Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/x_DlNAFEqrTwMVehs676xHiV-ZA.roa
File: x_DlNAFEqrTwMVehs676xHiV-ZA.roa (raw, json)
Hash identifier: MPAu/wu4+F20JVnwumLTKxKxh1oyDrcGbnT2UAUxow4=
Subject key identifier: C7:F0:E5:34:01:44:AA:B4:F0:31:57:A1:B3:AE:FA:C4:78:95:F9:90
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 4544B3C3
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/x_DlNAFEqrTwMVehs676xHiV-ZA.roa
Signing time: Thu 17 Feb 2022 13:57:27 +0000
ROA not before: Thu 17 Feb 2022 13:57:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34762
IP address blocks: 185.76.236.0/22 maxlen: 24
46.21.224.0/20 maxlen: 24
85.10.156.0/22 maxlen: 24
2a01:7c8:f0::/46 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1162130371 (0x4544b3c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Feb 17 13:57:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7f0e5340144aab4f03157a1b3aefac47895f990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:be:44:aa:a5:ca:25:94:a3:91:9a:10:09:
10:c6:60:14:b8:d9:ea:32:36:f4:53:2a:96:a7:ca:
9c:ff:9a:f1:4d:1e:8d:e9:99:b9:26:32:03:00:05:
ee:52:64:5e:68:5c:12:00:68:fa:89:ee:4c:d2:57:
cc:fd:0f:7e:80:95:89:97:03:87:07:bb:09:ae:70:
71:d4:0d:0e:3b:f4:43:a4:38:ef:ff:8f:04:1e:73:
06:f9:04:fe:16:6f:7d:35:dc:88:5c:4d:db:12:8a:
63:53:7a:53:e0:7b:a3:6f:c9:9d:b0:c7:ea:c6:80:
b3:6c:9c:a5:3a:d8:58:31:d0:80:ff:4a:a3:5e:59:
20:6f:48:72:03:44:10:85:39:e6:e6:fa:58:60:f0:
6b:ba:f6:77:e0:c2:dc:54:95:11:65:f6:72:f6:dd:
af:89:8a:5e:29:0b:92:66:f3:1e:a2:0a:38:00:21:
10:46:de:0b:89:a9:9d:0e:ff:e4:86:4e:ba:00:ac:
ce:0c:d4:ba:ce:4c:77:6c:3b:40:33:0c:36:a2:a2:
3d:39:ac:8d:88:dc:d2:9c:55:4b:ff:27:e9:a6:2c:
14:8f:7b:6f:18:ff:16:64:82:26:0f:62:30:6e:d6:
81:50:6f:58:61:ba:1c:08:61:cb:3a:89:dc:97:12:
80:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F0:E5:34:01:44:AA:B4:F0:31:57:A1:B3:AE:FA:C4:78:95:F9:90
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/x_DlNAFEqrTwMVehs676xHiV-ZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.224.0/20
85.10.156.0/22
185.76.236.0/22
IPv6:
2a01:7c8:f0::/46
Signature Algorithm: sha256WithRSAEncryption
ad:8d:3f:a5:69:b9:8c:5f:b7:fa:0e:d0:24:26:f2:f9:2e:6f:
25:66:ad:92:1f:d0:e6:a1:33:12:48:4d:10:99:86:d3:6c:8b:
1d:3c:fc:7c:ca:a9:ad:52:2e:12:79:57:86:a4:e6:26:7f:84:
b5:ef:a3:67:35:45:07:26:be:d2:43:67:90:37:e3:da:8d:b9:
