Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/3U5jL1U7bOBGpHvj5UB1ArodmGY.roa
File: 3U5jL1U7bOBGpHvj5UB1ArodmGY.roa (raw, json)
Hash identifier: 7LbT4Zx5Em4s6Q1hQuw3j+4PP2N6PT0b/XO/GKpVmvc=
Subject key identifier: DD:4E:63:2F:55:3B:6C:E0:46:A4:7B:E3:E5:40:75:02:BA:1D:98:66
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 08762C3E
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/3U5jL1U7bOBGpHvj5UB1ArodmGY.roa
Signing time: Sat 01 Jan 2022 15:56:32 +0000
ROA not before: Sat 01 Jan 2022 15:56:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13213
IP address blocks: 176.67.160.0/20 maxlen: 24
185.7.224.0/22 maxlen: 24
176.67.169.0/24 maxlen: 24
109.123.64.0/18 maxlen: 24
83.170.64.0/18 maxlen: 24
82.163.72.0/21 maxlen: 24
88.202.224.0/21 maxlen: 24
77.92.64.0/19 maxlen: 24
31.24.224.0/21 maxlen: 24
91.109.240.0/21 maxlen: 24
37.123.112.0/21 maxlen: 24
46.23.64.0/20 maxlen: 24
46.23.74.0/24 maxlen: 24
88.202.176.0/20 maxlen: 24
2a02:2498:8000::/40 maxlen: 40
2a02:2498::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141962302 (0x8762c3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Jan 1 15:56:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd4e632f553b6ce046a47be3e5407502ba1d9866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c6:40:84:b1:f0:6a:a6:e9:7d:8d:4e:02:03:
97:5e:b6:bf:23:2f:fe:b8:de:84:6e:2c:6d:53:e1:
fe:b4:a3:08:6c:7a:d1:a8:c0:7b:6a:cf:a5:ba:c6:
e4:12:a4:81:4e:64:10:a7:14:0e:78:4f:f1:04:ed:
60:dc:f3:c5:39:b1:0f:5d:79:ae:ea:d9:6b:79:9f:
5d:5d:0d:f9:75:7e:25:60:10:c1:b7:13:c1:c7:76:
4e:b8:db:f3:d7:fd:81:c0:48:08:c8:7e:b2:8a:57:
1e:9f:50:7a:67:05:1c:11:01:b7:83:6e:09:59:83:
35:f9:03:7a:49:4f:6a:c6:5b:95:aa:ce:02:49:3f:
6a:d6:3e:e9:ef:d3:3c:6d:63:9c:97:a2:60:65:f1:
2c:22:43:9d:57:80:52:7a:73:fc:1f:fa:52:f4:62:
53:7b:35:e3:b3:1e:4b:a7:a6:b9:17:a7:04:6d:f7:
f1:c2:60:64:8d:90:af:59:52:1c:5a:da:8f:88:1e:
3c:4f:15:aa:73:8a:ee:ef:28:3c:99:4a:4f:cf:20:
a5:3b:66:c7:9d:70:bb:89:d9:11:41:18:b4:75:42:
43:2e:c5:68:98:e9:7a:af:96:11:0b:07:91:1a:dc:
73:c7:d1:04:dd:41:75:79:a9:4e:7f:35:a6:6a:0d:
82:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4E:63:2F:55:3B:6C:E0:46:A4:7B:E3:E5:40:75:02:BA:1D:98:66
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/3U5jL1U7bOBGpHvj5UB1ArodmGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.224.0/21
37.123.112.0/21
46.23.64.0/20
77.92.64.0/19
82.163.72.0/21
83.170.64.0/18
88.202.176.0/20
88.202.224.0/21
91.109.240.0/21
109.123.64.0/18
176.67.160.0/20
185.7.224.0/22
IPv6:
2a02:2498::/32
Signature Algorithm: sha256WithRSAEncryption
68:be:90:52:e0:3f:97:8d:f0:e8:ea:4f:7c:2c:15:24:16:63:
2f:81:14:7f:40:36:89:5b:b7:89:98:aa:c2:e9:d0:df:2b:7a:
50:b2:43:9a:58:d7:eb:36:98:91:72:f6:9e:9e:2b:91:dd:de:
c6:2e:ae:a5:88:0b:61:e2:a2:cd:3b:12:79:e8:42:7e:65:a6:
3d:a7:76:bd:f3:f6:df:8e:1d:9d:d5:4b:f7:37:40:22:86:77:
7b:5f:4f:bb:6d:10:89:85:f5:0d:2a:7b:b5:d5:80:7c:60:64:
e1:85:c9:72:bc:af:40:00:54:8a:73:a9:a2:dc:d1:d0:95:4c:
83:1f:03:d2:bd:9f:6f:a1:43:4c:a6:98:4c:ed:83:7b:c6:67:
99:51:74:c6:ec:9f:93:b7:11:ba:74:67:ca:ee:fc:4f:6e:54:
ba:be:9e:72:29:5b:4f:65:35:26:55:5d:52:f4:5b:b2:32:5c:
ed:99:24:7f:36:f3:bd:a1:bc:2a:c8:c8:72:bc:2a:64:8f:4b:
ab:8c:0f:e0:e3:6e:b9:95:fa:08:f7:8b:a3:b4:68:89:e6:27:
f8:47:78:25:56:3b:75:5f:85:0b:49:ea:70:d6:62:91:4b:29:
e4:4a:31:3c:bb:a4:8d:0a:2a:8a:f1:75:a8:39:95:0b:a3:43:
79:d7:5f:81
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIECHYsPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OWZmZmYyODlmMmRhZDBmYzA4NDU2YjBiYWQ1NGQ3YmE0NDlhNDkyMB4XDTIyMDEw
MTE1NTYzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGQ0ZTYzMmY1NTNi
NmNlMDQ2YTQ3YmUzZTU0MDc1MDJiYTFkOTg2NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI/GQISx8Gqm6X2NTgIDl162vyMv/rjehG4sbVPh/rSjCGx6
0ajAe2rPpbrG5BKkgU5kEKcUDnhP8QTtYNzzxTmxD115rurZa3mfXV0N+XV+JWAQ
wbcTwcd2Trjb89f9gcBICMh+sopXHp9QemcFHBEBt4NuCVmDNfkDeklPasZblarO
Akk/atY+6e/TPG1jnJeiYGXxLCJDnVeAUnpz/B/6UvRiU3s147MeS6emuRenBG33
8cJgZI2Qr1lSHFraj4gePE8VqnOK7u8oPJlKT88gpTtmx51wu4nZEUEYtHVCQy7F
aJjpeq+WEQsHkRrcc8fRBN1BdXmpTn81pmoNgnkCAwEAAaOCAlowggJWMB0GA1Ud
DgQWBBTdTmMvVTts4Eake+PlQHUCuh2YZjAfBgNVHSMEGDAWgBQZ//8ony2tD8CE
VrC61U17pEmkkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dmX19LSjh0clFfQWhGYXd1dFZOZTZSSnBKSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDQvYzExYzg3LWVmYmItNDVlOC05YjAzLWQ1MjU3MThhYTQ0YS8x
LzNVNWpMMVU3Yk9CR3BIdmo1VUIxQXJvZG1HWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQv
YzExYzg3LWVmYmItNDVlOC05YjAzLWQ1MjU3MThhYTQ0YS8xL0dmX19LSjh0clFf
QWhGYXd1dFZOZTZSSnBKSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBw
BggrBgEFBQcBBwEB/wRhMF8wTgQCAAEwSAMEAx8Y4AMEAyV7cAMEBC4XQAMEBU1c
QAMEA1KjSAMEBlOqQAMEBFjKsAMEA1jK4AMEA1tt8AMEBm17QAMEBLBDoAMEArkH
4DANBAIAAjAHAwUAKgIkmDANBgkqhkiG9w0BAQsFAAOCAQEAaL6QUuA/l43w6OpP
fCwVJBZjL4EUf0A2iVu3iZiqwunQ3yt6ULJDmljX6zaYkXL2np4rkd3exi6upYgL
YeKizTsSeehCfmWmPad2vfP2344dndVL9zdAIoZ3e19Pu20QiYX1DSp7tdWAfGBk
4YXJcryvQABUinOpotzR0JVMgx8D0r2fb6FDTKaYTO2De8ZnmVF0xuyfk7cRunRn
yu78T25Uur6ecilbT2U1JlVdUvRbsjJc7ZkkfzbzvaG8KsjIcrwqZI9Lq4wP4ONu
uZX6CPeLo7RoieYn+Ed4JVY7dV+FC0nqcNZikUsp5EoxPLukjQoqivF1qDmVC6ND
eddfgQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:26 2023 by rpki-client on console-ams.rpki-client.org