Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/E8NRQeoXkLQfZrw8zThHjmKtEQ8.roa
File: E8NRQeoXkLQfZrw8zThHjmKtEQ8.roa (raw, json)
Hash identifier: TG0n9GapZnt6Zd1RyIdZOYDs+UfvJSDMhI+WdWN5FcQ=
Subject key identifier: 13:C3:51:41:EA:17:90:B4:1F:66:BC:3C:CD:38:47:8E:62:AD:11:0F
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 0AA6AF3B
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/E8NRQeoXkLQfZrw8zThHjmKtEQ8.roa
Signing time: Fri 11 Feb 2022 14:18:39 +0000
ROA not before: Fri 11 Feb 2022 14:18:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 194.145.137.0/24 maxlen: 24
194.145.136.0/24 maxlen: 24
185.237.82.0/24 maxlen: 24
185.237.83.0/24 maxlen: 24
194.145.138.0/24 maxlen: 24
185.205.16.0/24 maxlen: 24
185.86.83.0/24 maxlen: 24
185.86.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178695995 (0xaa6af3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Feb 11 14:18:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13c35141ea1790b41f66bc3ccd38478e62ad110f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:4d:28:3c:02:ad:a6:8b:99:7a:b4:64:fb:
29:b5:ea:0f:fb:f5:15:a8:91:f3:5f:01:db:14:14:
38:21:73:29:92:ae:30:55:cb:f4:f5:24:e0:9c:b8:
06:58:1e:7c:14:92:ee:e8:ec:69:67:0e:4c:b6:87:
fe:4c:64:c3:1b:5d:05:c2:7a:94:81:fa:bf:99:60:
3c:c9:ab:d5:e2:9c:dc:78:59:60:d9:6f:65:6d:3c:
b9:e7:fe:a9:ab:b5:5a:ef:bf:db:4e:ee:2d:91:de:
f3:66:43:7e:99:78:8e:34:a2:18:87:ae:8f:6f:ff:
c1:be:38:84:50:8e:36:5d:35:22:63:d3:38:ea:f8:
54:3d:96:59:cc:a5:4e:c0:78:6f:c1:ef:ff:b6:f1:
b6:fb:91:1f:61:0c:86:5b:06:bf:74:ff:16:c4:51:
ff:d1:bc:fa:68:1c:98:b7:39:f4:32:d7:bf:51:9c:
b5:b3:53:21:1c:77:50:23:d8:ae:ac:37:41:d9:99:
a9:76:47:68:6b:de:7d:6b:f6:a5:c0:5a:ae:8d:e9:
44:be:89:6f:ba:83:ac:d4:14:fd:ee:45:bb:cc:8a:
68:74:76:89:f2:b1:05:74:fd:87:54:86:f1:00:b6:
4c:06:ed:f9:d4:19:0e:59:27:d2:20:78:f9:cb:5e:
07:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C3:51:41:EA:17:90:B4:1F:66:BC:3C:CD:38:47:8E:62:AD:11:0F
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/E8NRQeoXkLQfZrw8zThHjmKtEQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.82.0/23
185.205.16.0/24
185.237.82.0/23
194.145.136.0-194.145.138.255
Signature Algorithm: sha256WithRSAEncryption
89:70:02:f8:bd:cf:d8:fe:b5:f4:15:bc:ab:7f:4d:8e:43:58:
6b:8c:de:59:21:d4:a7:06:ab:9c:9e:9e:89:d9:85:04:a1:a2:
86:70:86:e0:1c:45:a5:8b:2a:24:a4:68:cf:5a:33:98:72:67:
31:f4:09:fd:dc:07:64:ef:a1:05:51:e4:c8:35:61:c4:d5:01:
16:60:42:a6:ce:f6:69:1a:98:b8:1e:8b:a0:4c:67:be:9a:54:
60:88:c0:bd:9e:a5:c5:22:7b:9d:c6:9b:d3:9a:0f:ca:d4:06:
67:a3:ca:10:e2:a0:ef:84:52:b6:f7:e7:0c:b2:0d:49:b7:21:
63:58:f1:6c:e0:3b:fb:0d:b0:ed:c2:4c:3b:b3:62:6a:99:88:
bf:30:da:d1:39:14:fa:ae:fe:e5:9c:d8:f6:0d:3c:9e:67:a1:
19:a6:db:f1:81:dd:1e:27:3f:4d:09:6f:60:bb:53:58:bc:43:
85:42:92:38:51:d8:de:4f:04:cd:c2:d6:dc:ff:b3:f7:fe:e8:
01:de:c9:a2:17:3e:36:b9:8f:7b:02:2f:00:69:7f:71:a3:a3:
3f:9c:b3:12:6f:3a:83:cd:b6:11:02:b2:21:78:4d:6a:ea:ef:
96:b1:9f:69:33:a0:f1:4e:55:c7:6a:22:a5:4c:01:7d:39:98:
f4:93:0a:25
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIECqavOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MDU5MmU2ODg5NWM3MDY4YjQ2NTU1MDg5MTdhZDViYmRkYmQwYTVmMB4XDTIyMDIx
MTE0MTgzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTNjMzUxNDFlYTE3
OTBiNDFmNjZiYzNjY2QzODQ3OGU2MmFkMTEwZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANYaTSg8Aq2mi5l6tGT7KbXqD/v1FaiR818B2xQUOCFzKZKu
MFXL9PUk4Jy4BlgefBSS7ujsaWcOTLaH/kxkwxtdBcJ6lIH6v5lgPMmr1eKc3HhZ
YNlvZW08uef+qau1Wu+/207uLZHe82ZDfpl4jjSiGIeuj2//wb44hFCONl01ImPT
OOr4VD2WWcylTsB4b8Hv/7bxtvuRH2EMhlsGv3T/FsRR/9G8+mgcmLc59DLXv1Gc
tbNTIRx3UCPYrqw3QdmZqXZHaGvefWv2pcBaro3pRL6Jb7qDrNQU/e5Fu8yKaHR2
ifKxBXT9h1SG8QC2TAbt+dQZDlkn0iB4+cteB5kCAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBQTw1FB6heQtB9mvDzNOEeOYq0RDzAfBgNVHSMEGDAWgBRQWS5oiVxwaLRl
VQiRetW73b0KXzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VGa3VhSWxjY0dpMFpWVUlrWHJWdTkyOUNsOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDIvMmE4MTAwLTE3MmItNDhlMy1hMzJhLTdiYmQyOGNlNGE3NS8x
L0U4TlJRZW9Ya0xRZlpydzh6VGhIam1LdEVROC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIv
MmE4MTAwLTE3MmItNDhlMy1hMzJhLTdiYmQyOGNlNGE3NS8xL1VGa3VhSWxjY0dp
MFpWVUlrWHJWdTkyOUNsOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEAblWUgMEALnNEAMEAbntUjAMAwQD
wpGIAwQAwpGKMA0GCSqGSIb3DQEBCwUAA4IBAQCJcAL4vc/Y/rX0Fbyrf02OQ1hr
jN5ZIdSnBqucnp6J2YUEoaKGcIbgHEWliyokpGjPWjOYcmcx9An93Adk76EFUeTI
NWHE1QEWYEKmzvZpGpi4HougTGe+mlRgiMC9nqXFInudxpvTmg/K1AZno8oQ4qDv
hFK29+cMsg1JtyFjWPFs4Dv7DbDtwkw7s2JqmYi/MNrRORT6rv7lnNj2DTyeZ6EZ
ptvxgd0eJz9NCW9gu1NYvEOFQpI4UdjeTwTNwtbc/7P3/ugB3smiFz42uY97Ai8A
aX9xo6M/nLMSbzqDzbYRArIheE1q6u+WsZ9pM6DxTlXHaiKlTAF9OZj0kwol
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org