Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/2q1YPaB6N3VpD5oYQDvPtd4yVf4.roa
File: 2q1YPaB6N3VpD5oYQDvPtd4yVf4.roa (raw, json)
Hash identifier: /8aT2Yh1BkLhhdc1VugJRV5sA8R+3pbuSoEAiXnTmJY=
Subject key identifier: DA:AD:58:3D:A0:7A:37:75:69:0F:9A:18:40:3B:CF:B5:DE:32:55:FE
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 0B5E3FE3
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/2q1YPaB6N3VpD5oYQDvPtd4yVf4.roa
Signing time: Sat 01 Jan 2022 14:57:56 +0000
ROA not before: Sat 01 Jan 2022 14:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50309
IP address blocks: 185.221.184.0/22 maxlen: 32
46.182.192.0/21 maxlen: 32
185.160.128.0/22 maxlen: 32
94.142.132.0/22 maxlen: 32
2a0c:1000::/29 maxlen: 32
2a0b:5e00::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190726115 (0xb5e3fe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Jan 1 14:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=daad583da07a3775690f9a18403bcfb5de3255fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:43:d3:d5:46:09:dd:ab:87:1a:25:0f:77:
09:4a:53:94:f2:91:5b:7f:2c:a7:d9:65:d2:de:18:
04:00:99:4e:95:d3:84:7c:9a:7c:c8:f7:c9:c5:49:
e0:6d:cd:39:d9:8c:fe:df:3c:91:10:0b:8f:5c:e0:
a1:50:19:9a:ff:d8:6c:8e:13:a4:b5:2d:6f:bd:e4:
46:e6:42:cd:d8:ad:77:ff:59:4d:87:c7:20:7a:b9:
04:24:f6:a1:ae:4c:7a:74:f6:cb:c7:76:45:74:8c:
d2:dc:db:5e:58:73:44:e5:05:e6:ca:41:13:eb:97:
27:82:26:b1:d1:5e:4d:e7:6f:aa:cd:ad:12:8e:ce:
3f:14:c3:fa:96:a0:66:fa:1c:39:9b:9f:72:5e:b9:
12:bf:cb:47:28:69:45:d9:98:72:91:f0:af:f2:46:
e6:2e:5e:88:c0:d2:03:d1:1e:16:46:5e:b0:04:93:
ee:9b:22:27:15:2e:43:be:67:ab:b8:1b:98:23:08:
43:dc:ec:25:ac:f2:86:75:ad:a4:3b:f7:f6:24:e7:
47:89:dc:ec:3a:e5:ab:76:71:50:4c:79:c5:18:f2:
59:d8:64:d1:a9:7e:dd:0e:44:c4:75:7b:f8:fb:4e:
55:a2:0f:d5:ca:55:01:7d:1d:61:fe:6d:b1:0e:c3:
42:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AD:58:3D:A0:7A:37:75:69:0F:9A:18:40:3B:CF:B5:DE:32:55:FE
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/2q1YPaB6N3VpD5oYQDvPtd4yVf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.192.0/21
94.142.132.0/22
185.160.128.0/22
185.221.184.0/22
IPv6:
2a0b:5e00::/29
2a0c:1000::/29
Signature Algorithm: sha256WithRSAEncryption
04:89:e5:1c:05:d7:12:3b:10:bb:89:2e:be:4d:e2:e9:32:cb:
e3:d4:1b:29:1c:66:7e:39:58:26:d9:35:fa:f6:fe:39:00:57:
04:06:df:84:5d:e6:ac:2c:0f:9f:bc:b6:d5:f7:ae:24:18:7a:
0d:00:2d:7a:67:f1:4c:e5:71:3c:11:27:98:0a:bb:09:67:be:
