Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/3NKps5d0H1nUNBvQcsxHfp78kao.roa
File: 3NKps5d0H1nUNBvQcsxHfp78kao.roa (raw, json)
Hash identifier: dF3uct4FXO+NYhcqN8yMH1lvHJRRU9Kq0jMDi3FlU1g=
Subject key identifier: DC:D2:A9:B3:97:74:1F:59:D4:34:1B:D0:72:CC:47:7E:9E:FC:91:AA
Certificate issuer: /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Certificate serial: 01849FB42D8B94F27B53D4691864110CEB07
Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/3NKps5d0H1nUNBvQcsxHfp78kao.roa
Signing time: Tue 22 Nov 2022 14:18:16 +0000
ROA not before: Tue 22 Nov 2022 14:18:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201505
IP address blocks: 86.48.60.0/22 maxlen: 22
86.58.216.0/21 maxlen: 21
185.187.144.0/22 maxlen: 22
2a13:2540::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:b4:2d:8b:94:f2:7b:53:d4:69:18:64:11:0c:eb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Validity
Not Before: Nov 22 14:18:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcd2a9b397741f59d4341bd072cc477e9efc91aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a4:cd:ba:e0:79:ae:b7:ed:94:9b:0e:53:70:
6a:3f:45:46:ab:c9:b9:b5:0d:2a:59:2d:31:07:34:
9d:0b:65:53:04:2b:95:0c:34:9a:99:20:17:b0:24:
61:cb:01:71:0e:da:89:dd:b6:3a:53:c6:3e:7c:2d:
c3:b9:60:9b:29:da:f1:12:0c:76:6e:2d:98:f8:15:
6b:f5:74:a7:b8:f7:55:2d:09:9b:7f:f4:ea:ee:1d:
e3:68:1a:03:94:d6:0b:60:af:e6:70:93:30:00:0f:
a4:f1:21:7c:cb:f4:76:30:a7:ed:46:0c:82:fd:2f:
72:5e:d3:f7:33:7b:de:d5:f9:35:2c:df:ba:11:1a:
60:0b:03:a3:a4:fc:a0:3e:9e:a0:3b:bc:46:9a:82:
b5:cb:df:5b:98:f6:77:11:e7:a5:35:a7:e7:24:1e:
ca:a6:f1:a6:26:5b:ff:87:e7:b1:e9:c0:3b:4f:67:
4a:85:c6:dd:cc:de:4e:2e:df:91:93:22:63:0f:01:
a9:5a:15:e7:09:96:fd:a2:c7:02:e9:2a:7c:ba:8a:
2a:de:c5:79:ac:b4:fa:5e:df:50:37:6e:ab:0b:07:
40:76:65:9d:76:4b:67:10:18:44:d2:04:15:8e:f0:
30:3a:17:f5:bf:a1:6d:4e:a9:c1:af:b4:23:02:58:
54:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D2:A9:B3:97:74:1F:59:D4:34:1B:D0:72:CC:47:7E:9E:FC:91:AA
X509v3 Authority Key Identifier:
keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/3NKps5d0H1nUNBvQcsxHfp78kao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.60.0/22
86.58.216.0/21
185.187.144.0/22
IPv6:
2a13:2540::/29
Signature Algorithm: sha256WithRSAEncryption
88:79:55:36:05:a1:be:23:bb:6a:04:ad:8a:cd:30:25:cc:4d:
04:97:aa:f3:2b:30:21:77:0d:25:70:f8:2c:c2:42:f4:49:2c:
ca:80:23:06:e7:e7:61:7f:91:d7:18:8f:9b:3e:ce:2c:90:c8:
25:0e:ca:70:bb:b9:27:24:fe:ad:fb:f4:a5:df:cb:03:ec:d8:
a7:88:89:e7:51:d2:d3:da:00:66:9e:5c:36:e5:66:75:5c:b5:
e0:ce:7f:38:3d:7c:9d:67:2b:c4:4d:c6:ba:60:d8:20:b4:b8:
ce:64:d7:1a:db:ce:fc:77:aa:f0:8c:7d:0e:95:92:0b:5b:83:
52:96:5f:5c:9d:8c:f3:e4:ed:a7:7e:ae:0b:69:11:7b:ce:ca:
95:02:e5:63:cf:bd:8d:0d:55:e0:60:63:4e:08:31:15:d3:8c:
3a:0c:85:f8:eb:a8:e8:ff:4b:c9:1f:25:f8:93:92:09:25:d5:
f9:a7:76:a8:14:cb:91:8c:11:01:1a:6e:f2:19:3c:07:07:af:
14:40:86:ce:a1:93:de:f2:b8:89:5f:1a:f6:e6:4b:a8:e1:1b:
aa:93:41:d0:fa:8c:71:f7:0c:ea:e3:93:5b:75:22:3b:d5:24:
ab:b6:d5:eb:e8:a4:b6:db:1e:ab:1a:8d:20:aa:d2:82:8d:a8:
7c:86:eb:ee
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYSftC2LlPJ7U9RpGGQRDOsHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YTllMmVlOGJjZWE2ZDViOTE5YzRhMzNkMjZkOWJiZjk4
MmE4NDMwHhcNMjIxMTIyMTQxODE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2QyYTliMzk3NzQxZjU5ZDQzNDFiZDA3MmNjNDc3ZTllZmM5MWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqTNuuB5rrftlJsOU3BqP0VGq8m5
tQ0qWS0xBzSdC2VTBCuVDDSamSAXsCRhywFxDtqJ3bY6U8Y+fC3DuWCbKdrxEgx2
bi2Y+BVr9XSnuPdVLQmbf/Tq7h3jaBoDlNYLYK/mcJMwAA+k8SF8y/R2MKftRgyC
/S9yXtP3M3ve1fk1LN+6ERpgCwOjpPygPp6gO7xGmoK1y99bmPZ3EeelNafnJB7K
pvGmJlv/h+ex6cA7T2dKhcbdzN5OLt+RkyJjDwGpWhXnCZb9oscC6Sp8uooq3sV5
rLT6Xt9QN26rCwdAdmWddktnEBhE0gQVjvAwOhf1v6FtTqnBr7QjAlhUbwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFNzSqbOXdB9Z1DQb0HLMR36e/JGqMB8GA1UdIwQY
MBaAFAmp4u6LzqbVuRnEoz0m2bv5gqhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FuaTdvdk9wdFc1R2NTalBTYlp1X21DcUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81OGQxNWItOWYwMi00MmM0LWIwMmQt
YTAxZWVhNjVmZDMzLzEvM05LcHM1ZDBIMW5VTkJ2UWNzeEhmcDc4a2FvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS81OGQxNWItOWYwMi00MmM0LWIwMmQtYTAxZWVhNjVmZDMz
LzEvQ2FuaTdvdk9wdFc1R2NTalBTYlp1X21DcUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCVjA8AwQD
VjrYAwQCubuQMA0EAgACMAcDBQMqEyVAMA0GCSqGSIb3DQEBCwUAA4IBAQCIeVU2
BaG+I7tqBK2KzTAlzE0El6rzKzAhdw0lcPgswkL0SSzKgCMG5+dhf5HXGI+bPs4s
kMglDspwu7knJP6t+/Sl38sD7NiniInnUdLT2gBmnlw25WZ1XLXgzn84PXydZyvE
Tca6YNggtLjOZNca2878d6rwjH0OlZILW4NSll9cnYzz5O2nfq4LaRF7zsqVAuVj
z72NDVXgYGNOCDEV04w6DIX466jo/0vJHyX4k5IJJdX5p3aoFMuRjBEBGm7yGTwH
B68UQIbOoZPe8riJXxr25kuo4Ruqk0HQ+oxx9wzq45NbdSI71SSrttXr6KS22x6r
Go0gqtKCjah8huvu
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:04 2023 by rpki-client on console-fra.rpki-client.org