Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Q6co1YSk2wuyUUH4PypOqy7kqxw.roa
File: Q6co1YSk2wuyUUH4PypOqy7kqxw.roa (raw, json)
Hash identifier: nSuk6OH/pRKRX52MvBedLQi/k2bNG6CCfq3T64rMcqs=
Subject key identifier: 43:A7:28:D5:84:A4:DB:0B:B2:51:41:F8:3F:2A:4E:AB:2E:E4:AB:1C
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 03E06463
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Q6co1YSk2wuyUUH4PypOqy7kqxw.roa
Signing time: Sun 29 May 2022 17:59:13 +0000
ROA not before: Sun 29 May 2022 17:59:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47380
IP address blocks: 185.93.232.0/22 maxlen: 24
91.242.144.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65037411 (0x3e06463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: May 29 17:59:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43a728d584a4db0bb25141f83f2a4eab2ee4ab1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:56:bf:5e:89:ba:2d:7d:b6:03:64:aa:29:
bb:68:3b:73:24:c8:6d:ac:1f:b8:b5:e2:61:a1:51:
24:15:d7:ae:e3:ed:db:c2:00:97:e0:84:6d:31:56:
1f:a1:6a:de:8b:07:81:8c:c3:45:a5:a6:c2:43:96:
f6:ea:f0:48:de:f5:9f:de:64:d4:3e:93:56:11:c7:
ab:07:5d:ea:bd:5f:a2:ed:4d:ee:93:a5:a1:77:a9:
f0:8e:1c:54:82:ac:ea:d9:e5:63:ee:be:ed:40:0c:
5b:a7:a2:73:4a:d7:f8:2c:c8:0b:d4:93:53:84:d7:
42:47:1c:ea:c2:7e:75:70:a7:fe:85:1a:16:d8:f1:
78:1f:c4:33:4d:e4:3c:83:22:f9:24:a0:7f:4a:e9:
c1:0f:85:5c:c6:ec:b6:01:1c:bc:e7:26:53:35:ae:
7f:30:38:bb:b0:01:56:e1:99:f3:15:68:7c:8c:8c:
8f:60:dc:85:e1:d1:e2:2e:b3:17:fa:bc:3c:12:c4:
ad:6c:e3:01:f5:d2:85:6d:2a:8a:4e:2b:73:47:c0:
3c:0d:5d:85:16:6d:d0:06:05:ad:fd:c3:43:94:86:
c0:5d:29:5d:73:31:2d:bb:1d:02:cd:e9:0d:45:be:
7a:5f:5b:a3:d2:e6:ff:19:ee:d7:0d:1a:ec:ff:7e:
36:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A7:28:D5:84:A4:DB:0B:B2:51:41:F8:3F:2A:4E:AB:2E:E4:AB:1C
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Q6co1YSk2wuyUUH4PypOqy7kqxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.144.0/22
185.93.232.0/22
Signature Algorithm: sha256WithRSAEncryption
50:79:ba:7f:5e:7d:6d:28:7c:e2:77:b9:65:99:e9:0b:5c:41:
40:7f:f4:2e:3b:ec:f7:a4:62:9d:36:98:8f:0b:0c:08:32:f2:
75:a0:b0:14:4c:7e:01:69:0a:02:c6:4f:67:a6:2c:b2:f6:5e:
fd:d4:e0:eb:f3:46:17:f3:eb:c4:d5:9b:78:1b:14:64:da:a0:
7f:05:22:d1:95:7b:74:1b:6a:6b:f0:c2:6a:ef:ce:d3:2a:60:
bf:51:81:f1:cb:19:30:00:89:8e:cb:26:40:24:56:01:cc:c7:
d1:9f:df:49:30:e9:ee:15:1b:79:da:f5:a0:fe:72:09:a6:38:
15:26:72:cd:86:bb:b4:a9:aa:19:3b:b6:31:8e:09:98:27:68:
c6:44:87:75:fe:ba:1f:0a:03:ab:9e:ad:b3:55:5f:78:44:79:
79:de:44:e6:8e:82:e5:f7:8d:3c:4f:ff:80:8f:1d:4d:ac:3a:
cb:c8:86:dd:37:45:35:47:b7:99:1e:56:23:9e:f6:33:6d:8f:
6a:0a:90:43:16:2b:a1:c6:8f:2d:90:b2:e7:00:c3:71:7a:a0:
b5:70:cb:23:a2:ff:b3:5b:fa:87:64:a2:f5:ec:a0:37:89:0f:
b4:40:6c:49:ab:89:b3:85:d4:65:d8:8a:7d:fd:5d:3b:47:a1:
3e:4d:15:8e
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA+BkYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NDc1ZmIwOTM0Y2Y2YTU4ZGNjZWYxMTA4NzVkYmU1ZTNlOGI2Yjc1MB4XDTIyMDUy
OTE3NTkxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDNhNzI4ZDU4NGE0
ZGIwYmIyNTE0MWY4M2YyYTRlYWIyZWU0YWIxYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALV+Vr9eibotfbYDZKopu2g7cyTIbawfuLXiYaFRJBXXruPt
28IAl+CEbTFWH6Fq3osHgYzDRaWmwkOW9urwSN71n95k1D6TVhHHqwdd6r1fou1N
7pOloXep8I4cVIKs6tnlY+6+7UAMW6eic0rX+CzIC9STU4TXQkcc6sJ+dXCn/oUa
FtjxeB/EM03kPIMi+SSgf0rpwQ+FXMbstgEcvOcmUzWufzA4u7ABVuGZ8xVofIyM
j2DcheHR4i6zF/q8PBLErWzjAfXShW0qik4rc0fAPA1dhRZt0AYFrf3DQ5SGwF0p
XXMxLbsdAs3pDUW+el9bo9Lm/xnu1w0a7P9+Nn8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRDpyjVhKTbC7JRQfg/Kk6rLuSrHDAfBgNVHSMEGDAWgBTUdfsJNM9qWNzO
8RCHXb5ePotrdTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFIWDdDVFRQYWxqY3p2RVFoMTItWGo2TGEzVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzgvYmZmNGFhLTRmMDctNDEyOS04YWQ2LWM3OTE0YWI2NDI3My8x
L1E2Y28xWVNrMnd1eVVVSDRQeXBPcXk3a3F4dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgv
YmZmNGFhLTRmMDctNDEyOS04YWQ2LWM3OTE0YWI2NDI3My8xLzFIWDdDVFRQYWxq
Y3p2RVFoMTItWGo2TGEzVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlvykAMEArld6DANBgkqhkiG9w0B
AQsFAAOCAQEAUHm6f159bSh84ne5ZZnpC1xBQH/0Ljvs96RinTaYjwsMCDLydaCw
FEx+AWkKAsZPZ6YssvZe/dTg6/NGF/PrxNWbeBsUZNqgfwUi0ZV7dBtqa/DCau/O
0ypgv1GB8csZMACJjssmQCRWAczH0Z/fSTDp7hUbedr1oP5yCaY4FSZyzYa7tKmq
GTu2MY4JmCdoxkSHdf66HwoDq56ts1VfeER5ed5E5o6C5feNPE//gI8dTaw6y8iG
3TdFNUe3mR5WI572M22PagqQQxYrocaPLZCy5wDDcXqgtXDLI6L/s1v6h2Si9eyg
N4kPtEBsSauJs4XUZdiKff1dO0ehPk0Vjg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org