Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/2IWufMNnpuVT4N8l6HTlBqhFSbw.roa
File: 2IWufMNnpuVT4N8l6HTlBqhFSbw.roa (raw, json)
Hash identifier: OAqLPHEGXen/2Zz2tdX1tNHMJsWquSS7UgzJfJwBdqc=
Subject key identifier: D8:85:AE:7C:C3:67:A6:E5:53:E0:DF:25:E8:74:E5:06:A8:45:49:BC
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 03C95AEA
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/2IWufMNnpuVT4N8l6HTlBqhFSbw.roa
Signing time: Sat 01 Jan 2022 10:58:37 +0000
ROA not before: Sat 01 Jan 2022 10:58:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30742
IP address blocks: 185.204.97.0/24 maxlen: 24
185.204.96.0/22 maxlen: 24
185.204.96.0/24 maxlen: 24
185.204.98.0/24 maxlen: 24
185.204.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63527658 (0x3c95aea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Jan 1 10:58:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d885ae7cc367a6e553e0df25e874e506a84549bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:b8:c2:41:05:b8:0d:b1:6b:51:c1:bf:72:
48:98:b6:a5:df:15:83:cf:b7:26:96:98:25:59:74:
84:f6:55:cd:97:b2:bc:8e:2b:94:67:05:39:c6:2a:
5f:39:61:fa:e1:f6:b5:6e:ca:42:1b:9c:ad:03:a3:
5b:28:61:a3:bf:eb:bf:ee:bb:fb:7c:ea:87:8e:9e:
57:66:72:01:e3:d5:58:30:6a:64:9a:5f:70:92:fa:
b0:f2:d5:76:b0:8e:b8:d4:9d:7e:b4:19:a4:87:54:
c0:7a:7a:0b:76:cc:6b:12:37:86:a0:76:0f:88:df:
3a:fe:d0:af:da:d5:46:de:38:57:af:df:65:ec:94:
1b:a4:89:bc:6f:77:d1:48:71:b1:29:9c:df:ef:8c:
91:02:db:67:61:07:79:ce:d1:c1:fb:32:c7:b1:9e:
a8:d3:e5:d3:be:07:59:1d:89:d5:70:1b:b5:e4:8c:
8d:fe:64:08:99:6e:ca:01:75:1c:5f:64:0b:27:21:
86:60:63:5b:0d:39:eb:03:01:d3:63:89:8c:8c:34:
b3:d9:4e:a2:1e:05:60:fc:11:88:60:99:90:08:03:
ca:0c:6a:63:95:aa:b2:2b:02:2d:d5:35:00:81:8e:
d9:30:84:9c:ca:48:99:8c:88:89:5c:b7:85:19:aa:
64:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:85:AE:7C:C3:67:A6:E5:53:E0:DF:25:E8:74:E5:06:A8:45:49:BC
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/2IWufMNnpuVT4N8l6HTlBqhFSbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.96.0/22
Signature Algorithm: sha256WithRSAEncryption
d6:77:2a:f2:94:a2:5f:42:ed:74:03:93:e0:fd:bf:36:12:77:
e9:1e:d3:77:f7:f2:5d:a7:5a:e9:e9:0f:b3:75:ed:18:7a:ba:
8a:a4:3f:a6:45:01:19:fa:60:33:fd:48:b0:ed:41:53:5b:05:
9c:ca:09:17:05:67:dd:18:a6:64:0b:b3:03:5a:74:c4:4f:78:
1f:27:11:62:64:ba:05:67:0b:1d:92:b2:98:eb:dd:ea:7f:88:
58:03:07:3f:80:07:1c:0d:76:6b:fe:c5:07:74:de:0d:e5:61:
4d:e5:5b:f5:e8:95:49:c3:9f:8a:44:20:af:3c:9c:28:71:68:
74:f7:37:be:48:20:ea:1f:80:c2:4d:fb:cd:72:4e:94:db:19:
b1:1a:57:16:5d:59:7d:96:cc:b4:d5:c5:01:c5:31:5c:ff:bd:
73:db:89:7a:e9:1b:32:8b:7d:9b:e1:4d:75:71:b9:51:11:46:
a1:f2:74:36:b2:6a:5f:1a:81:e0:46:2b:69:ae:5f:b9:2b:3e:
ea:e8:ce:98:97:39:d9:95:8c:2a:ca:b3:a3:74:31:b8:11:27:
ac:0e:e6:d1:95:5d:8c:f4:e2:63:2f:3d:bd:33:a4:23:fc:d9:
83:85:1c:f4:19:ef:0d:01:95:44:9b:6f:e3:72:74:bc:d5:83:
7a:9c:56:45
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA8la6jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
OWM3NDZmNjdiN2FjNTZlYTZkZDg1OTUxZWMwMjJjYmJkNjdhZjA2MB4XDTIyMDEw
MTEwNTgzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDg4NWFlN2NjMzY3
YTZlNTUzZTBkZjI1ZTg3NGU1MDZhODQ1NDliYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANyIuMJBBbgNsWtRwb9ySJi2pd8Vg8+3JpaYJVl0hPZVzZey
vI4rlGcFOcYqXzlh+uH2tW7KQhucrQOjWyhho7/rv+67+3zqh46eV2ZyAePVWDBq
ZJpfcJL6sPLVdrCOuNSdfrQZpIdUwHp6C3bMaxI3hqB2D4jfOv7Qr9rVRt44V6/f
ZeyUG6SJvG930UhxsSmc3++MkQLbZ2EHec7Rwfsyx7GeqNPl074HWR2J1XAbteSM
jf5kCJluygF1HF9kCychhmBjWw056wMB02OJjIw0s9lOoh4FYPwRiGCZkAgDygxq
Y5WqsisCLdU1AIGO2TCEnMpImYyIiVy3hRmqZB0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTYha58w2em5VPg3yXodOUGqEVJvDAfBgNVHSMEGDAWgBQJx0b2e3rFbqbd
hZUewCLLvWevBjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NjZEc5bnQ2eFc2bTNZV1ZIc0FpeTcxbnJ3WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvOTNhZjk3LTNiOWUtNDk2MS04OTA0LWE2ZjYxMWE4YWI5My8x
LzJJV3VmTU5ucHVWVDROOGw2SFRsQnFoRlNidy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
OTNhZjk3LTNiOWUtNDk2MS04OTA0LWE2ZjYxMWE4YWI5My8xL0NjZEc5bnQ2eFc2
bTNZV1ZIc0FpeTcxbnJ3WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnMYDANBgkqhkiG9w0BAQsFAAOC
AQEA1ncq8pSiX0LtdAOT4P2/NhJ36R7Td/fyXada6ekPs3XtGHq6iqQ/pkUBGfpg
M/1IsO1BU1sFnMoJFwVn3RimZAuzA1p0xE94HycRYmS6BWcLHZKymOvd6n+IWAMH
P4AHHA12a/7FB3TeDeVhTeVb9eiVScOfikQgrzycKHFodPc3vkgg6h+Awk37zXJO
lNsZsRpXFl1ZfZbMtNXFAcUxXP+9c9uJeukbMot9m+FNdXG5URFGofJ0NrJqXxqB
4EYraa5fuSs+6ujOmJc52ZWMKsqzo3QxuBEnrA7m0ZVdjPTiYy89vTOkI/zZg4Uc
9BnvDQGVRJtv43J0vNWDepxWRQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-ams.rpki-client.org