15:37:89:5d:4c:e0:27:96:79:9d:7c:8b:8a:ee:56:8e:ee:de:
34:33:1b:23:77:5a:ab:24:ea:d9:67:63:79:8c:eb:1a:0b:98:
21:69:5c:b1:86:e1:ab:45:4d:9e:e0:6c:57:b6:95:0d:35:8d:
ca:5f:d3:ef:07:87:c8:6a:45:9c:d8:4e:f3:4d:e1:b2:22:b2:
19:aa:69:c9:34:35:ea:ab:86:af:f8:37:74:66:24:06:2b:b2:
f8:5f:9c:d5:d2:e2:ac:7f:54:9e:3d:43:6b:05:5e:cd:ce:f6:
97:d3:c2:a9:cc:47:d1:8a:50:2a:9a:37:1d:61:72:e9:37:11:
b2:3c:94:d6:b7:50:d0:65:89:22:09:dd:f5:cb:63:fa:b6:be:
ac:80:4f:c8:cd:fa:3e:56:5a:3e:58:f3:08:48:a4:45:57:dd:
82:61:66:e5:a7:df:bb:dd:bf:fc:aa:bc:f6:5e:dc:e7:9c:3e:
19:dc:ac:3b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIERUSzwzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NTEzNjljY2JmODZiMWU4NGUxYWViNDZlNmQzMzZkMzlmNzUyYWU3MB4XDTIyMDIx
NzEzNTcyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzdmMGU1MzQwMTQ0
YWFiNGYwMzE1N2ExYjNhZWZhYzQ3ODk1Zjk5MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMOnvkSqpcollKORmhAJEMZgFLjZ6jI29FMqlqfKnP+a8U0e
jemZuSYyAwAF7lJkXmhcEgBo+onuTNJXzP0PfoCViZcDhwe7Ca5wcdQNDjv0Q6Q4
7/+PBB5zBvkE/hZvfTXciFxN2xKKY1N6U+B7o2/JnbDH6saAs2ycpTrYWDHQgP9K
o15ZIG9IcgNEEIU55ub6WGDwa7r2d+DC3FSVEWX2cvbdr4mKXikLkmbzHqIKOAAh
EEbeC4mpnQ7/5IZOugCszgzUus5Md2w7QDMMNqKiPTmsjYjc0pxVS/8n6aYsFI97
bxj/FmSCJg9iMG7WgVBvWGG6HAhhyzqJ3JcSgMsCAwEAAaOCAiYwggIiMB0GA1Ud
DgQWBBTH8OU0AUSqtPAxV6GzrvrEeJX5kDAfBgNVHSMEGDAWgBT1E2nMv4ax6E4a
60bm0zbTn3Uq5zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzlSTnB6TC1Hc2VoT0d1dEc1dE0yMDU5MUt1Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTIvMmQ1YmRmLTUyNjUtNDliOC04YWZlLTJiOTIwYmRlMzk5MC8x
L3hfRGxOQUZFcXJUd01WZWhzNjc2eEhpVi1aQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIv
MmQ1YmRmLTUyNjUtNDliOC04YWZlLTJiOTIwYmRlMzk5MC8xLzlSTnB6TC1Hc2Vo
T0d1dEc1dE0yMDU5MUt1Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8
BggrBgEFBQcBBwEB/wQtMCswGAQCAAEwEgMEBC4V4AMEAlUKnAMEArlM7DAPBAIA
AjAJAwcCKgEHyADwMA0GCSqGSIb3DQEBCwUAA4IBAQCtjT+labmMX7f6DtAkJvL5
Lm8lZq2SH9DmoTMSSE0QmYbTbIsdPPx8yqmtUi4SeVeGpOYmf4S176NnNUUHJr7S
Q2eQN+PajbkVN4ldTOAnlnmdfIuK7laO7t40Mxsjd1qrJOrZZ2N5jOsaC5ghaVyx
huGrRU2e4GxXtpUNNY3KX9PvB4fIakWc2E7zTeGyIrIZqmnJNDXqq4av+Dd0ZiQG
K7L4X5zV0uKsf1SePUNrBV7NzvaX08KpzEfRilAqmjcdYXLpNxGyPJTWt1DQZYki
Cd31y2P6tr6sgE/Izfo+Vlo+WPMISKRFV92CYWblp9+73b/8qrz2XtznnD4Z3Kw7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:01 2024 by rpki-client on console-fra.rpki-client.org