Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/ml1RosSLzt1gENR1aHrT1ffwQKM.roa
File: ml1RosSLzt1gENR1aHrT1ffwQKM.roa (raw, json)
Hash identifier: DwXPTQ0av0m3bDg7nlATdVb2+MheDlxI+ChfC8bp55E=
Subject key identifier: 9A:5D:51:A2:C4:8B:CE:DD:60:10:D4:75:68:7A:D3:D5:F7:F0:40:A3
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 01860809
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/ml1RosSLzt1gENR1aHrT1ffwQKM.roa
Signing time: Sat 01 Jan 2022 13:02:11 +0000
ROA not before: Sat 01 Jan 2022 13:02:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.22.56.0/22 maxlen: 24
147.185.163.0/24 maxlen: 24
195.14.105.0/24 maxlen: 24
147.185.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25561097 (0x1860809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jan 1 13:02:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a5d51a2c48bcedd6010d475687ad3d5f7f040a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:6d:a1:8d:c4:06:a6:59:4b:29:3e:87:3f:
4d:8c:91:b9:f0:74:0f:fe:8e:d7:35:82:db:b7:67:
98:03:11:8e:a1:c2:e5:7e:63:97:15:f9:76:72:f8:
5d:78:ac:a3:f1:11:03:a6:c8:89:9a:d0:ae:27:25:
76:5a:0b:0b:c0:39:8a:cd:0c:14:de:a2:ce:0c:82:
69:8d:37:d7:77:ef:7f:06:be:c3:4b:8a:fe:1e:2b:
b7:78:26:f1:cf:80:fe:c7:f2:15:b6:b4:7a:06:b7:
07:c1:5e:63:de:2d:09:57:db:5a:be:cb:e5:b3:c6:
27:a0:02:e6:9f:bb:cb:60:0f:66:bd:55:4d:73:6c:
da:18:ca:a8:b5:ed:60:7e:61:45:2c:b5:a2:60:bd:
81:f7:dd:22:46:7b:61:ff:47:d5:82:18:dc:e3:83:
14:df:05:5e:00:a4:90:06:31:c4:d7:0d:ac:f8:b0:
95:20:9f:dd:45:45:06:9e:26:71:8c:f7:09:c4:4b:
cb:15:e5:51:ce:45:b5:da:36:91:5b:b4:4f:c4:f3:
f9:8d:56:f2:cc:30:7f:cc:a3:79:c1:f8:8a:27:05:
8c:2a:3c:4e:8f:2f:a8:33:87:cc:c2:0c:7e:3b:dc:
72:1b:da:9d:a4:a5:bd:91:66:3a:35:04:9a:bb:11:
46:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5D:51:A2:C4:8B:CE:DD:60:10:D4:75:68:7A:D3:D5:F7:F0:40:A3
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/ml1RosSLzt1gENR1aHrT1ffwQKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.107.0/24
147.185.163.0/24
185.22.56.0/22
195.14.105.0/24
Signature Algorithm: sha256WithRSAEncryption
84:8a:77:ef:79:ec:21:ec:86:19:18:3e:14:4a:4e:ad:5b:43:
ea:a1:a1:b7:d3:c3:51:93:27:e2:a8:7c:28:92:09:a6:26:76:
fb:f2:0a:e2:a3:5b:c8:69:00:04:f6:d0:b0:86:15:28:b5:b1:
53:b1:4b:b8:35:89:5f:5f:20:82:ae:75:61:5b:08:36:43:50:
c2:20:47:b1:ba:87:a0:ca:d7:95:b3:38:8c:bf:4f:44:23:90:
92:e4:42:0a:03:a6:fd:b1:41:a7:04:39:20:34:d1:b6:b0:4a:
4d:07:e2:8e:88:c1:e2:b8:51:48:f2:9f:f0:0e:04:a4:ac:72:
42:42:f2:6d:8f:e1:01:c8:91:b7:2e:68:33:df:b3:7d:43:64:
8d:b9:37:0d:75:ac:08:45:13:c5:5b:85:b0:b7:40:6e:04:eb:
fa:31:c9:c5:23:42:36:10:ed:6a:04:7f:3c:28:8c:0f:38:4d:
b2:aa:5b:f6:45:14:94:d1:88:4c:94:aa:6a:bf:f8:75:12:d4:
a8:c8:01:0f:18:11:00:48:d3:9a:8d:e4:1b:95:12:22:0e:50:
b9:25:e0:29:23:cf:b6:1f:85:e4:b9:fe:1e:2a:09:db:71:1d:
af:98:d2:91:f0:19:ff:7c:aa:e0:e4:a5:95:fd:87:6e:4b:f6:
08:bc:b3:01
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEAYYICTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YWMyYzFhZmQ0YmRlYzk4MDUwNmZhMDdkZjdjODY2MmQ1NTRmYTQ2MB4XDTIyMDEw
MTEzMDIxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWE1ZDUxYTJjNDhi
Y2VkZDYwMTBkNDc1Njg3YWQzZDVmN2YwNDBhMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANhfbaGNxAamWUspPoc/TYyRufB0D/6O1zWC27dnmAMRjqHC
5X5jlxX5dnL4XXiso/ERA6bIiZrQricldloLC8A5is0MFN6izgyCaY0313fvfwa+
w0uK/h4rt3gm8c+A/sfyFba0ega3B8FeY94tCVfbWr7L5bPGJ6AC5p+7y2APZr1V
TXNs2hjKqLXtYH5hRSy1omC9gffdIkZ7Yf9H1YIY3OODFN8FXgCkkAYxxNcNrPiw
lSCf3UVFBp4mcYz3CcRLyxXlUc5Ftdo2kVu0T8Tz+Y1W8swwf8yjecH4iicFjCo8
To8vqDOHzMIMfjvcchvanaSlvZFmOjUEmrsRRkcCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBSaXVGixIvO3WAQ1HVoetPV9/BAozAfBgNVHSMEGDAWgBTqwsGv1L3smAUG
+gfffIZi1VT6RjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZzTEJyOVM5N0pnRkJ2b0gzM3lHWXRWVS1rWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjUvNTg5YTZiLTRkN2UtNDAxMi1hMGZjLWMwY2ViMDM3YWQ0Mi8x
L21sMVJvc1NMenQxZ0VOUjFhSHJUMWZmd1FLTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUv
NTg5YTZiLTRkN2UtNDAxMi1hMGZjLWMwY2ViMDM3YWQ0Mi8xLzZzTEJyOVM5N0pn
RkJ2b0gzM3lHWXRWVS1rWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAJO5awMEAJO5owMEArkWOAMEAMMO
aTANBgkqhkiG9w0BAQsFAAOCAQEAhIp373nsIeyGGRg+FEpOrVtD6qGht9PDUZMn
4qh8KJIJpiZ2+/IK4qNbyGkABPbQsIYVKLWxU7FLuDWJX18ggq51YVsINkNQwiBH
sbqHoMrXlbM4jL9PRCOQkuRCCgOm/bFBpwQ5IDTRtrBKTQfijojB4rhRSPKf8A4E
pKxyQkLybY/hAciRty5oM9+zfUNkjbk3DXWsCEUTxVuFsLdAbgTr+jHJxSNCNhDt
agR/PCiMDzhNsqpb9kUUlNGITJSqar/4dRLUqMgBDxgRAEjTmo3kG5USIg5QuSXg
KSPPth+F5Ln+HioJ23Edr5jSkfAZ/3yq4OSllf2Hbkv2CLyzAQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:47 2024 by rpki-client on console-fra.rpki-client.org