01 Jan 2022 10:02:35 +0000
ROA not before: Sat 01 Jan 2022 10:02:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29582
IP address blocks: 188.6.241.0/24 maxlen: 24
195.228.1.0/24 maxlen: 24
84.1.154.0/24 maxlen: 24
84.2.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459533395 (0x1b63ec53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 10:02:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9a0fdc25b3416e44d70b13a896770d0cbc14b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:e5:94:5e:61:c9:94:53:de:c0:d5:f8:69:
b6:98:8e:32:a4:59:c2:0d:e6:49:bf:54:53:4a:ef:
90:3f:5e:42:8b:cb:09:3c:83:38:62:3e:af:0b:ec:
16:a3:62:61:a1:db:e0:44:e4:e3:e4:38:52:f2:f4:
b9:38:45:03:39:68:b2:57:c7:55:1d:b1:5b:f3:3f:
41:40:d3:e1:36:80:7d:57:14:ad:b4:2c:81:42:b1:
5e:a9:43:9e:ee:cf:35:74:17:9c:ab:5a:64:e9:21:
4a:29:9f:05:8e:fe:18:7a:6d:d0:e2:cd:de:e9:f6:
3e:17:00:97:24:b8:0d:fa:64:8b:c2:3e:54:ea:e9:
3e:e1:ef:86:6e:27:3f:67:a3:3e:81:4d:c4:e5:84:
a5:fc:4e:41:80:35:b5:ef:4c:fc:5a:89:58:41:80:
2a:61:3e:0c:4b:61:10:af:25:76:19:de:9e:23:19:
7c:62:00:b5:e3:0a:17:fd:0b:8e:66:6a:78:65:12:
00:de:49:41:15:e8:96:d3:d4:30:0e:66:de:79:4c:
5d:fd:a7:cc:21:3f:57:c5:03:28:c8:01:cc:61:98:
21:0f:ba:a5:80:bf:d1:31:7e:2c:34:06:41:5d:e2:
6c:4e:bd:fc:6f:89:90:96:c9:86:c9:b4:b7:cb:7e:
96:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A0:FD:C2:5B:34:16:E4:4D:70:B1:3A:89:67:70:D0:CB:C1:4B:14
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/qaD9wls0FuRNcLE6iWdw0MvBSxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.154.0/24
84.2.74.0/24
188.6.241.0/24
195.228.1.0/24
Signature Algorithm: sha256WithRSAEncryption
25:5b:af:6c:64:a5:40:82:0b:ab:8d:46:d4:7f:9d:ec:7e:0a:
40:3e:48:cd:54:d0:3c:75:3e:06:64:ca:6e:59:ca:71:82:69:
ff:a0:04:65:30:a8:0f:c9:8e:36:cf:32:dc:ce:c7:a6:af:51:
06:1f:27:ea:79:47:27:0e:48:6a:92:0f:48:84:08:10:45:21:
9c:84:98:38:18:1f:e0:b2:27:cd:30:18:bf:58:ba:39:52:cb:
79:b0:75:8a:48:e9:7f:7e:d3:f5:ea:3d:a4:89:9c:66:65:ad:
d2:91:57:cf:06:32:02:35:a2:75:49:92:09:20:f1:cf:4f:a7:
1e:cf:90:11:58:10:ca:18:8d:74:36:be:51:4f:27:d4:86:5e:
95:23:bc:96:b9:a4:5b:59:0f:ff:d0:42:64:f7:3a:88:98:01:
47:97:1e:fb:99:b5:b0:52:4e:26:08:4f:d4:79:82:d4:87:26:
07:f5:5c:02:69:43:a0:ae:27:d9:85:10:c6:89:9c:27:1f:7a:
fd:23:17:0d:4a:97:e6:cb:08:64:0d:77:f8:25:11:68:94:47:
48:80:d7:46:ac:bd:29:8f:df:d9:89:f5:3a:83:b1:50:b7:04:
77:68:e7:a1:1d:1b:a1:1c:da:28:e0:27:4e:48:a7:26:28:e0:
b7:0d:ce:c1
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEG2PsUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MDJkYWM2MDVmNDY1OTcxOGMwYTE1ZTFmNzMyY2JkNGY0OGFhZTdiMB4XDTIyMDEw
MTEwMDIzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTlhMGZkYzI1YjM0
MTZlNDRkNzBiMTNhODk2NzcwZDBjYmMxNGIxNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKL65ZReYcmUU97A1fhptpiOMqRZwg3mSb9UU0rvkD9eQovL
CTyDOGI+rwvsFqNiYaHb4ETk4+Q4UvL0uThFAzloslfHVR2xW/M/QUDT4TaAfVcU
rbQsgUKxXqlDnu7PNXQXnKtaZOkhSimfBY7+GHpt0OLN3un2PhcAlyS4Dfpki8I+
VOrpPuHvhm4nP2ejPoFNxOWEpfxOQYA1te9M/FqJWEGAKmE+DEthEK8ldhneniMZ
fGIAteMKF/0LjmZqeGUSAN5JQRXoltPUMA5m3nlMXf2nzCE/V8UDKMgBzGGYIQ+6
pYC/0TF+LDQGQV3ibE69/G+JkJbJhsm0t8t+lu0CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBSpoP3CWzQW5E1wsTqJZ3DQy8FLFDAfBgNVHSMEGDAWgBTwLaxgX0ZZcYwK
FeH3MsvU9IquezAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhDMnNZRjlHV1hHTUNoWGg5ekxMMVBTS3Jucy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGQvZTkwOTc2LTNkZDEtNDcxNi1iYmY2LTI5MmFlNDZlNjMwMi8x
L3FhRDl3bHMwRnVSTmNMRTZpV2R3ME12QlN4US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQv
ZTkwOTc2LTNkZDEtNDcxNi1iYmY2LTI5MmFlNDZlNjMwMi8xLzhDMnNZRjlHV1hH
TUNoWGg5ekxMMVBTS3Jucy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAFQBmgMEAFQCSgMEALwG8QMEAMPk
ATANBgkqhkiG9w0BAQsFAAOCAQEAJVuvbGSlQIILq41G1H+d7H4KQD5IzVTQPHU+
BmTKblnKcYJp/6AEZTCoD8mONs8y3M7Hpq9RBh8n6nlHJw5IapIPSIQIEEUhnISY
OBgf4LInzTAYv1i6OVLLebB1ikjpf37T9eo9pImcZmWt0pFXzwYyAjWidUmSCSDx
z0+nHs+QEVgQyhiNdDa+UU8n1IZelSO8lrmkW1kP/9BCZPc6iJgBR5ce+5m1sFJO
JghP1HmC1IcmB/VcAmlDoK4n2YUQxomcJx96/SMXDUqX5ssIZA13+CURaJRHSIDX
Rqy9KY/f2Yn1OoOxULcEd2jnoR0boRzaKOAnTkinJijgtw3OwQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-ams.rpki-client.org