Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/niA7zHEG2i194C3vneWeeUUTH2g.roa
File: niA7zHEG2i194C3vneWeeUUTH2g.roa (raw, json)
Hash identifier: 2oxSUhtFG+5XRwXeq0Dm46uRcueQfFiMj4tWzYrxymw=
Subject key identifier: 9E:20:3B:CC:71:06:DA:2D:7D:E0:2D:EF:9D:E5:9E:79:45:13:1F:68
Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial: 01852FBF5683AC727FA227D78F440900E404
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/niA7zHEG2i194C3vneWeeUUTH2g.roa
Signing time: Tue 20 Dec 2022 13:35:46 +0000
ROA not before: Tue 20 Dec 2022 13:35:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51262
IP address blocks: 185.147.8.0/24 maxlen: 24
185.147.10.0/23 maxlen: 23
185.147.9.0/24 maxlen: 24
2a0a:dc01::/32 maxlen: 32
2a0a:dc05::/32 maxlen: 32
2a0a:dc02::/32 maxlen: 32
2a0a:dc00::/32 maxlen: 32
2a0a:dc06::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:bf:56:83:ac:72:7f:a2:27:d7:8f:44:09:00:e4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Validity
Not Before: Dec 20 13:35:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e203bcc7106da2d7de02def9de59e7945131f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:89:04:ff:2f:72:a6:1c:27:27:3a:6e:67:e6:
5a:3c:80:4e:0e:fc:f5:7d:4e:2b:ec:9d:b9:c5:2f:
23:3e:bf:5e:11:3b:16:10:4b:e9:d6:56:90:21:86:
17:7c:29:e0:de:9e:69:e6:98:99:a0:8c:9f:5f:29:
28:01:a6:7e:e1:7a:bd:50:33:a5:17:00:15:00:9a:
2c:bd:97:0b:22:e7:b5:56:f7:4f:95:18:64:ba:47:
e1:f2:e0:da:57:39:9a:15:b2:5d:f0:66:4f:5a:47:
50:72:12:48:4b:d8:17:45:95:6f:3e:b2:36:cc:a4:
fd:4d:b5:d5:53:51:ec:93:e1:34:32:20:3b:ff:70:
68:d2:a4:98:5a:f0:f0:e9:7b:f5:a8:6c:67:2e:80:
d4:cf:2b:ed:17:c4:f7:a1:bb:0f:17:14:30:80:a8:
44:8a:55:4f:65:0a:96:6b:e7:39:c6:f4:6b:23:89:
5a:a5:45:8f:7a:dc:44:d3:dd:6a:0b:4c:e4:aa:7e:
9a:c5:35:d9:5b:6d:67:e8:33:22:38:62:e0:86:33:
9a:3a:34:0d:ef:fb:8e:37:da:7e:9a:80:66:25:ce:
73:4e:ad:49:bc:ef:2a:99:23:2e:38:08:72:1c:c2:
5d:61:2e:ee:d7:2f:e3:ab:dd:96:d1:e2:fa:77:7c:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:20:3B:CC:71:06:DA:2D:7D:E0:2D:EF:9D:E5:9E:79:45:13:1F:68
X509v3 Authority Key Identifier:
keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/niA7zHEG2i194C3vneWeeUUTH2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.8.0/22
IPv6:
2a0a:dc00::-2a0a:dc02:ffff:ffff:ffff:ffff:ffff:ffff
2a0a:dc05::-2a0a:dc06:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
31:52:59:7e:77:b7:51:fa:54:7c:4e:26:d9:f6:7d:d2:33:3a:
