Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/L-Ql7jAmr649Q_ecfYJSha_I0wY.roa
File: L-Ql7jAmr649Q_ecfYJSha_I0wY.roa (raw, json)
Hash identifier: jPKxGnoEMwAY29sfvVElz0UEopn7iaQA0GH2mwdb7oI=
Subject key identifier: 2F:E4:25:EE:30:26:AF:AE:3D:43:F7:9C:7D:82:52:85:AF:C8:D3:06
Certificate issuer: /CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Certificate serial: 01841F8E9E0E1DC326C39FBE1453834D19A5
Authority key identifier: 7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/L-Ql7jAmr649Q_ecfYJSha_I0wY.roa
Signing time: Fri 28 Oct 2022 17:05:51 +0000
ROA not before: Fri 28 Oct 2022 17:05:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29337
IP address blocks: 217.70.241.0/24 maxlen: 24
217.70.240.0/20 maxlen: 20
217.70.242.0/24 maxlen: 24
217.70.246.0/24 maxlen: 24
217.70.244.0/24 maxlen: 24
217.70.245.0/24 maxlen: 24
217.70.243.0/24 maxlen: 24
217.70.248.0/24 maxlen: 24
217.70.249.0/24 maxlen: 24
217.70.253.0/24 maxlen: 24
217.70.247.0/24 maxlen: 24
217.70.251.0/24 maxlen: 24
217.70.252.0/24 maxlen: 24
217.70.250.0/24 maxlen: 24
217.70.255.0/24 maxlen: 24
217.70.254.0/24 maxlen: 24
185.140.191.0/24 maxlen: 24
185.140.190.0/24 maxlen: 24
185.140.188.0/22 maxlen: 22
185.140.188.0/24 maxlen: 24
185.140.189.0/24 maxlen: 24
217.70.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1f:8e:9e:0e:1d:c3:26:c3:9f:be:14:53:83:4d:19:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Validity
Not Before: Oct 28 17:05:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fe425ee3026afae3d43f79c7d825285afc8d306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:d4:1b:35:db:c9:6f:d3:f0:19:6d:13:5d:
1c:e9:6d:16:00:72:e2:e4:da:3d:e2:c8:6a:ed:86:
8c:97:ca:df:59:92:ac:95:46:37:01:60:52:d3:25:
d8:9f:25:93:00:08:04:5a:40:f9:86:34:a7:73:6e:
89:27:52:3d:52:33:2b:02:56:22:5d:a4:02:f1:4f:
59:00:91:31:4d:99:c4:1d:d8:cd:f6:f0:66:f3:a9:
78:b3:d1:21:8a:30:18:82:5a:a9:36:67:3a:7c:38:
f7:28:3d:9e:bc:02:60:c8:8e:94:f4:7d:be:cf:55:
8b:56:d3:f8:e7:30:5a:67:fb:3a:ad:30:1b:37:ca:
34:40:ce:0d:8d:f0:2f:de:48:e5:3c:b5:d8:54:79:
4e:99:62:eb:dc:a4:3e:9c:4e:9b:48:a2:87:6c:bd:
d6:f2:26:f8:3a:90:0e:c6:32:45:01:5b:97:58:eb:
87:ba:88:29:43:72:d9:b3:49:c2:69:56:06:0e:91:
67:12:48:26:ce:0a:45:ad:6a:3d:e6:c6:41:48:dd:
51:90:2e:a0:17:48:32:9e:89:44:3f:7c:fa:61:ff:
b5:a6:5c:93:e6:85:bb:9e:32:33:d8:e8:ff:91:04:
c4:60:2f:85:e5:4c:a8:c0:47:f5:92:68:70:c9:a4:
81:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E4:25:EE:30:26:AF:AE:3D:43:F7:9C:7D:82:52:85:AF:C8:D3:06
X509v3 Authority Key Identifier:
keyid:7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/L-Ql7jAmr649Q_ecfYJSha_I0wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.188.0/22
