Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/a9YpVYNqn5_my-PYD2tZV_gee20.roa
File: a9YpVYNqn5_my-PYD2tZV_gee20.roa (raw, json)
Hash identifier: AGbaU6miteRHiAP1Xlsg2FqgAQwhTkfXTokfnFr3roc=
Subject key identifier: 6B:D6:29:55:83:6A:9F:9F:E6:CB:E3:D8:0F:6B:59:57:F8:1E:7B:6D
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 0896763B
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/a9YpVYNqn5_my-PYD2tZV_gee20.roa
Signing time: Thu 17 Mar 2022 17:28:03 +0000
ROA not before: Thu 17 Mar 2022 17:28:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207614
IP address blocks: 185.133.4.0/22 maxlen: 24
185.238.84.0/22 maxlen: 24
45.128.236.0/22 maxlen: 24
2a0f:4200::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144078395 (0x896763b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Mar 17 17:28:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bd62955836a9f9fe6cbe3d80f6b5957f81e7b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:21:d7:3b:44:27:33:61:82:f5:59:42:28:
8f:54:6d:1e:1f:99:ed:2a:5e:47:a2:f5:2d:16:f5:
33:2d:b8:b1:16:42:a0:8a:f4:f0:fc:b8:2f:50:6f:
64:6b:cc:84:59:99:72:44:e4:f6:ce:3c:e9:9a:24:
3a:2d:d2:31:f6:af:8e:4d:71:16:08:84:92:98:22:
a9:2a:68:ab:75:1c:b6:24:16:ec:8b:2d:8c:f0:91:
ad:94:7f:af:c2:8a:42:6e:92:36:07:6d:64:61:70:
59:3d:97:e1:4d:ee:bc:36:53:0f:d0:a7:ae:23:90:
98:41:b6:e3:ef:36:bc:c5:68:b0:0f:0e:7f:5f:a6:
b7:36:0d:e4:55:a7:f8:8e:46:e1:1c:73:2e:44:b4:
11:dc:8f:ac:0a:8b:9e:c5:6b:f6:dd:96:c4:ff:a3:
f4:73:45:dd:f4:ca:11:3b:d1:85:c7:63:6b:4f:42:
ea:bc:98:e5:6a:39:02:b8:18:f7:f8:4c:1e:80:a1:
e7:f1:61:61:09:cc:a2:66:7c:65:1b:81:d4:9b:22:
47:37:7b:a2:fb:08:6a:fb:2c:be:37:0f:01:11:2c:
40:d1:5c:9f:08:f2:56:b1:e0:f6:d0:9a:ba:c2:2d:
3d:45:52:ed:55:d8:e3:71:59:9f:a4:6c:1e:7b:2f:
a7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D6:29:55:83:6A:9F:9F:E6:CB:E3:D8:0F:6B:59:57:F8:1E:7B:6D
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/a9YpVYNqn5_my-PYD2tZV_gee20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.236.0/22
185.133.4.0/22
185.238.84.0/22
IPv6:
2a0f:4200::/29
Signature Algorithm: sha256WithRSAEncryption
3e:05:3e:50:f7:0c:23:2b:78:53:10:89:79:d4:fa:b6:d7:1a:
b5:43:13:b5:c1:37:55:2b:ba:53:8f:90:93:7b:d6:7c:42:9d:
aa:b1:95:33:00:70:82:af:02:72:32:38:59:dc:ac:c1:b0:8b:
1a:34:72:d8:a0:f1:ab:4f:90:31:c4:1b:b7:64:77:35:d4:d2:
d9:66:75:c3:8c:f2:c7:0e:d6:e7:8c:70:2b:72:f3:18:a5:18:
93:d9:f6:43:59:b3:05:7f:6c:45:80:2b:f0:fb:df:fa:de:35:
0a:4c:2a:e9:8a:13:ca:e0:03:b5:1d:16:a9:d7:8a:36:14:79:
42:34:60:ea:42:21:ef:0f:7b:4a:93:af:1c:5d:4e:51:1c:0c:
70:7e:68:ed:b4:d2:52:06:f8:f5:4a:e9:4b:74:11:77:90:32:
b8:0e:7f:c3:74:b8:90:3e:f3:21:be:88:3e:02:b6:f6:62:37:
76:3e:e6:36:7c:f8:17:cd:84:af:4d:38:71:ce:a8:44:b8:34:
18:66:02:ff:d4:72:ba:c0:44:d7:61:28:71:39:e0:1c:1e:81:
a1:9e:1f:48:af:63:ae:e1:17:28:7d:3e:61:f4:1c:9b:62:28:
e6:4b:92:ab:7b:ef:30:49:f4:88:fe:62:fe:d0:03:67:f9:e8:
14:83:cd:87
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIECJZ2OzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZDBjN2U3YmIyN2M1MzNhOTk3ZDI3N2NhZGQ0MTdlYzdiZDI4NGYwMB4XDTIyMDMx
NzE3MjgwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmJkNjI5NTU4MzZh
OWY5ZmU2Y2JlM2Q4MGY2YjU5NTdmODFlN2I2ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALt5Idc7RCczYYL1WUIoj1RtHh+Z7SpeR6L1LRb1My24sRZC
oIr08Py4L1BvZGvMhFmZckTk9s486ZokOi3SMfavjk1xFgiEkpgiqSpoq3UctiQW
7IstjPCRrZR/r8KKQm6SNgdtZGFwWT2X4U3uvDZTD9CnriOQmEG24+82vMVosA8O
f1+mtzYN5FWn+I5G4RxzLkS0EdyPrAqLnsVr9t2WxP+j9HNF3fTKETvRhcdja09C
6ryY5Wo5ArgY9/hMHoCh5/FhYQnMomZ8ZRuB1JsiRzd7ovsIavssvjcPAREsQNFc
nwjyVrHg9tCausItPUVS7VXY43FZn6RsHnsvp10CAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBRr1ilVg2qfn+bL49gPa1lX+B57bTAfBgNVHSMEGDAWgBQdDH57snxTOpl9
J3yt1Bfse9KE8DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0hReC1lN0o4VXpxWmZTZDhyZFFYN0h2U2hQQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvZGRkMzQ5LWFjNTAtNDNlNS1hODhhLWIyOGYwN2IyZjQ1Yi8x
L2E5WXBWWU5xbjVfbXktUFlEMnRaVl9nZWUyMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
ZGRkMzQ5LWFjNTAtNDNlNS1hODhhLWIyOGYwN2IyZjQ1Yi8xL0hReC1lN0o4VXpx
WmZTZDhyZFFYN0h2U2hQQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAi2A7AMEArmFBAMEArnuVDANBAIA
AjAHAwUDKg9CADANBgkqhkiG9w0BAQsFAAOCAQEAPgU+UPcMIyt4UxCJedT6ttca
tUMTtcE3VSu6U4+Qk3vWfEKdqrGVMwBwgq8CcjI4WdyswbCLGjRy2KDxq0+QMcQb
t2R3NdTS2WZ1w4zyxw7W54xwK3LzGKUYk9n2Q1mzBX9sRYAr8Pvf+t41Ckwq6YoT
yuADtR0WqdeKNhR5QjRg6kIh7w97SpOvHF1OURwMcH5o7bTSUgb49UrpS3QRd5Ay
uA5/w3S4kD7zIb6IPgK29mI3dj7mNnz4F82Er004cc6oRLg0GGYC/9RyusBE12Eo
cTngHB6BoZ4fSK9jruEXKH0+YfQcm2Io5kuSq3vvMEn0iP5i/tADZ/noFIPNhw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:22 2023 by rpki-client on console-fra.rpki-client.org