Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/i21BKu0aXeuaXIawq0k3KcZl4j4.roa
File: i21BKu0aXeuaXIawq0k3KcZl4j4.roa (raw, json)
Hash identifier: FhnIeN0eBBFN73cre9AYXb9WNKzw3L/ccintGyCVHv4=
Subject key identifier: 8B:6D:41:2A:ED:1A:5D:EB:9A:5C:86:B0:AB:49:37:29:C6:65:E2:3E
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 188294D3
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/i21BKu0aXeuaXIawq0k3KcZl4j4.roa
Signing time: Mon 31 Jan 2022 09:10:03 +0000
ROA not before: Mon 31 Jan 2022 09:10:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.133.192.0/24 maxlen: 24
185.120.7.0/24 maxlen: 24
185.117.22.0/24 maxlen: 24
185.122.56.0/24 maxlen: 24
185.122.57.0/24 maxlen: 24
185.122.58.0/24 maxlen: 32
185.122.56.0/22 maxlen: 32
185.122.59.0/24 maxlen: 32
2a06:82c2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411210963 (0x188294d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 31 09:10:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b6d412aed1a5deb9a5c86b0ab493729c665e23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:fb:fa:c6:6c:30:d8:b7:35:8b:f8:65:50:
04:bf:f4:4b:4f:84:5d:17:1c:14:1a:dd:8e:a8:6f:
63:52:6b:76:0c:b8:3d:d9:fe:a5:76:ef:7b:89:ee:
86:3c:fd:11:d2:3e:d0:6b:60:77:ba:38:64:b9:9b:
8c:53:64:a8:58:ce:d4:ab:cd:10:72:6f:25:4c:f2:
a7:06:54:80:7c:41:8d:e0:57:f1:d3:34:d3:71:48:
fd:78:59:ff:ab:60:f1:7c:0c:3a:12:ae:cb:89:8c:
5f:df:47:ed:cf:91:9c:9f:12:b1:87:50:8e:49:6b:
ed:89:bc:a1:4b:4e:52:78:60:85:ce:4e:9f:9c:9f:
c0:6d:14:a5:26:88:c7:69:e0:0c:83:15:ca:fb:e8:
84:65:c9:98:e8:11:4f:14:24:dd:b0:bb:d7:22:1d:
2c:54:08:57:3c:49:6f:06:9a:de:e8:ea:fc:88:ba:
b9:41:51:80:df:af:d3:27:4e:33:5a:4b:69:05:ba:
a4:90:04:e7:3e:6c:57:0d:da:51:04:1d:84:86:57:
65:ac:32:d4:51:6e:d7:63:24:0a:d5:d2:a1:37:0d:
68:0d:00:4c:3e:00:c9:a5:fa:ee:ce:96:03:24:4f:
1f:9c:30:8f:30:04:c7:7c:19:ff:23:55:5c:e0:8d:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6D:41:2A:ED:1A:5D:EB:9A:5C:86:B0:AB:49:37:29:C6:65:E2:3E
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/i21BKu0aXeuaXIawq0k3KcZl4j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.120.7.0/24
185.122.56.0/22
185.133.192.0/24
IPv6:
2a06:82c2::/48
Signature Algorithm: sha256WithRSAEncryption
91:2c:5c:15:b9:69:36:9d:93:d7:cd:0c:51:61:ed:af:37:7e:
3a:d3:d0:91:c4:8a:dd:49:5f:c7:34:95:a2:7c:2d:8f:f9:f1:
02:a3:dd:6b:ce:ac:f7:5d:1a:af:3c:f1:fb:d0:83:16:67:02:
83:d1:74:a5:da:43:d6:cd:eb:1b:9d:3e:76:db:c7:f1:81:c7:
71:0b:52:90:17:4b:bc:e2:aa:8e:27:f5:5b:27:48:34:c7:9d:
e7:7c:5f:57:92:14:9a:55:da:b5:32:fa:d8:92:62:f9:7b:58:
86:57:15:52:fc:4b:fe:eb:98:0e:d2:91:10:18:e7:a4:f2:85:
7f:3b:24:1f:2c:20:d6:07:12:88:de:a1:55:5a:e6:d3:65:d9:
a5:88:e8:70:06:a7:d5:9a:cf:9b:0e:f0:38:af:46:f2:66:6b:
f0:93:59:3a:dc:4c:69:8a:b5:24:59:36:5e:b8:30:17:72:e2:
f9:32:50:32:99:8a:67:b6:ab:5a:26:17:e6:7e:d5:84:72:16:
b7:b9:43:1a:72:f5:b7:8e:3f:36:ab:6b:a7:ca:3c:ea:62:ac:
35:ff:0d:a9:d7:37:9e:09:bf:3c:ed:69:71:79:1a:51:b7:54:
7b:2f:99:69:28:af:e7:01:d1:b2:40:81:e0:81:22:9f:e8:bb:
3a:43:38:6b
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIEGIKU0zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDEz
MTA5MTAwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGI2ZDQxMmFlZDFh
NWRlYjlhNWM4NmIwYWI0OTM3MjljNjY1ZTIzZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJnu+/rGbDDYtzWL+GVQBL/0S0+EXRccFBrdjqhvY1Jrdgy4
Pdn+pXbve4nuhjz9EdI+0Gtgd7o4ZLmbjFNkqFjO1KvNEHJvJUzypwZUgHxBjeBX
8dM003FI/XhZ/6tg8XwMOhKuy4mMX99H7c+RnJ8SsYdQjklr7Ym8oUtOUnhghc5O
n5yfwG0UpSaIx2ngDIMVyvvohGXJmOgRTxQk3bC71yIdLFQIVzxJbwaa3ujq/Ii6
uUFRgN+v0ydOM1pLaQW6pJAE5z5sVw3aUQQdhIZXZawy1FFu12MkCtXSoTcNaA0A
TD4AyaX67s6WAyRPH5wwjzAEx3wZ/yNVXOCNWf0CAwEAAaOCAiwwggIoMB0GA1Ud
DgQWBBSLbUEq7Rpd65pchrCrSTcpxmXiPjAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L2kyMUJLdTBhWGV1YVhJYXdxMGszS2NabDRqNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBC
BggrBgEFBQcBBwEB/wQzMDEwHgQCAAEwGAMEALl1FgMEALl4BwMEArl6OAMEALmF
wDAPBAIAAjAJAwcAKgaCwgAAMA0GCSqGSIb3DQEBCwUAA4IBAQCRLFwVuWk2nZPX
zQxRYe2vN34609CRxIrdSV/HNJWifC2P+fECo91rzqz3XRqvPPH70IMWZwKD0XSl
2kPWzesbnT5228fxgcdxC1KQF0u84qqOJ/VbJ0g0x53nfF9XkhSaVdq1MvrYkmL5
e1iGVxVS/Ev+65gO0pEQGOek8oV/OyQfLCDWBxKI3qFVWubTZdmliOhwBqfVms+b
DvA4r0byZmvwk1k63ExpirUkWTZeuDAXcuL5MlAymYpntqtaJhfmftWEcha3uUMa
cvW3jj82q2unyjzqYqw1/w2p1zeeCb887WlxeRpRt1R7L5lpKK/nAdGyQIHggSKf
6Ls6Qzhr
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org