Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mI8Wc9QLEZCAxdU4XbwWoDZuwts.roa
File: mI8Wc9QLEZCAxdU4XbwWoDZuwts.roa (raw, json)
Hash identifier: QZqPneVCgaDWxlV0eHSjtX2Q50kpZ3tXvzgX+TOm5PE=
Subject key identifier: 98:8F:16:73:D4:0B:11:90:80:C5:D5:38:5D:BC:16:A0:36:6E:C2:DB
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 19BB40B9
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mI8Wc9QLEZCAxdU4XbwWoDZuwts.roa
Signing time: Fri 15 Apr 2022 02:18:09 +0000
ROA not before: Fri 15 Apr 2022 02:18:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.133.192.0/24 maxlen: 24
185.117.22.0/24 maxlen: 24
185.122.57.0/24 maxlen: 32
2a06:82c2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431702201 (0x19bb40b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Apr 15 02:18:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=988f1673d40b119080c5d5385dbc16a0366ec2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:65:59:1d:8b:4b:83:e4:7b:f2:37:f5:6d:
4d:46:19:88:b0:ae:d8:10:37:29:53:5c:a9:12:42:
64:46:43:22:4b:36:1e:41:bb:6f:80:a9:98:86:78:
63:93:9b:1b:a2:4e:72:31:0b:28:55:40:8b:1c:c7:
13:c6:14:71:25:51:24:71:59:f7:ab:90:d9:99:00:
32:ce:99:49:26:2a:5d:73:76:e6:c8:b6:ab:33:36:
b7:4d:85:78:f8:92:fd:da:be:2a:45:03:0c:12:6f:
f9:f9:c6:3f:9b:3f:b3:40:f3:25:dc:9e:49:a1:bb:
b6:fc:54:15:a0:13:6b:7f:4b:a2:24:57:bf:8b:57:
18:6f:ec:06:5a:51:bd:53:4e:fd:c5:8d:22:56:16:
2c:95:e3:fc:cf:ab:96:e4:4d:20:82:86:90:bf:2e:
d7:0e:f8:48:0b:43:ff:27:cd:ba:22:82:4d:13:57:
49:c1:0a:8e:52:e6:2e:9c:f3:d2:44:c2:e4:c1:ba:
ce:ec:0f:8e:24:53:85:e0:2d:ac:2f:1f:ba:6f:17:
20:da:09:b3:2d:08:70:d8:37:69:54:43:6e:c9:52:
46:2f:40:8a:2e:3c:66:51:84:37:1e:4b:b4:cd:e4:
45:dd:3a:19:55:d9:80:8d:6d:d1:5c:f5:7c:52:b4:
f3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8F:16:73:D4:0B:11:90:80:C5:D5:38:5D:BC:16:A0:36:6E:C2:DB
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mI8Wc9QLEZCAxdU4XbwWoDZuwts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.122.57.0/24
185.133.192.0/24
IPv6:
2a06:82c2::/48
Signature Algorithm: sha256WithRSAEncryption
17:af:f4:66:4b:44:66:cf:92:73:60:62:fb:95:23:a0:39:bd:
c0:f9:36:58:d9:01:de:89:af:9e:55:4e:bc:5e:42:fd:10:0d:
d4:c9:1b:f1:52:71:88:22:58:85:6e:fb:ac:cb:b3:cc:c7:75:
76:a3:4d:ae:20:ce:7b:5e:c4:29:eb:79:ec:98:8d:bf:ea:71:
2d:ce:91:6d:b2:be:17:9f:be:e2:eb:d5:6c:98:c5:ef:22:67:
9d:b1:ba:3d:a5:9b:f8:3d:f9:92:ed:92:33:0f:b4:2a:cf:4a:
ff:cb:ca:2f:a2:46:d6:45:53:f6:7f:95:9e:8c:36:36:b3:7a:
90:79:b1:86:60:58:ef:91:ab:7b:2d:75:cc:5c:12:d7:cd:37:
85:27:97:67:38:88:f3:0a:e9:69:74:44:c5:73:99:89:f1:f3:
0c:01:b8:e4:24:c6:be:c6:bd:29:bc:56:e9:3e:8f:13:7d:5a:
39:5f:53:3e:b7:ec:17:bf:e2:72:04:8a:c6:20:dc:ce:f2:c6:
16:de:70:6d:99:1c:8b:c7:5e:d2:bd:e8:b2:b0:f7:cc:3f:69:
b4:16:7a:67:a9:1c:1b:7c:ee:e1:55:b6:6f:ef:88:83:19:4b:
bd:3d:07:b6:a8:21:5b:9c:bc:46:7f:97:b8:85:32:2d:b2:23:
fc:08:38:be
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIEGbtAuTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDQx
NTAyMTgwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTg4ZjE2NzNkNDBi
MTE5MDgwYzVkNTM4NWRiYzE2YTAzNjZlYzJkYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALNFZVkdi0uD5HvyN/VtTUYZiLCu2BA3KVNcqRJCZEZDIks2
HkG7b4CpmIZ4Y5ObG6JOcjELKFVAixzHE8YUcSVRJHFZ96uQ2ZkAMs6ZSSYqXXN2
5si2qzM2t02FePiS/dq+KkUDDBJv+fnGP5s/s0DzJdyeSaG7tvxUFaATa39LoiRX
v4tXGG/sBlpRvVNO/cWNIlYWLJXj/M+rluRNIIKGkL8u1w74SAtD/yfNuiKCTRNX
ScEKjlLmLpzz0kTC5MG6zuwPjiRTheAtrC8fum8XINoJsy0IcNg3aVRDbslSRi9A
ii48ZlGENx5LtM3kRd06GVXZgI1t0Vz1fFK08/sCAwEAAaOCAiYwggIiMB0GA1Ud
DgQWBBSYjxZz1AsRkIDF1ThdvBagNm7C2zAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L21JOFdjOVFMRVpDQXhkVTRYYndXb0RadXd0cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8
BggrBgEFBQcBBwEB/wQtMCswGAQCAAEwEgMEALl1FgMEALl6OQMEALmFwDAPBAIA
AjAJAwcAKgaCwgAAMA0GCSqGSIb3DQEBCwUAA4IBAQAXr/RmS0Rmz5JzYGL7lSOg
Ob3A+TZY2QHeia+eVU68XkL9EA3UyRvxUnGIIliFbvusy7PMx3V2o02uIM57XsQp
63nsmI2/6nEtzpFtsr4Xn77i69VsmMXvImedsbo9pZv4PfmS7ZIzD7Qqz0r/y8ov
okbWRVP2f5WejDY2s3qQebGGYFjvkat7LXXMXBLXzTeFJ5dnOIjzCulpdETFc5mJ
8fMMAbjkJMa+xr0pvFbpPo8TfVo5X1M+t+wXv+JyBIrGINzO8sYW3nBtmRyLx17S
veiysPfMP2m0FnpnqRwbfO7hVbZv74iDGUu9PQe2qCFbnLxGf5e4hTItsiP8CDi+
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org