Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/wYf9wKKP3iHPK8H70vZZ4DJeRYQ.roa
File: wYf9wKKP3iHPK8H70vZZ4DJeRYQ.roa (raw, json)
Hash identifier: cjfAPhYRv0y5JwpeercearRN6NKrzWdQb4hpBPWvgQQ=
Subject key identifier: C1:87:FD:C0:A2:8F:DE:21:CF:2B:C1:FB:D2:F6:59:E0:32:5E:45:84
Certificate issuer: /CN=ee720dfe6719724e230102e3425c6c2df247d879
Certificate serial: 16F71DA7
Authority key identifier: EE:72:0D:FE:67:19:72:4E:23:01:02:E3:42:5C:6C:2D:F2:47:D8:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nIN_mcZck4jAQLjQlxsLfJH2Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/wYf9wKKP3iHPK8H70vZZ4DJeRYQ.roa
Signing time: Sat 01 Jan 2022 10:00:24 +0000
ROA not before: Sat 01 Jan 2022 10:00:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201214
IP address blocks: 185.82.4.0/22 maxlen: 24
185.82.4.0/24 maxlen: 24
185.82.5.0/24 maxlen: 24
2a03:66a0::/32 maxlen: 48
2a03:66a0:1000::/48 maxlen: 48
2a03:66a0:2000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385293735 (0x16f71da7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee720dfe6719724e230102e3425c6c2df247d879
Validity
Not Before: Jan 1 10:00:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c187fdc0a28fde21cf2bc1fbd2f659e0325e4584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a8:44:57:cc:50:f2:2f:c4:68:39:de:85:cb:
7b:fd:73:6a:57:0a:0e:73:23:eb:d9:01:8b:2a:7d:
bd:e9:8e:67:ab:89:f1:72:a6:68:3c:d7:a8:0d:f2:
4e:9a:c6:9a:e4:e3:a8:8c:55:d2:9b:b4:51:0e:f5:
b7:5c:76:d4:2c:e5:e8:60:78:b1:10:bc:5f:5c:21:
cf:06:0a:58:0d:3f:9a:b0:3c:91:27:e2:98:fe:9e:
48:81:38:7b:95:bd:30:bc:2d:e6:6e:05:49:d3:a8:
79:c5:f2:dd:d5:4e:9d:19:39:d3:8a:52:6b:2a:1c:
84:87:2a:dc:13:7a:8c:ab:a5:2a:e7:01:4c:a0:ef:
3b:d2:0c:79:29:61:42:ad:19:ff:b9:67:dc:ab:17:
ee:58:14:cb:43:1d:79:60:97:44:96:7b:b8:e7:57:
5b:64:79:30:60:6f:be:0f:8a:9c:e5:dd:6b:10:c5:
ff:d6:5c:14:94:68:e7:d6:fb:f8:5b:a6:72:f7:e1:
ca:d2:98:e9:ea:8b:0d:03:29:20:77:79:6c:48:39:
5d:81:3b:0d:73:b6:e3:10:63:bd:c9:29:48:28:d9:
9e:18:5c:91:c2:79:35:2b:96:3b:e6:aa:46:ea:34:
8f:6a:cc:54:e7:c7:9b:a1:9d:52:85:a0:9c:b5:76:
d8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:87:FD:C0:A2:8F:DE:21:CF:2B:C1:FB:D2:F6:59:E0:32:5E:45:84
X509v3 Authority Key Identifier:
keyid:EE:72:0D:FE:67:19:72:4E:23:01:02:E3:42:5C:6C:2D:F2:47:D8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nIN_mcZck4jAQLjQlxsLfJH2Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/wYf9wKKP3iHPK8H70vZZ4DJeRYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/7nIN_mcZck4jAQLjQlxsLfJH2Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.4.0/22
IPv6:
2a03:66a0::/32
