Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/8EWL9CbEnxOmUWuL05hwEkCEQqU.roa
File: 8EWL9CbEnxOmUWuL05hwEkCEQqU.roa (raw, json)
Hash identifier: TSon52ZYAsxJdpSAxzSrE2gGq0cDBqrw9qIPTtXvmkk=
Subject key identifier: F0:45:8B:F4:26:C4:9F:13:A6:51:6B:8B:D3:98:70:12:40:84:42:A5
Certificate issuer: /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial: 01850E5CAF7ACF8FA941AE9C411319F9C066
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/8EWL9CbEnxOmUWuL05hwEkCEQqU.roa
Signing time: Wed 14 Dec 2022 02:00:33 +0000
ROA not before: Wed 14 Dec 2022 02:00:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25820
IP address blocks: 212.50.224.0/19 maxlen: 24
185.239.68.0/22 maxlen: 24
178.157.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0e:5c:af:7a:cf:8f:a9:41:ae:9c:41:13:19:f9:c0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Validity
Not Before: Dec 14 02:00:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0458bf426c49f13a6516b8bd3987012408442a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:64:da:38:e3:92:4e:da:0b:89:e4:07:f9:
27:9a:b2:1a:bf:d1:65:c5:0b:6d:a8:f2:4e:be:81:
f5:c0:33:e9:16:1a:9b:e8:5d:2e:b2:6a:31:46:d8:
13:8c:86:dd:1c:52:77:57:c5:62:81:d3:fc:a6:ea:
f7:b0:7c:2a:5a:45:2a:77:37:76:27:ee:47:c6:85:
c2:36:e5:f6:20:97:27:d2:49:91:04:4c:4d:b3:2b:
6a:e2:b3:5b:ad:e9:17:d8:19:0a:75:03:60:3b:50:
eb:43:5f:3b:53:e7:94:c8:8c:ac:40:b7:f8:55:48:
3c:d5:30:1d:44:0d:2b:6e:7a:54:e7:49:ab:4f:60:
f6:a6:ca:b4:c6:6d:9f:28:df:c5:88:08:aa:b4:a8:
a3:13:85:da:0f:28:63:95:c9:54:6b:7b:ff:93:a7:
1e:af:e2:fb:94:64:98:8f:8d:70:3b:84:2e:fe:e0:
80:0d:e0:23:ce:1c:56:17:25:8f:f7:17:4a:6f:1f:
8f:89:67:3a:ae:2f:fe:82:79:a2:44:fa:b2:eb:07:
14:df:48:70:58:44:10:94:3f:a1:d3:eb:0a:07:e9:
f2:f2:6b:17:8d:3f:65:8f:d9:06:6b:f3:c9:eb:a8:
4c:db:ee:22:1f:44:05:d5:1f:fe:7b:f3:c4:a8:b6:
f3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:45:8B:F4:26:C4:9F:13:A6:51:6B:8B:D3:98:70:12:40:84:42:A5
X509v3 Authority Key Identifier:
keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/8EWL9CbEnxOmUWuL05hwEkCEQqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.157.48.0/20
185.239.68.0/22
212.50.224.0/19
Signature Algorithm: sha256WithRSAEncryption
2d:5e:da:69:9f:af:c7:cc:66:90:5d:25:90:7c:18:9a:73:97:
de:b9:ae:ad:28:f9:54:56:a2:37:27:53:e9:3c:6e:6c:ee:9d:
5f:ec:0c:e8:89:86:a8:c5:48:69:e5:64:0c:3a:69:33:5b:8e:
11:0a:04:0b:bb:7c:64:31:25:56:60:02:65:39:00:c3:1c:cc:
95:1a:83:b3:ee:3c:ea:63:46:0c:41:ea:7a:0c:c0:ea:08:7b:
ba:b0:a0:a0:55:bf:09:dd:57:86:be:25:53:80:b6:f9:9d:0f:
7a:1b:f1:99:6b:09:14:9b:11:84:75:43:82:5b:07:63:a1:34:
21:1d:8b:29:f1:f6:9c:3b:54:bf:c6:7e:70:e5:7a:c8:bc:f7:
54:9e:24:44:40:15:79:6b:57:63:a5:94:64:16:d3:13:3b:49:
e7:3d:54:c1:1a:6e:4b:bd:66:37:be:36:32:99:35:8d:bb:61:
2f:31:08:00:f2:9b:56:c2:4a:82:5e:8d:8f:85:bf:8d:6b:5a:
9a:ae:6e:29:89:6c:db:06:6b:d6:2a:1a:d0:8c:bc:9e:fc:2d:
54:b4:57:5b:2a:f3:2f:71:54:4a:39:b8:3c:d2:69:dc:20:fa:
b1:2d:bf:8b:33:90:d5:24:1c:9a:13:56:e8:73:a8:17:8c:e2:
35:67:7a:24
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYUOXK96z4+pQa6cQRMZ+cBmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZGFkOTViYTJiMWViM2RkNzczODAwMmZjNjhhYTk1NTg4
YzNiZjEwHhcNMjIxMjE0MDIwMDMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDQ1OGJmNDI2YzQ5ZjEzYTY1MTZiOGJkMzk4NzAxMjQwODQ0MmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtulk2jjjkk7aC4nkB/knmrIav9Fl
xQttqPJOvoH1wDPpFhqb6F0usmoxRtgTjIbdHFJ3V8VigdP8pur3sHwqWkUqdzd2
J+5HxoXCNuX2IJcn0kmRBExNsytq4rNbrekX2BkKdQNgO1DrQ187U+eUyIysQLf4
VUg81TAdRA0rbnpU50mrT2D2psq0xm2fKN/FiAiqtKijE4XaDyhjlclUa3v/k6ce
r+L7lGSYj41wO4Qu/uCADeAjzhxWFyWP9xdKbx+PiWc6ri/+gnmiRPqy6wcU30hw
WEQQlD+h0+sKB+ny8msXjT9lj9kGa/PJ66hM2+4iH0QF1R/+e/PEqLbzhQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPBFi/QmxJ8TplFri9OYcBJAhEKlMB8GA1UdIwQY
MBaAFGDa2Vuises913OAAvxoqpVYjDvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWIt
NDIxOGIyYjY5NjNhLzEvOEVXTDlDYkVueE9tVVd1TDA1aHdFa0NFUXFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWItNDIxOGIyYjY5NjNh
LzEvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEsp0wAwQC
ue9EAwQF1DLgMA0GCSqGSIb3DQEBCwUAA4IBAQAtXtppn6/HzGaQXSWQfBiac5fe
ua6tKPlUVqI3J1PpPG5s7p1f7AzoiYaoxUhp5WQMOmkzW44RCgQLu3xkMSVWYAJl
OQDDHMyVGoOz7jzqY0YMQep6DMDqCHu6sKCgVb8J3VeGviVTgLb5nQ96G/GZawkU
mxGEdUOCWwdjoTQhHYsp8facO1S/xn5w5XrIvPdUniREQBV5a1djpZRkFtMTO0nn
PVTBGm5LvWY3vjYymTWNu2EvMQgA8ptWwkqCXo2Phb+Na1qarm4piWzbBmvWKhrQ
jLye/C1UtFdbKvMvcVRKObg80mncIPqxLb+LM5DVJByaE1boc6gXjOI1Z3ok
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:41 2024 by rpki-client on console-ams.rpki-client.org