Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/SLd5QBw_1sOXcgk06HnIpIvSKII.roa
File: SLd5QBw_1sOXcgk06HnIpIvSKII.roa (raw, json)
Hash identifier: LPlq1EeewPZWw7BBI/qYeNLEQMgfkVOq6Buuj4rixXo=
Subject key identifier: 48:B7:79:40:1C:3F:D6:C3:97:72:09:34:E8:79:C8:A4:8B:D2:28:82
Certificate issuer: /CN=08818cbb0f9d1e573773d791138a0122f28bec56
Certificate serial: 06CA92E6
Authority key identifier: 08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/SLd5QBw_1sOXcgk06HnIpIvSKII.roa
Signing time: Fri 29 Apr 2022 01:15:59 +0000
ROA not before: Fri 29 Apr 2022 01:15:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206772
IP address blocks: 185.158.124.0/23 maxlen: 23
185.158.124.0/24 maxlen: 24
185.158.124.0/22 maxlen: 22
185.158.125.0/24 maxlen: 24
185.158.127.0/24 maxlen: 24
2a07:ad40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113939174 (0x6ca92e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08818cbb0f9d1e573773d791138a0122f28bec56
Validity
Not Before: Apr 29 01:15:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48b779401c3fd6c397720934e879c8a48bd22882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:e2:7b:44:b6:00:07:59:21:41:f6:f1:12:
1e:ca:c5:60:20:62:21:60:21:ea:f2:9e:f1:68:7a:
72:9c:d1:00:36:30:df:a3:47:f6:b6:d6:16:6f:dd:
1b:a6:e2:b7:93:b8:45:0e:d5:1b:bb:62:0c:f1:dd:
34:0a:32:0d:46:ba:e4:10:23:43:d1:1a:5c:04:e7:
8d:96:ee:25:70:b1:e1:73:c1:38:c4:2c:90:3a:60:
15:22:fd:c5:d9:f5:e8:f8:9f:e7:8b:78:6f:5f:0c:
d1:43:88:b8:c8:e3:24:ae:7a:6a:c1:3c:71:57:39:
61:16:16:79:54:89:cf:33:32:66:87:08:a3:26:cd:
ad:77:f1:33:99:88:d1:da:ea:c1:72:6c:9f:68:f8:
79:b0:32:c4:e6:99:bd:da:be:d6:0a:56:ec:19:ce:
a5:59:e4:c2:08:ba:71:1e:89:01:50:c1:25:c8:50:
98:fb:a7:29:f2:93:2d:c8:bb:a4:4c:ce:3e:49:46:
0f:dd:4a:74:dd:47:ad:0d:f9:10:fb:c1:c3:c9:56:
e7:89:8e:66:0d:e6:a9:f2:ff:49:a1:25:56:0f:2a:
13:a4:52:5f:1a:db:bd:12:27:e4:30:38:a6:a7:7f:
e4:15:b1:94:b8:a8:53:ad:36:0d:6e:3c:85:ca:99:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B7:79:40:1C:3F:D6:C3:97:72:09:34:E8:79:C8:A4:8B:D2:28:82
X509v3 Authority Key Identifier:
keyid:08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/SLd5QBw_1sOXcgk06HnIpIvSKII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.124.0/22
IPv6:
2a07:ad40::/29
Signature Algorithm: sha256WithRSAEncryption
0f:00:a5:d1:0e:d4:31:ca:23:8f:30:ef:53:d8:51:44:99:3a:
0c:e4:14:0b:48:27:be:df:ae:62:57:a8:29:69:dd:d4:ae:19:
