Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/cGBrAh2iRNUEn1qNC5UL2Swu_2o.roa
File: cGBrAh2iRNUEn1qNC5UL2Swu_2o.roa (raw, json)
Hash identifier: KVibuSacePqMV+nsF4ozaUEdC+CQiGIa2aJSA+r7Ynk=
Subject key identifier: 70:60:6B:02:1D:A2:44:D5:04:9F:5A:8D:0B:95:0B:D9:2C:2E:FF:6A
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 01DDF5EB
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/cGBrAh2iRNUEn1qNC5UL2Swu_2o.roa
Signing time: Sat 01 Jan 2022 06:57:28 +0000
ROA not before: Sat 01 Jan 2022 06:57:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206943
IP address blocks: 185.102.48.0/22 maxlen: 23
185.206.58.0/23 maxlen: 23
185.206.56.0/23 maxlen: 23
31.42.128.0/20 maxlen: 20
178.218.128.0/21 maxlen: 21
178.218.136.0/21 maxlen: 21
31.42.144.0/20 maxlen: 20
178.159.64.0/20 maxlen: 20
185.171.30.0/23 maxlen: 23
185.171.28.0/23 maxlen: 23
185.183.90.0/23 maxlen: 23
185.183.88.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31323627 (0x1ddf5eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: Jan 1 06:57:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70606b021da244d5049f5a8d0b950bd92c2eff6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:02:de:88:40:72:04:20:1c:b7:97:65:ca:
29:ac:e0:41:ec:15:5f:ef:f8:23:33:b1:25:d4:9f:
f3:25:68:7a:13:6b:e8:f9:76:42:97:27:3a:21:e8:
10:f8:af:79:68:0a:ad:df:99:d0:79:1c:a3:44:6a:
1e:44:81:b3:67:ea:b0:44:5e:ab:6b:33:25:6d:af:
f2:72:2c:7c:d6:aa:52:8c:a9:d6:5d:64:00:ab:c5:
c4:35:5d:f5:ef:50:91:a0:6b:67:9a:1b:83:60:a7:
8c:9f:e8:8a:a6:56:fa:c2:2d:98:11:f5:23:b1:3c:
c8:52:06:85:f9:1d:63:e3:5a:79:8d:fd:32:b4:a1:
13:e4:d9:a5:21:88:94:27:00:3f:fc:c8:67:a3:61:
89:01:1f:ba:27:d7:b6:bb:02:3a:01:ac:cc:9d:7f:
da:d8:86:81:49:cd:81:de:c2:af:9f:f0:be:03:13:
02:3d:b0:2a:a5:ca:ec:ce:b1:53:e7:6a:31:60:cb:
16:3b:da:86:3d:8d:08:73:84:36:2f:f3:ff:77:83:
dd:b2:dd:3c:e3:9d:a1:86:21:b4:52:0a:c5:2d:4d:
25:40:d5:1d:f2:18:69:cd:00:0a:ad:72:27:ce:f7:
55:c1:a3:20:58:0b:dd:03:05:2b:7a:c7:56:1b:2d:
df:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:60:6B:02:1D:A2:44:D5:04:9F:5A:8D:0B:95:0B:D9:2C:2E:FF:6A
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/cGBrAh2iRNUEn1qNC5UL2Swu_2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.128.0/19
178.159.64.0/20
178.218.128.0/20
185.102.48.0/22
185.171.28.0/22
185.183.88.0/22
185.206.56.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:17:9e:ad:55:c4:fa:4a:5f:03:ea:c4:5b:41:d1:74:83:a1:
3c:96:8f:e9:dd:23:eb:fb:6f:1a:76:5d:59:3b:7e:9f:30:ab:
