Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/V0PPnlMZ1wYy9aOKF6E7X3xueqc.roa
File: V0PPnlMZ1wYy9aOKF6E7X3xueqc.roa (raw, json)
Hash identifier: KA+hbzg8+4NzpmPL+NQs9mclnVJXDYoRjL9hPeapqoA=
Subject key identifier: 57:43:CF:9E:53:19:D7:06:32:F5:A3:8A:17:A1:3B:5F:7C:6E:7A:A7
Certificate issuer: /CN=178825286beec912d1988d08d2e277f518f3e4aa
Certificate serial: 13FCE126
Authority key identifier: 17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/V0PPnlMZ1wYy9aOKF6E7X3xueqc.roa
Signing time: Sat 01 Jan 2022 09:03:21 +0000
ROA not before: Sat 01 Jan 2022 09:03:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8632
IP address blocks: 94.103.208.0/21 maxlen: 22
94.103.208.0/20 maxlen: 20
83.222.32.0/19 maxlen: 20
94.103.216.0/21 maxlen: 22
195.218.0.0/21 maxlen: 22
195.218.8.0/21 maxlen: 22
31.172.144.0/21 maxlen: 22
195.218.16.0/20 maxlen: 22
195.218.16.0/21 maxlen: 22
195.218.24.0/21 maxlen: 22
185.6.232.0/22 maxlen: 23
2a02:678::/32 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335339814 (0x13fce126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178825286beec912d1988d08d2e277f518f3e4aa
Validity
Not Before: Jan 1 09:03:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5743cf9e5319d70632f5a38a17a13b5f7c6e7aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:02:cd:8e:6e:c4:71:7b:a9:bc:86:f9:ab:
c3:2e:78:76:4d:81:cc:a1:03:55:a4:22:ed:3d:0a:
d9:d8:ac:85:90:59:ec:d5:ff:12:3f:2e:b4:94:f4:
1c:d5:b6:c3:e4:1f:aa:bb:69:0e:04:02:a9:57:b6:
22:93:cf:60:8a:99:1c:ff:4d:55:d9:43:14:e0:4e:
80:e9:be:3f:e4:7f:6a:51:b9:69:53:59:e6:1d:bb:
6e:12:c9:18:d3:9d:57:58:b5:87:e2:a7:47:bc:82:
56:f0:7e:94:41:55:5f:99:b8:bd:e4:49:da:58:9e:
11:7a:64:6f:db:ee:e9:ca:00:83:ea:31:21:54:c7:
d4:ff:0e:aa:ef:b9:79:a2:c9:78:f5:59:d0:87:18:
07:10:38:9b:d1:48:ad:3b:27:fe:08:d5:76:f1:57:
25:37:7e:8b:6f:5b:f0:08:00:de:27:d3:b0:ee:57:
d7:7f:9e:12:f8:b4:30:65:59:5b:ff:ca:90:15:de:
91:ef:16:5d:17:a4:05:e6:9d:20:b7:7f:1d:fa:7e:
8c:06:5a:b2:13:db:3c:d1:92:83:9c:5c:70:22:5b:
54:22:70:b9:ed:cd:0e:64:5e:7d:83:9f:bf:fe:bc:
1f:13:cd:9d:10:fc:ad:93:80:e7:21:f6:89:a0:71:
1d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:43:CF:9E:53:19:D7:06:32:F5:A3:8A:17:A1:3B:5F:7C:6E:7A:A7
X509v3 Authority Key Identifier:
keyid:17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/V0PPnlMZ1wYy9aOKF6E7X3xueqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.144.0/21
83.222.32.0/19
94.103.208.0/20
185.6.232.0/22
195.218.0.0/19
IPv6:
2a02:678::/32
Signature Algorithm: sha256WithRSAEncryption
