Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/YoBdlr12npEpY9Bwd0tTU3sz3qw.roa
File: YoBdlr12npEpY9Bwd0tTU3sz3qw.roa (raw, json)
Hash identifier: 1CWO76jkvxjHPr45xaHnxEc8fnugtxwLmWV0cQWTBI0=
Subject key identifier: 62:80:5D:96:BD:76:9E:91:29:63:D0:70:77:4B:53:53:7B:33:DE:AC
Certificate issuer: /CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Certificate serial: 0AA565B4
Authority key identifier: B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/YoBdlr12npEpY9Bwd0tTU3sz3qw.roa
Signing time: Wed 15 Jun 2022 15:30:45 +0000
ROA not before: Wed 15 Jun 2022 15:30:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204634
IP address blocks: 185.248.130.0/24 maxlen: 24
194.31.171.0/24 maxlen: 24
185.248.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178611636 (0xaa565b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Validity
Not Before: Jun 15 15:30:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62805d96bd769e912963d070774b53537b33deac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:52:14:08:62:9e:4c:23:b5:0c:69:7d:52:
c4:52:a3:ad:eb:69:8f:a3:58:7d:66:78:c7:22:23:
de:2f:a4:92:fb:68:93:16:82:fe:bd:df:dd:2c:b4:
8c:b1:59:5d:cc:c1:fb:75:40:ef:1f:ff:1c:24:28:
c1:2c:5b:25:15:45:90:37:18:48:d9:f4:af:50:c7:
0a:78:39:06:d5:a9:76:33:25:6d:00:7e:f0:0a:84:
2b:95:24:90:d0:21:85:44:0c:b5:2a:5e:5a:55:3b:
17:1c:98:1f:95:c5:cf:39:ae:93:8a:af:87:de:e8:
ed:26:11:5b:56:10:8a:1c:d7:17:68:47:b9:24:fc:
bb:01:aa:78:96:8e:2e:c6:42:7d:c9:40:6d:1c:c7:
d2:16:14:5a:78:7b:4a:4e:2d:53:17:48:21:aa:a7:
90:d0:f9:3c:b9:97:d3:db:0d:f6:8a:0b:8e:5e:da:
f3:be:7e:f0:72:0d:0b:90:f9:f2:b8:55:a0:5f:9d:
2b:f6:00:c1:db:6e:c6:4d:85:b6:70:d8:38:12:8f:
2e:14:5e:1d:12:c1:47:9b:c4:9b:b0:de:63:fa:03:
d6:58:ea:9f:c6:2d:6a:27:64:ec:2f:c9:d9:2d:f6:
6f:a4:9a:1f:cb:41:64:19:71:13:4a:73:7c:b7:51:
78:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:80:5D:96:BD:76:9E:91:29:63:D0:70:77:4B:53:53:7B:33:DE:AC
X509v3 Authority Key Identifier:
keyid:B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/YoBdlr12npEpY9Bwd0tTU3sz3qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.130.0/23
194.31.171.0/24
Signature Algorithm: sha256WithRSAEncryption
18:4c:d1:aa:fa:2b:4a:07:16:36:4e:1f:3b:c0:47:88:1e:ee:
07:56:72:7b:f4:56:18:96:86:5b:c2:18:20:8a:aa:83:3b:ec:
fc:a6:48:7a:c4:35:40:7f:67:18:47:cb:b8:e3:6b:a8:48:b6:
18:7a:d1:f2:0e:ba:ed:45:b6:76:29:5b:45:e4:dc:7f:47:0d:
a3:0e:70:19:05:0c:7c:b7:ec:e3:9b:f7:2b:4e:74:55:85:b7:
c5:5d:71:ba:0b:a9:46:4c:a8:c4:80:f4:c9:cd:ea:d2:b4:10:
32:bf:02:b5:4d:04:f7:36:dc:66:c7:d6:09:42:f4:c1:fc:88:
d6:ca:29:60:af:2a:ed:ea:1c:ec:7c:12:f3:f7:9f:04:36:ca:
d3:5f:18:14:83:c4:9f:22:05:e4:7c:7e:29:1f:6f:37:97:44:
19:a3:f2:c4:9d:19:e7:5a:8a:19:9c:7c:96:e5:d8:dd:98:77:
88:9a:0e:a5:78:d9:6c:3f:cc:48:54:5d:14:bc:66:42:24:86:
35:23:34:53:dd:54:12:76:a5:f9:91:14:36:0b:7b:d0:29:77:
7b:4e:62:77:14:1d:c9:9d:94:33:35:f1:fe:78:fb:cc:26:6a:
18:1e:f4:ce:73:2c:3b:6e:b3:2f:48:fb:09:29:da:30:94:6d:
5b:d8:00:64
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECqVltDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NjBkNmNhOTVlMjc3MGY1NTM0MGQ5MDllYzdjOTdlZWNhM2ZlMjBlMB4XDTIyMDYx
NTE1MzA0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjI4MDVkOTZiZDc2
OWU5MTI5NjNkMDcwNzc0YjUzNTM3YjMzZGVhYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL0EUhQIYp5MI7UMaX1SxFKjretpj6NYfWZ4xyIj3i+kkvto
kxaC/r3f3Sy0jLFZXczB+3VA7x//HCQowSxbJRVFkDcYSNn0r1DHCng5BtWpdjMl
bQB+8AqEK5UkkNAhhUQMtSpeWlU7FxyYH5XFzzmuk4qvh97o7SYRW1YQihzXF2hH
uST8uwGqeJaOLsZCfclAbRzH0hYUWnh7Sk4tUxdIIaqnkND5PLmX09sN9ooLjl7a
875+8HINC5D58rhVoF+dK/YAwdtuxk2FtnDYOBKPLhReHRLBR5vEm7DeY/oD1ljq
n8Ytaidk7C/J2S32b6SaH8tBZBlxE0pzfLdReJcCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRigF2WvXaekSlj0HB3S1NTezPerDAfBgNVHSMEGDAWgBS2DWypXidw9VNA
2QnsfJfuyj/iDjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RnMXNxVjRuY1BWVFFOa0o3SHlYN3NvXzRnNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTMvMDMzZThiLWJkZTEtNGY5MC1iYWY1LTIzODQ3YTQwZDllNC8x
L1lvQmRscjEybnBFcFk5QndkMHRUVTNzejNxdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMv
MDMzZThiLWJkZTEtNGY5MC1iYWY1LTIzODQ3YTQwZDllNC8xL3RnMXNxVjRuY1BW
VFFOa0o3SHlYN3NvXzRnNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAbn4ggMEAMIfqzANBgkqhkiG9w0B
AQsFAAOCAQEAGEzRqvorSgcWNk4fO8BHiB7uB1Zye/RWGJaGW8IYIIqqgzvs/KZI
esQ1QH9nGEfLuONrqEi2GHrR8g667UW2dilbReTcf0cNow5wGQUMfLfs45v3K050
VYW3xV1xugupRkyoxID0yc3q0rQQMr8CtU0E9zbcZsfWCUL0wfyI1sopYK8q7eoc
7HwS8/efBDbK018YFIPEnyIF5Hx+KR9vN5dEGaPyxJ0Z51qKGZx8luXY3Zh3iJoO
pXjZbD/MSFRdFLxmQiSGNSM0U91UEnal+ZEUNgt70Cl3e05idxQdyZ2UMzXx/nj7
zCZqGB70znMsO26zL0j7CSnaMJRtW9gAZA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:15 2024 by rpki-client on console-ams.rpki-client.org