Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/c15oxhj2KX3x3TanOghNZ_4EXgg.roa
File: c15oxhj2KX3x3TanOghNZ_4EXgg.roa (raw, json)
Hash identifier: 9M2cqaBpIZeD+qU0sZ1sGk6llgsiLtXJnzzijBSzT/c=
Subject key identifier: 73:5E:68:C6:18:F6:29:7D:F1:DD:36:A7:3A:08:4D:67:FE:04:5E:08
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 16AC21FB
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/c15oxhj2KX3x3TanOghNZ_4EXgg.roa
Signing time: Sat 01 Jan 2022 16:05:37 +0000
ROA not before: Sat 01 Jan 2022 16:05:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201873
IP address blocks: 185.142.252.0/22 maxlen: 22
185.143.104.0/22 maxlen: 22
185.61.52.0/22 maxlen: 22
2a02:7820::/32 maxlen: 32
2a07:3200::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380379643 (0x16ac21fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Jan 1 16:05:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=735e68c618f6297df1dd36a73a084d67fe045e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:6c:2b:3b:bd:fd:e2:73:1f:2e:66:50:fc:
00:cb:dd:cd:b3:fe:1e:cf:5d:5a:db:9e:68:f0:63:
2a:fb:dd:dc:4d:0f:79:c3:99:6b:87:83:6e:a1:42:
0c:4a:3b:97:10:a2:44:c8:5d:38:6f:4b:19:86:21:
52:a3:c4:bd:63:d6:4c:9b:d0:b5:1b:f3:b9:fb:8c:
96:89:b1:de:1a:5b:81:07:3d:23:14:dd:c9:8f:cf:
23:44:e9:c0:fc:fc:59:d7:ad:e2:52:46:1b:d3:51:
3e:d1:ef:99:3c:57:3e:d6:18:cf:e3:a9:f0:14:a9:
2b:3d:66:bc:4e:1e:a3:31:dc:cb:31:79:ac:56:d1:
1e:4a:1b:94:01:8b:0b:2b:31:d5:fd:a2:83:9a:c9:
3f:ac:f6:12:ca:7a:a2:e1:c8:b1:76:0a:ad:76:8c:
63:16:ec:db:75:81:82:99:b9:73:c6:d9:4f:6e:bb:
a4:6f:c7:1c:69:7e:26:51:db:8e:f0:4d:ea:c8:4c:
58:76:20:40:ec:73:3d:93:c7:ea:6e:24:c8:95:9d:
d5:41:f3:0b:dd:28:9e:4c:6b:35:c9:ab:02:3b:1e:
58:46:ae:76:88:e1:64:31:39:9d:f7:6e:c5:9a:a8:
04:3f:98:32:d2:02:d2:61:48:dd:d6:ff:2f:6b:b0:
7f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5E:68:C6:18:F6:29:7D:F1:DD:36:A7:3A:08:4D:67:FE:04:5E:08
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/c15oxhj2KX3x3TanOghNZ_4EXgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.52.0/22
185.142.252.0/22
185.143.104.0/22
IPv6:
2a02:7820::/32
2a07:3200::/29
Signature Algorithm: sha256WithRSAEncryption
0d:ab:32:63:23:e7:17:97:79:8d:34:bf:4d:b0:a2:55:44:a7:
7f:40:4f:3f:58:e2:d8:f9:95:48:b8:4f:65:24:5e:00:ff:11:
8f:e6:1a:fc:ea:d3:21:33:c9:8c:56:94:cb:57:08:99:64:c0:
44:a2:e5:78:6f:9a:5c:4a:8f:20:59:d7:f2:46:7a:bd:7e:cd:
6d:8f:07:26:79:23:b1:ff:72:42:6f:a3:37:96:62:6f:9b:3f:
da:46:4c:8e:58:3b:23:82:27:ea:3d:49:da:fa:bc:42:8f:ee:
87:87:bd:23:60:a3:a3:bd:a5:b2:bd:68:e4:8e:a7:65:be:e2:
56:ef:ad:67:e0:92:c6:bd:84:54:2b:ce:8e:2c:57:7f:14:b4:
06:ff:5d:05:3d:90:3b:8f:cf:be:93:ec:4a:d1:6d:8f:a5:42:
88:a8:2e:5f:4b:ae:f1:3e:5e:f3:bf:4e:70:76:87:53:44:9f:
9a:4f:2f:f2:88:dc:57:0c:aa:b0:88:4b:f6:f1:51:69:87:a7:
19:9a:e0:af:20:95:6e:64:a3:51:cc:c8:bd:dd:e3:88:12:8a:
a2:d2:32:2e:9f:db:94:5c:82:4b:cf:8e:4c:7d:22:39:01:7d:
33:c7:62:09:99:db:e7:f2:3b:ba:a9:5b:7f:91:b0:09:5c:12:
d3:ba:2c:13
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIEFqwh+zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MmU2MzVmZWNlZjE3MTA5ZTFhYzc4YjJmYjcyMjQxMGQ4NDc3YTljMB4XDTIyMDEw
MTE2MDUzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzM1ZTY4YzYxOGY2
Mjk3ZGYxZGQzNmE3M2EwODRkNjdmZTA0NWUwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ5KbCs7vf3icx8uZlD8AMvdzbP+Hs9dWtueaPBjKvvd3E0P
ecOZa4eDbqFCDEo7lxCiRMhdOG9LGYYhUqPEvWPWTJvQtRvzufuMlomx3hpbgQc9
IxTdyY/PI0TpwPz8Wdet4lJGG9NRPtHvmTxXPtYYz+Op8BSpKz1mvE4eozHcyzF5
rFbRHkoblAGLCysx1f2ig5rJP6z2Esp6ouHIsXYKrXaMYxbs23WBgpm5c8bZT267
pG/HHGl+JlHbjvBN6shMWHYgQOxzPZPH6m4kyJWd1UHzC90onkxrNcmrAjseWEau
dojhZDE5nfduxZqoBD+YMtIC0mFI3db/L2uwf1cCAwEAAaOCAiswggInMB0GA1Ud
DgQWBBRzXmjGGPYpffHdNqc6CE1n/gReCDAfBgNVHSMEGDAWgBSC5jX+zvFxCeGs
eLL7ciQQ2Ed6nDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d1WTFfczd4Y1FuaHJIaXktM0lrRU5oSGVwdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzkvOWY5ODU4LTYyMDktNGNmNS1iNTQxLWEyNjA1MGVmMDQ3ZS8x
L2MxNW94aGoyS1gzeDNUYW5PZ2hOWl80RVhnZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkv
OWY5ODU4LTYyMDktNGNmNS1iNTQxLWEyNjA1MGVmMDQ3ZS8xL2d1WTFfczd4Y1Fu
aHJIaXktM0lrRU5oSGVwdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBB
BggrBgEFBQcBBwEB/wQyMDAwGAQCAAEwEgMEArk9NAMEArmO/AMEArmPaDAUBAIA
AjAOAwUAKgJ4IAMFAyoHMgAwDQYJKoZIhvcNAQELBQADggEBAA2rMmMj5xeXeY00
v02wolVEp39ATz9Y4tj5lUi4T2UkXgD/EY/mGvzq0yEzyYxWlMtXCJlkwESi5Xhv
mlxKjyBZ1/JGer1+zW2PByZ5I7H/ckJvozeWYm+bP9pGTI5YOyOCJ+o9Sdr6vEKP
7oeHvSNgo6O9pbK9aOSOp2W+4lbvrWfgksa9hFQrzo4sV38UtAb/XQU9kDuPz76T
7ErRbY+lQoioLl9LrvE+XvO/TnB2h1NEn5pPL/KI3FcMqrCIS/bxUWmHpxma4K8g
lW5ko1HMyL3d44gSiqLSMi6f25RcgkvPjkx9IjkBfTPHYgmZ2+fyO7qpW3+RsAlc
EtO6LBM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:06 2024 by rpki-client on console-ams.rpki-client.org