ff:8b:ea:4d:d2:17:52:da:4c:d6:f6:6d:95:5c:11:02:a9:f7:
56:f4:5c:43:b9:72:10:85:13:c7:c2:47:43:a8:00:03:e7:42:
0f:17:55:24:b1:7a:6d:26:3b:ff:cc:d5:e0:c0:a5:ac:ab:b7:
61:26:5f:56:f6:8b:11:7c:93:92:68:82:01:20:a0:87:8f:16:
7b:d2:76:05:2c:3d:55:2a:c7:10:f8:02:4f:3a:0b:e0:98:25:
56:fb:f9:3b:4c:94:f3:b8:4d:ee:29:bb:58:18:aa:19:6e:d1:
96:8f:5b:7b:de:a1:c1:fe:a8:21:9f:8d:57:26:ac:c7:05:49:
39:72:22:10:d0:2a:05:69:6d:a8:c5:18:4f:ba:a2:df:99:ce:
79:67:c5:67:34:b2:1c:5c:15:5f:a8:3a:f1:f1:12:2a:6b:02:
62:fd:72:0e:14:53:bb:09:fb:a2:78:9c:fe:28:99:08:31:e5:
53:4c:77:52:6d:32:1d:54:72:38:f2:19:ee:d6:3a:36:fa:ff:
dc:0f:8e:d3:21:11:d1:39:29:bb:6b:35:08:17:75:6e:53:64:
e9:ab:bf:dc
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIEAd316zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MzE5ZDBjZDY1NTkzZDk2OWU4ZDQ1MzgyYTE5NGFhYTczYzBmZjhjMB4XDTIyMDEw
MTA2NTcyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzA2MDZiMDIxZGEy
NDRkNTA0OWY1YThkMGI5NTBiZDkyYzJlZmY2YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMlUAt6IQHIEIBy3l2XKKazgQewVX+/4IzOxJdSf8yVoehNr
6Pl2QpcnOiHoEPiveWgKrd+Z0Hkco0RqHkSBs2fqsEReq2szJW2v8nIsfNaqUoyp
1l1kAKvFxDVd9e9QkaBrZ5obg2CnjJ/oiqZW+sItmBH1I7E8yFIGhfkdY+NaeY39
MrShE+TZpSGIlCcAP/zIZ6NhiQEfuifXtrsCOgGszJ1/2tiGgUnNgd7Cr5/wvgMT
Aj2wKqXK7M6xU+dqMWDLFjvahj2NCHOENi/z/3eD3bLdPOOdoYYhtFIKxS1NJUDV
HfIYac0ACq1yJ873VcGjIFgL3QMFK3rHVhst33cCAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBRwYGsCHaJE1QSfWo0LlQvZLC7/ajAfBgNVHSMEGDAWgBTjGdDNZVk9lp6N
RTgqGUqqc8D/jDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzR4blF6V1ZaUFphZWpVVTRLaGxLcW5QQV80dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzMvYWU4NjljLTgxMmMtNGNkNi1iYWY5LTIxN2NmOTM4NDViYy8x
L2NHQnJBaDJpUk5VRW4xcU5DNVVMMlN3dV8yby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMv
YWU4NjljLTgxMmMtNGNkNi1iYWY5LTIxN2NmOTM4NDViYy8xLzR4blF6V1ZaUFph
ZWpVVTRLaGxLcW5QQV80dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEBR8qgAMEBLKfQAMEBLLagAMEArlm
MAMEArmrHAMEArm3WAMEArnOODANBgkqhkiG9w0BAQsFAAOCAQEAbReerVXE+kpf
A+rEW0HRdIOhPJaP6d0j6/tvGnZdWTt+nzCr/4vqTdIXUtpM1vZtlVwRAqn3VvRc
Q7lyEIUTx8JHQ6gAA+dCDxdVJLF6bSY7/8zV4MClrKu3YSZfVvaLEXyTkmiCASCg
h48We9J2BSw9VSrHEPgCTzoL4JglVvv5O0yU87hN7im7WBiqGW7Rlo9be96hwf6o
IZ+NVyasxwVJOXIiENAqBWltqMUYT7qi35nOeWfFZzSyHFwVX6g68fESKmsCYv1y
DhRTuwn7onic/iiZCDHlU0x3Um0yHVRyOPIZ7tY6Nvr/3A+O0yER0Tkpu2s1CBd1
blNk6au/3A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:23 2023 by rpki-client on console-ams.rpki-client.org