ad:a2:2d:98:3f:51:39:d3:4f:5d:85:b2:aa:58:53:2e:61:82:
e1:e3:21:11:10:3a:74:66:c3:24:61:be:c5:8b:81:15:82:45:
da:94:0d:55:a6:c2:4a:d8:58:6a:a5:d9:81:c6:b2:92:33:75:
b3:e1:c1:9d:64:fe:41:4a:c3:2a:d5:9a:b2:e8:4b:a2:fb:1b:
01:ed:10:31:eb:58:cb:bb:92:ed:d2:ab:cb:1f:ab:c2:01:13:
17:76:19:cc:d0:01:e7:76:b7:0a:27:cf:ad:aa:3d:af:5e:66:
cf:d1:05:8f:b4:72:5b:b3:52:23:f8:e5:9d:93:c6:e9:e6:27:
a4:13:9d:10:72:82:5b:54:0d:23:9c:ce:39:fd:5d:a7:3d:b4:
6a:1c:89:ac:0b:bc:68:22:68:e4:49:08:a9:44:c8:8c:03:c8:
70:63:a7:9a:64:ce:25:69:c1:65:e7:fb:f4:2d:55:57:dc:28:
d0:9b:da:52:55:f0:cd:27:8d:3c:05:23:0d:77:06:52:43:03:
e8:1a:f5:98:bf:f0:44:a6:6b:c5:5e:76:a1:93:d7:b4:d7:d4:
d9:54:23:4d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBsqS5jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ODgxOGNiYjBmOWQxZTU3Mzc3M2Q3OTExMzhhMDEyMmYyOGJlYzU2MB4XDTIyMDQy
OTAxMTU1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDhiNzc5NDAxYzNm
ZDZjMzk3NzIwOTM0ZTg3OWM4YTQ4YmQyMjg4MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL1s4ntEtgAHWSFB9vESHsrFYCBiIWAh6vKe8Wh6cpzRADYw
36NH9rbWFm/dG6bit5O4RQ7VG7tiDPHdNAoyDUa65BAjQ9EaXATnjZbuJXCx4XPB
OMQskDpgFSL9xdn16Pif54t4b18M0UOIuMjjJK56asE8cVc5YRYWeVSJzzMyZocI
oybNrXfxM5mI0drqwXJsn2j4ebAyxOaZvdq+1gpW7BnOpVnkwgi6cR6JAVDBJchQ
mPunKfKTLci7pEzOPklGD91KdN1HrQ35EPvBw8lW54mOZg3mqfL/SaElVg8qE6RS
XxrbvRIn5DA4pqd/5BWxlLioU602DW48hcqZ5ZECAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRIt3lAHD/Ww5dyCTToeciki9IogjAfBgNVHSMEGDAWgBQIgYy7D50eVzdz
15ETigEi8ovsVjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NJR011dy1kSGxjM2M5ZVJFNG9CSXZLTDdGWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGYvMmUwNTM2LTRjYTItNGFmZS04M2Q2LTMzNmU4NzRmM2Q4Ny8x
L1NMZDVRQndfMXNPWGNnazA2SG5JcEl2U0tJSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYv
MmUwNTM2LTRjYTItNGFmZS04M2Q2LTMzNmU4NzRmM2Q4Ny8xL0NJR011dy1kSGxj
M2M5ZVJFNG9CSXZLTDdGWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArmefDANBAIAAjAHAwUDKgetQDAN
BgkqhkiG9w0BAQsFAAOCAQEADwCl0Q7UMcojjzDvU9hRRJk6DOQUC0gnvt+uYleo
KWnd1K4ZraItmD9ROdNPXYWyqlhTLmGC4eMhERA6dGbDJGG+xYuBFYJF2pQNVabC
SthYaqXZgcaykjN1s+HBnWT+QUrDKtWasuhLovsbAe0QMetYy7uS7dKryx+rwgET
F3YZzNAB53a3CifPrao9r15mz9EFj7RyW7NSI/jlnZPG6eYnpBOdEHKCW1QNI5zO
Of1dpz20ahyJrAu8aCJo5EkIqUTIjAPIcGOnmmTOJWnBZef79C1VV9wo0JvaUlXw
zSeNPAUjDXcGUkMD6Br1mL/wRKZrxV52oZPXtNfU2VQjTQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:09 2023 by rpki-client on console-ams.rpki-client.org