Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/7bPeta972BSn9DvbQHweyBZBgjI.roa
File: 7bPeta972BSn9DvbQHweyBZBgjI.roa (raw, json)
Hash identifier: VVlmGaE8wGQ6XvJqPAaJ6sLO1cu+CSrqW5TxanltZuA=
Subject key identifier: ED:B3:DE:B5:AF:7B:D8:14:A7:F4:3B:DB:40:7C:1E:C8:16:41:82:32
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 170FB4BC
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/7bPeta972BSn9DvbQHweyBZBgjI.roa
Signing time: Tue 25 Jan 2022 13:37:16 +0000
ROA not before: Tue 25 Jan 2022 13:37:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3058
IP address blocks: 185.71.96.0/22 maxlen: 22
83.149.192.0/18 maxlen: 18
188.93.105.0/24 maxlen: 25
188.93.104.0/21 maxlen: 21
188.93.106.0/23 maxlen: 23
194.149.64.0/21 maxlen: 21
2a00:db8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386905276 (0x170fb4bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 25 13:37:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edb3deb5af7bd814a7f43bdb407c1ec816418232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:f3:7c:69:9a:52:75:ef:20:08:19:17:cd:
f6:e2:8a:ed:87:3c:b8:d1:6b:6d:a1:01:a4:38:61:
6d:92:00:e3:c4:f8:3e:3f:4c:ff:74:87:45:1d:3c:
be:2b:9d:21:d8:e6:f0:3b:a1:bc:d9:29:16:5d:35:
dc:6f:71:35:5c:18:54:fa:d2:0d:f4:5f:ed:80:62:
97:76:1b:07:77:7e:61:9a:b4:a7:74:ae:55:ef:51:
4e:6c:39:94:47:c4:7a:b5:0e:4a:8e:70:1c:5d:dd:
cb:e2:fe:f5:0d:47:02:cc:a2:cd:9a:a5:ed:eb:bc:
52:8d:ee:ed:ac:78:52:fc:11:b2:87:f8:bb:e8:15:
c4:63:e7:bd:36:4e:3c:47:3f:1c:33:b8:13:b7:c0:
c6:e1:81:2e:9e:e6:e5:3a:0e:63:7b:01:47:9a:d9:
ce:ae:47:84:5e:05:7a:fc:d4:a9:ae:d6:63:a4:72:
63:62:77:9c:11:e4:34:0a:5d:4f:f9:f5:fb:74:c7:
7f:18:01:78:9f:5a:8b:bd:b4:93:ce:3c:d6:5a:cd:
a4:15:3e:41:d7:3f:7d:fb:6e:91:5f:a0:39:96:27:
f0:04:8e:64:64:a6:de:d2:2f:20:5f:c2:98:58:0d:
a8:86:2c:a1:51:2a:ad:fe:40:ed:06:7c:25:e2:b7:
69:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B3:DE:B5:AF:7B:D8:14:A7:F4:3B:DB:40:7C:1E:C8:16:41:82:32
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/7bPeta972BSn9DvbQHweyBZBgjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.149.192.0/18
185.71.96.0/22
188.93.104.0/21
194.149.64.0/21
IPv6:
2a00:db8::/32
Signature Algorithm: sha256WithRSAEncryption
49:24:17:09:6f:dc:61:31:7d:51:ce:b3:fd:18:73:71:41:84:
7b:79:64:ed:34:e8:23:32:97:58:33:2e:8a:50:26:47:7e:b4:
73:67:65:1e:2f:c7:bc:ed:52:ea:6b:2c:2a:d4:b8:8e:61:9f:
37:a1:8d:41:e5:f9:e8:73:99:37:db:91:84:31:b8:66:cf:41:
19:1a:d8:1c:a3:c0:95:58:00:35:fc:5e:10:76:73:de:da:bc:
2a:31:fc:24:7c:4a:3d:5a:a0:61:0c:65:d6:b0:eb:c5:10:f3:
7b:fa:e6:d5:5d:03:0b:45:56:66:6e:21:4e:b0:b2:3f:82:a3:
8a:71:34:0d:62:13:90:35:d5:40:d0:08:9f:bb:f3:e1:31:cb:
8a:c5:36:24:ed:c2:14:9e:3e:89:a7:44:f7:9b:1e:e1:eb:f8:
6b:4b:68:aa:5d:2a:1b:8e:ac:bc:70:2a:7f:26:ae:82:70:22:
44:df:22:0d:07:c6:7e:3c:f1:1c:8f:05:f1:75:cd:0b:dd:3c:
69:87:27:dc:0c:16:f8:ed:c4:e7:e5:60:53:df:9a:f5:6c:b8:
f4:67:19:f9:48:dc:2e:3b:cf:a9:44:00:02:19:9f:42:a5:d8:
98:4f:d0:aa:c6:d3:1c:fc:87:82:17:14:4c:1f:e0:38:07:85:
48:f8:0d:00
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIEFw+0vDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
OGIyMjAyM2I2ZWFkNGMyOTY4M2E5ZmVkNDQ5M2QwM2RlZTJjNjg1MB4XDTIyMDEy
NTEzMzcxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWRiM2RlYjVhZjdi
ZDgxNGE3ZjQzYmRiNDA3YzFlYzgxNjQxODIzMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALi783xpmlJ17yAIGRfN9uKK7Yc8uNFrbaEBpDhhbZIA48T4
Pj9M/3SHRR08viudIdjm8DuhvNkpFl013G9xNVwYVPrSDfRf7YBil3YbB3d+YZq0
p3SuVe9RTmw5lEfEerUOSo5wHF3dy+L+9Q1HAsyizZql7eu8Uo3u7ax4UvwRsof4
u+gVxGPnvTZOPEc/HDO4E7fAxuGBLp7m5ToOY3sBR5rZzq5HhF4FevzUqa7WY6Ry
Y2J3nBHkNApdT/n1+3THfxgBeJ9ai720k8481lrNpBU+Qdc/fftukV+gOZYn8ASO
ZGSm3tIvIF/CmFgNqIYsoVEqrf5A7QZ8JeK3aXkCAwEAAaOCAiowggImMB0GA1Ud
DgQWBBTts961r3vYFKf0O9tAfB7IFkGCMjAfBgNVHSMEGDAWgBQ4siAjturUwpaD
qf7UST0D3uLGhTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09MSWdJN2JxMU1LV2c2bi0xRWs5QTk3aXhvVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTcvODgxM2Y1LTRlN2ItNGQ1MS1iNWYzLTQwZDk1YmQzM2ZjYi8x
LzdiUGV0YTk3MkJTbjlEdmJRSHdleUJaQmdqSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcv
ODgxM2Y1LTRlN2ItNGQ1MS1iNWYzLTQwZDk1YmQzM2ZjYi8xL09MSWdJN2JxMU1L
V2c2bi0xRWs5QTk3aXhvVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEBlOVwAMEArlHYAMEA7xdaAMEA8KV
QDANBAIAAjAHAwUAKgANuDANBgkqhkiG9w0BAQsFAAOCAQEASSQXCW/cYTF9Uc6z
/RhzcUGEe3lk7TToIzKXWDMuilAmR360c2dlHi/HvO1S6mssKtS4jmGfN6GNQeX5
6HOZN9uRhDG4Zs9BGRrYHKPAlVgANfxeEHZz3tq8KjH8JHxKPVqgYQxl1rDrxRDz
e/rm1V0DC0VWZm4hTrCyP4KjinE0DWITkDXVQNAIn7vz4THLisU2JO3CFJ4+iadE
95se4ev4a0toql0qG46svHAqfyaugnAiRN8iDQfGfjzxHI8F8XXNC908aYcn3AwW
+O3E5+VgU9+a9Wy49GcZ+UjcLjvPqUQAAhmfQqXYmE/QqsbTHPyHghcUTB/gOAeF
SPgNAA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org