Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/DwarcHBvgvyO0guEZRu8UAA2VWM.roa
File: DwarcHBvgvyO0guEZRu8UAA2VWM.roa (raw, json)
Hash identifier: yuyZe3BixH1tBygPT9xC/ioF9R2qTm76AWevqYxJkzg=
Subject key identifier: 0F:06:AB:70:70:6F:82:FC:8E:D2:0B:84:65:1B:BC:50:00:36:55:63
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 06A4ABD1
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/DwarcHBvgvyO0guEZRu8UAA2VWM.roa
Signing time: Sat 01 Jan 2022 13:59:34 +0000
ROA not before: Sat 01 Jan 2022 13:59:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199156
IP address blocks: 81.171.49.0/24 maxlen: 24
81.171.94.0/24 maxlen: 24
81.171.103.0/24 maxlen: 24
81.171.112.0/24 maxlen: 24
81.171.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111455185 (0x6a4abd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Jan 1 13:59:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f06ab70706f82fc8ed20b84651bbc5000365563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bd:07:86:5b:4c:1f:5c:a0:69:ab:b0:a8:4f:
b6:eb:66:29:23:48:f2:3f:6a:88:38:e7:23:48:15:
f5:76:f2:dd:12:62:2b:f3:96:38:8a:66:fe:08:4f:
be:d2:e7:b8:f3:43:df:a1:90:5a:af:2a:33:65:4d:
6b:63:0f:9c:0e:66:d1:b9:aa:ac:3e:b0:33:89:05:
f4:72:88:0c:65:78:fd:72:9d:3f:ea:b4:2b:7e:d4:
cd:e4:55:5c:2f:9e:12:d6:70:33:39:89:6f:48:ea:
05:24:66:22:19:63:87:e4:d3:29:2e:cb:96:21:4c:
40:dc:c7:b8:03:80:cb:0e:b2:13:b8:bb:c0:7d:95:
a9:fa:39:8a:fb:70:7d:06:46:f2:87:cc:f3:26:66:
a5:d6:b3:66:61:9b:c9:41:86:eb:74:a0:35:58:8f:
6c:7c:2b:c5:73:3a:c2:90:05:51:be:d2:ed:cd:39:
07:dc:35:de:1d:2e:cf:cb:66:65:51:26:44:7a:41:
86:4e:86:b7:b8:97:dd:15:19:9c:a1:fd:a9:a2:a3:
a9:fd:88:ac:42:3a:b9:29:15:fa:6e:98:1d:b1:63:
8b:81:dd:a0:9d:29:2e:45:22:54:55:e6:f1:9c:47:
6f:f9:c3:32:ad:27:9e:7d:1a:58:d3:f5:f9:18:cc:
d8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:06:AB:70:70:6F:82:FC:8E:D2:0B:84:65:1B:BC:50:00:36:55:63
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/DwarcHBvgvyO0guEZRu8UAA2VWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.171.49.0/24
81.171.94.0/24
81.171.103.0/24
81.171.112.0/24
81.171.123.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:c7:6b:38:52:01:65:54:a4:06:3b:d9:fb:bd:26:bd:d2:6e:
a5:40:87:c5:52:07:b1:fa:45:2a:bf:64:68:ce:c7:00:16:68:
50:34:d0:82:b4:e8:4a:72:28:b1:3e:4f:73:f2:cc:36:c3:6b:
60:5e:59:a8:e9:90:c9:d7:14:82:8f:6c:35:6a:97:6f:93:7f:
6f:4a:22:b9:13:72:3f:60:8c:fb:f1:7a:3c:12:5a:68:ab:37:
0b:3a:ee:a0:be:c3:0a:dc:b3:24:1b:c8:2e:6e:99:08:28:86:
62:31:db:5f:b7:2a:e5:eb:40:97:99:64:98:9c:62:34:68:dc:
19:c8:a2:6f:7e:4b:5e:1d:04:47:40:d0:00:3e:4c:75:2c:d2:
d5:0c:d8:a3:33:2e:a6:2e:4a:e0:f1:a1:b6:bf:dd:65:9d:f7:
c4:95:07:5e:31:03:9f:1a:88:03:bf:73:8e:47:12:aa:90:c7:
12:39:f4:67:e9:0f:29:9f:1b:49:4f:c1:81:f0:b9:ae:07:93:
89:c5:ac:7c:70:c1:71:81:27:b8:0e:37:1b:6b:25:21:dc:03:
cc:f5:8b:32:c2:30:35:6e:30:82:15:47:8c:e6:03:3d:66:6a:
d0:1d:fe:a5:e5:d7:c6:bf:25:8d:9d:6f:87:be:9a:11:1f:36:
e7:a0:01:60
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEBqSr0TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NzliYmEyODA1YTk4ODk1NGU0ZmVjNDI1NzA1MzBmMTZmOWU3MDkzMB4XDTIyMDEw
MTEzNTkzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGYwNmFiNzA3MDZm
ODJmYzhlZDIwYjg0NjUxYmJjNTAwMDM2NTU2MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI69B4ZbTB9coGmrsKhPtutmKSNI8j9qiDjnI0gV9Xby3RJi
K/OWOIpm/ghPvtLnuPND36GQWq8qM2VNa2MPnA5m0bmqrD6wM4kF9HKIDGV4/XKd
P+q0K37UzeRVXC+eEtZwMzmJb0jqBSRmIhljh+TTKS7LliFMQNzHuAOAyw6yE7i7
wH2Vqfo5ivtwfQZG8ofM8yZmpdazZmGbyUGG63SgNViPbHwrxXM6wpAFUb7S7c05
B9w13h0uz8tmZVEmRHpBhk6Gt7iX3RUZnKH9qaKjqf2IrEI6uSkV+m6YHbFji4Hd
oJ0pLkUiVFXm8ZxHb/nDMq0nnn0aWNP1+RjM2G0CAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBQPBqtwcG+C/I7SC4RlG7xQADZVYzAfBgNVHSMEGDAWgBSnm7ooBamIlU5P
7EJXBTDxb55wkzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3A1dTZLQVdwaUpWT1QteENWd1V3OFctZWNKTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmMvZDE0MGZiLTAzYWUtNDVkOS04ZGRjLWUxZWQ5ZGQyYTAyYS8x
L0R3YXJjSEJ2Z3Z5TzBndUVaUnU4VUFBMlZXTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMv
ZDE0MGZiLTAzYWUtNDVkOS04ZGRjLWUxZWQ5ZGQyYTAyYS8xL3A1dTZLQVdwaUpW
T1QteENWd1V3OFctZWNKTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAFGrMQMEAFGrXgMEAFGrZwMEAFGr
cAMEAFGrezANBgkqhkiG9w0BAQsFAAOCAQEAxcdrOFIBZVSkBjvZ+70mvdJupUCH
xVIHsfpFKr9kaM7HABZoUDTQgrToSnIosT5Pc/LMNsNrYF5ZqOmQydcUgo9sNWqX
b5N/b0oiuRNyP2CM+/F6PBJaaKs3CzruoL7DCtyzJBvILm6ZCCiGYjHbX7cq5etA
l5lkmJxiNGjcGciib35LXh0ER0DQAD5MdSzS1QzYozMupi5K4PGhtr/dZZ33xJUH
XjEDnxqIA79zjkcSqpDHEjn0Z+kPKZ8bSU/BgfC5rgeTicWsfHDBcYEnuA43G2sl
IdwDzPWLMsIwNW4wghVHjOYDPWZq0B3+peXXxr8ljZ1vh76aER8256ABYA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:51 2024 by rpki-client on console-fra.rpki-client.org