bf:71:f5:c9:21:fb:89:14:88:b1:d3:b8:d0:6d:6a:05:17:45:
33:fc:9f:84:9c:0b:9a:3a:12:06:14:2f:02:c1:7f:81:4e:4c:
b8:38:a5:6f:85:92:25:23:3a:c3:17:e3:0f:77:b4:33:36:1e:
eb:06:7d:2c:03:9b:4c:27:30:42:39:b7:93:99:17:62:16:ad:
d2:7c:76:ef:fb:ef:55:b8:c3:4a:2c:22:54:3c:c9:e6:66:23:
5b:50:47:19:53:4b:87:92:c6:dc:16:4a:5d:a6:d8:0a:6a:49:
3c:68:78:20:3c:52:c8:df:82:cd:35:df:d2:dc:2c:32:1a:24:
0a:d2:df:9e:d7:81:f3:ca:af:34:37:55:98:df:4c:88:7e:ee:
5f:74:50:00:36:38:e3:5b:ab:d2:3f:bd:73:a5:ed:fa:d6:3e:
13:ed:6d:b5:e0:41:13:ca:bd:f2:6f:f8:6a:d2:4f:af:77:da:
c0:54:f3:b1:a6:02:89:07:08:b9:f8:92:f8:33:03:07:9b:b0:
a2:5a:ff:9a:ee:97:21:c7:dc:c6:e5:d9:44:59:a6:19:cb:c6:
93:ec:e8:bb:78:c4:95:39:70:55:9c:be:29:fa:c5:57:f6:0d:
93:9a:7a:a7
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYUvv1aDrHJ/oifXj0QJAOQEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZTY5MTQyN2M2ZTQxODA2ZjZjZWIxZTIxOGE3ZGM2MzIw
ZmRlZWQwHhcNMjIxMjIwMTMzNTQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTIwM2JjYzcxMDZkYTJkN2RlMDJkZWY5ZGU1OWU3OTQ1MTMxZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYkE/y9yphwnJzpuZ+ZaPIBODvz1
fU4r7J25xS8jPr9eETsWEEvp1laQIYYXfCng3p5p5piZoIyfXykoAaZ+4Xq9UDOl
FwAVAJosvZcLIue1VvdPlRhkukfh8uDaVzmaFbJd8GZPWkdQchJIS9gXRZVvPrI2
zKT9TbXVU1Hsk+E0MiA7/3Bo0qSYWvDw6Xv1qGxnLoDUzyvtF8T3obsPFxQwgKhE
ilVPZQqWa+c5xvRrI4lapUWPetxE091qC0zkqn6axTXZW21n6DMiOGLghjOaOjQN
7/uON9p+moBmJc5zTq1JvO8qmSMuOAhyHMJdYS7u1y/jq92W0eL6d3xscwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFJ4gO8xxBtotfeAt753lnnlFEx9oMB8GA1UdIwQY
MBaAFO/mkUJ8bkGAb2zrHiGKfcYyD97tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wNTk5NzUtZWY5MC00MjFiLThhZjMt
MzgxNGM1N2ZlOWJiLzEvbmlBN3pIRUcyaTE5NEMzdm5lV2VlVVVUSDJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wNTk5NzUtZWY5MC00MjFiLThhZjMtMzgxNGM1N2ZlOWJi
LzEvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAMBAIAATAGAwQCuZMIMCUE
AgACMB8wDQMEAioK3AMFACoK3AIwDgMFACoK3AUDBQAqCtwGMA0GCSqGSIb3DQEB
CwUAA4IBAQAxUll+d7dR+lR8TibZ9n3SMzq/cfXJIfuJFIix07jQbWoFF0Uz/J+E
nAuaOhIGFC8CwX+BTky4OKVvhZIlIzrDF+MPd7QzNh7rBn0sA5tMJzBCObeTmRdi
Fq3SfHbv++9VuMNKLCJUPMnmZiNbUEcZU0uHksbcFkpdptgKakk8aHggPFLI34LN
Nd/S3CwyGiQK0t+e14Hzyq80N1WY30yIfu5fdFAANjjjW6vSP71zpe361j4T7W21
4EETyr3yb/hq0k+vd9rAVPOxpgKJBwi5+JL4MwMHm7CiWv+a7pchx9zG5dlEWaYZ
y8aT7Oi7eMSVOXBVnL4p+sVX9g2Tmnqn
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:52 2023 by rpki-client on console-ams.rpki-client.org