Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/2x7TKP1m3uovPlPY3o9BnQ1VjFc.roa
File: 2x7TKP1m3uovPlPY3o9BnQ1VjFc.roa (raw, json)
Hash identifier: dvO3MeYKvfBjes1UZr5CTaemEDDOUYOYfFgRBnrysWM=
Subject key identifier: DB:1E:D3:28:FD:66:DE:EA:2F:3E:53:D8:DE:8F:41:9D:0D:55:8C:57
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 07401BA3
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/2x7TKP1m3uovPlPY3o9BnQ1VjFc.roa
Signing time: Mon 20 Jun 2022 16:03:45 +0000
ROA not before: Mon 20 Jun 2022 16:03:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 94.26.89.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
45.141.233.0/24 maxlen: 24
45.141.232.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.219.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121641891 (0x7401ba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 20 16:03:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db1ed328fd66deea2f3e53d8de8f419d0d558c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:d0:d8:ed:bf:52:69:92:1f:47:3b:b2:9a:
93:07:f3:c9:84:81:b8:ee:81:9e:b9:d3:a6:b8:b0:
9f:8c:ce:f9:13:37:d2:2a:a8:51:52:60:09:4f:e9:
43:b1:03:ec:c4:35:48:3b:18:1f:25:d3:6c:34:10:
33:9c:7b:10:fc:2c:77:f2:b0:63:f5:3f:96:ff:de:
17:20:60:25:93:1a:00:93:19:c5:d4:fa:8f:a6:1d:
3c:d7:37:8f:a5:38:e0:e4:ea:4d:e3:32:be:1e:52:
36:51:99:39:65:16:21:dc:bc:cf:cb:51:67:74:1b:
84:a2:0d:66:6f:ca:9f:18:84:ea:a7:cc:0f:47:61:
7d:33:fe:59:67:9d:54:07:43:c1:b9:34:95:46:3c:
75:5b:6b:2e:b4:85:fa:c2:4f:8c:56:6b:fd:a8:3d:
16:b7:19:87:00:76:b6:36:04:e6:b2:12:9e:08:53:
58:c8:39:24:2f:0e:d9:5a:f9:94:64:d3:03:48:d7:
07:1d:b9:dd:d9:df:da:f2:af:f4:80:27:f7:a9:1c:
49:ad:e6:1b:a4:5d:b5:6e:86:0d:25:d3:75:ec:b5:
53:46:e1:a1:c8:9d:f2:ed:26:ac:fe:54:8e:3e:53:
7b:f6:f0:c3:b1:c3:df:5b:41:32:99:ae:51:52:95:
32:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1E:D3:28:FD:66:DE:EA:2F:3E:53:D8:DE:8F:41:9D:0D:55:8C:57
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/2x7TKP1m3uovPlPY3o9BnQ1VjFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/23
91.92.34.0/24
93.152.207.0/24
93.152.211.0-93.152.212.255
93.152.217.0-93.152.219.255
93.152.223.0/24
93.152.227.0/24
94.26.89.0/24
94.190.195.0/24
212.102.105.0/24
Signature Algorithm: sha256WithRSAEncryption
37:bf:5b:b5:1c:63:01:13:4d:a0:67:39:6e:1b:b1:e9:e0:de:
33:11:22:2d:5b:a9:50:c8:93:3e:1b:f1:19:df:e6:3d:5f:b1:
b1:1e:f7:82:db:11:32:d6:03:12:fe:74:2b:b5:cb:14:7a:8e:
40:c9:9c:7d:76:0f:05:d2:a0:d9:e3:6e:98:01:87:e9:94:0e:
fb:e4:ca:60:f9:48:c9:1f:28:0f:f3:bf:dc:1f:c2:6d:46:36:
df:32:88:37:db:9d:b6:fd:a8:6d:72:71:81:5d:81:f5:6b:cd:
5e:1a:40:b4:0c:c0:cb:66:82:9b:d9:5c:6b:82:95:97:ba:0b:
23:41:c8:1e:81:32:23:a0:56:2a:b3:59:4a:b6:b7:65:2f:40:
99:ed:64:70:8f:d1:ca:d3:24:a3:3c:cd:7a:bc:c9:10:92:f3:
fa:91:68:d2:d0:88:db:23:3a:f1:59:89:ab:23:32:51:7d:c6:
20:a2:4f:88:ae:b6:d8:16:b4:46:50:d7:7e:82:83:f2:6a:dc:
30:58:a4:65:d5:ca:18:0d:4c:20:ad:aa:f8:da:ac:fb:0c:2b:
20:43:0e:96:1b:b1:82:85:e3:e0:13:58:86:c1:e4:2b:f3:9f:
6c:a7:63:75:62:6e:c2:e8:b6:83:4d:c3:f9:fe:bb:04:7b:2e:
f5:51:53:92
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIEB0AbozANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZDFjYWE2OTM1OGY4Yzk4ZjdhNzE5ZjI1OTdkNWRhZGRiZDAwMThjMB4XDTIyMDYy
MDE2MDM0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGIxZWQzMjhmZDY2
ZGVlYTJmM2U1M2Q4ZGU4ZjQxOWQwZDU1OGM1NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL+v0Njtv1Jpkh9HO7KakwfzyYSBuO6BnrnTpriwn4zO+RM3
0iqoUVJgCU/pQ7ED7MQ1SDsYHyXTbDQQM5x7EPwsd/KwY/U/lv/eFyBgJZMaAJMZ
xdT6j6YdPNc3j6U44OTqTeMyvh5SNlGZOWUWIdy8z8tRZ3QbhKINZm/KnxiE6qfM
D0dhfTP+WWedVAdDwbk0lUY8dVtrLrSF+sJPjFZr/ag9FrcZhwB2tjYE5rISnghT
WMg5JC8O2Vr5lGTTA0jXBx253dnf2vKv9IAn96kcSa3mG6RdtW6GDSXTdey1U0bh
ocid8u0mrP5Ujj5Te/bww7HD31tBMpmuUVKVMh0CAwEAAaOCAk8wggJLMB0GA1Ud
DgQWBBTbHtMo/Wbe6i8+U9jej0GdDVWMVzAfBgNVHSMEGDAWgBQtHKppNY+MmPen
GfJZfV2t29ABjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xSeXFhVFdQakpqM3B4bnlXWDFkcmR2UUFZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGYvYTkzNjk5LTE4OGItNDcwYS05NmI3LTI5YjA4NWRkMjNhZC8x
LzJ4N1RLUDFtM3VvdlBsUFkzbzlCblExVmpGYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYv
YTkzNjk5LTE4OGItNDcwYS05NmI3LTI5YjA4NWRkMjNhZC8xL0xSeXFhVFdQakpq
M3B4bnlXWDFkcmR2UUFZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBl
BggrBgEFBQcBBwEB/wRWMFQwUgQCAAEwTAMEAS2N6AMEAFtcIgMEAF2YzzAMAwQA
XZjTAwQAXZjUMAwDBABdmNkDBAJdmNgDBABdmN8DBABdmOMDBABeGlkDBABevsMD
BADUZmkwDQYJKoZIhvcNAQELBQADggEBADe/W7UcYwETTaBnOW4bseng3jMRIi1b
qVDIkz4b8Rnf5j1fsbEe94LbETLWAxL+dCu1yxR6jkDJnH12DwXSoNnjbpgBh+mU
DvvkymD5SMkfKA/zv9wfwm1GNt8yiDfbnbb9qG1ycYFdgfVrzV4aQLQMwMtmgpvZ
XGuClZe6CyNByB6BMiOgViqzWUq2t2UvQJntZHCP0crTJKM8zXq8yRCS8/qRaNLQ
iNsjOvFZiasjMlF9xiCiT4iuttgWtEZQ136Cg/Jq3DBYpGXVyhgNTCCtqvjarPsM
KyBDDpYbsYKF4+ATWIbB5Cvzn2ynY3VibsLotoNNw/n+uwR7LvVRU5I=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org