Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/xQxN0NuzXdaK26KEAbTH8gTLZt0.roa
File: xQxN0NuzXdaK26KEAbTH8gTLZt0.roa (raw, json)
Hash identifier: aj2ClxYd5rSZwzbeJTwj3Nm4tIuwYJ1cQG1Z7CcTJEU=
Subject key identifier: C5:0C:4D:D0:DB:B3:5D:D6:8A:DB:A2:84:01:B4:C7:F2:04:CB:66:DD
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 086307BD
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/xQxN0NuzXdaK26KEAbTH8gTLZt0.roa
Signing time: Fri 01 Jul 2022 06:57:04 +0000
ROA not before: Fri 01 Jul 2022 06:57:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 185.204.16.0/22 maxlen: 24
193.16.15.0/24 maxlen: 24
193.16.12.0/24 maxlen: 24
193.16.13.0/24 maxlen: 24
193.16.14.0/24 maxlen: 24
80.254.232.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140707773 (0x86307bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jul 1 06:57:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c50c4dd0dbb35dd68adba28401b4c7f204cb66dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:49:cd:68:22:15:a6:c8:11:bd:78:f8:a3:16:
fd:de:01:4c:2b:72:76:0c:1c:4c:c1:db:b3:80:70:
88:0e:6c:0a:35:fe:85:d2:67:c8:c4:a5:63:fc:91:
f1:e7:8c:c1:c1:4f:51:9a:16:8b:e8:0b:f1:7b:a7:
c7:d2:f5:c6:2b:ad:40:d8:d8:b6:b5:dc:ed:ed:30:
dd:66:26:eb:fd:58:b7:07:84:f4:bf:00:a1:02:d9:
e2:bf:d3:f0:11:e4:15:6e:27:3e:42:e4:d4:0a:fe:
90:51:f8:10:0f:e8:eb:9a:66:9d:4e:35:dc:87:85:
07:1a:90:ce:ef:22:a8:07:f3:a1:09:d0:8f:57:0d:
95:97:56:fd:f9:24:3c:0e:9b:5f:3a:c9:ed:78:f8:
c2:75:fd:50:2e:92:77:b9:f7:76:24:b6:34:43:47:
ff:bc:38:9a:cc:1b:2c:fc:7c:04:92:60:86:a9:c1:
1a:40:6a:32:d3:58:26:7c:ef:d4:d8:de:e8:d8:f8:
47:f0:9e:fe:6e:ae:a1:0d:7f:05:fb:3b:3f:a6:59:
7f:e7:35:f4:49:b7:41:e9:7f:97:a7:43:91:c2:25:
f0:ae:10:de:77:c2:c2:34:f9:00:f5:6a:6c:d5:2a:
16:ae:f2:c3:34:32:90:72:a3:b4:52:b2:b7:3c:45:
36:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0C:4D:D0:DB:B3:5D:D6:8A:DB:A2:84:01:B4:C7:F2:04:CB:66:DD
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/xQxN0NuzXdaK26KEAbTH8gTLZt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.232.0/21
185.204.16.0/22
193.16.12.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:bc:e4:f5:4a:dc:d1:c2:86:80:63:da:ff:f0:d9:d8:ce:91:
89:53:d2:a0:5e:92:01:58:be:d7:a0:c3:01:db:17:2b:d4:5f:
76:58:cf:ee:ed:95:b1:15:65:01:4a:d9:25:00:6a:a4:c1:50:
9e:e7:5f:04:79:ba:38:bc:9b:35:3f:68:81:aa:ca:1a:26:d5:
ba:53:ad:cb:08:20:69:9c:6d:54:4e:a9:44:d3:c5:a1:00:76:
fb:74:34:68:5d:a5:95:64:45:2d:02:71:a9:4d:69:13:7c:70:
86:68:de:7b:db:ec:94:7e:cf:80:d5:43:78:c4:54:ce:19:16:
7b:c8:06:b2:09:47:b5:df:67:9f:07:8a:7b:a2:0c:11:a6:2c:
45:44:9e:de:b4:85:a8:18:16:55:dc:97:a0:ae:20:ef:04:52:
52:dd:01:b2:58:4c:a7:c2:1b:f9:71:3a:0d:7c:16:5c:0b:c4:
d4:db:3c:18:17:9e:a1:81:96:f7:c6:a1:31:f9:56:5e:d9:aa:
b7:31:1b:6a:84:18:66:3c:a3:0f:72:c5:1c:21:43:7c:c3:a9:
2e:30:99:c0:cc:9c:36:bf:5b:bc:01:5d:05:4e:73:9f:ad:9a:
73:56:d8:04:d2:e1:5d:f1:f1:40:fa:4a:62:19:43:4c:14:30:
dd:97:4b:a9
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIECGMHvTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MjZjNjYwYjMwZjU2OTJiMmIxNmUyODliMjQ5MDFjNTE4ZmRhNTIwMB4XDTIyMDcw
MTA2NTcwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzUwYzRkZDBkYmIz
NWRkNjhhZGJhMjg0MDFiNGM3ZjIwNGNiNjZkZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIpJzWgiFabIEb14+KMW/d4BTCtydgwcTMHbs4BwiA5sCjX+
hdJnyMSlY/yR8eeMwcFPUZoWi+gL8Xunx9L1xiutQNjYtrXc7e0w3WYm6/1YtweE
9L8AoQLZ4r/T8BHkFW4nPkLk1Ar+kFH4EA/o65pmnU413IeFBxqQzu8iqAfzoQnQ
j1cNlZdW/fkkPA6bXzrJ7Xj4wnX9UC6Sd7n3diS2NENH/7w4mswbLPx8BJJghqnB
GkBqMtNYJnzv1Nje6Nj4R/Ce/m6uoQ1/Bfs7P6ZZf+c19Em3Qel/l6dDkcIl8K4Q
3nfCwjT5APVqbNUqFq7ywzQykHKjtFKytzxFNhsCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTFDE3Q27Nd1orbooQBtMfyBMtm3TAfBgNVHSMEGDAWgBQSbGYLMPVpKysW
4omySQHFGP2lIDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VteG1DekQxYVNzckZ1S0pza2tCeFJqOXBTQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGYvZGI3ODdmLWMyN2EtNGYyMy05OWIyLTQzOGFjYjcyZmM1Yi8x
L3hReE4wTnV6WGRhSzI2S0VBYlRIOGdUTFp0MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYv
ZGI3ODdmLWMyN2EtNGYyMy05OWIyLTQzOGFjYjcyZmM1Yi8xL0VteG1DekQxYVNz
ckZ1S0pza2tCeFJqOXBTQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEA1D+6AMEArnMEAMEAsEQDDANBgkq
hkiG9w0BAQsFAAOCAQEAsrzk9Urc0cKGgGPa//DZ2M6RiVPSoF6SAVi+16DDAdsX
K9RfdljP7u2VsRVlAUrZJQBqpMFQnudfBHm6OLybNT9ogarKGibVulOtywggaZxt
VE6pRNPFoQB2+3Q0aF2llWRFLQJxqU1pE3xwhmjee9vslH7PgNVDeMRUzhkWe8gG
sglHtd9nnweKe6IMEaYsRUSe3rSFqBgWVdyXoK4g7wRSUt0BslhMp8Ib+XE6DXwW
XAvE1Ns8GBeeoYGW98ahMflWXtmqtzEbaoQYZjyjD3LFHCFDfMOpLjCZwMycNr9b
vAFdBU5zn62ac1bYBNLhXfHxQPpKYhlDTBQw3ZdLqQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:05 2024 by rpki-client on console-fra.rpki-client.org