Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/qWlxjTbep8EXErNJsa5Vns_xlxA.roa
File: qWlxjTbep8EXErNJsa5Vns_xlxA.roa (raw, json)
Hash identifier: GNvlyqUiZT77OazfN3piehT9WgBhg2QdTXjUd33BN44=
Subject key identifier: A9:69:71:8D:36:DE:A7:C1:17:12:B3:49:B1:AE:55:9E:CF:F1:97:10
Certificate issuer: /CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Certificate serial: 0EB58F1F
Authority key identifier: A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/qWlxjTbep8EXErNJsa5Vns_xlxA.roa
Signing time: Sat 01 Jan 2022 10:57:23 +0000
ROA not before: Sat 01 Jan 2022 10:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197731
IP address blocks: 185.119.28.0/22 maxlen: 22
185.119.28.0/24 maxlen: 24
185.119.29.0/24 maxlen: 24
185.119.30.0/24 maxlen: 24
185.119.31.0/24 maxlen: 24
31.3.105.0/24 maxlen: 24
31.3.104.0/21 maxlen: 21
31.3.104.0/24 maxlen: 24
31.3.106.0/24 maxlen: 24
31.3.107.0/24 maxlen: 24
31.3.108.0/24 maxlen: 24
31.3.109.0/24 maxlen: 24
31.3.110.0/24 maxlen: 24
31.3.111.0/24 maxlen: 24
2a03:7900::/32 maxlen: 32
2a03:7900:500::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246779679 (0xeb58f1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Validity
Not Before: Jan 1 10:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a969718d36dea7c11712b349b1ae559ecff19710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:fc:fb:45:97:e7:82:e9:0f:08:ee:31:f7:
fd:8c:de:21:ad:06:2c:3d:a0:d7:95:66:b2:f6:ea:
c1:13:d2:0f:4c:69:75:be:5e:44:c5:4a:74:0c:ee:
25:df:60:3e:ca:7a:4b:1b:7e:14:d9:51:b5:48:77:
d5:e3:28:11:92:27:c8:c0:17:db:b3:5e:dd:27:23:
17:69:04:fa:e1:f0:99:35:f4:13:48:e7:f3:9e:61:
da:e3:7b:48:e2:7a:af:16:17:ec:ea:c2:cf:c1:7f:
75:60:9f:4e:59:0c:8b:bb:8f:ea:b1:c0:44:33:5d:
e8:f8:c8:db:4a:c5:f0:fe:00:11:2f:57:5d:df:5b:
a9:b9:d4:d7:9c:c6:7c:46:a7:90:04:68:40:a0:cd:
20:02:0f:43:b1:e5:e9:34:b2:09:5a:2c:00:4d:a5:
96:0b:c3:a4:12:04:b5:2c:2f:90:14:34:ec:be:b4:
9b:0d:31:41:a6:f1:67:10:22:ee:ac:b9:1d:0e:4b:
ed:6f:35:d7:af:95:2a:16:d6:29:99:46:79:67:0c:
7b:c2:ea:31:c9:dd:e6:2f:44:72:f6:d4:08:e6:21:
9a:a1:32:47:cd:9c:26:eb:ed:1c:f6:ad:8e:86:79:
a5:48:78:ec:4b:7c:f5:10:e2:84:66:a6:eb:2c:b4:
f2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:69:71:8D:36:DE:A7:C1:17:12:B3:49:B1:AE:55:9E:CF:F1:97:10
X509v3 Authority Key Identifier:
keyid:A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/qWlxjTbep8EXErNJsa5Vns_xlxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.104.0/21
185.119.28.0/22
IPv6:
2a03:7900::/32
Signature Algorithm: sha256WithRSAEncryption
