Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/ad0N-0IseUG3SAD_pyyE3EbW-Vc.roa
File: ad0N-0IseUG3SAD_pyyE3EbW-Vc.roa (raw, json)
Hash identifier: d3XrPAme9TPFTLHbqWZ+ScSuVY9w8TOjRLzjEehV28o=
Subject key identifier: 69:DD:0D:FB:42:2C:79:41:B7:48:00:FF:A7:2C:84:DC:46:D6:F9:57
Certificate issuer: /CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
Certificate serial: 2FE42E9E
Authority key identifier: EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/ad0N-0IseUG3SAD_pyyE3EbW-Vc.roa
Signing time: Sat 01 Jan 2022 10:55:14 +0000
ROA not before: Sat 01 Jan 2022 10:55:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9051
IP address blocks: 80.79.144.0/20 maxlen: 24
80.79.145.0/24 maxlen: 24
185.125.158.0/24 maxlen: 24
185.125.159.0/24 maxlen: 24
185.125.156.0/24 maxlen: 24
185.125.156.0/22 maxlen: 24
185.125.157.0/24 maxlen: 24
80.79.150.0/24 maxlen: 24
80.79.151.0/24 maxlen: 24
80.79.149.0/24 maxlen: 24
80.79.147.0/24 maxlen: 24
80.79.148.0/24 maxlen: 24
80.79.152.0/21 maxlen: 21
80.79.146.0/24 maxlen: 24
80.79.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 803483294 (0x2fe42e9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
Validity
Not Before: Jan 1 10:55:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69dd0dfb422c7941b74800ffa72c84dc46d6f957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:eb:d9:04:23:33:b3:5e:69:54:ea:25:36:f4:
5f:ea:88:c7:a8:ba:20:78:c6:56:83:c4:30:a3:60:
0e:24:cf:71:9f:12:47:72:82:a6:2d:0b:7b:84:e7:
92:e5:eb:12:d1:0d:72:58:30:62:91:80:04:3e:f7:
08:3b:fb:db:93:33:46:3b:74:d7:c1:66:79:19:f5:
b9:cc:ab:9e:ed:e3:1d:48:c2:58:54:60:80:34:c1:
be:2d:68:71:e5:b9:a3:64:e7:90:d8:11:57:a2:38:
67:99:7a:83:8a:de:7e:1e:0e:85:91:c2:4b:d4:d9:
e5:c4:bb:ab:28:cc:0b:74:a4:23:d5:fc:c5:58:d7:
09:9b:9f:27:f9:99:07:2d:03:8c:f0:14:47:b0:e0:
b1:17:10:db:1e:db:a0:5b:ec:6a:24:55:69:38:66:
91:53:fb:af:18:50:3a:5f:4a:e3:29:2a:26:69:92:
bf:e0:5e:7b:32:22:db:e3:5c:3e:b5:20:43:19:cc:
58:0d:7f:5a:da:54:ae:ec:ca:e9:0e:af:a1:42:c8:
0b:47:08:0c:1d:d0:e7:dd:45:74:f8:17:0b:6a:5e:
d4:dc:a5:48:8a:58:72:ae:86:3d:94:53:37:90:69:
d4:9f:e6:20:3f:f4:26:b4:0b:4c:d3:ec:33:37:79:
37:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DD:0D:FB:42:2C:79:41:B7:48:00:FF:A7:2C:84:DC:46:D6:F9:57
X509v3 Authority Key Identifier:
keyid:EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/ad0N-0IseUG3SAD_pyyE3EbW-Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.144.0/20
185.125.156.0/22
Signature Algorithm: sha256WithRSAEncryption
