Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/81iOEvJ6uNgEiPNaSqGgiwcwojk.roa
File: 81iOEvJ6uNgEiPNaSqGgiwcwojk.roa (raw, json)
Hash identifier: kbD3gD9rQtVO8vC3r9xbiiJ16A6ctpJPOFxhD4PkGdU=
Subject key identifier: F3:58:8E:12:F2:7A:B8:D8:04:88:F3:5A:4A:A1:A0:8B:07:30:A2:39
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0183E44EDA96BD0754DD5D529B973F581D47
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/81iOEvJ6uNgEiPNaSqGgiwcwojk.roa
Signing time: Mon 17 Oct 2022 04:58:36 +0000
ROA not before: Mon 17 Oct 2022 04:58:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 176.105.228.0/24 maxlen: 24
176.105.230.0/24 maxlen: 24
95.214.178.0/23 maxlen: 24
45.132.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e4:4e:da:96:bd:07:54:dd:5d:52:9b:97:3f:58:1d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Oct 17 04:58:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3588e12f27ab8d80488f35a4aa1a08b0730a239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:72:6c:9d:d3:80:68:5f:75:09:83:28:d1:
78:b8:90:ab:cb:6f:15:4c:80:31:ca:e6:8c:ee:ea:
c2:2e:e6:4e:f9:c8:21:0e:c8:09:d2:03:b1:77:a4:
1e:c9:27:b4:95:7a:38:fa:ae:25:44:27:d7:ce:e8:
af:8a:e9:e8:14:d8:33:76:0c:01:69:7d:8e:9a:a0:
f5:7f:89:f0:03:5d:c4:86:c1:ae:03:66:c2:80:30:
5d:d0:71:cf:03:01:f0:9b:8c:e7:69:1c:d3:fd:c3:
c5:a0:72:f4:f3:37:04:db:33:e7:ab:f1:ac:e9:2a:
13:d2:cb:45:59:a6:05:db:a7:d0:46:71:95:54:86:
dc:3a:1b:66:34:b4:e4:5c:8e:89:c3:b8:65:9d:f8:
23:51:2b:53:11:b6:5c:6f:41:ae:e3:05:0c:ff:c4:
c3:9b:a7:e5:55:5e:74:67:68:6d:b8:98:e9:f3:ba:
d4:d7:97:31:17:5a:f8:20:76:fd:bf:53:c3:85:94:
cf:d4:d3:6c:fe:0d:8e:bf:ef:b7:a4:12:d4:1f:0a:
67:b1:3c:d2:da:9d:02:88:30:2a:f7:ef:3d:b3:87:
cf:01:99:4c:86:0d:dd:e9:ea:66:90:59:2b:f5:a8:
47:75:aa:10:76:8f:33:c3:26:6a:17:6d:69:7f:89:
6e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:58:8E:12:F2:7A:B8:D8:04:88:F3:5A:4A:A1:A0:8B:07:30:A2:39
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/81iOEvJ6uNgEiPNaSqGgiwcwojk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
95.214.178.0/23
176.105.228.0/24
176.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:e8:74:1c:b9:16:9a:1c:49:28:11:b3:bf:1f:b5:94:a1:e4:
ac:4c:c3:13:35:df:21:3b:42:d7:64:be:db:c2:03:40:39:b6:
db:f3:3b:39:3e:a6:16:01:a9:ca:24:21:04:7b:9c:58:51:09:
93:5c:7e:d3:55:9c:52:ed:81:09:be:e1:23:8c:0b:fb:c6:e9:
3c:8a:91:4e:fb:3f:e7:1b:67:2e:d3:49:4f:da:74:bc:19:9f:
10:68:42:f9:3f:bc:20:cd:ec:ef:76:96:35:db:7b:b6:0e:fc:
17:dd:1c:1b:b6:13:38:2b:eb:41:bc:71:18:5e:59:3d:0f:b1:
f6:30:cc:58:c6:51:2a:6c:b7:98:fe:d9:3a:93:f4:13:34:81:
27:fc:e5:ad:7a:e8:f2:8d:44:38:08:4b:7f:7f:6f:af:bc:2e:
3a:d4:28:5a:f3:52:47:da:6c:f5:58:d8:2a:7b:29:97:cc:b0:
5e:90:f3:7f:52:a9:c9:54:ca:0f:cb:c0:c9:6f:65:3d:5c:3b:
5c:0f:d5:64:54:f1:8d:03:6b:3b:1e:cc:4e:60:f7:7c:c1:8d:
13:8f:15:72:3a:63:63:2d:f2:8c:a0:1b:43:68:da:e7:be:6c:
03:f2:1d:85:97:19:2b:d1:f2:97:0a:3a:15:e4:27:5f:ac:76:
65:a3:39:26
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYPkTtqWvQdU3V1Sm5c/WB1HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjIxMDE3MDQ1ODM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzU4OGUxMmYyN2FiOGQ4MDQ4OGYzNWE0YWExYTA4YjA3MzBhMjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYVybJ3TgGhfdQmDKNF4uJCry28V
TIAxyuaM7urCLuZO+cghDsgJ0gOxd6QeySe0lXo4+q4lRCfXzuiviunoFNgzdgwB
aX2OmqD1f4nwA13EhsGuA2bCgDBd0HHPAwHwm4znaRzT/cPFoHL08zcE2zPnq/Gs
6SoT0stFWaYF26fQRnGVVIbcOhtmNLTkXI6Jw7hlnfgjUStTEbZcb0Gu4wUM/8TD
m6flVV50Z2htuJjp87rU15cxF1r4IHb9v1PDhZTP1NNs/g2Ov++3pBLUHwpnsTzS
2p0CiDAq9+89s4fPAZlMhg3d6epmkFkr9ahHdaoQdo8zwyZqF21pf4lukwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPNYjhLyerjYBIjzWkqhoIsHMKI5MB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvODFpT0V2SjZ1TmdFaVBOYVNxR2dpd2N3b2prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLYRQAwQB
X9ayAwQAsGnkAwQAsGnmMA0GCSqGSIb3DQEBCwUAA4IBAQC76HQcuRaaHEkoEbO/
H7WUoeSsTMMTNd8hO0LXZL7bwgNAObbb8zs5PqYWAanKJCEEe5xYUQmTXH7TVZxS
7YEJvuEjjAv7xuk8ipFO+z/nG2cu00lP2nS8GZ8QaEL5P7wgzezvdpY123u2DvwX
3RwbthM4K+tBvHEYXlk9D7H2MMxYxlEqbLeY/tk6k/QTNIEn/OWteujyjUQ4CEt/
f2+vvC461Cha81JH2mz1WNgqeymXzLBekPN/UqnJVMoPy8DJb2U9XDtcD9VkVPGN
A2s7HsxOYPd8wY0TjxVyOmNjLfKMoBtDaNrnvmwD8h2Flxkr0fKXCjoV5CdfrHZl
ozkm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org