Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/2VFhLraT6tWEXPLgAm6HgzTlQmg.roa
File: 2VFhLraT6tWEXPLgAm6HgzTlQmg.roa (raw, json)
Hash identifier: iTTAdzyfy02h/01sb/VwALXHfKgXjE14deib8t48zwA=
Subject key identifier: D9:51:61:2E:B6:93:EA:D5:84:5C:F2:E0:02:6E:87:83:34:E5:42:68
Certificate issuer: /CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
Certificate serial: 30378FD2
Authority key identifier: C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/2VFhLraT6tWEXPLgAm6HgzTlQmg.roa
Signing time: Sat 01 Jan 2022 09:04:13 +0000
ROA not before: Sat 01 Jan 2022 09:04:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9051
IP address blocks: 194.126.136.0/21 maxlen: 24
193.188.136.0/24 maxlen: 24
193.188.135.0/24 maxlen: 24
185.7.128.0/22 maxlen: 24
212.36.192.0/19 maxlen: 24
194.126.0.0/19 maxlen: 24
2a00:1590::/32 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 808947666 (0x30378fd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
Validity
Not Before: Jan 1 09:04:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d951612eb693ead5845cf2e0026e878334e54268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4c:df:a8:54:c8:77:ce:2f:a8:a0:15:61:b8:
a8:ff:4b:42:63:39:a1:6c:61:3c:ac:91:92:fc:90:
82:b4:93:6d:df:b2:74:7a:86:82:e9:d9:ef:09:1b:
5f:fe:0f:b7:e0:c7:00:44:16:f7:48:81:96:df:cc:
83:84:86:18:1f:84:03:74:b7:91:fc:ea:df:eb:4d:
82:23:89:fd:36:71:42:d3:4a:36:b4:93:7a:b2:06:
44:66:86:48:04:78:1e:6b:01:dd:9a:42:1a:a4:59:
7c:20:ba:a6:81:12:1a:72:5b:42:c9:7d:1c:44:af:
30:b8:95:83:8b:d3:87:84:3a:64:33:ef:94:80:84:
4d:83:6c:c5:dc:e9:7f:16:4a:2d:84:cd:ed:29:3a:
dd:15:85:b6:ae:c7:81:67:ff:06:95:c6:02:68:0c:
cb:a9:45:47:97:88:14:e2:a5:39:3c:cf:1d:ad:4d:
3c:20:19:ae:d0:a2:af:35:b1:45:02:70:81:b1:c3:
61:6e:24:48:df:02:d8:77:06:cd:7d:7c:3c:a2:ce:
15:6a:2b:55:91:23:c9:93:32:b0:76:f6:51:4a:89:
0b:9f:a6:0c:99:6b:34:ce:54:7f:30:b1:14:dc:3b:
4c:39:dc:03:5b:0b:4d:c5:67:62:30:7a:07:72:73:
b2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:51:61:2E:B6:93:EA:D5:84:5C:F2:E0:02:6E:87:83:34:E5:42:68
X509v3 Authority Key Identifier:
keyid:C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/2VFhLraT6tWEXPLgAm6HgzTlQmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.128.0/22
193.188.135.0-193.188.136.255
194.126.0.0/19
194.126.136.0/21
212.36.192.0/19
IPv6:
2a00:1590::/32
Signature Algorithm: sha256WithRSAEncryption
46:48:bb:8b:fe:09:dc:e6:b1:aa:72:59:f7:62:04:d0:e0:68:
fc:87:4e:a4:fe:6c:af:e6:39:43:97:00:34:05:0b:0e:25:a2:
2b:1b:12:fa:17:ae:9f:64:3e:9c:3c:b1:4b:f0:43:9d:72:60:
d8:e1:a1:d7:36:e5:c5:d9:5a:09:12:8d:c9:ba:a7:3e:76:eb:
d5:52:1d:cc:5d:15:4d:47:3a:09:80:8a:d2:94:ac:e2:bf:42:
1a:d1:ba:d3:b1:70:80:db:79:8c:90:4f:47:54:6f:25:91:2f:
fd:ba:96:cb:a0:99:10:19:b2:f0:9d:4e:70:68:ae:73:40:0c:
d4:3c:cf:5f:21:40:1d:cb:c3:97:cc:04:3f:6d:60:40:07:62:
0c:ed:1a:63:93:d4:4e:84:b2:e3:7f:c3:e0:0f:68:53:e4:5a:
72:88:57:ba:4c:4d:1d:0a:86:4e:91:09:36:e6:4a:bb:fe:0a:
16:1e:89:01:c1:9d:43:28:80:a8:69:e0:dc:6d:a5:93:22:31:
0a:ea:38:64:02:2c:eb:ea:58:eb:0d:e9:ef:3c:e5:62:5b:d1:
2b:09:54:9c:c7:59:14:b1:e0:3f:94:99:b5:36:7a:7c:af:af:
4f:aa:c8:8f:0e:c2:f7:23:8d:68:53:6b:4a:d2:ed:58:48:fb:
7d:df:ae:37
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIEMDeP0jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MTdjYzM3ZjFlZDgxYWMzN2IyMGZhZjBmNDJjNDFhYjgwOGYxM2MxMB4XDTIyMDEw
MTA5MDQxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDk1MTYxMmViNjkz
ZWFkNTg0NWNmMmUwMDI2ZTg3ODMzNGU1NDI2ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAONM36hUyHfOL6igFWG4qP9LQmM5oWxhPKyRkvyQgrSTbd+y
dHqGgunZ7wkbX/4Pt+DHAEQW90iBlt/Mg4SGGB+EA3S3kfzq3+tNgiOJ/TZxQtNK
NrSTerIGRGaGSAR4HmsB3ZpCGqRZfCC6poESGnJbQsl9HESvMLiVg4vTh4Q6ZDPv
lICETYNsxdzpfxZKLYTN7Sk63RWFtq7HgWf/BpXGAmgMy6lFR5eIFOKlOTzPHa1N
PCAZrtCirzWxRQJwgbHDYW4kSN8C2HcGzX18PKLOFWorVZEjyZMysHb2UUqJC5+m
DJlrNM5UfzCxFNw7TDncA1sLTcVnYjB6B3JzskECAwEAAaOCAjgwggI0MB0GA1Ud
DgQWBBTZUWEutpPq1YRc8uACboeDNOVCaDAfBgNVHSMEGDAWgBTBfMN/Htgaw3sg
+vD0LEGrgI8TwTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dYekRmeDdZR3NON0lQcnc5Q3hCcTRDUEU4RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWQvYjEwZTA2LTI1N2MtNDk5NS04NzlkLTZkMDdkN2YxYTcwMS8x
LzJWRmhMcmFUNnRXRVhQTGdBbTZIZ3pUbFFtZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQv
YjEwZTA2LTI1N2MtNDk5NS04NzlkLTZkMDdkN2YxYTcwMS8xL3dYekRmeDdZR3NO
N0lQcnc5Q3hCcTRDUEU4RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBO
BggrBgEFBQcBBwEB/wQ/MD0wLAQCAAEwJgMEArkHgDAMAwQAwbyHAwQAwbyIAwQF
wn4AAwQDwn6IAwQF1CTAMA0EAgACMAcDBQAqABWQMA0GCSqGSIb3DQEBCwUAA4IB
AQBGSLuL/gnc5rGqcln3YgTQ4Gj8h06k/myv5jlDlwA0BQsOJaIrGxL6F66fZD6c
PLFL8EOdcmDY4aHXNuXF2VoJEo3Juqc+duvVUh3MXRVNRzoJgIrSlKziv0Ia0brT
sXCA23mMkE9HVG8lkS/9upbLoJkQGbLwnU5waK5zQAzUPM9fIUAdy8OXzAQ/bWBA
B2IM7Rpjk9ROhLLjf8PgD2hT5FpyiFe6TE0dCoZOkQk25kq7/goWHokBwZ1DKICo
aeDcbaWTIjEK6jhkAizr6ljrDenvPOViW9ErCVScx1kUseA/lJm1Nnp8r69PqsiP
DsL3I41oU2tK0u1YSPt93643
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:36 2024 by rpki-client on console-fra.rpki-client.org