41:0b:8a:78:0a:49:f4:71:ab:df:92:81:0f:2e:6c:d0:58:7e:
5c:a6:98:21:d5:a1:9f:d4:28:fa:1e:05:b0:e5:5d:77:d5:64:
da:9c:59:ab:4f:e0:68:76:e0:2c:78:18:22:0e:c2:16:a4:8a:
df:c5:64:15:a5:f8:c8:63:91:0c:62:3b:29:2f:56:f1:2d:a3:
5f:78:48:6d:ed:6d:a5:67:bc:81:f0:4c:20:11:52:a7:84:8e:
6a:bf:6d:4b:d7:6e:cd:ec:68:3a:74:dc:ca:a3:0b:64:e2:36:
fb:55:79:ca:31:c7:60:60:38:43:9e:3c:f8:ba:79:a6:84:60:
54:7a:ec:2b:53:24:ea:3c:31:18:8a:e8:d0:ca:d3:10:88:24:
d2:38:76:ad:ff:f2:f4:36:f0:59:28:35:a2:55:bb:9d:b0:52:
b6:68:c3:8e:f7:f5:84:90:e6:1d:3f:6d:87:7f:14:ac:ff:16:
a9:e3:73:79:2e:a5:df:9d:e5:2b:8b:47:11:8e:05:fd:88:20:
18:f9:63:46:ec:b0:3c:f6:8d:70:40:8f:39:81:d5:31:c8:6d:
f9:dc:3e:2e:1d:fb:1b:be:aa:a0:a6:38:36:8c:69:e1:37:57:
3b:f1:e6:a0:17:69:e8:28:ce:d2:ad:0f:77:7f:1e:94:6d:d2:
38:a5:0c:d4
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEL+QunjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YmZhYmZhNjI4MDYzZjZiOGU5ODg4NTY2ZjVmM2ZjZmE3OThjNjIxMB4XDTIyMDEw
MTEwNTUxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjlkZDBkZmI0MjJj
Nzk0MWI3NDgwMGZmYTcyYzg0ZGM0NmQ2Zjk1NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO7r2QQjM7NeaVTqJTb0X+qIx6i6IHjGVoPEMKNgDiTPcZ8S
R3KCpi0Le4TnkuXrEtENclgwYpGABD73CDv725MzRjt018FmeRn1ucyrnu3jHUjC
WFRggDTBvi1oceW5o2TnkNgRV6I4Z5l6g4refh4OhZHCS9TZ5cS7qyjMC3SkI9X8
xVjXCZufJ/mZBy0DjPAUR7DgsRcQ2x7boFvsaiRVaThmkVP7rxhQOl9K4ykqJmmS
v+BeezIi2+NcPrUgQxnMWA1/WtpUruzK6Q6voULIC0cIDB3Q591FdPgXC2pe1Nyl
SIpYcq6GPZRTN5Bp1J/mID/0JrQLTNPsMzd5NxUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRp3Q37Qix5QbdIAP+nLITcRtb5VzAfBgNVHSMEGDAWgBTr+r+mKAY/a46Y
iFZvXz/Pp5jGITAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZfcV9waWdHUDJ1T21JaFdiMThfejZlWXhpRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmQvYTNhMzExLTM3ODQtNDgxOC1hYmY5LWU1ZmQ2ZTk4NDJhYi8x
L2FkME4tMElzZVVHM1NBRF9weXlFM0ViVy1WYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQv
YTNhMzExLTM3ODQtNDgxOC1hYmY5LWU1ZmQ2ZTk4NDJhYi8xLzZfcV9waWdHUDJ1
T21JaFdiMThfejZlWXhpRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBFBPkAMEArl9nDANBgkqhkiG9w0B
AQsFAAOCAQEAQQuKeApJ9HGr35KBDy5s0Fh+XKaYIdWhn9Qo+h4FsOVdd9Vk2pxZ
q0/gaHbgLHgYIg7CFqSK38VkFaX4yGORDGI7KS9W8S2jX3hIbe1tpWe8gfBMIBFS
p4SOar9tS9duzexoOnTcyqMLZOI2+1V5yjHHYGA4Q548+Lp5poRgVHrsK1Mk6jwx
GIro0MrTEIgk0jh2rf/y9DbwWSg1olW7nbBStmjDjvf1hJDmHT9th38UrP8WqeNz
eS6l353lK4tHEY4F/YggGPljRuywPPaNcECPOYHVMcht+dw+Lh37G76qoKY4Noxp
4TdXO/HmoBdp6CjO0q0Pd38elG3SOKUM1A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:27 2024 by rpki-client on console-ams.rpki-client.org