Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/kT1zrZi3KHR0st70j7eaN9ClszY.roa
File: kT1zrZi3KHR0st70j7eaN9ClszY.roa (raw, json)
Hash identifier: dUY4Ok7cIZVqZjKzarZo2E9hbp9MuCYiNFbsM7uoajg=
Subject key identifier: 91:3D:73:AD:98:B7:28:74:74:B2:DE:F4:8F:B7:9A:37:D0:A5:B3:36
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 41B1C2
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/kT1zrZi3KHR0st70j7eaN9ClszY.roa
Signing time: Fri 18 Mar 2022 09:10:50 +0000
ROA not before: Fri 18 Mar 2022 09:10:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51795
IP address blocks: 185.25.36.0/24 maxlen: 24
185.25.37.0/24 maxlen: 24
185.25.38.0/24 maxlen: 24
185.25.39.0/24 maxlen: 24
46.18.244.0/24 maxlen: 24
46.18.245.0/24 maxlen: 24
46.18.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4305346 (0x41b1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Mar 18 09:10:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=913d73ad98b7287474b2def48fb79a37d0a5b336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3b:e8:08:24:a0:f8:31:3c:67:db:13:c1:74:
0b:30:3e:eb:8b:36:15:b5:de:6c:06:a4:ba:8c:3e:
76:0b:6d:27:0f:40:1b:21:a6:f1:e3:c8:d4:20:f6:
46:54:ba:74:91:23:3f:e0:57:15:16:0d:09:4b:55:
c8:45:da:20:33:6e:7c:4e:72:11:0c:10:36:fe:37:
6c:c8:68:bf:f1:14:fa:e1:20:42:a0:6d:11:76:57:
69:eb:9f:62:98:50:a1:fc:9c:97:9a:ab:66:4b:2f:
b9:0a:14:8a:f5:bc:ec:5a:94:50:99:91:e8:79:c0:
78:34:cb:d7:cd:d1:43:c3:1f:61:fa:fa:41:97:12:
a8:58:f6:4f:58:ec:44:56:c9:53:71:2f:2d:db:b5:
0b:53:25:72:79:07:62:bb:d3:de:5b:65:08:44:13:
e9:a4:2b:40:e4:f0:bd:88:3b:2a:88:39:be:0a:d9:
8b:a9:04:2a:85:a1:d0:ed:26:74:e2:80:6b:d5:a1:
05:7f:20:84:0c:7e:be:57:d7:09:06:77:97:57:94:
b1:35:0c:fe:e2:85:84:69:19:0e:59:1c:ed:dd:67:
b4:92:ec:ba:19:11:94:ff:79:8c:18:c5:1c:86:5d:
5c:ab:a6:65:34:bb:7b:f0:b9:e5:9a:31:52:ce:07:
4c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3D:73:AD:98:B7:28:74:74:B2:DE:F4:8F:B7:9A:37:D0:A5:B3:36
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/kT1zrZi3KHR0st70j7eaN9ClszY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.244.0/23
46.18.247.0/24
185.25.36.0/22
Signature Algorithm: sha256WithRSAEncryption
23:e2:b8:1d:7b:c8:7a:bd:cd:bb:ad:97:ae:4e:4a:34:dc:fd:
32:cc:0b:c8:ea:dd:7b:10:53:bd:b2:2a:93:ff:6a:1f:72:85:
40:80:7a:42:a6:90:b7:d9:f3:7a:31:07:2e:e0:15:2c:b1:02:
cd:b2:04:6b:f4:f0:cc:40:d2:e5:32:64:92:a0:bc:f7:88:94:
ed:c9:06:cb:40:95:74:fc:7e:51:ef:12:ef:91:c9:29:1b:8c:
3c:ba:72:a0:a3:f1:dd:60:a2:e4:24:a2:d7:84:6a:c6:b3:66:
02:b4:f9:42:53:01:49:28:de:49:c5:96:e8:67:ca:ab:ac:31:
e9:83:8f:e5:60:39:78:12:5b:03:a1:2e:78:27:05:56:2e:46:
82:01:fe:68:2d:f4:e3:bd:e6:0e:c0:37:15:e5:99:1c:c9:e5:
4c:d2:75:12:8e:7e:80:b6:6e:dd:0c:63:e6:fb:49:85:78:22:
f3:e6:6f:09:b0:42:a7:bd:54:05:63:0c:ed:6f:52:cc:f8:9c:
18:0e:59:7e:b7:36:f0:ed:82:d2:57:60:7b:60:ed:09:58:95:
c1:60:82:17:12:91:14:ce:32:49:43:77:92:d2:73:eb:c4:c8:
1d:87:36:79:56:95:fd:04:c2:4b:91:07:77:a0:34:5f:87:3c:
a5:5d:0c:de
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIDQbHCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY4
YzZhZGY4ZWVjYWJjMTA1MmUxZjc4M2QzYmNlNGExYzVkYjU0MTAwHhcNMjIwMzE4
MDkxMDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5MTNkNzNhZDk4Yjcy
ODc0NzRiMmRlZjQ4ZmI3OWEzN2QwYTViMzM2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkjvoCCSg+DE8Z9sTwXQLMD7rizYVtd5sBqS6jD52C20nD0Ab
Iabx48jUIPZGVLp0kSM/4FcVFg0JS1XIRdogM258TnIRDBA2/jdsyGi/8RT64SBC
oG0Rdldp659imFCh/JyXmqtmSy+5ChSK9bzsWpRQmZHoecB4NMvXzdFDwx9h+vpB
lxKoWPZPWOxEVslTcS8t27ULUyVyeQdiu9PeW2UIRBPppCtA5PC9iDsqiDm+CtmL
qQQqhaHQ7SZ04oBr1aEFfyCEDH6+V9cJBneXV5SxNQz+4oWEaRkOWRzt3We0kuy6
GRGU/3mMGMUchl1cq6ZlNLt78LnlmjFSzgdMwwIDAQABo4ICFTCCAhEwHQYDVR0O
BBYEFJE9c62Ytyh0dLLe9I+3mjfQpbM2MB8GA1UdIwQYMBaAFGjGrfjuyrwQUuH3
g9O85KHF21QQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
YU1hdC1PN0t2QkJTNGZlRDA3emtvY1hiVkJBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9iZS9lNWQ4NjktMzBiYy00NDY1LWJkNmYtNDc3M2I2NjY5NzE2LzEv
a1QxenJaaTNLSFIwc3Q3MGo3ZWFOOUNsc3pZLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9l
NWQ4NjktMzBiYy00NDY1LWJkNmYtNDc3M2I2NjY5NzE2LzEvYU1hdC1PN0t2QkJT
NGZlRDA3emtvY1hiVkJBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG
CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLhL0AwQALhL3AwQCuRkkMA0GCSqG
SIb3DQEBCwUAA4IBAQAj4rgde8h6vc27rZeuTko03P0yzAvI6t17EFO9siqT/2of
coVAgHpCppC32fN6MQcu4BUssQLNsgRr9PDMQNLlMmSSoLz3iJTtyQbLQJV0/H5R
7xLvkckpG4w8unKgo/HdYKLkJKLXhGrGs2YCtPlCUwFJKN5JxZboZ8qrrDHpg4/l
YDl4ElsDoS54JwVWLkaCAf5oLfTjveYOwDcV5ZkcyeVM0nUSjn6Atm7dDGPm+0mF
eCLz5m8JsEKnvVQFYwztb1LM+JwYDll+tzbw7YLSV2B7YO0JWJXBYIIXEpEUzjJJ
Q3eS0nPrxMgdhzZ5VpX9BMJLkQd3oDRfhzylXQze
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:43 2024 by rpki-client on console-ams.rpki-client.org