Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/tD6TfE0eQlc4E3wxroecHa6cWGo.roa
File: tD6TfE0eQlc4E3wxroecHa6cWGo.roa (raw, json)
Hash identifier: ZlKBeigUGj644blsI3K27sVkpQBQ9tiBeMpPyh2ngVA=
Subject key identifier: B4:3E:93:7C:4D:1E:42:57:38:13:7C:31:AE:87:9C:1D:AE:9C:58:6A
Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial: 06DA0799
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/tD6TfE0eQlc4E3wxroecHa6cWGo.roa
Signing time: Sat 01 Jan 2022 14:01:22 +0000
ROA not before: Sat 01 Jan 2022 14:01:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207021
IP address blocks: 185.80.191.0/24 maxlen: 24
185.80.190.0/24 maxlen: 24
185.80.189.0/24 maxlen: 24
185.80.188.0/24 maxlen: 24
2a05:7f00:190::/48 maxlen: 48
2a05:7f00:188::/48 maxlen: 48
2a05:7f00:191::/48 maxlen: 48
2a05:7f00:189::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114952089 (0x6da0799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Validity
Not Before: Jan 1 14:01:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b43e937c4d1e425738137c31ae879c1dae9c586a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f6:1f:a6:b5:b7:c7:5b:33:4a:e0:9b:97:51:
6f:16:89:6a:3f:38:ed:23:46:09:0f:c2:c2:7f:a7:
c8:6e:ba:0b:14:84:31:86:6f:a4:e2:51:72:aa:48:
c8:ab:6a:49:ad:99:f0:80:be:b1:1a:d0:cd:e1:8f:
e4:a6:88:af:6e:f2:aa:a8:d1:61:27:38:72:ad:cc:
8c:f1:21:45:67:f0:a0:68:96:9c:2b:a8:ad:a3:f1:
aa:ae:f8:95:7a:af:80:b3:b3:aa:e2:2e:07:b4:33:
31:e1:1d:4c:ad:b7:58:3b:90:1d:79:7f:ec:b4:89:
3a:ba:d2:a3:9e:3f:c9:5c:1d:57:22:41:27:0d:e0:
78:5e:67:8a:e5:a0:87:64:6b:f8:cd:ac:13:7a:8b:
46:6b:39:c6:24:cb:7c:c7:8b:59:a2:d7:3f:98:52:
a2:2a:76:16:da:79:f8:ac:76:96:ed:97:6a:da:86:
0c:df:13:73:7f:47:0e:30:4d:1d:6e:10:d0:c8:19:
3c:6e:40:31:83:60:71:4d:8c:15:d2:66:a4:cd:d5:
b3:69:fa:8c:d5:83:2d:c3:0d:cc:d4:f7:63:8f:88:
02:9a:55:f4:4e:23:23:b8:3a:80:fb:0e:96:b2:90:
5f:5a:fb:d3:18:3f:47:ef:1d:bb:4c:49:57:85:e3:
13:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3E:93:7C:4D:1E:42:57:38:13:7C:31:AE:87:9C:1D:AE:9C:58:6A
X509v3 Authority Key Identifier:
keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/tD6TfE0eQlc4E3wxroecHa6cWGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.188.0/22
IPv6:
2a05:7f00:188::/47
2a05:7f00:190::/47
Signature Algorithm: sha256WithRSAEncryption
55:1a:4f:1b:b8:23:e4:e0:ab:d5:40:c8:a8:d7:25:4f:92:73:
90:d3:0d:07:f3:d2:e7:dc:2a:ab:df:1b:52:7e:22:12:95:0d:
2e:9f:73:78:99:80:63:f6:30:48:a1:b9:51:79:8f:52:d2:66:
30:d2:5a:d1:2e:d2:dd:6b:5b:dc:20:2f:17:48:87:6e:94:09:
f7:20:4f:17:f3:4d:a4:ef:52:1a:13:f9:ec:51:fc:98:37:67:
b9:89:be:73:a4:24:58:3a:9d:5a:5c:16:85:41:ef:3f:6f:7b:
e5:0a:31:16:b7:65:63:2a:f2:15:24:0c:b3:97:c2:42:d1:90:
1d:e2:e9:91:6a:7c:f0:5d:c5:7b:96:c6:77:11:58:01:5b:1e:
84:92:98:c6:35:35:f0:61:51:44:e9:c1:41:76:85:ec:30:c9:
c0:4f:89:98:35:57:8e:f9:28:59:89:69:0e:d4:e3:0d:ea:6e:
74:82:34:a2:e1:27:1d:d8:c2:02:76:9d:04:14:9b:6e:8f:ec:
9d:23:bd:ce:dd:72:84:db:03:93:6f:f0:63:d5:48:7f:5e:4a:
0b:9f:1c:d8:31:28:25:71:13:9e:f2:36:c6:54:3f:02:a1:17:
e9:bf:df:af:5f:99:f2:35:9a:9b:a0:f4:99:c3:82:df:95:98:
a5:b9:bc:4d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEBtoHmTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NWNmNzhmNWYzMzllZTc3N2RhNzQ5MjEwYTk2ZWNlZDk2YjdmMmU3MB4XDTIyMDEw
MTE0MDEyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjQzZTkzN2M0ZDFl
NDI1NzM4MTM3YzMxYWU4NzljMWRhZTljNTg2YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMP2H6a1t8dbM0rgm5dRbxaJaj847SNGCQ/Cwn+nyG66CxSE
MYZvpOJRcqpIyKtqSa2Z8IC+sRrQzeGP5KaIr27yqqjRYSc4cq3MjPEhRWfwoGiW
nCuoraPxqq74lXqvgLOzquIuB7QzMeEdTK23WDuQHXl/7LSJOrrSo54/yVwdVyJB
Jw3geF5niuWgh2Rr+M2sE3qLRms5xiTLfMeLWaLXP5hSoip2Ftp5+Kx2lu2XatqG
DN8Tc39HDjBNHW4Q0MgZPG5AMYNgcU2MFdJmpM3Vs2n6jNWDLcMNzNT3Y4+IAppV
9E4jI7g6gPsOlrKQX1r70xg/R+8du0xJV4XjEyUCAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBS0PpN8TR5CVzgTfDGuh5wdrpxYajAfBgNVHSMEGDAWgBTlz3j18znud32n
SSEKluztlrfy5zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVjOTQ5Zk01N25kOXAwa2hDcGJzN1phMzh1Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjQvYzRiZDk1LWM2NzAtNDkwZC04Y2MwLWI3ZGM4MzcwNmEyYS8x
L3RENlRmRTBlUWxjNEUzd3hyb2VjSGE2Y1dHby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQv
YzRiZDk1LWM2NzAtNDkwZC04Y2MwLWI3ZGM4MzcwNmEyYS8xLzVjOTQ5Zk01N25k
OXAwa2hDcGJzN1phMzh1Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwDAQCAAEwBgMEArlQvDAYBAIAAjASAwcBKgV/AAGI
AwcBKgV/AAGQMA0GCSqGSIb3DQEBCwUAA4IBAQBVGk8buCPk4KvVQMio1yVPknOQ
0w0H89Ln3Cqr3xtSfiISlQ0un3N4mYBj9jBIoblReY9S0mYw0lrRLtLda1vcIC8X
SIdulAn3IE8X802k71IaE/nsUfyYN2e5ib5zpCRYOp1aXBaFQe8/b3vlCjEWt2Vj
KvIVJAyzl8JC0ZAd4umRanzwXcV7lsZ3EVgBWx6EkpjGNTXwYVFE6cFBdoXsMMnA
T4mYNVeO+ShZiWkO1OMN6m50gjSi4Scd2MICdp0EFJtuj+ydI73O3XKE2wOTb/Bj
1Uh/XkoLnxzYMSglcROe8jbGVD8CoRfpv9+vX5nyNZqboPSZw4LflZilubxN
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:28 2023 by rpki-client on console-ams.rpki-client.org