Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/aWvmNBvLef6sxFakfX_BD0dy6rw.roa
File: aWvmNBvLef6sxFakfX_BD0dy6rw.roa (raw, json)
Hash identifier: GxtRTadVewe4XPvO1SfBRJo9TFiBk0sgoaVYmYUZKHg=
Subject key identifier: 69:6B:E6:34:1B:CB:79:FE:AC:C4:56:A4:7D:7F:C1:0F:47:72:EA:BC
Certificate issuer: /CN=01202596d5cece37dc34c861064578fc6daa5e86
Certificate serial: 01841961BB9B97C8200A0F70A869CCEA42BA
Authority key identifier: 01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/aWvmNBvLef6sxFakfX_BD0dy6rw.roa
Signing time: Thu 27 Oct 2022 12:19:06 +0000
ROA not before: Thu 27 Oct 2022 12:19:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61399
IP address blocks: 185.211.228.0/24 maxlen: 24
185.211.231.0/24 maxlen: 24
185.211.228.0/22 maxlen: 22
185.211.230.0/24 maxlen: 24
185.211.229.0/24 maxlen: 24
2a0b:6e40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:19:61:bb:9b:97:c8:20:0a:0f:70:a8:69:cc:ea:42:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01202596d5cece37dc34c861064578fc6daa5e86
Validity
Not Before: Oct 27 12:19:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=696be6341bcb79feacc456a47d7fc10f4772eabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4d:23:44:9a:99:c1:35:f7:eb:6e:2a:02:18:
bc:50:5b:36:3d:cf:3c:bb:61:84:26:7b:1d:70:62:
ff:ab:42:92:41:56:27:fc:66:bb:eb:62:a7:fa:26:
98:c7:68:d7:f3:d9:0d:33:55:61:1a:7a:7b:97:26:
e3:a2:9a:42:82:b7:ac:91:39:4e:ce:f0:42:9a:99:
20:2c:1b:f3:c1:dd:ef:38:6c:b2:b6:56:7d:cd:3b:
34:b5:d0:8b:a9:6f:f8:3f:2b:e2:d0:35:ee:9f:56:
0e:45:f3:a2:d3:0e:d2:27:3a:dd:98:4d:a6:62:29:
5b:f3:3d:68:68:50:3a:be:c7:bc:f2:00:28:d4:2c:
72:fc:5f:d4:32:31:18:0a:e1:a9:3a:82:53:87:d5:
f4:f4:57:87:95:3c:b3:3a:a7:36:af:48:d3:84:21:
1d:66:b8:2e:ee:e2:6c:b2:2a:33:f2:ef:40:06:72:
ae:4a:e7:41:38:ee:4e:8a:ce:a5:e1:5e:11:16:73:
f8:ce:5d:1d:2f:69:95:e7:90:08:76:e3:f4:16:90:
f5:f3:dd:2d:3f:d2:58:af:6e:61:e7:93:82:3a:1e:
15:49:1d:38:f2:c7:f5:66:f5:74:2f:0b:d2:15:ac:
92:9d:a9:bc:cf:e1:ff:04:5c:51:8f:f5:40:2b:a9:
44:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6B:E6:34:1B:CB:79:FE:AC:C4:56:A4:7D:7F:C1:0F:47:72:EA:BC
X509v3 Authority Key Identifier:
keyid:01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/aWvmNBvLef6sxFakfX_BD0dy6rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.228.0/22
IPv6:
2a0b:6e40::/29
Signature Algorithm: sha256WithRSAEncryption
7a:bf:7e:5f:8a:0d:f0:fe:ba:e2:7d:ec:6b:8d:20:24:74:71:
0e:65:2c:94:d6:a7:d9:0d:d9:9b:07:ac:c6:4e:2e:dc:32:dc:
b2:14:3c:67:9f:f1:57:87:d5:53:80:f1:a9:00:95:2d:df:ff:
1a:73:c9:6c:99:ad:2c:f5:a6:6f:4c:1e:9f:88:33:64:e2:a5:
5b:c1:c7:52:19:8a:2e:a1:da:25:1e:5c:4a:5b:15:40:2a:01:
27:fd:6e:97:20:1c:c6:b4:1d:63:4b:0a:d9:6e:6f:96:dc:94:
e0:dd:01:e0:28:4a:73:79:85:26:62:76:4d:21:24:e1:a7:fe:
bc:61:df:f9:b5:72:b8:ae:07:19:b6:49:43:7e:27:6b:05:6d:
b0:17:4e:11:b7:8e:09:ac:46:f6:bc:b8:db:f4:4c:06:ef:39:
2c:8f:0c:af:8d:9c:b4:5f:18:41:ec:0c:42:65:2f:e6:28:1f:
53:c5:df:b7:ed:b8:f3:59:66:29:bc:02:14:96:a6:c6:e2:5a:
f8:2c:c9:d0:91:af:f7:08:67:10:93:ad:12:a5:5a:a0:ab:e9:
04:21:b8:5a:06:2e:e6:6f:75:60:e7:9c:0e:3f:ac:e1:ba:e2:
02:ed:13:7a:8c:5b:be:cc:00:3d:e2:fe:9b:b8:aa:b3:65:8e:
b5:1d:2d:41
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYQZYbubl8ggCg9wqGnM6kK6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMjAyNTk2ZDVjZWNlMzdkYzM0Yzg2MTA2NDU3OGZjNmRh
YTVlODYwHhcNMjIxMDI3MTIxOTA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTZiZTYzNDFiY2I3OWZlYWNjNDU2YTQ3ZDdmYzEwZjQ3NzJlYWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU0jRJqZwTX3624qAhi8UFs2Pc88
u2GEJnsdcGL/q0KSQVYn/Ga762Kn+iaYx2jX89kNM1VhGnp7lybjoppCgreskTlO
zvBCmpkgLBvzwd3vOGyytlZ9zTs0tdCLqW/4Pyvi0DXun1YORfOi0w7SJzrdmE2m
Yilb8z1oaFA6vse88gAo1Cxy/F/UMjEYCuGpOoJTh9X09FeHlTyzOqc2r0jThCEd
Zrgu7uJssioz8u9ABnKuSudBOO5Ois6l4V4RFnP4zl0dL2mV55AIduP0FpD1890t
P9JYr25h55OCOh4VSR048sf1ZvV0LwvSFaySnam8z+H/BFxRj/VAK6lE4QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGlr5jQby3n+rMRWpH1/wQ9Hcuq8MB8GA1UdIwQY
MBaAFAEgJZbVzs433DTIYQZFePxtql6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85ODYxNjQtODAzMC00ZTQ3LTk4YjUt
NDgxMTUxYWNmMzI5LzEvYVd2bU5CdkxlZjZzeEZha2ZYX0JEMGR5NnJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85ODYxNjQtODAzMC00ZTQ3LTk4YjUtNDgxMTUxYWNmMzI5
LzEvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudPkMA0E
AgACMAcDBQMqC25AMA0GCSqGSIb3DQEBCwUAA4IBAQB6v35fig3w/rrifexrjSAk
dHEOZSyU1qfZDdmbB6zGTi7cMtyyFDxnn/FXh9VTgPGpAJUt3/8ac8lsma0s9aZv
TB6fiDNk4qVbwcdSGYouodolHlxKWxVAKgEn/W6XIBzGtB1jSwrZbm+W3JTg3QHg
KEpzeYUmYnZNISThp/68Yd/5tXK4rgcZtklDfidrBW2wF04Rt44JrEb2vLjb9EwG
7zksjwyvjZy0XxhB7AxCZS/mKB9Txd+37bjzWWYpvAIUlqbG4lr4LMnQka/3CGcQ
k60SpVqgq+kEIbhaBi7mb3Vg55wOP6zhuuIC7RN6jFu+zAA94v6buKqzZY61HS1B
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:01 2023 by rpki-client on console-fra.rpki-client.org