Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/OOXABcM5UkinpSVcS4OXPrximcI.roa
File: OOXABcM5UkinpSVcS4OXPrximcI.roa (raw, json)
Hash identifier: 8C1o27hYKuvViYzomhgiCxrkYJ+U+e3hxD+SpxpFhAY=
Subject key identifier: 38:E5:C0:05:C3:39:52:48:A7:A5:25:5C:4B:83:97:3E:BC:62:99:C2
Certificate issuer: /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial: 0E1E71B2
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/OOXABcM5UkinpSVcS4OXPrximcI.roa
Signing time: Mon 30 May 2022 09:58:14 +0000
ROA not before: Mon 30 May 2022 09:58:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205272
IP address blocks: 185.221.71.0/24 maxlen: 24
185.221.70.0/24 maxlen: 24
185.221.69.0/24 maxlen: 24
185.221.68.0/24 maxlen: 24
2a06:bcc0:8::/48 maxlen: 48
2a06:bcc0:6::/48 maxlen: 48
2a06:bcc0:7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236876210 (0xe1e71b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Validity
Not Before: May 30 09:58:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38e5c005c3395248a7a5255c4b83973ebc6299c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:07:cb:9c:98:da:44:08:9e:b4:b1:6d:c5:
4c:ff:c8:a1:0f:a2:ef:ba:13:4a:21:c6:3a:80:b3:
41:d4:ac:b4:81:c4:0a:07:79:0a:34:ee:f5:a5:12:
ad:c1:a8:4c:d7:91:6d:1c:ca:4f:5c:13:1d:1a:7b:
2d:b8:cd:fe:07:c8:b1:02:4e:51:7e:70:ee:1a:80:
d6:59:9a:5c:f9:39:2d:82:8f:c2:5a:dc:5d:e0:d7:
f5:40:84:ed:ef:3c:1d:16:6e:ec:fa:92:88:74:e4:
8f:78:b3:e6:a4:c9:2b:62:07:60:77:9f:64:4a:f6:
05:67:23:0e:6a:5d:d0:dd:b5:ef:ff:ca:9d:32:52:
a6:a2:ba:66:e9:ce:ab:dd:60:b6:36:6a:45:8a:f8:
49:5b:b2:1d:e3:83:a5:c9:e5:84:a3:c9:51:a1:c5:
0e:9f:29:47:92:ad:64:c1:19:2f:e1:93:ea:04:c1:
49:5d:2a:dc:6d:a8:cf:b1:e1:ce:88:a9:a8:54:04:
fd:9b:b6:8e:66:85:bb:c5:21:28:38:52:64:db:e6:
07:4f:65:76:0a:bf:65:bc:b9:85:e7:6d:d8:c8:2f:
3c:cb:7f:53:90:fe:27:14:1a:4b:18:54:8f:dc:09:
8a:19:c3:c9:33:cc:2d:94:49:a0:0d:c7:93:62:15:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E5:C0:05:C3:39:52:48:A7:A5:25:5C:4B:83:97:3E:BC:62:99:C2
X509v3 Authority Key Identifier:
keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/OOXABcM5UkinpSVcS4OXPrximcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.68.0/22
IPv6:
2a06:bcc0:6::-2a06:bcc0:8:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1f:f9:86:fe:8f:e7:1f:c6:61:10:7a:db:79:c6:ee:6b:fb:e5:
80:66:99:6c:52:d0:ba:28:15:7f:f7:cf:4b:a8:c3:b6:f6:03:
ae:75:05:3d:2f:51:0c:c0:47:0b:f4:9f:42:b6:80:5b:5f:bb:
b8:14:f5:3a:92:ed:25:9c:16:ec:d9:63:ee:b5:7e:a8:31:63:
9a:d6:b8:a8:ac:b1:7b:8b:08:52:68:75:e8:18:c0:f6:c7:ac:
ea:8d:da:ae:14:ec:47:48:46:34:c0:c8:95:a4:6d:77:9a:47:
51:6a:fa:4e:0e:68:8f:cd:85:dd:4d:46:a4:be:89:64:96:5f:
54:26:9c:d1:cd:33:5c:aa:96:4a:b9:1d:12:17:eb:2b:d1:41:
a1:c4:8a:26:35:69:93:00:2c:06:e8:c8:6d:9f:1a:1d:e3:28:
ff:5b:6b:29:5f:7b:45:7b:cc:10:30:ef:8f:2f:a3:18:11:a1:
30:82:95:6b:8f:05:ab:ce:37:fc:f8:c5:1a:4a:df:46:f1:de:
29:47:18:9e:80:36:f1:fe:08:12:b2:7b:a8:ae:2a:2d:8f:72:
91:8f:f1:93:e1:40:89:27:5b:ae:b3:fd:2f:f0:1c:3f:e7:92:
12:3e:e2:71:97:42:d3:e1:bf:d9:d5:ba:40:c0:65:8d:7b:fd:
22:c1:0e:77
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIEDh5xsjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MGZiZDU4NzY2MTNlZGM1NmUwZjVkZTQ2OGNjZTVlYjI4ODVmZjI5MB4XDTIyMDUz
MDA5NTgxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzhlNWMwMDVjMzM5
NTI0OGE3YTUyNTVjNGI4Mzk3M2ViYzYyOTljMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMHyB8ucmNpECJ60sW3FTP/IoQ+i77oTSiHGOoCzQdSstIHE
Cgd5CjTu9aUSrcGoTNeRbRzKT1wTHRp7LbjN/gfIsQJOUX5w7hqA1lmaXPk5LYKP
wlrcXeDX9UCE7e88HRZu7PqSiHTkj3iz5qTJK2IHYHefZEr2BWcjDmpd0N217//K
nTJSpqK6ZunOq91gtjZqRYr4SVuyHeODpcnlhKPJUaHFDp8pR5KtZMEZL+GT6gTB
SV0q3G2oz7HhzoipqFQE/Zu2jmaFu8UhKDhSZNvmB09ldgq/Zby5hedt2MgvPMt/
U5D+JxQaSxhUj9wJihnDyTPMLZRJoA3Hk2IV2H8CAwEAAaOCAiUwggIhMB0GA1Ud
DgQWBBQ45cAFwzlSSKelJVxLg5c+vGKZwjAfBgNVHSMEGDAWgBTA+9WHZhPtxW4P
XeRozOXrKIX/KTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dQdlZoMllUN2NWdUQxM2thTXpsNnlpRl95ay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjUvMDFlYmMyLTg0ZDAtNGFlMy1hMmMyLWEzYjZiZTRhOWU5Yi8x
L09PWEFCY001VWtpbnBTVmNTNE9YUHJ4aW1jSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUv
MDFlYmMyLTg0ZDAtNGFlMy1hMmMyLWEzYjZiZTRhOWU5Yi8xL3dQdlZoMllUN2NW
dUQxM2thTXpsNnlpRl95ay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA7
BggrBgEFBQcBBwEB/wQsMCowDAQCAAEwBgMEArndRDAaBAIAAjAUMBIDBwEqBrzA
AAYDBwAqBrzAAAgwDQYJKoZIhvcNAQELBQADggEBAB/5hv6P5x/GYRB623nG7mv7
5YBmmWxS0LooFX/3z0uow7b2A651BT0vUQzARwv0n0K2gFtfu7gU9TqS7SWcFuzZ
Y+61fqgxY5rWuKissXuLCFJodegYwPbHrOqN2q4U7EdIRjTAyJWkbXeaR1Fq+k4O
aI/Nhd1NRqS+iWSWX1QmnNHNM1yqlkq5HRIX6yvRQaHEiiY1aZMALAboyG2fGh3j
KP9baylfe0V7zBAw748voxgRoTCClWuPBavON/z4xRpK30bx3ilHGJ6ANvH+CBKy
e6iuKi2PcpGP8ZPhQIknW66z/S/wHD/nkhI+4nGXQtPhv9nVukDAZY17/SLBDnc=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:35 2023 by rpki-client on console-fra.rpki-client.org