Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/tr08FUuwmLiM_tTEfAQG_kcYK8I.roa
File: tr08FUuwmLiM_tTEfAQG_kcYK8I.roa (raw, json)
Hash identifier: JClsaB9CtewXjmVoiDMEzbf3SjSZVvZRB8eQZkGsE4w=
Subject key identifier: B6:BD:3C:15:4B:B0:98:B8:8C:FE:D4:C4:7C:04:06:FE:47:18:2B:C2
Certificate issuer: /CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
Certificate serial: B9230C
Authority key identifier: C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/tr08FUuwmLiM_tTEfAQG_kcYK8I.roa
Signing time: Sat 01 Jan 2022 06:56:30 +0000
ROA not before: Sat 01 Jan 2022 06:56:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200799
IP address blocks: 185.188.24.0/24 maxlen: 24
185.188.26.0/24 maxlen: 24
185.188.25.0/24 maxlen: 24
185.95.37.0/24 maxlen: 24
185.95.36.0/22 maxlen: 22
185.95.36.0/24 maxlen: 24
185.95.38.0/24 maxlen: 24
185.95.39.0/24 maxlen: 24
212.237.252.0/24 maxlen: 24
217.61.254.0/24 maxlen: 24
130.193.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12133132 (0xb9230c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
Validity
Not Before: Jan 1 06:56:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6bd3c154bb098b88cfed4c47c0406fe47182bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:63:1d:a9:0a:a3:31:3f:0a:e9:b7:73:d1:48:
7c:d1:3d:f1:fc:e2:f5:b2:cf:6c:ac:f4:e5:55:e5:
07:7f:15:b1:f5:ec:7c:52:4d:e1:ac:72:d1:c0:60:
70:46:d7:1e:00:8d:f7:1d:7c:87:d2:76:20:28:15:
d8:6f:ea:e2:d2:53:d2:4b:b7:61:89:d7:05:e1:a2:
36:e0:eb:bc:33:da:8b:2d:c8:6d:06:0f:00:b7:eb:
54:84:c9:5d:79:ba:4e:77:c2:ef:38:72:94:1c:9a:
46:96:0d:0f:14:62:3d:e3:a2:96:e7:96:cb:d2:cd:
6e:18:54:7b:d9:f7:36:8b:18:a3:ef:40:62:81:d1:
e6:4b:80:6f:5f:3d:13:ce:5f:7d:50:86:81:4d:78:
55:a8:07:fe:5a:01:03:c6:9d:86:74:dd:7b:d2:b9:
a9:63:d6:58:cf:43:f4:42:75:84:26:be:20:8b:fc:
b3:f3:f7:71:a9:28:c6:ed:12:c1:4d:f1:4c:18:99:
af:c3:45:92:48:6b:f3:bc:84:fa:f2:38:00:da:e6:
18:12:96:9b:37:69:a2:bc:85:53:44:f6:22:81:d0:
c6:c2:2f:12:77:ff:41:65:7a:ae:c4:ed:1b:46:48:
89:a3:4d:43:21:ac:52:36:d5:e2:37:48:ae:a7:dd:
5c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BD:3C:15:4B:B0:98:B8:8C:FE:D4:C4:7C:04:06:FE:47:18:2B:C2
X509v3 Authority Key Identifier:
keyid:C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/tr08FUuwmLiM_tTEfAQG_kcYK8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.1.0/24
185.95.36.0/22
185.188.24.0-185.188.26.255
212.237.252.0/24
217.61.254.0/24
Signature Algorithm: sha256WithRSAEncryption
88:b0:96:88:e8:29:3a:01:3b:94:69:61:b9:4a:ba:7c:02:45:
ad:9b:f3:b1:d5:4f:d7:0e:af:47:da:b1:ee:56:ce:19:34:e2:
8b:76:b1:78:37:00:78:fb:5f:8d:14:98:ac:df:57:10:29:f3:
c5:57:39:11:64:aa:45:40:37:01:9a:b6:82:0b:38:c0:52:52:
0a:80:16:3f:89:17:b9:45:72:98:c7:6f:97:6a:20:3c:f6:c9:
e2:40:18:b7:1c:2a:16:f4:cb:23:6f:86:27:92:1a:e6:f7:44:
06:cc:ef:04:a3:0a:4c:07:c2:3f:c9:78:8a:ae:9f:57:14:d0:
85:76:46:5d:f6:fe:8f:ee:ed:8a:a4:a0:4a:28:80:30:73:d6:
f4:62:75:8a:12:52:b7:2f:1b:d5:b7:b5:4b:67:12:83:97:61:
87:25:60:2c:18:c6:82:11:11:c9:da:a7:83:66:2f:c2:f5:e4:
87:89:6f:b4:b6:16:d1:62:48:6a:bb:ca:4e:ff:af:a2:c8:33:
b8:94:a0:a5:76:e0:2d:39:76:dd:a2:8a:04:d2:40:25:ce:9f:
ef:61:bb:49:d2:a3:47:c2:80:68:52:54:b4:f6:47:3b:59:03:
98:7b:a5:09:80:0d:82:15:3c:1b:0f:de:c5:31:21:bb:f6:e8:
89:5b:fb:8e
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIEALkjDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Mjc2YThiYTg3NGMzZmJkZGFkMzQ0ZDAzMjU4YjNlMmMwNGQ3YmNiMB4XDTIyMDEw
MTA2NTYzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjZiZDNjMTU0YmIw
OThiODhjZmVkNGM0N2MwNDA2ZmU0NzE4MmJjMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIxjHakKozE/Cum3c9FIfNE98fzi9bLPbKz05VXlB38VsfXs
fFJN4axy0cBgcEbXHgCN9x18h9J2ICgV2G/q4tJT0ku3YYnXBeGiNuDrvDPaiy3I
bQYPALfrVITJXXm6TnfC7zhylByaRpYNDxRiPeOilueWy9LNbhhUe9n3NosYo+9A
YoHR5kuAb189E85ffVCGgU14VagH/loBA8adhnTde9K5qWPWWM9D9EJ1hCa+IIv8
s/P3cakoxu0SwU3xTBiZr8NFkkhr87yE+vI4ANrmGBKWmzdporyFU0T2IoHQxsIv
Enf/QWV6rsTtG0ZIiaNNQyGsUjbV4jdIrqfdXO8CAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBS2vTwVS7CYuIz+1MR8BAb+RxgrwjAfBgNVHSMEGDAWgBTCdqi6h0w/vdrT
RNAyWLPiwE17yzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3duYW91b2RNUDczYTAwVFFNbGl6NHNCTmU4cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTkvNzcyY2JjLTdlNjktNGM5MS04NmEzLTM2NjFiMWViYmNmYi8x
L3RyMDhGVXV3bUxpTV90VEVmQVFHX2tjWUs4SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkv
NzcyY2JjLTdlNjktNGM5MS04NmEzLTM2NjFiMWViYmNmYi8xL3duYW91b2RNUDcz
YTAwVFFNbGl6NHNCTmU4cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wLAQCAAEwJgMEAILBAQMEArlfJDAMAwQDubwYAwQA
ubwaAwQA1O38AwQA2T3+MA0GCSqGSIb3DQEBCwUAA4IBAQCIsJaI6Ck6ATuUaWG5
Srp8AkWtm/Ox1U/XDq9H2rHuVs4ZNOKLdrF4NwB4+1+NFJis31cQKfPFVzkRZKpF
QDcBmraCCzjAUlIKgBY/iRe5RXKYx2+XaiA89sniQBi3HCoW9Msjb4Ynkhrm90QG
zO8EowpMB8I/yXiKrp9XFNCFdkZd9v6P7u2KpKBKKIAwc9b0YnWKElK3LxvVt7VL
ZxKDl2GHJWAsGMaCERHJ2qeDZi/C9eSHiW+0thbRYkhqu8pO/6+iyDO4lKClduAt
OXbdoooE0kAlzp/vYbtJ0qNHwoBoUlS09kc7WQOYe6UJgA2CFTwbD97FMSG79uiJ
W/uO
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:36 2023 by rpki-client on console-ams.rpki-client.org