Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/eee2HAl4AFI06s3vAiUc-GOws3k.roa
File: eee2HAl4AFI06s3vAiUc-GOws3k.roa (raw, json)
Hash identifier: RFJsQdnTo0OeVhlfxkfYQ9ejI34nRAnZfXMR2JvL34Y=
Subject key identifier: 79:E7:B6:1C:09:78:00:52:34:EA:CD:EF:02:25:1C:F8:63:B0:B3:79
Certificate issuer: /CN=fd53c3aff31e27d2a1bc4d9b3ee75bb8a9b57838
Certificate serial: 2937201C
Authority key identifier: FD:53:C3:AF:F3:1E:27:D2:A1:BC:4D:9B:3E:E7:5B:B8:A9:B5:78:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VPDr_MeJ9KhvE2bPudbuKm1eDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/eee2HAl4AFI06s3vAiUc-GOws3k.roa
Signing time: Sat 01 Jan 2022 13:01:08 +0000
ROA not before: Sat 01 Jan 2022 13:01:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196810
IP address blocks: 185.15.200.0/22 maxlen: 25
185.213.204.0/22 maxlen: 22
89.207.232.0/21 maxlen: 25
185.170.16.0/22 maxlen: 22
178.23.168.0/21 maxlen: 25
185.224.40.0/22 maxlen: 22
2a02:ab40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691478556 (0x2937201c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd53c3aff31e27d2a1bc4d9b3ee75bb8a9b57838
Validity
Not Before: Jan 1 13:01:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79e7b61c0978005234eacdef02251cf863b0b379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:54:ba:f7:4e:a6:f9:e4:37:c5:8f:34:80:
ad:9d:76:d3:95:48:a2:e3:88:68:68:93:ad:ca:5d:
71:40:99:84:0a:d0:38:21:a4:06:82:6a:16:66:20:
55:a3:42:22:db:d5:a3:0f:cd:ba:72:aa:74:5a:f6:
c5:25:b5:f8:03:2f:17:10:ab:e1:e9:54:33:d2:a2:
6b:11:5a:e9:5b:31:f8:60:1b:0f:df:26:b6:ef:f2:
37:67:60:bb:8b:20:87:ba:75:0a:db:db:29:86:56:
44:b3:01:17:01:7a:f3:d6:c3:39:58:82:f4:3d:39:
e7:cb:08:39:8c:42:29:0b:1f:c5:7e:02:ef:e0:a4:
0b:bc:e1:9e:cf:c7:f1:3c:3c:34:cc:98:e8:b6:14:
a7:35:fe:56:ab:37:9b:58:2f:70:fd:73:38:d8:0d:
31:aa:76:a1:63:f7:eb:01:fb:d4:fa:2b:5c:e5:43:
23:fb:5e:64:bb:e1:f8:4b:17:f9:9f:2f:9e:bc:26:
3d:66:11:7b:b6:ad:31:fc:85:1a:76:fa:ca:a3:cd:
b6:2c:c7:cc:51:36:ca:e9:bb:99:f3:7d:2f:6f:fb:
58:7a:2c:d2:f8:e0:71:53:94:4c:8c:cb:72:4d:f3:
35:83:29:10:7b:75:f8:00:89:66:3e:7b:cf:72:55:
8b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E7:B6:1C:09:78:00:52:34:EA:CD:EF:02:25:1C:F8:63:B0:B3:79
X509v3 Authority Key Identifier:
keyid:FD:53:C3:AF:F3:1E:27:D2:A1:BC:4D:9B:3E:E7:5B:B8:A9:B5:78:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VPDr_MeJ9KhvE2bPudbuKm1eDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/eee2HAl4AFI06s3vAiUc-GOws3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/_VPDr_MeJ9KhvE2bPudbuKm1eDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.232.0/21
178.23.168.0/21
185.15.200.0/22
185.170.16.0/22
185.213.204.0/22
185.224.40.0/22
