Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/iF3TmBkAyoyj4-fyQCv5bLka6p8.roa
File: iF3TmBkAyoyj4-fyQCv5bLka6p8.roa (raw, json)
Hash identifier: /1iEa7qoXO/9FzeCVQjuBkX/aeVlcxWlCuYJ8D65qNc=
Subject key identifier: 88:5D:D3:98:19:00:CA:8C:A3:E3:E7:F2:40:2B:F9:6C:B9:1A:EA:9F
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018534571A4C3F174D4CA2FF1D3340613C7F
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/iF3TmBkAyoyj4-fyQCv5bLka6p8.roa
Signing time: Wed 21 Dec 2022 11:00:01 +0000
ROA not before: Wed 21 Dec 2022 11:00:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199770
IP address blocks: 188.240.236.0/22 maxlen: 24
185.198.108.0/22 maxlen: 24
45.136.32.0/22 maxlen: 24
185.46.124.0/22 maxlen: 24
2a01:8460::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:34:57:1a:4c:3f:17:4d:4c:a2:ff:1d:33:40:61:3c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 21 11:00:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=885dd3981900ca8ca3e3e7f2402bf96cb91aea9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:08:55:7b:26:52:a4:97:8f:16:55:b8:c8:
15:5e:8e:27:9b:6e:c5:04:5f:e2:41:aa:46:29:ab:
7b:d6:53:45:3f:ff:30:43:83:70:9e:29:1a:d7:f7:
b5:84:ce:c0:ed:68:b1:95:87:b0:43:41:35:41:f0:
1f:b4:f8:55:d6:27:67:9e:e3:f1:d5:db:6c:57:34:
c5:e3:27:67:89:27:8a:64:45:80:d0:1d:a6:e9:b1:
71:9e:86:ca:3a:13:20:a6:00:30:da:e0:a7:7c:e5:
98:a0:54:9e:d3:04:39:16:4b:04:a2:5e:4b:a0:14:
2a:34:c9:5f:1e:b2:45:2f:b1:bf:87:7d:f8:e4:bc:
13:e8:85:ae:1f:e4:74:1d:ed:f0:ed:74:ba:f2:6d:
34:66:c9:ca:42:db:56:9e:7d:33:3b:9b:22:09:f9:
47:50:ab:d3:04:01:17:5e:fa:e9:96:16:92:00:4d:
ca:cd:a6:86:11:c7:e5:e6:b5:35:c0:5e:92:c3:c4:
50:29:b0:a3:1f:71:14:f6:c7:7f:79:87:02:56:4e:
97:ce:fc:cb:bc:6a:fd:c1:8d:ea:a9:9d:9f:8b:26:
a9:08:97:73:30:68:69:c5:53:8e:8e:ab:4c:33:93:
ca:80:e6:c3:b2:bd:d4:16:1c:bf:37:45:d3:d1:cd:
ee:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5D:D3:98:19:00:CA:8C:A3:E3:E7:F2:40:2B:F9:6C:B9:1A:EA:9F
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/iF3TmBkAyoyj4-fyQCv5bLka6p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.32.0/22
185.46.124.0/22
185.198.108.0/22
188.240.236.0/22
IPv6:
2a01:8460::/32
Signature Algorithm: sha256WithRSAEncryption
10:f3:59:38:0c:c1:4c:82:2f:1e:33:4a:2b:cb:69:c2:7e:4e:
72:8c:f5:a9:a2:da:38:ae:88:61:5d:8a:3a:31:9e:ce:df:c1:
72:1d:26:21:ad:1c:a6:b3:a5:49:a0:89:d8:db:82:2e:ec:46:
6d:8e:40:db:8a:87:9a:e7:a2:12:65:7a:c3:67:8d:cc:2d:f9:
72:a8:8c:eb:8f:04:67:5e:91:f3:0f:d6:f4:a7:53:af:18:55:
61:31:c2:1c:e5:04:c8:96:d4:be:a2:69:2d:2c:dc:ea:b0:ff:
1e:a3:44:70:bb:89:15:ce:f8:74:cb:41:b8:8e:aa:23:55:be:
77:53:0d:d5:4c:7b:5b:d1:a1:94:fe:ed:a0:37:0e:e4:0e:da:
82:d9:88:bf:8a:9d:28:1c:4f:93:cd:2f:1b:c5:bb:46:b4:56:
4d:c6:a4:5e:fc:b1:3f:0f:82:eb:49:70:fb:1b:33:93:fa:10:
aa:ae:ae:4a:1a:1d:b9:ed:6c:3e:51:06:52:34:b1:36:aa:d8:
98:7f:07:9a:bd:b3:03:4a:4c:28:47:d5:fe:bc:2d:9e:6a:9d:
58:4d:91:b2:23:e5:60:70:78:6a:44:5d:88:5c:7f:ec:95:33:
ce:3a:84:1a:12:37:e2:bd:c9:70:ca:b5:e4:a8:36:9e:7e:7d:
f8:5c:7c:05
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYU0VxpMPxdNTKL/HTNAYTx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjIxMjIxMTEwMDAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODVkZDM5ODE5MDBjYThjYTNlM2U3ZjI0MDJiZjk2Y2I5MWFlYTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGUIVXsmUqSXjxZVuMgVXo4nm27F
BF/iQapGKat71lNFP/8wQ4Nwnika1/e1hM7A7WixlYewQ0E1QfAftPhV1idnnuPx
1dtsVzTF4ydniSeKZEWA0B2m6bFxnobKOhMgpgAw2uCnfOWYoFSe0wQ5FksEol5L
oBQqNMlfHrJFL7G/h3345LwT6IWuH+R0He3w7XS68m00ZsnKQttWnn0zO5siCflH
UKvTBAEXXvrplhaSAE3KzaaGEcfl5rU1wF6Sw8RQKbCjH3EU9sd/eYcCVk6XzvzL
vGr9wY3qqZ2fiyapCJdzMGhpxVOOjqtMM5PKgObDsr3UFhy/N0XT0c3uhQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFIhd05gZAMqMo+Pn8kAr+Wy5GuqfMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvaUYzVG1Ca0F5b3lqNC1meVFDdjViTGthNnA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLYggAwQC
uS58AwQCucZsAwQCvPDsMA0EAgACMAcDBQAqAYRgMA0GCSqGSIb3DQEBCwUAA4IB
AQAQ81k4DMFMgi8eM0ory2nCfk5yjPWpoto4rohhXYo6MZ7O38FyHSYhrRyms6VJ
oInY24Iu7EZtjkDbioea56ISZXrDZ43MLflyqIzrjwRnXpHzD9b0p1OvGFVhMcIc
5QTIltS+omktLNzqsP8eo0Rwu4kVzvh0y0G4jqojVb53Uw3VTHtb0aGU/u2gNw7k
DtqC2Yi/ip0oHE+TzS8bxbtGtFZNxqRe/LE/D4LrSXD7GzOT+hCqrq5KGh257Ww+
UQZSNLE2qtiYfweavbMDSkwoR9X+vC2eap1YTZGyI+VgcHhqRF2IXH/slTPOOoQa
EjfivclwyrXkqDaefn34XHwF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:37 2024 by rpki-client on console-fra.rpki-client.org