Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/vQoGs9h-2tDQkMcmLmba0dV3Tb4.roa
File: vQoGs9h-2tDQkMcmLmba0dV3Tb4.roa (raw, json)
Hash identifier: qnq7jn/qLnZlP48O2EG06VgbsZjYS2rdTf6PgfJLqN8=
Subject key identifier: BD:0A:06:B3:D8:7E:DA:D0:D0:90:C7:26:2E:66:DA:D1:D5:77:4D:BE
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0AC22FB9
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/vQoGs9h-2tDQkMcmLmba0dV3Tb4.roa
Signing time: Wed 12 Jan 2022 22:14:40 +0000
ROA not before: Wed 12 Jan 2022 22:14:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42295
IP address blocks: 91.229.132.0/24 maxlen: 24
91.229.133.0/24 maxlen: 24
91.229.135.0/24 maxlen: 24
91.229.134.0/24 maxlen: 24
185.255.56.0/24 maxlen: 24
185.255.57.0/24 maxlen: 24
185.240.132.0/24 maxlen: 24
185.240.133.0/24 maxlen: 24
185.240.135.0/24 maxlen: 24
185.240.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180498361 (0xac22fb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 12 22:14:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd0a06b3d87edad0d090c7262e66dad1d5774dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d1:e3:42:c4:aa:b2:e1:23:37:8e:47:36:06:
18:5e:83:73:6a:bf:db:cc:47:fc:f2:54:7f:56:cb:
6b:e1:18:34:a0:15:8a:34:8b:b7:9f:99:4c:c8:09:
5e:f0:f1:75:07:d7:16:18:d1:cc:34:49:61:b5:51:
73:e2:cc:81:24:c2:e6:6f:18:2e:33:51:d9:f4:80:
4b:1f:49:3f:f4:b5:7d:2a:eb:b1:97:47:51:f2:53:
5c:3a:f9:03:bc:e6:9e:93:67:11:a1:a0:99:5a:fd:
7c:95:3f:3f:91:16:73:2e:7e:67:ce:34:69:ff:21:
bf:de:04:7a:f3:e3:ef:7d:d7:04:c1:71:05:f9:bc:
3d:66:9f:d8:7f:b3:e7:84:30:36:9f:95:e7:ee:7c:
99:e6:f9:a1:e2:67:89:23:7c:92:19:e4:a7:22:03:
97:7f:b6:df:b8:10:ed:51:4e:e0:84:d8:c2:f5:51:
38:8f:d8:8d:54:15:ff:7d:94:f9:b4:ac:5e:d8:84:
b0:da:c7:c9:aa:f5:72:2c:0c:c5:3f:ed:d6:9e:05:
d5:aa:7e:f8:27:6f:55:2e:f1:56:33:bc:e2:20:3f:
60:30:80:96:7c:a6:d0:06:0c:6e:78:ea:9e:ae:24:
3e:a2:13:01:77:d9:5a:22:d7:2a:20:69:17:86:cd:
3c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0A:06:B3:D8:7E:DA:D0:D0:90:C7:26:2E:66:DA:D1:D5:77:4D:BE
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/vQoGs9h-2tDQkMcmLmba0dV3Tb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.132.0/22
185.240.132.0/22
185.255.56.0/23
Signature Algorithm: sha256WithRSAEncryption
83:e7:3f:93:a2:10:fd:b4:9f:7a:b3:ab:5c:69:cf:6f:d9:60:
9a:a3:46:b5:90:cc:fc:f5:e1:d1:bf:43:12:89:c8:64:12:90:
9c:c6:e6:e4:72:ba:d1:22:b7:a7:5b:78:8c:c1:99:66:9b:77:
07:f1:c9:02:c4:fb:73:0d:fd:56:8d:a9:36:10:e4:c2:29:2b:
a0:36:23:9c:dc:bb:a8:45:82:1c:5d:c7:d8:48:b4:f9:c4:3e:
12:13:44:a5:d8:23:bf:2f:38:f7:6a:02:a2:44:67:4b:63:53:
a4:a3:35:72:b5:58:ea:07:82:49:41:13:03:3c:d7:78:48:0f:
85:87:d2:a3:a6:fd:87:cd:fc:c4:2b:cb:21:44:ff:c3:d5:95:
34:01:52:eb:61:2f:5b:66:6a:96:3d:43:40:9d:e5:c5:86:ef:
fe:e5:c3:1d:34:8c:f1:3b:3a:ef:6c:6c:de:8d:a8:33:fd:5e:
cc:a2:e5:85:ef:96:b6:87:e7:1a:f7:20:9f:25:21:6d:d4:c8:
02:4c:85:a4:14:75:19:b9:39:be:b8:75:5b:63:db:1a:63:89:
b5:b6:7f:28:a1:d9:b0:a4:7b:05:eb:43:15:b4:aa:ce:3a:16:
fa:ba:8a:e7:43:ba:71:57:b7:c3:0e:1e:7c:8d:30:3b:37:a6:
3b:47:c5:3b
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIECsIvuTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZWJmMzAyMDFmMTJhMDQwZDM4NmQyYjRlZWQ0NDg0NjIzZTRkMTFiMB4XDTIyMDEx
MjIyMTQ0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmQwYTA2YjNkODdl
ZGFkMGQwOTBjNzI2MmU2NmRhZDFkNTc3NGRiZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOjR40LEqrLhIzeORzYGGF6Dc2q/28xH/PJUf1bLa+EYNKAV
ijSLt5+ZTMgJXvDxdQfXFhjRzDRJYbVRc+LMgSTC5m8YLjNR2fSASx9JP/S1fSrr
sZdHUfJTXDr5A7zmnpNnEaGgmVr9fJU/P5EWcy5+Z840af8hv94EevPj733XBMFx
Bfm8PWaf2H+z54QwNp+V5+58meb5oeJniSN8khnkpyIDl3+237gQ7VFO4ITYwvVR
OI/YjVQV/32U+bSsXtiEsNrHyar1ciwMxT/t1p4F1ap++CdvVS7xVjO84iA/YDCA
lnym0AYMbnjqnq4kPqITAXfZWiLXKiBpF4bNPGUCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBS9Cgaz2H7a0NCQxyYuZtrR1XdNvjAfBgNVHSMEGDAWgBT+vzAgHxKgQNOG
0rTu1EhGI+TRGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19yOHdJQjhTb0VEVGh0SzA3dFJJUmlQazBScy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2MvZjhjNGEyLTk2YWMtNGI0ZS1hMTk1LWE5N2MwZGMwYTc0OS8x
L3ZRb0dzOWgtMnREUWtNY21MbWJhMGRWM1RiNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Mv
ZjhjNGEyLTk2YWMtNGI0ZS1hMTk1LWE5N2MwZGMwYTc0OS8xL19yOHdJQjhTb0VE
VGh0SzA3dFJJUmlQazBScy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAlvlhAMEArnwhAMEAbn/ODANBgkq
hkiG9w0BAQsFAAOCAQEAg+c/k6IQ/bSferOrXGnPb9lgmqNGtZDM/PXh0b9DEonI
ZBKQnMbm5HK60SK3p1t4jMGZZpt3B/HJAsT7cw39Vo2pNhDkwikroDYjnNy7qEWC
HF3H2Ei0+cQ+EhNEpdgjvy8492oCokRnS2NTpKM1crVY6geCSUETAzzXeEgPhYfS
o6b9h838xCvLIUT/w9WVNAFS62EvW2Zqlj1DQJ3lxYbv/uXDHTSM8Ts672xs3o2o
M/1ezKLlhe+WtofnGvcgnyUhbdTIAkyFpBR1Gbk5vrh1W2PbGmOJtbZ/KKHZsKR7
BetDFbSqzjoW+rqK50O6cVe3ww4efI0wOzemO0fFOw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org