Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/sCXsVq2Zddr84Z0yV_c4LorpzTQ.roa
File: sCXsVq2Zddr84Z0yV_c4LorpzTQ.roa (raw, json)
Hash identifier: EzVeJHr1/3KEwJlm+sFOgDCAbVY0utLabyvL3PQKY1E=
Subject key identifier: B0:25:EC:56:AD:99:75:DA:FC:E1:9D:32:57:F7:38:2E:8A:E9:CD:34
Certificate issuer: /CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
Certificate serial: 34808F22
Authority key identifier: 17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/sCXsVq2Zddr84Z0yV_c4LorpzTQ.roa
Signing time: Sat 01 Jan 2022 04:53:33 +0000
ROA not before: Sat 01 Jan 2022 04:53:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2589
IP address blocks: 85.119.96.0/21 maxlen: 24
178.251.168.0/21 maxlen: 24
185.21.20.0/22 maxlen: 24
2a00:ea40::/32 maxlen: 56
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 880840482 (0x34808f22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
Validity
Not Before: Jan 1 04:53:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b025ec56ad9975dafce19d3257f7382e8ae9cd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:8a:cc:a1:5b:55:58:b8:28:6e:97:2d:7b:
ea:04:eb:57:2c:82:c3:c9:70:f2:9b:ef:9e:3f:f0:
f4:90:5b:86:88:c2:da:93:6f:06:94:17:34:00:d7:
c9:dc:e6:9c:58:9d:86:d9:41:4f:3a:29:2b:e1:c5:
74:1f:ca:fa:24:aa:a1:bb:bd:80:36:3e:43:0c:3a:
d6:51:ed:4a:0d:4a:23:e8:48:69:43:cb:13:cc:d5:
96:6b:df:db:ab:e3:30:04:a5:70:f2:f1:45:67:14:
f3:60:03:56:b9:3b:4e:14:91:00:c5:6c:06:26:c0:
f6:4f:d5:b5:39:e8:84:d8:65:94:2f:ac:7d:55:9a:
09:11:e3:2d:13:c0:d2:dc:e4:eb:73:df:43:ec:ea:
96:b6:c9:61:b4:c1:2b:82:69:32:89:46:7b:f1:5c:
38:15:ff:f8:ef:04:3d:97:b5:43:52:41:e8:25:3a:
bd:01:c7:75:3c:61:29:d6:dd:d3:01:03:82:df:bc:
4c:b3:bf:be:70:66:36:9d:84:b1:8b:9d:ac:3a:b4:
1b:5a:1e:a3:37:34:4c:e1:92:90:f8:f3:91:1f:81:
f8:8a:36:45:6d:64:63:1e:71:73:63:76:4c:42:29:
d6:24:1b:b0:3f:da:1b:71:f9:08:87:be:01:91:ba:
06:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:25:EC:56:AD:99:75:DA:FC:E1:9D:32:57:F7:38:2E:8A:E9:CD:34
X509v3 Authority Key Identifier:
keyid:17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/sCXsVq2Zddr84Z0yV_c4LorpzTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.96.0/21
178.251.168.0/21
185.21.20.0/22
IPv6:
2a00:ea40::/32
Signature Algorithm: sha256WithRSAEncryption
9e:b4:9a:66:b2:37:5b:aa:96:f7:2c:b7:97:b6:d5:77:7a:fe:
d1:39:e5:91:c6:12:98:fd:4f:ec:2f:6d:d9:b3:0f:c4:8c:09:
bd:4d:69:54:c1:49:4c:30:05:23:61:29:ff:2c:3b:6c:d9:52:
9f:13:e6:84:62:f7:8a:af:7f:de:9d:15:ba:c7:d3:b1:bf:d8:
ba:52:db:de:6b:1b:e3:e9:16:f0:25:1b:44:2b:2d:2d:d9:e7:
88:2c:52:70:8e:61:a9:ac:30:a2:23:48:a7:b8:cb:ed:bd:a0:
b8:95:b7:09:8a:ff:18:10:dc:a0:a8:b7:a0:99:c2:ee:1b:6f:
df:e6:0b:49:ef:5b:df:c5:21:40:15:43:71:11:9a:c9:be:96:
d2:77:21:78:70:89:33:8c:c6:60:d0:e6:3f:ee:e1:6f:9d:eb:
87:c0:e2:7f:87:1f:b7:51:c7:cc:f6:2f:59:1f:b4:66:dc:22:
a9:d2:98:e1:bd:4d:6c:71:f3:f5:f4:0b:af:f2:39:cc:bb:f6:
a6:0f:15:a0:40:1a:57:4d:33:24:4b:e8:93:af:5e:4c:dd:88:
8e:54:27:c3:12:d2:4f:bb:a7:f2:dc:0d:3b:d7:8d:64:19:c8:
9f:5e:8c:2d:9e:40:2c:7f:df:97:64:8a:ad:01:00:35:50:8a:
f2:eb:f2:9c
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIENICPIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
N2ZmZjFlNzhjMzc0OTlkNzJkMTA4YmE3MjhlZjAyOWI3ZjBlN2YzMB4XDTIyMDEw
MTA0NTMzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjAyNWVjNTZhZDk5
NzVkYWZjZTE5ZDMyNTdmNzM4MmU4YWU5Y2QzNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANIBisyhW1VYuChuly176gTrVyyCw8lw8pvvnj/w9JBbhojC
2pNvBpQXNADXydzmnFidhtlBTzopK+HFdB/K+iSqobu9gDY+Qww61lHtSg1KI+hI
aUPLE8zVlmvf26vjMASlcPLxRWcU82ADVrk7ThSRAMVsBibA9k/VtTnohNhllC+s
fVWaCRHjLRPA0tzk63PfQ+zqlrbJYbTBK4JpMolGe/FcOBX/+O8EPZe1Q1JB6CU6
vQHHdTxhKdbd0wEDgt+8TLO/vnBmNp2EsYudrDq0G1oeozc0TOGSkPjzkR+B+Io2
RW1kYx5xc2N2TEIp1iQbsD/aG3H5CIe+AZG6BtECAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBSwJexWrZl12vzhnTJX9zguiunNNDAfBgNVHSMEGDAWgBQX//HnjDdJnXLR
CLpyjvApt/Dn8zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZfX3g1NHczU1oxeTBRaTZjbzd3S2JmdzVfTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzIvODFmM2I2LTZkNDAtNDkwMi1iZWUxLTNmMzlkNzY0MjRmYi8x
L3NDWHNWcTJaZGRyODRaMHlWX2M0TG9ycHpUUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIv
ODFmM2I2LTZkNDAtNDkwMi1iZWUxLTNmMzlkNzY0MjRmYi8xL0ZfX3g1NHczU1ox
eTBRaTZjbzd3S2JmdzVfTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEA1V3YAMEA7L7qAMEArkVFDANBAIA
AjAHAwUAKgDqQDANBgkqhkiG9w0BAQsFAAOCAQEAnrSaZrI3W6qW9yy3l7bVd3r+
0TnlkcYSmP1P7C9t2bMPxIwJvU1pVMFJTDAFI2Ep/yw7bNlSnxPmhGL3iq9/3p0V
usfTsb/YulLb3msb4+kW8CUbRCstLdnniCxScI5hqawwoiNIp7jL7b2guJW3CYr/
GBDcoKi3oJnC7htv3+YLSe9b38UhQBVDcRGayb6W0ncheHCJM4zGYNDmP+7hb53r
h8Dif4cft1HHzPYvWR+0ZtwiqdKY4b1NbHHz9fQLr/I5zLv2pg8VoEAaV00zJEvo
k69eTN2IjlQnwxLST7un8twNO9eNZBnIn16MLZ5ALH/fl2SKrQEANVCK8uvynA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:42 2024 by rpki-client on console-fra.rpki-client.org