35:7d:7f:ca:0a:70:75:b4:ac:9e:b5:38:da:84:84:0c:45:ee:
5e:4c:ae:f3:e4:4b:a5:86:6b:ce:7b:e5:c4:55:83:5e:08:6e:
9f:5b:b9:63:d8:49:ad:86:d6:f9:10:1d:14:42:11:38:c3:2b:
82:c2:a8:ab:1a:bc:ef:7a:b9:51:67:81:a7:92:0b:c2:b8:6d:
3a:ab:e2:3d:cb:8d:a8:50:35:e6:48:f0:f9:14:ee:e3:d6:5d:
57:b3:7c:09:df:be:e3:25:9d:d8:c9:b7:26:e1:a3:cd:48:1e:
f4:27:6e:42:96:70:89:b7:77:d9:ba:77:d6:29:91:d6:07:87:
cf:00:69:7d:fd:87:d8:c5:e8:84:55:ae:4b:0f:3f:88:cd:23:
18:4c:24:c3:d1:97:89:14:61:09:e1:a0:7e:57:a3:80:05:71:
8b:f1:b2:1a:6c:6a:3c:fa:82:fd:c2:01:70:8b:50:13:be:75:
09:44:e4:5e:8a:44:bc:9f:62:2e:24:d0:23:1b:68:f2:c1:b8:
aa:c0:02:c4:aa:81:27:d2:b9:e9:04:4c:dc:d1:0d:1c:d7:f1:
ca:77:77:08:24:35:03:63:00:f8:6a:54:1d:7f:9b:e1:dc:85:
cb:fc:22:4b:d3:dd:80:55:bd:92:e2:9e:5e:05:17:6c:6d:48:
44:bf:37:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIEE/zhJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
Nzg4MjUyODZiZWVjOTEyZDE5ODhkMDhkMmUyNzdmNTE4ZjNlNGFhMB4XDTIyMDEw
MTA5MDMyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTc0M2NmOWU1MzE5
ZDcwNjMyZjVhMzhhMTdhMTNiNWY3YzZlN2FhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALhwAs2ObsRxe6m8hvmrwy54dk2BzKEDVaQi7T0K2dishZBZ
7NX/Ej8utJT0HNW2w+QfqrtpDgQCqVe2IpPPYIqZHP9NVdlDFOBOgOm+P+R/alG5
aVNZ5h27bhLJGNOdV1i1h+KnR7yCVvB+lEFVX5m4veRJ2lieEXpkb9vu6coAg+ox
IVTH1P8Oqu+5eaLJePVZ0IcYBxA4m9FIrTsn/gjVdvFXJTd+i29b8AgA3ifTsO5X
13+eEvi0MGVZW//KkBXeke8WXRekBeadILd/Hfp+jAZashPbPNGSg5xccCJbVCJw
ue3NDmRefYOfv/68HxPNnRD8rZOA5yH2iaBxHccCAwEAAaOCAjAwggIsMB0GA1Ud
DgQWBBRXQ8+eUxnXBjL1o4oXoTtffG56pzAfBgNVHSMEGDAWgBQXiCUoa+7JEtGY
jQjS4nf1GPPkqjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Y0Z2xLR3Z1eVJMUm1JMEkwdUozOVJqejVLby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzIvZWZiYjA1LTg5NDAtNDNjZi1hZDFkLTI4YWNjN2YzMTkzYS8x
L1YwUFBubE1aMXdZeTlhT0tGNkU3WDN4dWVxYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIv
ZWZiYjA1LTg5NDAtNDNjZi1hZDFkLTI4YWNjN2YzMTkzYS8xL0Y0Z2xLR3Z1eVJM
Um1JMEkwdUozOVJqejVLby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEAx+skAMEBVPeIAMEBF5n0AMEArkG
6AMEBcPaADANBAIAAjAHAwUAKgIGeDANBgkqhkiG9w0BAQsFAAOCAQEANX1/ygpw
dbSsnrU42oSEDEXuXkyu8+RLpYZrznvlxFWDXghun1u5Y9hJrYbW+RAdFEIROMMr
gsKoqxq873q5UWeBp5ILwrhtOqviPcuNqFA15kjw+RTu49ZdV7N8Cd++4yWd2Mm3
JuGjzUge9CduQpZwibd32bp31imR1geHzwBpff2H2MXohFWuSw8/iM0jGEwkw9GX
iRRhCeGgflejgAVxi/GyGmxqPPqC/cIBcItQE751CUTkXopEvJ9iLiTQIxto8sG4
qsACxKqBJ9K56QRM3NENHNfxynd3CCQ1A2MA+GpUHX+b4dyFy/wiS9PdgFW9kuKe
XgUXbG1IRL832w==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:28 2023 by rpki-client on console-fra.rpki-client.org