Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/XbRDJCtb2ol7VfaPNz26EoAMpJs.roa
File: XbRDJCtb2ol7VfaPNz26EoAMpJs.roa (raw, json)
Hash identifier: XV6Oon9SIDbDnIfq+NumCO4LTRuJEmdbEoQqK0BGStc=
Subject key identifier: 5D:B4:43:24:2B:5B:DA:89:7B:55:F6:8F:37:3D:BA:12:80:0C:A4:9B
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 11CC0DD8
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/XbRDJCtb2ol7VfaPNz26EoAMpJs.roa
Signing time: Sat 01 Jan 2022 15:05:44 +0000
ROA not before: Sat 01 Jan 2022 15:05:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203380
IP address blocks: 82.118.245.0/24 maxlen: 24
79.124.7.0/24 maxlen: 24
91.148.141.0/24 maxlen: 24
78.128.99.0/24 maxlen: 24
94.72.143.0/24 maxlen: 24
82.118.227.0/24 maxlen: 24
82.118.230.0/24 maxlen: 24
82.118.234.0/24 maxlen: 24
82.118.235.0/24 maxlen: 24
130.185.251.0/24 maxlen: 24
79.124.77.0/24 maxlen: 24
78.128.127.0/24 maxlen: 24
2a01:8740:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298585560 (0x11cc0dd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 15:05:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5db443242b5bda897b55f68f373dba12800ca49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:46:d2:16:6b:da:ac:22:2c:d5:b4:ac:a6:
b2:f4:74:4a:20:d7:2a:32:04:35:f5:ff:19:d1:74:
55:9e:a1:a3:dd:8e:bb:c2:a8:26:63:fa:9c:a7:57:
2d:9a:ea:26:66:b2:da:f7:53:b2:16:13:17:50:12:
c4:77:47:10:23:c7:e7:51:08:77:3e:93:20:74:8f:
32:1c:49:80:62:22:09:83:29:cd:b0:6b:16:3a:fb:
80:c9:fb:e8:52:a9:2f:ef:f8:f5:42:06:55:40:18:
2a:3c:1b:70:21:b4:2e:21:ac:80:d7:96:85:8d:68:
5e:34:08:8f:d8:4f:e2:ce:f8:f7:78:a0:48:e2:52:
09:00:7b:a4:0a:39:85:c4:69:01:02:31:4f:a0:7d:
2d:d8:03:6d:90:41:56:b7:09:97:84:72:02:25:17:
6d:92:b2:e0:1f:fe:4f:d6:42:4b:cc:06:87:45:27:
99:f0:7c:b7:d0:ce:c6:c7:8e:7a:d3:e4:bc:04:72:
12:22:17:8d:90:af:b0:fa:03:10:dd:e2:42:33:29:
a1:d8:99:02:c7:70:8e:e9:18:c7:bc:e5:95:53:32:
14:25:59:1a:66:e8:ba:cc:18:e2:2e:6d:af:c5:92:
a5:88:f2:9b:19:79:17:02:4f:a3:e5:35:73:2b:ec:
d9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B4:43:24:2B:5B:DA:89:7B:55:F6:8F:37:3D:BA:12:80:0C:A4:9B
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/XbRDJCtb2ol7VfaPNz26EoAMpJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.128.99.0/24
78.128.127.0/24
79.124.7.0/24
79.124.77.0/24
82.118.227.0/24
82.118.230.0/24
82.118.234.0/23
82.118.245.0/24
91.148.141.0/24
94.72.143.0/24
130.185.251.0/24
IPv6:
2a01:8740:1::/48
Signature Algorithm: sha256WithRSAEncryption
0a:04:07:09:93:d0:4c:86:ff:d8:fa:fe:d1:25:e2:b7:71:04:
c4:4b:e6:1e:d4:02:e1:35:ac:3c:71:4b:ee:e0:7d:3b:9e:db:
2c:ec:16:cf:51:f9:bd:a1:d8:8b:f2:42:1c:3c:b2:93:f9:74:
f7:56:a6:ed:8b:a4:60:f9:f2:c1:e8:d9:0c:b0:3e:f0:7a:c4:
32:dc:db:06:b2:1d:3f:c9:2d:df:08:be:51:35:50:be:1b:fa:
62:e9:87:c6:75:48:8d:a1:b8:1c:c0:57:91:04:43:18:54:20:
f2:27:d6:13:3f:85:f1:9e:0a:82:d2:a4:9d:3d:b6:bb:cd:cf:
a3:27:98:a3:98:62:be:a6:de:27:29:b5:e2:62:4a:43:92:3f:
e0:cb:8e:2c:c0:c6:10:f7:bc:64:38:5b:4d:8a:5f:42:7b:8e:
90:4c:49:7d:2b:cc:5d:e2:a2:af:74:79:69:f5:c1:a2:07:9c:
b5:67:94:22:22:ad:d2:20:55:fb:ae:0b:8a:40:61:e3:9c:97:
cd:71:04:8e:99:e1:15:7e:00:6a:c0:f6:8c:2a:59:01:8e:2d:
a6:33:06:4d:de:8a:f6:a8:17:91:8d:2a:e6:a1:1b:60:a2:0c:
a3:3b:b9:1c:2c:81:0f:d6:19:e9:3e:8f:66:9e:7e:94:66:62:
69:5a:09:ef
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIEEcwN2DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MzVlYWM2NGVhNDgwMmU2ODI0Njg2ZjdjMGQyMDFmMmM4NWNiMmFhMB4XDTIyMDEw
MTE1MDU0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWRiNDQzMjQyYjVi
ZGE4OTdiNTVmNjhmMzczZGJhMTI4MDBjYTQ5YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALMeRtIWa9qsIizVtKymsvR0SiDXKjIENfX/GdF0VZ6ho92O
u8KoJmP6nKdXLZrqJmay2vdTshYTF1ASxHdHECPH51EIdz6TIHSPMhxJgGIiCYMp
zbBrFjr7gMn76FKpL+/49UIGVUAYKjwbcCG0LiGsgNeWhY1oXjQIj9hP4s7493ig
SOJSCQB7pAo5hcRpAQIxT6B9LdgDbZBBVrcJl4RyAiUXbZKy4B/+T9ZCS8wGh0Un
mfB8t9DOxseOetPkvARyEiIXjZCvsPoDEN3iQjMpodiZAsdwjukYx7zllVMyFCVZ
GmbouswY4i5tr8WSpYjymxl5FwJPo+U1cyvs2R8CAwEAAaOCAlYwggJSMB0GA1Ud
DgQWBBRdtEMkK1vaiXtV9o83PboSgAykmzAfBgNVHSMEGDAWgBTDXqxk6kgC5oJG
hvfA0gHyyFyyqjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3cxNnNaT3BJQXVhQ1JvYjN3TklCOHNoY3Nxby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDMvY2NkZDhiLTc3MjAtNGRlMC04YzQzLWRhY2I1ZjM1NmVhMy8x
L1hiUkRKQ3RiMm9sN1ZmYVBOejI2RW9BTXBKcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMv
Y2NkZDhiLTc3MjAtNGRlMC04YzQzLWRhY2I1ZjM1NmVhMy8xL3cxNnNaT3BJQXVh
Q1JvYjN3TklCOHNoY3Nxby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBs
BggrBgEFBQcBBwEB/wRdMFswSAQCAAEwQgMEAE6AYwMEAE6AfwMEAE98BwMEAE98
TQMEAFJ24wMEAFJ25gMEAVJ26gMEAFJ29QMEAFuUjQMEAF5IjwMEAIK5+zAPBAIA
AjAJAwcAKgGHQAABMA0GCSqGSIb3DQEBCwUAA4IBAQAKBAcJk9BMhv/Y+v7RJeK3
cQTES+Ye1ALhNaw8cUvu4H07ntss7BbPUfm9odiL8kIcPLKT+XT3Vqbti6Rg+fLB
6NkMsD7wesQy3NsGsh0/yS3fCL5RNVC+G/pi6YfGdUiNobgcwFeRBEMYVCDyJ9YT
P4XxngqC0qSdPba7zc+jJ5ijmGK+pt4nKbXiYkpDkj/gy44swMYQ97xkOFtNil9C
e46QTEl9K8xd4qKvdHlp9cGiB5y1Z5QiIq3SIFX7rguKQGHjnJfNcQSOmeEVfgBq
wPaMKlkBji2mMwZN3or2qBeRjSrmoRtgogyjO7kcLIEP1hnpPo9mnn6UZmJpWgnv
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:12 2024 by rpki-client on console-ams.rpki-client.org