IPv6:
2a02:ab40::/29
Signature Algorithm: sha256WithRSAEncryption
5a:ef:fc:a6:9e:3a:b7:03:65:bc:d1:38:ab:60:0d:d7:a7:b5:
85:b3:fc:66:36:9d:c3:b0:9b:b0:94:84:0a:a8:22:1b:aa:9b:
7b:d2:2e:8b:e0:79:18:36:cb:bb:a1:46:43:8f:ae:49:37:0e:
97:13:33:1e:de:76:de:ae:4d:11:6a:9c:d8:50:c1:c1:ea:3c:
6b:dd:ca:18:fc:eb:e3:0d:8a:20:c1:13:d9:24:d3:27:7c:9e:
bf:d3:d3:78:88:7f:8b:f3:aa:26:4c:f7:5a:61:cf:79:61:3b:
12:02:84:22:4c:d9:e4:3e:9d:3f:fe:7c:34:fe:b3:f3:11:4a:
0b:fc:0d:fd:f1:6d:ec:29:22:54:ae:1f:f2:e8:8e:d0:e1:bd:
ba:71:53:38:7b:03:15:c6:65:35:76:d4:49:dc:2a:41:bb:7f:
b4:06:05:9d:03:8b:a3:dc:f9:42:60:70:9e:a5:51:39:37:3b:
cc:58:66:a5:b1:77:91:5e:72:ee:45:15:a4:be:d9:35:23:c9:
be:c7:45:b5:9d:f3:24:60:41:3b:f9:78:df:9d:ed:31:01:9a:
95:78:2e:1b:f2:56:00:db:89:ad:29:53:ac:bc:c7:95:da:14:
df:89:d9:f8:f2:df:66:b6:11:b4:46:d9:82:80:dd:ed:53:c4:
e3:22:b9:23
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIEKTcgHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZDUzYzNhZmYzMWUyN2QyYTFiYzRkOWIzZWU3NWJiOGE5YjU3ODM4MB4XDTIyMDEw
MTEzMDEwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzllN2I2MWMwOTc4
MDA1MjM0ZWFjZGVmMDIyNTFjZjg2M2IwYjM3OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMjaVLr3Tqb55DfFjzSArZ1205VIouOIaGiTrcpdcUCZhArQ
OCGkBoJqFmYgVaNCItvVow/NunKqdFr2xSW1+AMvFxCr4elUM9KiaxFa6Vsx+GAb
D98mtu/yN2dgu4sgh7p1CtvbKYZWRLMBFwF689bDOViC9D0558sIOYxCKQsfxX4C
7+CkC7zhns/H8Tw8NMyY6LYUpzX+Vqs3m1gvcP1zONgNMap2oWP36wH71PorXOVD
I/teZLvh+EsX+Z8vnrwmPWYRe7atMfyFGnb6yqPNtizHzFE2yum7mfN9L2/7WHos
0vjgcVOUTIzLck3zNYMpEHt1+ACJZj57z3JVi+UCAwEAAaOCAjYwggIyMB0GA1Ud
DgQWBBR557YcCXgAUjTqze8CJRz4Y7CzeTAfBgNVHSMEGDAWgBT9U8Ov8x4n0qG8
TZs+51u4qbV4ODAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19WUERyX01lSjlLaHZFMmJQdWRidUttMWVEZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDMvZDFlNjhhLTFjODctNDgzZC1hODlkLTU2ZGJmZjE0ZWUwNS8x
L2VlZTJIQWw0QUZJMDZzM3ZBaVVjLUdPd3Mzay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMv
ZDFlNjhhLTFjODctNDgzZC1hODlkLTU2ZGJmZjE0ZWUwNS8xL19WUERyX01lSjlL
aHZFMmJQdWRidUttMWVEZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBM
BggrBgEFBQcBBwEB/wQ9MDswKgQCAAEwJAMEA1nP6AMEA7IXqAMEArkPyAMEArmq
EAMEArnVzAMEArngKDANBAIAAjAHAwUDKgKrQDANBgkqhkiG9w0BAQsFAAOCAQEA
Wu/8pp46twNlvNE4q2AN16e1hbP8Zjadw7CbsJSECqgiG6qbe9Iui+B5GDbLu6FG
Q4+uSTcOlxMzHt523q5NEWqc2FDBweo8a93KGPzr4w2KIMET2STTJ3yev9PTeIh/
i/OqJkz3WmHPeWE7EgKEIkzZ5D6dP/58NP6z8xFKC/wN/fFt7CkiVK4f8uiO0OG9
unFTOHsDFcZlNXbUSdwqQbt/tAYFnQOLo9z5QmBwnqVROTc7zFhmpbF3kV5y7kUV
pL7ZNSPJvsdFtZ3zJGBBO/l4353tMQGalXguG/JWANuJrSlTrLzHldoU34nZ+PLf
ZrYRtEbZgoDd7VPE4yK5Iw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:13 2024 by rpki-client on console-ams.rpki-client.org