Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/s1E1-vO7dnhdnfLF3XjDsv8tNBA.roa
File: s1E1-vO7dnhdnfLF3XjDsv8tNBA.roa (raw, json)
Hash identifier: HV80xYLHtBzILXCVOk9kQYFSJCR0kRDcOQKBM6dxim8=
Subject key identifier: B3:51:35:FA:F3:BB:76:78:5D:9D:F2:C5:DD:78:C3:B2:FF:2D:34:10
Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial: 37DE84FE
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/s1E1-vO7dnhdnfLF3XjDsv8tNBA.roa
Signing time: Sat 01 Jan 2022 14:58:52 +0000
ROA not before: Sat 01 Jan 2022 14:58:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15830
IP address blocks: 46.28.240.0/21 maxlen: 24
193.22.169.0/24 maxlen: 24
195.80.237.0/24 maxlen: 24
193.41.210.0/23 maxlen: 24
2a02:2978::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937329918 (0x37de84fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Validity
Not Before: Jan 1 14:58:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b35135faf3bb76785d9df2c5dd78c3b2ff2d3410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:60:0c:d7:54:d8:35:d3:b5:3a:82:9b:1f:fa:
e8:44:17:6f:ac:dc:fc:8b:11:09:da:30:73:a3:b6:
c1:4c:03:8f:53:38:7d:39:48:0f:57:e1:5b:f7:7c:
36:bf:ed:7c:e0:c3:1f:86:45:80:28:52:73:c0:77:
7f:82:09:07:64:10:58:33:4b:d9:f0:d8:e2:7e:cb:
85:fb:91:ae:03:08:4e:ad:e4:d9:b0:29:d8:23:e4:
09:d3:d6:de:a2:b0:6e:88:c4:ca:cb:6b:cc:5f:84:
82:85:47:c4:e5:60:f3:3a:d1:4f:72:19:8c:f6:5f:
9b:25:b6:0e:3c:0c:11:44:af:f8:90:78:72:f6:5b:
45:12:29:c6:7a:bb:2f:e2:8f:82:da:09:52:66:2b:
f5:b3:15:a9:f2:51:34:5a:38:d9:18:f8:06:36:98:
c4:dc:ac:5c:1f:98:22:2f:00:27:3d:d7:6e:be:d4:
eb:3e:48:af:cf:a0:18:e5:01:59:5f:5e:59:ef:d8:
be:4d:13:5d:f4:c3:87:2c:1b:dd:a3:d9:7d:b7:43:
82:b7:6a:c7:20:6f:93:33:8e:4f:5b:bc:60:cb:e4:
8c:2d:f8:c6:2b:b9:48:f4:66:ad:e5:24:d4:73:c9:
14:de:8e:43:7a:5a:b7:32:2c:5b:fc:de:2e:f7:f2:
69:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:51:35:FA:F3:BB:76:78:5D:9D:F2:C5:DD:78:C3:B2:FF:2D:34:10
X509v3 Authority Key Identifier:
keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/s1E1-vO7dnhdnfLF3XjDsv8tNBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.240.0/21
193.22.169.0/24
193.41.210.0/23
195.80.237.0/24
IPv6:
2a02:2978::/32
Signature Algorithm: sha256WithRSAEncryption
31:f7:94:68:c6:ca:62:47:97:a5:0e:89:79:17:52:d3:80:39:
aa:f7:ff:a5:2c:e1:f9:9e:99:c8:34:22:45:85:3e:f1:bf:ca:
67:e9:44:04:d6:3c:1d:45:94:7b:ac:32:8a:61:9f:aa:b0:6f:
8b:ba:ed:aa:c4:51:99:6c:fb:44:c9:d3:1d:cb:68:ec:3e:78:
4a:c9:86:8d:80:05:0c:f0:45:01:c3:9e:74:60:7f:1f:bc:1b:
3f:47:a4:1f:f2:22:99:9e:9a:f0:88:e8:e7:68:6a:69:68:e0:
61:01:5f:fc:51:17:41:01:9a:80:13:8c:5e:ba:d0:8a:1e:a8:
55:f1:d5:00:09:e5:20:15:aa:94:f1:c6:2d:6e:06:92:e6:d5:
a6:42:e6:73:d7:d4:31:2d:94:3a:e2:5c:5d:05:99:a8:b3:ea:
aa:42:87:fb:e3:39:df:ca:3a:9b:6b:37:ae:01:87:b7:29:11:
86:1e:bf:4f:a6:7c:85:c5:eb:db:d8:50:ed:5c:55:35:0d:a3:
76:dd:a1:5b:3b:03:00:ed:bc:ab:87:a1:af:0d:ed:c8:ce:74:
1b:04:f0:3a:e3:54:ca:53:cc:70:f2:34:4d:75:85:46:2d:32:
98:90:d2:c2:15:48:86:78:3f:79:c9:0d:7c:12:a2:6d:72:5d:
c9:23:ae:b0
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIEN96E/jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
YmZjYTdjOTZlODA0NTA1YTQ4Yjk5NjAzZDliMjEyNGYxZGQzNzAyMB4XDTIyMDEw
MTE0NTg1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjM1MTM1ZmFmM2Ji
NzY3ODVkOWRmMmM1ZGQ3OGMzYjJmZjJkMzQxMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJZgDNdU2DXTtTqCmx/66EQXb6zc/IsRCdowc6O2wUwDj1M4
fTlID1fhW/d8Nr/tfODDH4ZFgChSc8B3f4IJB2QQWDNL2fDY4n7LhfuRrgMITq3k
2bAp2CPkCdPW3qKwbojEystrzF+EgoVHxOVg8zrRT3IZjPZfmyW2DjwMEUSv+JB4
cvZbRRIpxnq7L+KPgtoJUmYr9bMVqfJRNFo42Rj4BjaYxNysXB+YIi8AJz3Xbr7U
6z5Ir8+gGOUBWV9eWe/Yvk0TXfTDhywb3aPZfbdDgrdqxyBvkzOOT1u8YMvkjC34
xiu5SPRmreUk1HPJFN6OQ3patzIsW/zeLvfyaXMCAwEAAaOCAiowggImMB0GA1Ud
DgQWBBSzUTX687t2eF2d8sXdeMOy/y00EDAfBgNVHSMEGDAWgBSL/KfJboBFBaSL
mWA9myEk8d03AjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2lfeW55VzZBUlFXa2k1bGdQWnNoSlBIZE53SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTMvOGYzYjZmLWU4NmYtNDY3ZC1hYTkwLTE4YjFhOTM3YTU2Ny8x
L3MxRTEtdk83ZG5oZG5mTEYzWGpEc3Y4dE5CQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMv
OGYzYjZmLWU4NmYtNDY3ZC1hYTkwLTE4YjFhOTM3YTU2Ny8xL2lfeW55VzZBUlFX
a2k1bGdQWnNoSlBIZE53SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAy4c8AMEAMEWqQMEAcEp0gMEAMNQ
7TANBAIAAjAHAwUAKgIpeDANBgkqhkiG9w0BAQsFAAOCAQEAMfeUaMbKYkeXpQ6J
eRdS04A5qvf/pSzh+Z6ZyDQiRYU+8b/KZ+lEBNY8HUWUe6wyimGfqrBvi7rtqsRR
mWz7RMnTHcto7D54SsmGjYAFDPBFAcOedGB/H7wbP0ekH/IimZ6a8Ijo52hqaWjg
YQFf/FEXQQGagBOMXrrQih6oVfHVAAnlIBWqlPHGLW4GkubVpkLmc9fUMS2UOuJc
XQWZqLPqqkKH++M538o6m2s3rgGHtykRhh6/T6Z8hcXr29hQ7VxVNQ2jdt2hWzsD
AO28q4ehrw3tyM50GwTwOuNUylPMcPI0TXWFRi0ymJDSwhVIhng/eckNfBKibXJd
ySOusA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:12 2024 by rpki-client on console-fra.rpki-client.org