f6:fe:cc:c2:76:36:93:19:9c:c8:e9:c8:38:68:62:28:6d:12:
1d:a3:24:bc:3c:50:18:06:71:4b:1d:a1:99:90:be:4d:77:5c:
94:22:7a:d7:f1:4c:b7:bd:28:5b:22:6a:7b:f7:92:cb:04:a2:
5d:6c:5d:c1:f6:b9:74:1a:5e:bf:d6:5b:65:8e:28:9a:dd:42:
5c:27:75:90:63:50:c0:d3:46:2f:76:79:c5:02:fa:2a:f1:ba:
06:12:81:bb:8e:32:a1:ca:36:09:1a:33:7e:bf:65:4b:cf:f2:
42:26:93:26:26:f3:5e:c1:a2:62:f4:91:12:3a:98:3c:18:87:
f1:ad:aa:1a:37:ec:8b:ae:91:97:d3:05:3d:52:5c:6b:b7:f2:
4a:e2:b1:69:40:15:79:57:05:cb:dc:21:7f:12:26:3b:91:9a:
b4:3c:8f:74:7f:40:6f:b3:2a:65:4b:a4:bc:74:34:03:8e:75:
8b:a5:05:ab
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIEC14/4zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YTRkNzZkZDJmNDYwNjhiMDg3MWFkNDUwMGFjNmU1NzdhZmU0NjljMB4XDTIyMDEw
MTE0NTc1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGFhZDU4M2RhMDdh
Mzc3NTY5MGY5YTE4NDAzYmNmYjVkZTMyNTVmZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMFgQ9PVRgndq4caJQ93CUpTlPKRW38sp9ll0t4YBACZTpXT
hHyafMj3ycVJ4G3NOdmM/t88kRALj1zgoVAZmv/YbI4TpLUtb73kRuZCzditd/9Z
TYfHIHq5BCT2oa5MenT2y8d2RXSM0tzbXlhzROUF5spBE+uXJ4ImsdFeTedvqs2t
Eo7OPxTD+pagZvocOZufcl65Er/LRyhpRdmYcpHwr/JG5i5eiMDSA9EeFkZesAST
7psiJxUuQ75nq7gbmCMIQ9zsJazyhnWtpDv39iTnR4nc7Drlq3ZxUEx5xRjyWdhk
0al+3Q5ExHV7+PtOVaIP1cpVAX0dYf5tsQ7DQvMCAwEAAaOCAjEwggItMB0GA1Ud
DgQWBBTarVg9oHo3dWkPmhhAO8+13jJV/jAfBgNVHSMEGDAWgBSaTXbdL0YGiwhx
rUUArG5Xev5GnDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21rMTIzUzlHQm9zSWNhMUZBS3h1VjNyLVJwdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDQvZWQ3YzhhLTM5NTItNDQwMS05ZGQ0LTQ0NjkyZGJjY2IzMi8x
LzJxMVlQYUI2TjNWcEQ1b1lRRHZQdGQ0eVZmNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQv
ZWQ3YzhhLTM5NTItNDQwMS05ZGQ0LTQ0NjkyZGJjY2IzMi8xL21rMTIzUzlHQm9z
SWNhMUZBS3h1VjNyLVJwdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBH
BggrBgEFBQcBBwEB/wQ4MDYwHgQCAAEwGAMEAy62wAMEAl6OhAMEArmggAMEArnd
uDAUBAIAAjAOAwUDKgteAAMFAyoMEAAwDQYJKoZIhvcNAQELBQADggEBAASJ5RwF
1xI7ELuJLr5N4ukyy+PUGykcZn45WCbZNfr2/jkAVwQG34Rd5qwsD5+8ttX3riQY
eg0ALXpn8UzlcTwRJ5gKuwlnvvb+zMJ2NpMZnMjpyDhoYihtEh2jJLw8UBgGcUsd
oZmQvk13XJQietfxTLe9KFsianv3kssEol1sXcH2uXQaXr/WW2WOKJrdQlwndZBj
UMDTRi92ecUC+irxugYSgbuOMqHKNgkaM36/ZUvP8kImkyYm817BomL0kRI6mDwY
h/Gtqho37IuukZfTBT1SXGu38krisWlAFXlXBcvcIX8SJjuRmrQ8j3R/QG+zKmVL
pLx0NAOOdYulBas=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:24 2024 by rpki-client on console-ams.rpki-client.org