Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/Ej8c8SNHFj-btfxW9GmIbK8eXiE.roa
File: Ej8c8SNHFj-btfxW9GmIbK8eXiE.roa (raw, json)
Hash identifier: K5sB8/UKKmbJKfGn2gICOBRlOe/Mxx0jeeKph5mty8o=
Subject key identifier: 12:3F:1C:F1:23:47:16:3F:9B:B5:FC:56:F4:69:88:6C:AF:1E:5E:21
Certificate issuer: /CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Certificate serial: 39694B09
Authority key identifier: E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/Ej8c8SNHFj-btfxW9GmIbK8eXiE.roa
Signing time: Mon 13 Jun 2022 08:24:02 +0000
ROA not before: Mon 13 Jun 2022 08:24:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197075
IP address blocks: 81.29.176.0/22 maxlen: 23
46.31.104.0/21 maxlen: 24
185.186.12.0/22 maxlen: 23
185.37.116.0/22 maxlen: 23
185.246.95.0/24 maxlen: 24
185.59.20.0/22 maxlen: 23
37.77.160.0/21 maxlen: 24
2a02:2420::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 963201801 (0x39694b09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Validity
Not Before: Jun 13 08:24:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=123f1cf12347163f9bb5fc56f469886caf1e5e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:ef:ab:e4:d3:fe:33:b9:0b:fa:6d:98:a9:
86:ce:b1:92:0d:b9:fa:ae:d4:c4:f6:8e:78:d7:6d:
23:20:81:12:f4:57:ae:67:68:e8:2a:a1:b0:fa:94:
80:62:d8:6a:dc:8b:f2:b3:9d:4d:84:ae:41:d1:9e:
87:4a:d5:41:a4:ee:d7:0d:85:a5:ed:9e:46:9d:bd:
cd:54:d5:ae:ad:ef:13:cc:b5:39:f6:6d:53:12:9d:
9f:51:21:76:82:8b:cc:b1:99:f8:68:bb:29:76:e1:
e0:55:f9:ef:4e:e2:ad:75:1d:1a:79:0e:f7:80:0e:
b8:f1:55:e2:36:da:24:4f:e1:33:fe:0c:42:c0:51:
b3:86:fa:65:0f:12:07:f7:71:f9:d2:52:3b:9b:97:
96:d0:88:74:82:26:47:9a:f9:0a:60:3a:57:64:db:
5c:f0:f8:c1:20:1f:c4:17:8a:be:93:7d:55:4d:9b:
ae:79:f3:65:e1:bb:d0:ee:27:03:2d:28:35:95:e1:
4f:47:6b:de:9e:4d:f7:7c:ae:57:6b:8c:97:94:3c:
bb:07:4c:2d:9b:3f:05:de:11:66:e8:2b:bc:25:9a:
58:a6:fe:e6:96:18:ca:2a:58:4a:61:c0:a6:47:c0:
c5:b4:0d:cf:49:b7:67:24:42:14:19:84:60:26:b6:
5e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3F:1C:F1:23:47:16:3F:9B:B5:FC:56:F4:69:88:6C:AF:1E:5E:21
X509v3 Authority Key Identifier:
keyid:E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/Ej8c8SNHFj-btfxW9GmIbK8eXiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.160.0/21
46.31.104.0/21
81.29.176.0/22
185.37.116.0/22
185.59.20.0/22
185.186.12.0/22
185.246.95.0/24
IPv6:
2a02:2420::/32
Signature Algorithm: sha256WithRSAEncryption
1b:b6:f5:f8:68:2c:6f:0a:e9:06:87:c8:55:8f:b0:8f:6f:73:
99:d3:48:c0:cd:a0:d9:ef:14:ce:2b:42:74:f7:b8:8f:f6:3c:
f6:84:59:eb:21:56:b7:a6:46:77:68:93:6f:4a:c7:28:72:4d:
78:a7:8e:b4:52:78:46:2e:88:59:cd:b5:1f:6b:ee:0f:96:ff:
34:3a:d3:bc:8e:74:b3:98:56:6e:a6:c9:66:2c:6e:b3:0c:89:
ce:60:7f:12:8e:5a:86:0a:ae:3d:39:a0:3c:45:63:09:c8:09:
07:31:e4:ae:40:a2:6f:5e:2e:af:2b:f3:16:7b:ae:e2:06:19:
4a:a9:7c:a7:51:8f:20:97:43:b6:87:08:07:2b:74:95:5d:1b:
fa:93:ec:f6:2a:6c:bf:00:f2:67:a7:9d:14:48:29:46:a9:b8:
bf:c2:6b:99:d1:79:7a:49:e1:ac:ff:2f:6c:63:03:5e:a6:d2:
6f:a1:12:2f:2a:39:a9:d6:3c:4b:52:37:73:c1:41:4b:29:82:
49:3d:7b:84:1a:42:dd:38:05:70:00:26:0a:76:e3:3c:33:9e:
86:42:56:ce:38:42:52:93:fe:dd:1d:76:ff:cc:0c:94:01:61:
f8:58:e8:17:35:86:e5:80:52:31:13:35:8f:f9:4c:0d:c4:fb:
d3:90:8f:55
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIEOWlLCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NmZhYTBkMmY1ZGVjMDIwMWY1NWU0MDk3OWMxOTA5YjZkYjc3YzNiMB4XDTIyMDYx
MzA4MjQwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTIzZjFjZjEyMzQ3
MTYzZjliYjVmYzU2ZjQ2OTg4NmNhZjFlNWUyMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMej76vk0/4zuQv6bZiphs6xkg25+q7UxPaOeNdtIyCBEvRX
rmdo6CqhsPqUgGLYatyL8rOdTYSuQdGeh0rVQaTu1w2Fpe2eRp29zVTVrq3vE8y1
OfZtUxKdn1EhdoKLzLGZ+Gi7KXbh4FX5707irXUdGnkO94AOuPFV4jbaJE/hM/4M
QsBRs4b6ZQ8SB/dx+dJSO5uXltCIdIImR5r5CmA6V2TbXPD4wSAfxBeKvpN9VU2b
rnnzZeG70O4nAy0oNZXhT0dr3p5N93yuV2uMl5Q8uwdMLZs/Bd4RZugrvCWaWKb+
5pYYyipYSmHApkfAxbQNz0m3ZyRCFBmEYCa2XhMCAwEAAaOCAjwwggI4MB0GA1Ud
DgQWBBQSPxzxI0cWP5u1/Fb0aYhsrx5eITAfBgNVHSMEGDAWgBTm+qDS9d7AIB9V
5Al5wZCbbbd8OzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzV2cWcwdlhld0NBZlZlUUplY0dRbTIyM2ZEcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzMvMDk3NzQ4LTVjYzgtNDUwZi05ZmJiLThjOGQxMGU4ZWFiYy8x
L0VqOGM4U05IRmotYnRmeFc5R21JYks4ZVhpRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMv
MDk3NzQ4LTVjYzgtNDUwZi05ZmJiLThjOGQxMGU4ZWFiYy8xLzV2cWcwdlhld0NB
ZlZlUUplY0dRbTIyM2ZEcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBS
BggrBgEFBQcBBwEB/wRDMEEwMAQCAAEwKgMEAyVNoAMEAy4faAMEAlEdsAMEArkl
dAMEArk7FAMEArm6DAMEALn2XzANBAIAAjAHAwUAKgIkIDANBgkqhkiG9w0BAQsF
AAOCAQEAG7b1+GgsbwrpBofIVY+wj29zmdNIwM2g2e8UzitCdPe4j/Y89oRZ6yFW
t6ZGd2iTb0rHKHJNeKeOtFJ4Ri6IWc21H2vuD5b/NDrTvI50s5hWbqbJZixuswyJ
zmB/Eo5ahgquPTmgPEVjCcgJBzHkrkCib14uryvzFnuu4gYZSql8p1GPIJdDtocI
Byt0lV0b+pPs9ipsvwDyZ6edFEgpRqm4v8JrmdF5eknhrP8vbGMDXqbSb6ESLyo5
qdY8S1I3c8FBSymCST17hBpC3TgFcAAmCnbjPDOehkJWzjhCUpP+3R12/8wMlAFh
+FjoFzWG5YBSMRM1j/lMDcT705CPVQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:20 2023 by rpki-client on console-ams.rpki-client.org