Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/RT66oX0ayY23d4-MGpMzW1cFOgA.roa
File: RT66oX0ayY23d4-MGpMzW1cFOgA.roa (raw, json)
Hash identifier: qRuz7K47U2ArLucldF1xa2J3LGaFYw375eBOmuOBxWw=
Subject key identifier: 45:3E:BA:A1:7D:1A:C9:8D:B7:77:8F:8C:1A:93:33:5B:57:05:3A:00
Certificate issuer: /CN=122a2ba3cc18c998501309ecde042706af5b845a
Certificate serial: 0D99AEFF
Authority key identifier: 12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/RT66oX0ayY23d4-MGpMzW1cFOgA.roa
Signing time: Mon 13 Jun 2022 18:22:44 +0000
ROA not before: Mon 13 Jun 2022 18:22:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56690
IP address blocks: 91.226.172.0/24 maxlen: 24
185.250.60.0/22 maxlen: 22
91.226.175.0/24 maxlen: 24
91.226.173.0/24 maxlen: 24
91.226.174.0/24 maxlen: 24
2a09:8880::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228175615 (0xd99aeff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a2ba3cc18c998501309ecde042706af5b845a
Validity
Not Before: Jun 13 18:22:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=453ebaa17d1ac98db7778f8c1a93335b57053a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:9b:5d:28:b8:a3:61:ef:1c:53:99:df:42:
88:21:08:38:68:0a:1b:58:7b:49:58:70:01:48:45:
7f:71:74:fd:1c:e2:c4:b6:59:90:25:59:66:93:b2:
7d:93:8f:bc:d1:0a:8d:fd:9d:a4:8e:99:e8:c7:f4:
a7:13:6d:f3:3e:0f:ef:94:25:a0:92:ea:14:37:94:
d5:1c:96:bd:32:53:4d:9e:cd:e6:49:e5:87:e6:41:
9b:c9:6c:43:47:91:e2:66:13:83:1f:49:13:7f:6a:
fa:9d:f7:91:31:e8:4c:41:9a:4f:6c:da:3d:dc:d7:
b2:03:8c:dc:ca:f9:b8:9b:1c:29:a2:39:db:e8:93:
ef:a6:82:b4:1e:de:cf:81:87:a8:f1:cb:11:18:2e:
76:42:7f:1c:d3:e0:c9:15:d4:02:31:ca:2d:33:4b:
ad:c7:55:54:50:2e:06:fc:ff:ab:ac:fe:16:9a:1a:
90:a8:43:0e:fc:14:5a:75:dd:29:eb:61:cf:02:18:
d8:41:ae:38:13:fa:06:4b:77:04:da:bb:da:4e:c5:
74:31:53:ee:30:29:8b:73:ae:3b:11:6b:90:93:71:
f3:bf:2a:26:3d:b2:5b:0e:86:12:d9:35:be:61:7e:
11:9b:89:f2:fb:a1:ba:18:6c:93:6d:4c:90:9d:9d:
af:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3E:BA:A1:7D:1A:C9:8D:B7:77:8F:8C:1A:93:33:5B:57:05:3A:00
X509v3 Authority Key Identifier:
keyid:12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/RT66oX0ayY23d4-MGpMzW1cFOgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.172.0/22
185.250.60.0/22
IPv6:
2a09:8880::/36
Signature Algorithm: sha256WithRSAEncryption
4b:01:aa:10:ed:48:35:54:29:88:65:58:82:12:87:a9:25:1f:
3c:9c:9b:d4:e4:2d:4f:75:f7:31:d3:cf:a1:1d:6d:0f:1a:94:
da:35:7c:a5:6c:d2:83:cb:0b:e3:ad:8f:ef:a4:fd:80:bc:68:
72:d6:aa:30:78:1a:a1:02:25:4d:34:0f:ba:10:70:1e:48:f8:
26:6c:06:af:2e:cd:eb:fa:ca:75:f2:af:f4:c5:23:c9:9e:bb:
a1:97:04:01:2f:f3:9c:27:fe:d0:a7:75:bd:54:8b:a5:51:b7:
20:5b:5c:48:8b:5f:83:3e:60:8b:d0:f9:64:f9:f8:cb:55:b2:
5a:4e:00:b2:a8:7f:34:10:86:10:a8:1f:f5:54:df:94:87:4e:
99:ba:95:5d:9a:48:47:d6:ec:3a:67:be:8e:eb:fb:13:1f:fe:
ef:4a:65:51:97:ed:0b:f5:f1:a1:2c:d4:ea:87:3b:53:cf:a5:
b8:8e:e9:b0:b4:27:39:00:69:24:90:58:21:1c:c9:26:d5:dc:
22:de:68:b0:eb:53:f2:3f:79:31:5f:65:2b:c3:38:74:32:01:
3a:fc:d6:d5:e1:a3:a8:71:20:36:7f:a0:bf:2b:73:da:42:20:
c1:62:c5:5f:9f:3d:24:d0:b8:de:93:7c:20:12:35:a8:44:a5:
a6:b8:b0:05
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIEDZmu/zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MjJhMmJhM2NjMThjOTk4NTAxMzA5ZWNkZTA0MjcwNmFmNWI4NDVhMB4XDTIyMDYx
MzE4MjI0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDUzZWJhYTE3ZDFh
Yzk4ZGI3Nzc4ZjhjMWE5MzMzNWI1NzA1M2EwMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK82m10ouKNh7xxTmd9CiCEIOGgKG1h7SVhwAUhFf3F0/Rzi
xLZZkCVZZpOyfZOPvNEKjf2dpI6Z6Mf0pxNt8z4P75QloJLqFDeU1RyWvTJTTZ7N
5knlh+ZBm8lsQ0eR4mYTgx9JE39q+p33kTHoTEGaT2zaPdzXsgOM3Mr5uJscKaI5
2+iT76aCtB7ez4GHqPHLERgudkJ/HNPgyRXUAjHKLTNLrcdVVFAuBvz/q6z+Fpoa
kKhDDvwUWnXdKethzwIY2EGuOBP6Bkt3BNq72k7FdDFT7jApi3OuOxFrkJNx878q
Jj2yWw6GEtk1vmF+EZuJ8vuhuhhsk21MkJ2dr30CAwEAAaOCAh8wggIbMB0GA1Ud
DgQWBBRFPrqhfRrJjbd3j4wakzNbVwU6ADAfBgNVHSMEGDAWgBQSKiujzBjJmFAT
CezeBCcGr1uEWjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Vpb3JvOHdZeVpoUUV3bnMzZ1FuQnE5YmhGby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvZjk2NDMwLTYyZDQtNDMxMC04NDkzLWFlMWFhMTY1NGNkZS8x
L1JUNjZvWDBheVkyM2Q0LU1HcE16VzFjRk9nQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
Zjk2NDMwLTYyZDQtNDMxMC04NDkzLWFlMWFhMTY1NGNkZS8xL0Vpb3JvOHdZeVpo
UUV3bnMzZ1FuQnE5YmhGby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA1
BggrBgEFBQcBBwEB/wQmMCQwEgQCAAEwDAMEAlvirAMEArn6PDAOBAIAAjAIAwYE
KgmIgAAwDQYJKoZIhvcNAQELBQADggEBAEsBqhDtSDVUKYhlWIISh6klHzycm9Tk
LU919zHTz6EdbQ8alNo1fKVs0oPLC+Otj++k/YC8aHLWqjB4GqECJU00D7oQcB5I
+CZsBq8uzev6ynXyr/TFI8meu6GXBAEv85wn/tCndb1Ui6VRtyBbXEiLX4M+YIvQ
+WT5+MtVslpOALKofzQQhhCoH/VU35SHTpm6lV2aSEfW7Dpnvo7r+xMf/u9KZVGX
7Qv18aEs1OqHO1PPpbiO6bC0JzkAaSSQWCEcySbV3CLeaLDrU/I/eTFfZSvDOHQy
ATr81tXho6hxIDZ/oL8rc9pCIMFixV+fPSTQuN6TfCASNahEpaa4sAU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:01 2024 by rpki-client on console-ams.rpki-client.org