Signature Algorithm: sha256WithRSAEncryption
45:10:be:1d:ba:66:da:bd:75:4b:55:b6:5b:b2:07:a9:fa:06:
99:a1:b3:0a:dd:df:03:e8:ee:6d:bb:cd:0e:f1:cd:f3:14:20:
74:11:d3:07:64:8a:94:4f:09:5d:82:12:8a:af:63:5e:dd:3a:
17:62:5f:da:60:f5:c2:cf:34:12:30:e7:b1:a4:e8:5c:f6:00:
72:ba:06:72:c9:88:43:d1:b9:5c:5e:00:ff:e9:99:a7:86:a6:
f4:b1:f0:9c:e7:95:01:42:f3:89:f8:63:4d:63:ae:16:b7:f2:
7d:28:75:d3:36:a1:8c:b9:7f:58:b3:99:bf:f7:09:9c:13:52:
b4:32:f8:3d:40:02:12:42:1c:f3:08:e2:bb:dc:ac:29:cf:78:
0e:19:e5:c5:e0:b9:75:0d:0f:1e:01:6e:9d:07:71:c2:81:1f:
ee:86:82:06:08:dc:2d:a3:e0:36:d6:76:bd:2c:dc:64:e6:70:
2e:b4:5a:f2:a7:fd:3a:2f:44:22:fa:05:9a:6f:75:c4:bb:c3:
3d:8c:48:ea:d6:bd:5c:68:37:82:27:08:a2:de:57:a5:0b:5a:
12:42:09:fa:34:c5:e3:f1:95:98:9d:75:7f:69:0c:cf:8c:9c:
74:f7:23:af:fd:f1:97:12:4c:87:07:98:c6:3d:12:6c:5a:5e:
e2:21:58:cd
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEFvcdpzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZTcyMGRmZTY3MTk3MjRlMjMwMTAyZTM0MjVjNmMyZGYyNDdkODc5MB4XDTIyMDEw
MTEwMDAyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzE4N2ZkYzBhMjhm
ZGUyMWNmMmJjMWZiZDJmNjU5ZTAzMjVlNDU4NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL6oRFfMUPIvxGg53oXLe/1zalcKDnMj69kBiyp9vemOZ6uJ
8XKmaDzXqA3yTprGmuTjqIxV0pu0UQ71t1x21Czl6GB4sRC8X1whzwYKWA0/mrA8
kSfimP6eSIE4e5W9MLwt5m4FSdOoecXy3dVOnRk504pSayochIcq3BN6jKulKucB
TKDvO9IMeSlhQq0Z/7ln3KsX7lgUy0MdeWCXRJZ7uOdXW2R5MGBvvg+KnOXdaxDF
/9ZcFJRo59b7+FumcvfhytKY6eqLDQMpIHd5bEg5XYE7DXO24xBjvckpSCjZnhhc
kcJ5NSuWO+aqRuo0j2rMVOfHm6GdUoWgnLV22NUCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTBh/3Aoo/eIc8rwfvS9lngMl5FhDAfBgNVHSMEGDAWgBTucg3+ZxlyTiMB
AuNCXGwt8kfYeTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzduSU5fbWNaY2s0akFRTGpRbHhzTGZKSDJIay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvN2M2MWIyLThmYmMtNGIyZC04MzRhLTI0OWYwYTMxM2JiYy8x
L3dZZjl3S0tQM2lIUEs4SDcwdlpaNERKZVJZUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
N2M2MWIyLThmYmMtNGIyZC04MzRhLTI0OWYwYTMxM2JiYy8xLzduSU5fbWNaY2s0
akFRTGpRbHhzTGZKSDJIay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArlSBDANBAIAAjAHAwUAKgNmoDAN
BgkqhkiG9w0BAQsFAAOCAQEARRC+Hbpm2r11S1W2W7IHqfoGmaGzCt3fA+jubbvN
DvHN8xQgdBHTB2SKlE8JXYISiq9jXt06F2Jf2mD1ws80EjDnsaToXPYAcroGcsmI
Q9G5XF4A/+mZp4am9LHwnOeVAULzifhjTWOuFrfyfSh10zahjLl/WLOZv/cJnBNS
tDL4PUACEkIc8wjiu9ysKc94DhnlxeC5dQ0PHgFunQdxwoEf7oaCBgjcLaPgNtZ2
vSzcZOZwLrRa8qf9Oi9EIvoFmm91xLvDPYxI6ta9XGg3gicIot5XpQtaEkIJ+jTF
4/GVmJ11f2kMz4ycdPcjr/3xlxJMhweYxj0SbFpe4iFYzQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:28 2023 by rpki-client on console-ams.rpki-client.org