34:3a:cb:e3:fa:fa:52:b0:38:5f:97:41:e6:a9:af:46:87:88:
1c:04:57:e9:a5:17:d3:95:32:3c:01:7a:75:d6:d6:2e:83:27:
aa:29:d2:c7:04:ae:d4:95:b8:15:f8:6f:d0:6d:af:8c:c7:a3:
30:d3:59:d0:fc:19:75:47:26:be:fe:50:62:45:b5:2b:37:43:
5f:fc:49:14:1c:83:80:60:83:d0:c9:ec:d3:a9:05:29:27:c6:
42:70:fe:77:03:b9:72:6b:fd:5c:33:4b:37:d4:d4:f1:46:8e:
05:f5:08:9c:98:34:c2:c0:7e:72:21:cb:0e:17:d4:b7:90:cc:
03:50:22:dc:8e:e8:52:fd:0c:cb:a8:6a:b8:9b:57:95:2c:50:
6c:e4:b6:2a:25:a8:41:bf:8a:f5:cc:a1:18:31:b9:14:bd:d2:
bb:5f:ef:4e:d5:32:10:8a:12:b0:52:e1:e9:2e:c0:8a:ad:ff:
df:ae:4d:92:6f:2f:e2:f6:97:ee:57:4a:26:7f:b0:59:89:ef:
37:2a:75:5d:13:39:ee:5c:76:36:d9:7b:68:3d:7e:fe:13:f9:
55:6e:55:3d:d8:b4:f7:8f:bf:be:57:14:35:ec:d5:c1:6e:3b:
65:d9:75:e6:88:9b:bb:49:6e:31:d0:92:5b:15:7b:52:f8:e7:
59:21:60:6d
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEDrWPHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NzY4YmJlYzVhOWUxMWJmYmRhZWQ4NGFhOGQzYWFjZGEyOTg4OWY5MB4XDTIyMDEw
MTEwNTcyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTk2OTcxOGQzNmRl
YTdjMTE3MTJiMzQ5YjFhZTU1OWVjZmYxOTcxMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALul/PtFl+eC6Q8I7jH3/YzeIa0GLD2g15VmsvbqwRPSD0xp
db5eRMVKdAzuJd9gPsp6Sxt+FNlRtUh31eMoEZInyMAX27Ne3ScjF2kE+uHwmTX0
E0jn855h2uN7SOJ6rxYX7OrCz8F/dWCfTlkMi7uP6rHARDNd6PjI20rF8P4AES9X
Xd9bqbnU15zGfEankARoQKDNIAIPQ7Hl6TSyCVosAE2llgvDpBIEtSwvkBQ07L60
mw0xQabxZxAi7qy5HQ5L7W8116+VKhbWKZlGeWcMe8LqMcnd5i9EcvbUCOYhmqEy
R82cJuvtHPatjoZ5pUh47Et89RDihGam6yy08rUCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBSpaXGNNt6nwRcSs0mxrlWez/GXEDAfBgNVHSMEGDAWgBSnaLvsWp4Rv72u
2Eqo06rNopiJ+TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3AyaTc3RnFlRWItOXJ0aEtxTk9xemFLWWlmay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmMvZWFjMWY0LWFjZTEtNGNlMS1hMTgxLWNmY2FiYjE5Zjk4OS8x
L3FXbHhqVGJlcDhFWEVyTkpzYTVWbnNfeGx4QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMv
ZWFjMWY0LWFjZTEtNGNlMS1hMTgxLWNmY2FiYjE5Zjk4OS8xL3AyaTc3RnFlRWIt
OXJ0aEtxTk9xemFLWWlmay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAx8DaAMEArl3HDANBAIAAjAHAwUA
KgN5ADANBgkqhkiG9w0BAQsFAAOCAQEANDrL4/r6UrA4X5dB5qmvRoeIHARX6aUX
05UyPAF6ddbWLoMnqinSxwSu1JW4Ffhv0G2vjMejMNNZ0PwZdUcmvv5QYkW1KzdD
X/xJFByDgGCD0Mns06kFKSfGQnD+dwO5cmv9XDNLN9TU8UaOBfUInJg0wsB+ciHL
DhfUt5DMA1Ai3I7oUv0My6hquJtXlSxQbOS2KiWoQb+K9cyhGDG5FL3Su1/vTtUy
EIoSsFLh6S7Aiq3/365Nkm8v4vaX7ldKJn+wWYnvNyp1XRM57lx2Ntl7aD1+/hP5
VW5VPdi094+/vlcUNezVwW47Zdl15oibu0luMdCSWxV7UvjnWSFgbQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:51 2024 by rpki-client on console-fra.rpki-client.org