Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/etWwnlxGMAZrRrnpg61kiyrp96M.roa
File: etWwnlxGMAZrRrnpg61kiyrp96M.roa (raw, json)
Hash identifier: VJCrDn/NW51tWSC4oeRkkr45l67iMJadxJx1fVgCdHg=
Subject key identifier: 7A:D5:B0:9E:5C:46:30:06:6B:46:B9:E9:83:AD:64:8B:2A:E9:F7:A3
Certificate issuer: /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Certificate serial: 036840F1
Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/etWwnlxGMAZrRrnpg61kiyrp96M.roa
Signing time: Sat 01 Jan 2022 14:54:39 +0000
ROA not before: Sat 01 Jan 2022 14:54:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199082
IP address blocks: 185.115.169.0/24 maxlen: 24
185.115.171.0/24 maxlen: 24
185.115.168.0/24 maxlen: 24
185.23.129.0/24 maxlen: 24
185.23.130.0/24 maxlen: 24
185.23.131.0/24 maxlen: 24
185.23.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57164017 (0x36840f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Validity
Not Before: Jan 1 14:54:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ad5b09e5c4630066b46b9e983ad648b2ae9f7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:29:5e:36:e9:74:93:c1:95:74:59:4e:4f:
25:13:d1:da:7f:6d:bc:fc:87:c2:cc:17:03:e4:0c:
09:02:8b:3d:16:ac:b3:21:6d:3c:94:c2:fe:51:f2:
17:d5:7d:5a:1e:3f:95:3e:da:5a:ea:d3:b7:2c:e3:
ba:c9:7c:38:f0:b9:f5:a8:7a:1a:61:b6:f7:34:c6:
c7:2a:89:7c:e5:cc:4f:fa:bd:58:d9:47:05:c5:05:
5e:5e:36:47:bd:8f:00:71:d1:ad:67:77:c7:06:ae:
d8:31:70:9e:f9:c1:34:f6:e5:5f:6f:21:fa:29:ad:
9f:81:31:5c:fe:db:14:1d:80:57:b1:2e:49:84:82:
1f:7c:cb:63:cb:b8:ea:ac:87:9a:ca:fc:c1:ec:f5:
e4:8c:04:a1:11:74:4b:b4:cb:53:55:65:e7:90:3d:
1d:d6:75:02:02:d7:73:dc:bb:ac:ac:8b:55:c9:60:
7f:2d:dc:c7:3a:a2:11:80:5e:a7:e4:80:1a:ba:40:
04:38:72:b3:9c:64:f7:d9:82:63:e2:99:aa:42:52:
53:10:be:5d:9f:9b:f9:2a:d7:94:c7:90:28:03:fb:
36:8b:f9:59:28:21:67:2a:62:ec:ad:b2:69:8f:e6:
eb:b2:f8:dc:87:9c:ae:e6:76:78:a7:8a:6f:8e:67:
6d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D5:B0:9E:5C:46:30:06:6B:46:B9:E9:83:AD:64:8B:2A:E9:F7:A3
X509v3 Authority Key Identifier:
keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/etWwnlxGMAZrRrnpg61kiyrp96M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.128.0/22
185.115.168.0/23
185.115.171.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:58:97:00:ca:03:5f:47:b5:71:82:35:0d:66:1c:5d:7e:5f:
00:eb:af:9b:00:e4:ab:86:1a:c2:ef:d3:f1:96:95:bb:b6:d6:
21:e8:d9:31:0d:aa:f4:ec:5a:0a:6e:c6:0f:5c:5f:33:53:cd:
1c:ef:43:74:8f:7d:ca:2c:e9:14:1b:0a:36:51:ad:dc:12:8b:
82:3a:32:d1:ca:d6:02:10:c8:d4:24:86:9f:df:06:4e:d4:d1:
2e:62:4e:4f:c3:28:5b:16:2a:ea:14:dc:cd:43:6b:a8:a9:9c:
9b:07:0a:b5:2b:ad:89:5e:de:53:d7:55:5a:bb:5a:d7:be:ab:
2f:d0:41:09:88:1b:80:ce:93:19:7f:e7:52:c1:60:6c:db:58:
18:40:25:4a:0a:46:64:4a:09:dd:0c:2d:1c:65:9e:f9:32:b6:
59:97:40:51:1d:4b:2e:d7:5f:9f:5a:dc:78:14:4c:9f:59:71:
2b:7f:9f:08:da:e6:a0:dd:da:7f:bd:dd:0a:38:8d:80:7f:e2:
ad:ac:16:0a:5d:65:63:16:c5:1f:e1:eb:80:54:2d:03:08:85:
60:83:08:59:c7:74:eb:cf:64:19:de:6b:85:d9:85:ad:cb:a1:
d3:6f:99:e7:2d:00:35:65:a5:6c:8a:2d:04:0d:4b:89:23:15:
f3:ca:45:e6
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEA2hA8TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YzZmYTE1NmM1N2M0ZTg4NWI5ZTZhZjgyMzBiNjU0ZDc5NmE1NjExMB4XDTIyMDEw
MTE0NTQzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2FkNWIwOWU1YzQ2
MzAwNjZiNDZiOWU5ODNhZDY0OGIyYWU5ZjdhMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ0uKV426XSTwZV0WU5PJRPR2n9tvPyHwswXA+QMCQKLPRas
syFtPJTC/lHyF9V9Wh4/lT7aWurTtyzjusl8OPC59ah6GmG29zTGxyqJfOXMT/q9
WNlHBcUFXl42R72PAHHRrWd3xwau2DFwnvnBNPblX28h+imtn4ExXP7bFB2AV7Eu
SYSCH3zLY8u46qyHmsr8wez15IwEoRF0S7TLU1Vl55A9HdZ1AgLXc9y7rKyLVclg
fy3cxzqiEYBep+SAGrpABDhys5xk99mCY+KZqkJSUxC+XZ+b+SrXlMeQKAP7Nov5
WSghZypi7K2yaY/m67L43IecruZ2eKeKb45nbZECAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBR61bCeXEYwBmtGuemDrWSLKun3ozAfBgNVHSMEGDAWgBQMb6FWxXxOiFue
avgjC2VNeWpWETAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RHLWhWc1Y4VG9oYm5tcjRJd3RsVFhscVZoRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2UvNDhjNTZkLTU3MjctNDJiYS04MGM0LWI4YzM2ZWNlZGFkOC8x
L2V0V3dubHhHTUFaclJybnBnNjFraXlycDk2TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Uv
NDhjNTZkLTU3MjctNDJiYS04MGM0LWI4YzM2ZWNlZGFkOC8xL0RHLWhWc1Y4VG9o
Ym5tcjRJd3RsVFhscVZoRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEArkXgAMEAblzqAMEALlzqzANBgkq
hkiG9w0BAQsFAAOCAQEAC1iXAMoDX0e1cYI1DWYcXX5fAOuvmwDkq4Yawu/T8ZaV
u7bWIejZMQ2q9OxaCm7GD1xfM1PNHO9DdI99yizpFBsKNlGt3BKLgjoy0crWAhDI
1CSGn98GTtTRLmJOT8MoWxYq6hTczUNrqKmcmwcKtSutiV7eU9dVWrta176rL9BB
CYgbgM6TGX/nUsFgbNtYGEAlSgpGZEoJ3QwtHGWe+TK2WZdAUR1LLtdfn1rceBRM
n1lxK3+fCNrmoN3af73dCjiNgH/irawWCl1lYxbFH+HrgFQtAwiFYIMIWcd0689k
Gd5rhdmFrcuh02+Z5y0ANWWlbIotBA1LiSMV88pF5g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:01 2023 by rpki-client on console-ams.rpki-client.org