217.70.240.0/20
Signature Algorithm: sha256WithRSAEncryption
ab:36:3e:fb:f9:c0:6f:b9:45:ce:0b:9c:bc:61:b8:7d:b4:cc:
7a:a2:ab:f2:37:af:e2:ff:d5:e0:7a:f1:dd:5a:ce:bd:7e:d3:
2a:ed:28:ac:e1:d0:4b:8a:f8:1e:83:7e:aa:41:81:4a:8c:c5:
d6:3a:d9:ab:86:62:8d:a4:bc:3e:f2:e9:ae:0b:26:a4:bc:65:
d0:5b:b7:f3:d1:69:82:ee:02:85:94:a2:0d:4a:84:07:d9:27:
9f:09:b7:17:fd:c4:09:01:89:5e:93:29:08:42:76:e4:32:a9:
cb:a8:40:11:62:23:eb:48:95:ad:7d:6f:32:31:04:1a:77:78:
a6:22:ee:22:cc:75:65:63:c6:f5:e3:63:79:ac:c2:03:3d:40:
bb:34:4d:87:a6:ca:de:47:33:95:02:e4:de:07:fe:3e:d8:1d:
5d:fb:53:ec:6b:06:8a:fd:c0:0c:a8:8b:38:40:47:a9:bb:25:
e3:c3:6b:87:bc:6a:46:62:7e:85:55:f8:7f:cd:24:f8:96:71:
35:21:de:33:0f:f9:be:ec:d0:ba:e0:b7:93:d5:88:e3:a6:99:
f9:44:ba:f2:02:fc:9d:c1:d8:8d:91:94:1a:a6:68:c8:e9:f5:
7b:83:6a:e6:88:52:a6:e0:09:f7:35:4c:6e:eb:94:fd:31:26:
a6:a8:ad:9c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYQfjp4OHcMmw5++FFODTRmlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYWU3YjVjOWEzMDE5OGJkNzE3OGI0OGI4NWYwYjIyMWE1
ZTFlYjcwHhcNMjIxMDI4MTcwNTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmU0MjVlZTMwMjZhZmFlM2Q0M2Y3OWM3ZDgyNTI4NWFmYzhkMzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPbUGzXbyW/T8BltE10c6W0WAHLi
5No94shq7YaMl8rfWZKslUY3AWBS0yXYnyWTAAgEWkD5hjSnc26JJ1I9UjMrAlYi
XaQC8U9ZAJExTZnEHdjN9vBm86l4s9EhijAYglqpNmc6fDj3KD2evAJgyI6U9H2+
z1WLVtP45zBaZ/s6rTAbN8o0QM4NjfAv3kjlPLXYVHlOmWLr3KQ+nE6bSKKHbL3W
8ib4OpAOxjJFAVuXWOuHuogpQ3LZs0nCaVYGDpFnEkgmzgpFrWo95sZBSN1RkC6g
F0gynolEP3z6Yf+1plyT5oW7njIz2Oj/kQTEYC+F5UyowEf1kmhwyaSB8wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC/kJe4wJq+uPUP3nH2CUoWvyNMGMB8GA1UdIwQY
MBaAFH2ue1yaMBmL1xeLSLhfCyIaXh63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmE1N1hKb3dHWXZYRjR0SXVGOExJaHBlSHJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kZWM1MGQtZWUzYS00NTg0LWE1OTEt
NDI5ZDY2OGQ5MjI4LzEvTC1RbDdqQW1yNjQ5UV9lY2ZZSlNoYV9JMHdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9kZWM1MGQtZWUzYS00NTg0LWE1OTEtNDI5ZDY2OGQ5MjI4
LzEvZmE1N1hKb3dHWXZYRjR0SXVGOExJaHBlSHJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuYy8AwQE
2UbwMA0GCSqGSIb3DQEBCwUAA4IBAQCrNj77+cBvuUXOC5y8Ybh9tMx6oqvyN6/i
/9XgevHdWs69ftMq7Sis4dBLivgeg36qQYFKjMXWOtmrhmKNpLw+8umuCyakvGXQ
W7fz0WmC7gKFlKINSoQH2SefCbcX/cQJAYlekykIQnbkMqnLqEARYiPrSJWtfW8y
MQQad3imIu4izHVlY8b142N5rMIDPUC7NE2HpsreRzOVAuTeB/4+2B1d+1PsawaK
/cAMqIs4QEepuyXjw2uHvGpGYn6FVfh/zST4lnE1Id4zD/m+7NC64LeT1Yjjppn5
RLryAvydwdiNkZQapmjI6fV7g2rmiFKm4An3NUxu65T9MSamqK2c
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:57 2024 by rpki-client on console-ams.rpki-client.org