Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/j7zWP1ylKgQapbJIQHg8-O4t5Uo.roa
File: j7zWP1ylKgQapbJIQHg8-O4t5Uo.roa (raw, json)
Hash identifier: xKhajewiwq+RBAAz97NMkZzV7wpNsW97BeuqNhzRz0Y=
Subject key identifier: 8F:BC:D6:3F:5C:A5:2A:04:1A:A5:B2:48:40:78:3C:F8:EE:2D:E5:4A
Certificate issuer: /CN=f27a6d4d32832831725c48db518a2400f1a924bd
Certificate serial: 0547F70A
Authority key identifier: F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/j7zWP1ylKgQapbJIQHg8-O4t5Uo.roa
Signing time: Sat 01 Jan 2022 01:02:03 +0000
ROA not before: Sat 01 Jan 2022 01:02:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39232
IP address blocks: 185.18.246.0/23 maxlen: 23
185.18.244.0/23 maxlen: 23
185.18.244.0/22 maxlen: 22
78.109.48.0/21 maxlen: 21
78.109.48.0/22 maxlen: 22
78.109.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88602378 (0x547f70a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a6d4d32832831725c48db518a2400f1a924bd
Validity
Not Before: Jan 1 01:02:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fbcd63f5ca52a041aa5b24840783cf8ee2de54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7b:f8:60:97:d5:09:9d:94:a9:6e:bc:a8:44:
6c:e0:f6:d9:56:3f:ea:9c:c0:44:13:08:bf:0d:1d:
75:75:28:bd:4f:9c:7e:28:ba:da:88:b3:31:44:8d:
fc:87:bc:9f:1d:32:fe:cc:80:30:1e:a2:0c:58:99:
13:ed:f0:90:c1:fc:c9:09:4f:98:f1:46:69:96:1a:
93:5c:32:f1:3f:5a:4f:08:ec:e5:4f:71:5d:1b:d1:
5e:08:60:fc:33:ba:2e:eb:32:66:9b:35:97:f9:35:
da:d7:b0:64:b1:18:b7:12:9f:81:45:07:99:05:28:
17:e5:98:65:10:b4:c0:60:26:1e:3f:8b:5b:f3:19:
0d:c2:5d:61:22:d5:f5:e7:98:97:ef:a0:8f:1b:2f:
1a:e5:07:e3:59:13:02:05:0f:80:ad:4c:9f:59:0c:
49:97:8c:68:54:7d:27:03:68:4d:6d:b4:28:a4:57:
d0:55:dc:a0:70:f3:76:e0:90:c8:86:a7:ce:f8:2b:
8a:a9:0c:7a:b9:20:22:4f:2f:98:cb:d2:f0:25:d5:
f1:3b:e6:b5:e1:b2:32:28:0b:9f:ba:1b:cc:60:e2:
38:eb:5d:fc:5d:2b:dc:19:af:53:58:12:6a:e1:4f:
5b:c1:ae:5b:15:af:13:ce:ea:32:c5:01:df:a6:90:
be:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BC:D6:3F:5C:A5:2A:04:1A:A5:B2:48:40:78:3C:F8:EE:2D:E5:4A
X509v3 Authority Key Identifier:
keyid:F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/j7zWP1ylKgQapbJIQHg8-O4t5Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.48.0/21
185.18.244.0/22
Signature Algorithm: sha256WithRSAEncryption
00:4c:8d:50:09:9d:23:f4:9c:16:15:6f:17:8e:57:72:4d:98:
16:44:4e:b3:35:50:13:d5:ba:86:fd:21:9e:e6:12:17:42:0a:
a7:f3:79:55:ec:51:cf:ed:4b:23:d2:09:f4:8b:fc:6f:97:56:
db:c7:04:c1:77:21:98:ff:01:ea:59:59:a6:96:b6:74:d5:a5:
b4:0d:51:1c:ea:47:14:37:30:c9:e7:59:3a:c8:08:58:42:00:
45:9e:e8:ad:bc:1d:97:19:58:cb:18:86:ff:b5:77:a3:e8:32:
cb:0a:e2:9b:cd:53:00:a0:95:f1:44:88:f6:64:89:af:d2:a0:
bc:12:df:c4:4d:06:7c:b0:0e:53:35:f5:d5:68:3e:2b:32:d4:
86:77:05:70:d6:d5:29:c3:c9:be:1e:a8:ca:e2:88:9f:75:b4:
8f:86:dc:9d:6d:e1:79:94:8b:42:06:ee:db:f1:91:a0:89:59:
1c:75:3a:1b:ea:de:6a:ff:12:d7:78:2a:a7:fc:65:fc:d1:dd:
7b:af:51:35:fb:5b:e8:5e:92:c5:62:54:e1:21:d1:58:2c:f8:
df:47:d2:53:c2:83:1b:95:4e:67:83:70:a3:4d:2d:a9:56:79:
b9:4a:4d:39:da:ed:63:a2:9e:ec:12:63:32:93:f8:b3:18:8b:
28:3c:97:09
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBUf3CjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MjdhNmQ0ZDMyODMyODMxNzI1YzQ4ZGI1MThhMjQwMGYxYTkyNGJkMB4XDTIyMDEw
MTAxMDIwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGZiY2Q2M2Y1Y2E1
MmEwNDFhYTViMjQ4NDA3ODNjZjhlZTJkZTU0YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAON7+GCX1QmdlKluvKhEbOD22VY/6pzARBMIvw0ddXUovU+c
fii62oizMUSN/Ie8nx0y/syAMB6iDFiZE+3wkMH8yQlPmPFGaZYak1wy8T9aTwjs
5U9xXRvRXghg/DO6LusyZps1l/k12tewZLEYtxKfgUUHmQUoF+WYZRC0wGAmHj+L
W/MZDcJdYSLV9eeYl++gjxsvGuUH41kTAgUPgK1Mn1kMSZeMaFR9JwNoTW20KKRX
0FXcoHDzduCQyIanzvgriqkMerkgIk8vmMvS8CXV8TvmteGyMigLn7obzGDiOOtd
/F0r3BmvU1gSauFPW8GuWxWvE87qMsUB36aQvjsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSPvNY/XKUqBBqlskhAeDz47i3lSjAfBgNVHSMEGDAWgBTyem1NMoMoMXJc
SNtRiiQA8akkvTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhucHRUVEtES0RGeVhFamJVWW9rQVBHcEpMMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmIvMjhmOGVjLWU1NzctNDc1Mi04Njg1LTE1NzNlZjYyNzFlYi8x
L2o3eldQMXlsS2dRYXBiSklRSGc4LU80dDVVby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIv
MjhmOGVjLWU1NzctNDc1Mi04Njg1LTE1NzNlZjYyNzFlYi8xLzhucHRUVEtES0RG
eVhFamJVWW9rQVBHcEpMMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA05tMAMEArkS9DANBgkqhkiG9w0B
AQsFAAOCAQEAAEyNUAmdI/ScFhVvF45Xck2YFkROszVQE9W6hv0hnuYSF0IKp/N5
VexRz+1LI9IJ9Iv8b5dW28cEwXchmP8B6llZppa2dNWltA1RHOpHFDcwyedZOsgI
WEIARZ7orbwdlxlYyxiG/7V3o+gyywrim81TAKCV8USI9mSJr9KgvBLfxE0GfLAO
UzX11Wg+KzLUhncFcNbVKcPJvh6oyuKIn3W0j4bcnW3heZSLQgbu2/GRoIlZHHU6
G+reav8S13gqp/xl/NHde69RNftb6F6SxWJU4SHRWCz430fSU8KDG5VOZ4Nwo00t
qVZ5uUpNOdrtY6Ke7BJjMpP4sxiLKDyXCQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:49 2023 by rpki-client on console-ams.rpki-client.org