Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/y1gwC7SYrlk3Yv4_RJmPs6A1qns.roa
File: y1gwC7SYrlk3Yv4_RJmPs6A1qns.roa (raw, json)
Hash identifier: KK2cKkh6GnOy9d2ysvlwNX52St84FgBLAej6vNW7SDQ=
Subject key identifier: CB:58:30:0B:B4:98:AE:59:37:62:FE:3F:44:99:8F:B3:A0:35:AA:7B
Certificate issuer: /CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Certificate serial: 01C2EA35
Authority key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/y1gwC7SYrlk3Yv4_RJmPs6A1qns.roa
Signing time: Sat 01 Jan 2022 14:59:02 +0000
ROA not before: Sat 01 Jan 2022 14:59:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42970
IP address blocks: 193.200.182.0/24 maxlen: 24
91.213.25.0/24 maxlen: 24
185.140.196.0/22 maxlen: 22
2a07:1fc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29551157 (0x1c2ea35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Validity
Not Before: Jan 1 14:59:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb58300bb498ae593762fe3f44998fb3a035aa7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a6:72:9c:a6:52:db:73:71:af:43:93:6e:53:
7b:13:f9:79:4d:e6:31:0d:21:ef:2d:30:bb:86:98:
2d:bc:96:0f:bd:45:3d:23:ba:8b:ed:ab:2b:b4:44:
06:2a:96:40:fd:1d:e2:47:c3:ea:0b:2b:bb:b6:6b:
69:73:89:50:23:d4:dd:69:c8:c5:e8:c0:55:4d:a9:
c8:53:c4:6f:9e:f9:39:75:0e:1f:af:57:f0:f9:07:
f3:cf:19:72:80:4c:51:d0:91:e4:97:7d:c6:45:b3:
ea:b6:ba:13:61:3d:e0:61:a7:3a:e3:d5:fd:a5:b2:
82:88:df:8f:ac:a4:57:b6:bf:45:ca:c0:35:61:ae:
55:2e:c2:c4:ba:3f:cb:85:9d:d5:77:60:26:86:d9:
77:26:ff:5f:80:90:08:72:a2:18:ad:76:eb:6e:77:
9f:b5:a1:11:31:0c:76:39:6b:46:83:76:69:60:17:
76:0d:79:e1:6d:03:f7:d5:85:a0:47:1f:71:33:23:
80:4c:12:2d:8d:09:c4:06:e5:3a:79:85:95:ce:29:
d3:33:55:fa:ea:ec:46:94:ab:5d:dd:a2:35:ed:3a:
2e:5f:c3:46:db:b1:d8:c9:38:bf:90:29:2d:5b:3d:
0d:21:cb:79:53:aa:3d:e5:1f:58:06:20:08:db:ae:
58:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:58:30:0B:B4:98:AE:59:37:62:FE:3F:44:99:8F:B3:A0:35:AA:7B
X509v3 Authority Key Identifier:
keyid:C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/y1gwC7SYrlk3Yv4_RJmPs6A1qns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.25.0/24
185.140.196.0/22
193.200.182.0/24
IPv6:
2a07:1fc0::/29
Signature Algorithm: sha256WithRSAEncryption
28:5a:3e:c5:87:6e:9a:94:6a:aa:29:47:3f:91:47:c2:2c:37:
74:67:58:e1:05:6b:f4:b7:32:7d:3b:2c:04:8d:cd:fe:92:87:
8e:f0:d1:61:87:4f:63:55:cc:6a:63:ec:cc:b9:09:f9:fa:dd:
a2:22:76:1c:78:99:75:39:92:93:de:15:5f:18:54:d0:ad:08:
ba:ea:65:0f:0c:47:a0:d3:a2:77:c4:bf:c8:5e:4b:e0:35:16:
e5:aa:0c:a3:35:c3:4d:28:72:cd:9a:c4:c8:84:1a:59:50:e3:
47:28:85:69:bc:8e:c3:5c:cd:b3:88:e5:ab:b8:a7:b1:b6:5a:
5b:06:52:21:d8:0f:65:3d:ee:98:dc:5a:b6:7b:6d:fb:7d:fc:
4d:36:96:ee:a0:c0:d2:82:d5:b2:57:ea:e5:b1:14:1b:00:11:
0e:9f:e4:bd:57:10:59:43:9c:c8:72:7a:99:2e:c5:03:5d:39:
26:c9:05:f3:05:52:24:2f:a7:48:b8:66:da:a9:30:8e:8c:42:
1c:01:2b:2f:a5:c5:d6:42:6f:e8:80:bc:36:5d:fa:b5:5e:75:
70:36:35:e0:a8:cb:fa:b0:26:f1:c8:5c:30:d5:9b:14:ab:e5:
76:d3:75:3c:5a:3f:b2:d8:5e:76:48:37:03:0a:ba:3b:fd:85:
6f:03:66:28
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEAcLqNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NzZhMGRiMDgzMDMzOGQyZDI5NjFlNGM4ZmZiMGFiNWEwM2ZmZTVmMB4XDTIyMDEw
MTE0NTkwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2I1ODMwMGJiNDk4
YWU1OTM3NjJmZTNmNDQ5OThmYjNhMDM1YWE3YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPWmcpymUttzca9Dk25TexP5eU3mMQ0h7y0wu4aYLbyWD71F
PSO6i+2rK7REBiqWQP0d4kfD6gsru7ZraXOJUCPU3WnIxejAVU2pyFPEb575OXUO
H69X8PkH888ZcoBMUdCR5Jd9xkWz6ra6E2E94GGnOuPV/aWygojfj6ykV7a/RcrA
NWGuVS7CxLo/y4Wd1XdgJobZdyb/X4CQCHKiGK126253n7WhETEMdjlrRoN2aWAX
dg154W0D99WFoEcfcTMjgEwSLY0JxAblOnmFlc4p0zNV+ursRpSrXd2iNe06Ll/D
Rtux2Mk4v5ApLVs9DSHLeVOqPeUfWAYgCNuuWPUCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBTLWDALtJiuWTdi/j9EmY+zoDWqezAfBgNVHSMEGDAWgBTHag2wgwM40tKW
HkyP+wq1oD/+XzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3gyb05zSU1ET05MU2xoNU1qX3NLdGFBX19sOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTMvZjcxODlmLTlkM2ItNGZhOS1iMmMxLTUyMTdkZjM2OTFhYi8x
L3kxZ3dDN1NZcmxrM1l2NF9SSm1QczZBMXFucy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMv
ZjcxODlmLTlkM2ItNGZhOS1iMmMxLTUyMTdkZjM2OTFhYi8xL3gyb05zSU1ET05M
U2xoNU1qX3NLdGFBX19sOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAFvVGQMEArmMxAMEAMHItjANBAIA
AjAHAwUDKgcfwDANBgkqhkiG9w0BAQsFAAOCAQEAKFo+xYdumpRqqilHP5FHwiw3
dGdY4QVr9LcyfTssBI3N/pKHjvDRYYdPY1XMamPszLkJ+frdoiJ2HHiZdTmSk94V
XxhU0K0IuuplDwxHoNOid8S/yF5L4DUW5aoMozXDTShyzZrEyIQaWVDjRyiFabyO
w1zNs4jlq7insbZaWwZSIdgPZT3umNxatntt+338TTaW7qDA0oLVslfq5bEUGwAR
Dp/kvVcQWUOcyHJ6mS7FA105JskF8wVSJC+nSLhm2qkwjoxCHAErL6XF1kJv6IC8
Nl36tV51cDY14KjL+rAm8chcMNWbFKvldtN1PFo/sthedkg3Awq6O/2FbwNmKA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:23 2023 by rpki-client on console-ams.rpki-client.org