Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/LZql8QG82gznEY8fE0ZmJR5Qilk.roa
File: LZql8QG82gznEY8fE0ZmJR5Qilk.roa (raw, json)
Hash identifier: z5bkt1Mv6GWsfQtCmn10Eqruorkv4SkRhELxH7TRbt0=
Subject key identifier: 2D:9A:A5:F1:01:BC:DA:0C:E7:11:8F:1F:13:46:66:25:1E:50:8A:59
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 13BA9033
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/LZql8QG82gznEY8fE0ZmJR5Qilk.roa
Signing time: Mon 04 Apr 2022 06:31:20 +0000
ROA not before: Mon 04 Apr 2022 06:31:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208660
IP address blocks: 185.213.72.0/22 maxlen: 22
185.226.12.0/22 maxlen: 22
185.226.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330993715 (0x13ba9033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Apr 4 06:31:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d9aa5f101bcda0ce7118f1f134666251e508a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a0:a6:42:f6:6d:d8:74:a6:f5:c9:4e:9d:ef:
00:08:57:45:6f:47:84:63:ba:05:12:40:bd:37:fd:
18:69:aa:20:cb:d2:a5:f8:b1:bf:3d:d2:cc:c4:30:
8b:19:5e:ef:c0:2a:f5:2e:c2:0d:4b:35:d5:d9:cd:
bb:e2:d8:b4:e6:3e:0f:68:1e:46:db:d9:b8:62:ef:
90:ca:96:c1:ff:92:3b:b4:48:cb:9a:4c:f3:29:6e:
d9:46:3b:b4:ca:de:45:f7:7d:0c:6a:39:1b:fc:7e:
bf:72:06:ab:04:61:ef:21:5e:16:98:38:62:a3:1f:
ef:45:df:d4:b2:82:5a:ad:58:5b:d9:ea:b3:42:9b:
7c:a4:7e:c6:ba:7f:fa:f3:db:4a:63:b9:3f:63:a0:
3a:7e:e9:cb:6b:b0:8f:14:21:b5:d0:d1:a2:f6:27:
84:76:4d:c8:c8:b3:82:51:83:0c:ac:04:73:00:e1:
ee:76:a7:2a:39:f5:38:6c:51:c7:65:05:57:82:3c:
ee:8c:b5:35:a1:d2:32:6b:42:ca:c1:0e:33:a1:0f:
05:33:b7:49:49:ef:94:23:0b:f7:fa:31:f9:6d:2a:
a5:20:52:cc:b8:66:7d:3f:14:ae:71:f6:8a:e5:85:
d1:cd:90:f1:83:80:05:ca:1b:bb:ee:35:ed:6c:3b:
40:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9A:A5:F1:01:BC:DA:0C:E7:11:8F:1F:13:46:66:25:1E:50:8A:59
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/LZql8QG82gznEY8fE0ZmJR5Qilk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.72.0/22
185.226.12.0/22
185.226.252.0/22
Signature Algorithm: sha256WithRSAEncryption
35:01:9e:62:9f:33:8d:4a:79:e5:ae:af:06:8b:1f:1a:2f:eb:
12:70:7b:2e:37:91:7c:bd:eb:e5:fe:60:1c:fe:25:4a:1d:8b:
a4:e3:af:41:cd:a5:65:6a:c1:02:31:e5:66:34:35:1f:72:37:
6d:0e:d4:91:20:71:1f:3e:2b:ee:18:b7:75:ad:78:6b:df:e2:
22:4c:16:e9:f6:60:9e:40:f2:27:4c:9f:70:c0:74:49:a9:e9:
48:16:56:4c:ac:e3:91:87:bb:f4:32:ad:35:83:12:97:91:3f:
26:4f:6d:22:d0:bc:7e:39:09:55:20:a3:50:db:1c:ff:79:a1:
e2:b9:aa:da:50:f6:87:ff:1e:bf:33:9c:26:fd:ee:7c:0c:71:
27:80:66:9f:29:8b:08:5b:6a:36:dc:0a:9c:59:1f:37:6f:2a:
31:17:05:44:22:f7:22:ee:65:7c:8c:6b:79:f6:9e:e1:86:1b:
55:4f:ea:7e:48:97:68:08:01:df:85:1b:25:b8:0f:9d:91:9c:
b7:09:b5:80:2c:e3:06:e4:24:a9:7d:f6:2d:eb:42:57:9c:b5:
87:77:42:6f:50:d9:71:78:21:0a:81:d2:7e:85:a7:c8:dc:aa:
4b:72:76:ac:a0:ee:d3:1d:4c:8f:00:d9:6f:c9:59:78:cc:9b:
a4:68:4e:4d
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEE7qQMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MGYxYmE2MTExYzhmMWQzZjM3YzFiN2MxYTVlZDczNzQwMjE5MmYyMB4XDTIyMDQw
NDA2MzEyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmQ5YWE1ZjEwMWJj
ZGEwY2U3MTE4ZjFmMTM0NjY2MjUxZTUwOGE1OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANigpkL2bdh0pvXJTp3vAAhXRW9HhGO6BRJAvTf9GGmqIMvS
pfixvz3SzMQwixle78Aq9S7CDUs11dnNu+LYtOY+D2geRtvZuGLvkMqWwf+SO7RI
y5pM8ylu2UY7tMreRfd9DGo5G/x+v3IGqwRh7yFeFpg4YqMf70Xf1LKCWq1YW9nq
s0KbfKR+xrp/+vPbSmO5P2OgOn7py2uwjxQhtdDRovYnhHZNyMizglGDDKwEcwDh
7nanKjn1OGxRx2UFV4I87oy1NaHSMmtCysEOM6EPBTO3SUnvlCML9/ox+W0qpSBS
zLhmfT8UrnH2iuWF0c2Q8YOABcobu+417Ww7QDMCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQtmqXxAbzaDOcRjx8TRmYlHlCKWTAfBgNVHSMEGDAWgBQw8bphEcjx0/N8
G3waXtc3QCGS8jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01QRzZZUkhJOGRQemZCdDhHbDdYTjBBaGt2SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjMvOGQ3YzU3LWJhNjUtNDdmYy1iY2M0LWMzMzAxODYzM2QzMy8x
L0xacWw4UUc4Mmd6bkVZOGZFMFptSlI1UWlsay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMv
OGQ3YzU3LWJhNjUtNDdmYy1iY2M0LWMzMzAxODYzM2QzMy8xL01QRzZZUkhJOGRQ
emZCdDhHbDdYTjBBaGt2SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEArnVSAMEArniDAMEArni/DANBgkq
hkiG9w0BAQsFAAOCAQEANQGeYp8zjUp55a6vBosfGi/rEnB7LjeRfL3r5f5gHP4l
Sh2LpOOvQc2lZWrBAjHlZjQ1H3I3bQ7UkSBxHz4r7hi3da14a9/iIkwW6fZgnkDy
J0yfcMB0SanpSBZWTKzjkYe79DKtNYMSl5E/Jk9tItC8fjkJVSCjUNsc/3mh4rmq
2lD2h/8evzOcJv3ufAxxJ4BmnymLCFtqNtwKnFkfN28qMRcFRCL3Iu5lfIxrefae
4YYbVU/qfkiXaAgB34UbJbgPnZGctwm1gCzjBuQkqX32LetCV5y1h3dCb1DZcXgh
CoHSfoWnyNyqS3J2rKDu0x1MjwDZb8lZeMybpGhOTQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:33 2024 by rpki-client on console-fra.rpki-client.org