Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/SOgWv85gK0am7xfu715cZcrG0y0.roa
File: SOgWv85gK0am7xfu715cZcrG0y0.roa (raw, json)
Hash identifier: b9dl/fMdpj3ZduC1hC3HoLK4Rvk/qi97lL6WYV2I6TM=
Subject key identifier: 48:E8:16:BF:CE:60:2B:46:A6:EF:17:EE:EF:5E:5C:65:CA:C6:D3:2D
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 09510ECB
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/SOgWv85gK0am7xfu715cZcrG0y0.roa
Signing time: Tue 08 Feb 2022 07:01:09 +0000
ROA not before: Tue 08 Feb 2022 07:01:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41313
IP address blocks: 185.40.164.0/22 maxlen: 24
46.35.160.0/19 maxlen: 24
80.95.22.0/24 maxlen: 24
93.175.244.0/23 maxlen: 23
185.18.228.0/22 maxlen: 24
212.21.128.0/19 maxlen: 24
151.252.192.0/20 maxlen: 24
79.110.120.0/21 maxlen: 24
95.158.128.0/18 maxlen: 24
2a00:e200::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156307147 (0x9510ecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Feb 8 07:01:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48e816bfce602b46a6ef17eeef5e5c65cac6d32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:91:82:80:9d:6a:c0:77:45:b5:e5:20:3f:
7b:4f:1b:b7:57:99:99:d4:0f:31:4a:52:e1:a9:99:
3d:8b:53:b4:0d:4d:5b:87:12:7e:c9:69:a3:97:1c:
44:40:16:62:d8:fe:34:6e:69:03:d8:d0:88:10:5c:
ed:fd:11:47:61:dd:58:d9:31:1b:03:76:75:d9:39:
bf:ec:6e:3e:ef:44:90:af:0b:20:f3:66:ac:e2:25:
47:d8:a7:f8:71:98:1a:86:64:fc:bb:f5:66:ed:fc:
07:d9:12:24:26:32:3a:16:06:e0:c0:a0:75:c2:97:
47:3d:cb:38:a1:97:65:91:20:26:52:11:89:6e:1c:
d9:75:58:b7:a4:6d:c2:7a:c8:9e:30:3f:28:b7:f1:
5a:b0:f2:5e:86:ee:9b:e0:4f:c8:74:36:be:0f:4e:
6e:01:c8:03:c1:fa:5c:2b:35:e0:1a:36:b4:71:1e:
50:8a:e7:71:37:93:36:b2:b3:d3:bd:73:d9:6b:5a:
02:8e:04:60:0c:84:73:70:a3:0e:5c:f8:b6:57:89:
19:6d:1a:50:8b:4e:04:e5:0d:da:c8:f0:dc:46:aa:
be:d7:03:1b:00:0b:c9:87:fd:d8:2b:9a:fa:4a:40:
87:c3:ae:f8:d4:30:41:81:f7:1e:4e:ea:ea:5a:e0:
50:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E8:16:BF:CE:60:2B:46:A6:EF:17:EE:EF:5E:5C:65:CA:C6:D3:2D
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/SOgWv85gK0am7xfu715cZcrG0y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.160.0/19
79.110.120.0/21
80.95.22.0/24
93.175.244.0/23
95.158.128.0/18
151.252.192.0/20
185.18.228.0/22
185.40.164.0/22
212.21.128.0/19
IPv6:
2a00:e200::/32
Signature Algorithm: sha256WithRSAEncryption
2a:8a:16:1d:a7:56:b0:c8:3b:8c:8e:aa:4d:8b:76:33:6f:a8:
86:74:97:8f:85:cb:58:eb:0b:be:58:9c:b4:11:24:00:12:6d:
