Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/l6ixhi_BcUao6qcezqKPLYPXrD0.roa
File: l6ixhi_BcUao6qcezqKPLYPXrD0.roa (raw, json)
Hash identifier: 7Rgg9gQvFQ6735H3CmSv/BTIPeqGnbJaFjcB/o1Rkp0=
Subject key identifier: 97:A8:B1:86:2F:C1:71:46:A8:EA:A7:1E:CE:A2:8F:2D:83:D7:AC:3D
Certificate issuer: /CN=01335442514d5249b5143cfdf821216bb5c52940
Certificate serial: 05594ED0
Authority key identifier: 01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/l6ixhi_BcUao6qcezqKPLYPXrD0.roa
Signing time: Tue 07 Jun 2022 23:54:02 +0000
ROA not before: Tue 07 Jun 2022 23:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39134
IP address blocks: 185.206.100.0/24 maxlen: 24
185.206.100.0/22 maxlen: 24
88.212.220.0/22 maxlen: 24
88.212.224.0/22 maxlen: 24
88.212.229.0/24 maxlen: 24
88.212.228.0/22 maxlen: 24
88.212.230.0/23 maxlen: 23
88.212.192.0/24 maxlen: 24
88.212.192.0/20 maxlen: 24
88.212.196.0/24 maxlen: 24
88.212.204.0/24 maxlen: 24
88.212.208.0/22 maxlen: 24
2a02:2100::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89738960 (0x5594ed0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01335442514d5249b5143cfdf821216bb5c52940
Validity
Not Before: Jun 7 23:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97a8b1862fc17146a8eaa71ecea28f2d83d7ac3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:ab:ee:b1:d5:35:b5:57:92:ed:6f:d2:b5:
24:7b:85:0a:1b:fa:ec:68:c7:92:24:84:41:12:c0:
e1:09:0a:25:ac:7e:02:c7:8e:56:52:af:47:24:15:
52:4f:09:b3:e5:01:31:84:6e:3a:86:6d:d2:db:fd:
4d:a7:c8:f5:9f:30:55:37:d0:06:e1:be:d1:e0:ef:
ff:c4:d5:4b:0c:f2:a5:ae:d0:8c:c7:f1:9a:e1:8b:
4e:0c:42:9e:35:22:a9:c8:cd:61:52:ee:2a:12:7d:
26:e4:f5:d7:b7:a0:cc:df:ee:17:bd:ed:e3:cd:77:
9a:2c:fd:9a:41:6a:ad:3b:2b:7b:cb:f2:71:86:8e:
f9:05:1a:c7:6f:b5:1a:2c:1d:b7:ae:a3:be:74:40:
5a:b3:48:64:e8:35:66:76:6b:3d:f0:c1:b1:9c:32:
3a:1a:b0:9f:a3:ac:cb:82:25:dc:df:5b:23:ef:33:
ca:a6:9c:aa:9c:b7:5e:1f:3f:36:84:c5:79:32:24:
37:74:a3:ab:d0:d4:b0:f2:7e:a6:32:0d:a9:4e:84:
47:67:7f:fe:69:ea:58:fa:37:bd:69:04:e5:ec:69:
cf:50:86:db:26:15:c7:d8:fe:72:b5:ea:90:c7:83:
49:a3:dc:55:2e:c2:48:39:39:07:b7:97:9e:c9:25:
4d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A8:B1:86:2F:C1:71:46:A8:EA:A7:1E:CE:A2:8F:2D:83:D7:AC:3D
X509v3 Authority Key Identifier:
keyid:01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/l6ixhi_BcUao6qcezqKPLYPXrD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.212.192.0-88.212.211.255
88.212.220.0-88.212.231.255
185.206.100.0/22
IPv6:
2a02:2100::/32
Signature Algorithm: sha256WithRSAEncryption
14:61:59:a9:3f:cb:b8:60:2c:9d:1b:63:02:df:5f:34:9d:ed:
29:7c:6b:1b:12:64:53:5b:f2:80:83:2d:ed:bc:16:ec:1e:29:
7a:1f:95:a2:99:c9:7c:a0:5f:4b:78:40:ed:a1:81:c7:00:98:
44:54:f1:fe:f4:b1:2e:bc:b9:1e:fc:10:b4:d8:59:01:1b:2f:
a6:f9:52:b8:41:d3:9b:bf:97:92:52:eb:82:fa:02:e0:bb:38:
98:2d:a2:5a:75:d3:50:8c:9c:cd:de:fc:9b:3d:4d:fb:19:95:
8a:0c:dd:c0:d7:2a:64:c8:f0:13:d5:0c:c5:f1:da:b5:97:4b:
1c:a4:88:d1:87:38:c5:00:5e:bc:c4:bc:71:cd:c5:16:9f:08:
c5:33:f9:60:aa:d4:c7:d8:27:8c:39:76:7c:a6:91:58:aa:9e:
ab:77:54:5b:46:3b:9d:78:24:05:0e:f7:06:2a:26:69:5f:f7:
6a:d1:f8:21:c7:12:f5:fb:f2:47:db:51:6d:a2:6b:5c:89:32:
76:6f:3e:65:7a:2c:9f:34:1e:f1:3c:a8:8a:45:f2:af:39:11:
79:34:7f:be:8c:e4:47:98:cd:93:5c:98:85:7a:82:62:a2:68:
ae:78:b8:68:4a:ac:5f:9d:bf:16:9c:e2:4a:ec:7a:54:c3:54:
da:ba:01:4c
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgIEBVlO0DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MTMzNTQ0MjUxNGQ1MjQ5YjUxNDNjZmRmODIxMjE2YmI1YzUyOTQwMB4XDTIyMDYw
NzIzNTQwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTdhOGIxODYyZmMx
NzE0NmE4ZWFhNzFlY2VhMjhmMmQ4M2Q3YWMzZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKkSq+6x1TW1V5Ltb9K1JHuFChv67GjHkiSEQRLA4QkKJax+
AseOVlKvRyQVUk8Js+UBMYRuOoZt0tv9TafI9Z8wVTfQBuG+0eDv/8TVSwzypa7Q
jMfxmuGLTgxCnjUiqcjNYVLuKhJ9JuT117egzN/uF73t4813miz9mkFqrTsre8vy
cYaO+QUax2+1Giwdt66jvnRAWrNIZOg1ZnZrPfDBsZwyOhqwn6Osy4Il3N9bI+8z
yqacqpy3Xh8/NoTFeTIkN3Sjq9DUsPJ+pjINqU6ER2d//mnqWPo3vWkE5expz1CG
2yYVx9j+crXqkMeDSaPcVS7CSDk5B7eXnsklTUcCAwEAAaOCAjQwggIwMB0GA1Ud
DgQWBBSXqLGGL8FxRqjqpx7Ooo8tg9esPTAfBgNVHSMEGDAWgBQBM1RCUU1SSbUU
PP34ISFrtcUpQDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0FUTlVRbEZOVWttMUZEejktQ0VoYTdYRktVQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvYzdhNjhmLTdiZjgtNGY4MC1hOWEyLTgxNWQyYzAyNjY0Ni8x
L2w2aXhoaV9CY1VhbzZxY2V6cUtQTFlQWHJEMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
YzdhNjhmLTdiZjgtNGY4MC1hOWEyLTgxNWQyYzAyNjY0Ni8xL0FUTlVRbEZOVWtt
MUZEejktQ0VoYTdYRktVQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBK
BggrBgEFBQcBBwEB/wQ7MDkwKAQCAAEwIjAMAwQGWNTAAwQCWNTQMAwDBAJY1NwD
BANY1OADBAK5zmQwDQQCAAIwBwMFACoCIQAwDQYJKoZIhvcNAQELBQADggEBABRh
Wak/y7hgLJ0bYwLfXzSd7Sl8axsSZFNb8oCDLe28FuweKXoflaKZyXygX0t4QO2h
gccAmERU8f70sS68uR78ELTYWQEbL6b5UrhB05u/l5JS64L6AuC7OJgtolp101CM
nM3e/Js9TfsZlYoM3cDXKmTI8BPVDMXx2rWXSxykiNGHOMUAXrzEvHHNxRafCMUz
+WCq1MfYJ4w5dnymkViqnqt3VFtGO514JAUO9wYqJmlf92rR+CHHEvX78kfbUW2i
a1yJMnZvPmV6LJ80HvE8qIpF8q85EXk0f76M5EeYzZNcmIV6gmKiaK54uGhKrF+d
vxac4krselTDVNq6AUw=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:23 2023 by rpki-client on console-fra.rpki-client.org