Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/eefqVmDIYwM3rwaoppzHLuqa_iM.roa
File: eefqVmDIYwM3rwaoppzHLuqa_iM.roa (raw, json)
Hash identifier: RCY6XchOPoVn5CBtuG25LMfQ6tQAoKq/02pWDYM/F2Q=
Subject key identifier: 79:E7:EA:56:60:C8:63:03:37:AF:06:A8:A6:9C:C7:2E:EA:9A:FE:23
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01846DE0DA609B174CAAA1F854BFA223E6EA
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/eefqVmDIYwM3rwaoppzHLuqa_iM.roa
Signing time: Sat 12 Nov 2022 22:06:03 +0000
ROA not before: Sat 12 Nov 2022 22:06:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 94.241.136.0/21 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.214.0/23 maxlen: 24
94.241.168.0/21 maxlen: 24
94.241.176.0/21 maxlen: 24
83.147.216.0/23 maxlen: 24
178.253.31.0/24 maxlen: 24
83.147.222.0/23 maxlen: 24
178.253.40.0/22 maxlen: 24
83.147.232.0/22 maxlen: 24
178.253.52.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6d:e0:da:60:9b:17:4c:aa:a1:f8:54:bf:a2:23:e6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Nov 12 22:06:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79e7ea5660c8630337af06a8a69cc72eea9afe23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:26:8a:a7:79:c6:5a:89:3e:62:18:57:42:
12:cd:fb:d3:49:0b:45:88:c5:5d:05:38:19:fc:fb:
1d:4b:cd:b8:09:5d:13:02:61:41:39:cd:62:28:52:
96:ee:1c:a0:7d:6d:82:66:8d:5e:e1:5b:90:98:db:
56:10:4f:4c:4b:75:20:4d:6c:d4:91:b7:87:e3:a3:
f9:27:21:79:47:2d:9b:78:92:89:1b:a3:09:ff:f1:
df:62:ce:f6:fa:e2:72:5f:1d:6f:02:3d:11:de:fd:
a0:61:23:d3:e2:f5:ea:c9:8d:8f:9c:24:1f:61:78:
98:3c:10:91:4f:86:23:d1:fa:2e:72:4b:79:fc:90:
96:48:00:9a:22:ba:79:3d:62:31:8f:3c:a7:3f:e8:
47:8c:f1:1d:65:1f:77:d1:4a:69:6e:8e:6f:dc:3e:
49:e4:90:b0:df:4f:58:5f:25:c7:5c:30:e0:05:26:
f3:c8:75:36:41:26:44:a8:83:06:9c:4d:ff:dc:25:
2f:35:58:dd:84:65:ee:c7:64:3a:99:07:6f:bf:6a:
f2:8d:13:4e:1a:3c:c1:2c:5a:21:a1:82:8f:41:9b:
f8:48:21:09:21:91:da:ca:36:54:94:1e:79:fe:11:
15:de:ea:46:67:3e:3a:85:43:ab:59:15:7f:45:f4:
fb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E7:EA:56:60:C8:63:03:37:AF:06:A8:A6:9C:C7:2E:EA:9A:FE:23
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/eefqVmDIYwM3rwaoppzHLuqa_iM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.216.0/23
83.147.222.0/23
83.147.232.0/22
91.186.200.0/22
91.186.214.0/23
94.241.136.0/21
94.241.168.0-94.241.183.255
178.253.31.0/24
178.253.40.0/22
178.253.52.0/23
Signature Algorithm: sha256WithRSAEncryption
87:ae:9a:f4:6a:79:77:ba:86:9a:74:0b:ed:50:c4:71:0f:ab:
38:08:0a:81:ea:fa:99:45:4f:66:b2:86:49:c6:c2:e9:6c:5f:
6c:f6:b7:28:ac:ee:2e:c2:6c:08:dc:ab:2d:14:ac:92:c2:68:
1d:09:a9:26:06:ea:11:02:22:97:2a:07:13:82:98:75:ae:8f:
19:54:e8:2a:75:04:69:35:da:ce:e0:80:e7:17:79:79:3b:43:
45:dc:e7:2c:e1:35:99:9e:36:89:06:ec:c8:f7:b1:20:f2:53:
68:dc:f9:7e:55:8a:dc:30:53:d2:9c:6d:74:1d:5d:9d:22:29:
8c:49:e1:5b:d8:e7:3c:48:37:a6:c7:a7:96:d8:c6:79:c3:aa:
59:ee:e9:ab:b5:9e:d0:f5:8b:6b:a2:e0:bb:83:72:6b:3d:b8:
a6:9b:41:b3:74:ad:7e:5a:54:72:71:13:90:a8:d1:dd:35:b2:
aa:4e:3f:ed:5f:8a:ab:6d:36:15:08:6c:ef:c6:90:9b:7e:5c:
b9:07:72:e3:5c:42:33:31:b4:ea:20:47:be:1f:5e:09:ed:73:
da:17:a4:5a:f0:5d:ab:90:ae:c4:6f:1e:6a:a1:bf:ec:43:5c:
c6:b9:4b:2c:7b:ca:7a:88:06:22:1e:a7:a6:ea:10:b8:24:4b:
f6:27:9e:50
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAYRt4NpgmxdMqqH4VL+iI+bqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjIxMTEyMjIwNjAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWU3ZWE1NjYwYzg2MzAzMzdhZjA2YThhNjljYzcyZWVhOWFmZTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyYmiqd5xlqJPmIYV0ISzfvTSQtF
iMVdBTgZ/PsdS824CV0TAmFBOc1iKFKW7hygfW2CZo1e4VuQmNtWEE9MS3UgTWzU
kbeH46P5JyF5Ry2beJKJG6MJ//HfYs72+uJyXx1vAj0R3v2gYSPT4vXqyY2PnCQf
YXiYPBCRT4Yj0fouckt5/JCWSACaIrp5PWIxjzynP+hHjPEdZR930Uppbo5v3D5J
5JCw309YXyXHXDDgBSbzyHU2QSZEqIMGnE3/3CUvNVjdhGXux2Q6mQdvv2ryjRNO
GjzBLFohoYKPQZv4SCEJIZHayjZUlB55/hEV3upGZz46hUOrWRV/RfT7iQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFHnn6lZgyGMDN68GqKacxy7qmv4jMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvZWVmcVZtRElZd00zcndhb3BwekhMdXFhX2lNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQBU5PYAwQB
U5PeAwQCU5PoAwQCW7rIAwQBW7rWAwQDXvGIMAwDBANe8agDBANe8bADBACy/R8D
BAKy/SgDBAGy/TQwDQYJKoZIhvcNAQELBQADggEBAIeumvRqeXe6hpp0C+1QxHEP
qzgICoHq+plFT2ayhknGwulsX2z2tyis7i7CbAjcqy0UrJLCaB0JqSYG6hECIpcq
BxOCmHWujxlU6Cp1BGk12s7ggOcXeXk7Q0Xc5yzhNZmeNokG7Mj3sSDyU2jc+X5V
itwwU9KcbXQdXZ0iKYxJ4VvY5zxIN6bHp5bYxnnDqlnu6au1ntD1i2ui4LuDcms9
uKabQbN0rX5aVHJxE5Co0d01sqpOP+1fiqttNhUIbO/GkJt+XLkHcuNcQjMxtOog
R74fXgntc9oXpFrwXauQrsRvHmqhv+xDXMa5Syx7ynqIBiIep6bqELgkS/YnnlA=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org