1a:46:b3:5a:a5:17:40:47:62:bc:31:09:35:30:d4:03:b7:c4:
02:d1:07:fe:fe:7a:0b:f6:5e:37:4d:97:65:2d:c3:dd:ec:87:
6d:22:5f:63:0d:bc:58:93:6f:c4:4a:c6:ad:e4:d0:c8:74:1d:
81:90:35:15:d7:cb:d8:d9:a2:e4:f7:d6:3a:73:9c:5e:6b:1f:
b4:9a:69:6a:8f:85:f5:85:51:d6:e8:af:e6:3e:b3:a8:7b:e0:
f6:1b:32:2e:ec:ba:69:9c:57:67:ac:85:eb:b2:cf:64:d7:05:
90:fb:3e:1f:21:66:b1:dc:9d:d2:e1:32:67:02:bf:8d:c3:3d:
71:0f:f4:79:a2:f3:66:ab:3c:e8:39:65:60:dd:95:64:61:b5:
d1:cb:b8:10:09:a8:14:e0:76:55:53:20:d1:de:ef:bc:c0:4f:
6b:67:30:b6:39:ee:92:c2:fa:0d:0e:e4:50:e8:bc:a0:90:99:
51:e8:67:3d:54:03:95:90:14:27:69:a0:63:5b:33:2a:88:4b:
df:57:ed:23:38:1e:af:1c:b1:10:11:0c:73:68:0a:fc:bc:41:
5a:c2:42:4a
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIECVEOyzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YmVjOTAzMGM3MGEzZDQxOTJkNTljMjhkY2M4ZDU0NzY5NDM0MGIzMB4XDTIyMDIw
ODA3MDEwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDhlODE2YmZjZTYw
MmI0NmE2ZWYxN2VlZWY1ZTVjNjVjYWM2ZDMyZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALVJkYKAnWrAd0W15SA/e08bt1eZmdQPMUpS4amZPYtTtA1N
W4cSfslpo5ccREAWYtj+NG5pA9jQiBBc7f0RR2HdWNkxGwN2ddk5v+xuPu9EkK8L
IPNmrOIlR9in+HGYGoZk/Lv1Zu38B9kSJCYyOhYG4MCgdcKXRz3LOKGXZZEgJlIR
iW4c2XVYt6RtwnrInjA/KLfxWrDyXobum+BPyHQ2vg9ObgHIA8H6XCs14Bo2tHEe
UIrncTeTNrKz071z2WtaAo4EYAyEc3CjDlz4tleJGW0aUItOBOUN2sjw3EaqvtcD
GwALyYf92Cua+kpAh8Ou+NQwQYH3Hk7q6lrgUAsCAwEAAaOCAkgwggJEMB0GA1Ud
DgQWBBRI6Ba/zmArRqbvF+7vXlxlysbTLTAfBgNVHSMEGDAWgBTr7JAwxwo9QZLV
nCjcyNVHaUNAszAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzYteVFNTWNLUFVHUzFad28zTWpWUjJsRFFMTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTUvMzcyYjg3LTk1ZjQtNGM5OC1hNmY0LTRhNmY4NjgzMjY1Yy8x
L1NPZ1d2ODVnSzBhbTd4ZnU3MTVjWmNyRzB5MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUv
MzcyYjg3LTk1ZjQtNGM5OC1hNmY0LTRhNmY4NjgzMjY1Yy8xLzYteVFNTWNLUFVH
UzFad28zTWpWUjJsRFFMTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBe
BggrBgEFBQcBBwEB/wRPME0wPAQCAAEwNgMEBS4joAMEA09ueAMEAFBfFgMEAV2v
9AMEBl+egAMEBJf8wAMEArkS5AMEArkopAMEBdQVgDANBAIAAjAHAwUAKgDiADAN
BgkqhkiG9w0BAQsFAAOCAQEAKooWHadWsMg7jI6qTYt2M2+ohnSXj4XLWOsLvlic
tBEkABJtGkazWqUXQEdivDEJNTDUA7fEAtEH/v56C/ZeN02XZS3D3eyHbSJfYw28
WJNvxErGreTQyHQdgZA1FdfL2Nmi5PfWOnOcXmsftJppao+F9YVR1uiv5j6zqHvg
9hsyLuy6aZxXZ6yF67LPZNcFkPs+HyFmsdyd0uEyZwK/jcM9cQ/0eaLzZqs86Dll
YN2VZGG10cu4EAmoFOB2VVMg0d7vvMBPa2cwtjnuksL6DQ7kUOi8oJCZUehnPVQD
lZAUJ2mgY1szKohL31ftIzgerxyxEBEMc2gK/LxBWsJCSg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-fra.rpki-client.org