Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/t8zFtDFttCC7T4Fto2dcT__0X_c.roa
File: t8zFtDFttCC7T4Fto2dcT__0X_c.roa (raw, json)
Hash identifier: MvYHbqDqMFcWoU/Dfou2IdWuJzxg+4QT5tmYspGPF6c=
Subject key identifier: B7:CC:C5:B4:31:6D:B4:20:BB:4F:81:6D:A3:67:5C:4F:FF:F4:5F:F7
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 369DECB0
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/t8zFtDFttCC7T4Fto2dcT__0X_c.roa
Signing time: Sat 01 Jan 2022 07:03:40 +0000
ROA not before: Sat 01 Jan 2022 07:03:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31688
IP address blocks: 185.85.76.0/22 maxlen: 22
185.85.76.0/23 maxlen: 23
185.85.78.0/24 maxlen: 24
5.63.24.0/21 maxlen: 21
91.190.168.0/21 maxlen: 21
5.63.31.0/24 maxlen: 24
2a02:798::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 916319408 (0x369decb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Jan 1 07:03:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7ccc5b4316db420bb4f816da3675c4ffff45ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:88:b9:fc:3a:5b:fb:d2:a5:e8:3d:93:77:
f9:67:e5:c4:5d:4f:db:42:c2:09:45:10:97:39:f8:
4a:0c:db:3f:f3:9f:79:c4:74:8c:78:06:64:9c:96:
d8:17:5a:b8:9b:14:b0:f2:62:b9:49:2b:13:73:4c:
84:54:c8:46:5a:db:a1:db:73:c8:af:82:2a:d5:ed:
06:44:5e:64:66:c7:99:ec:85:be:5b:ac:70:98:19:
c4:28:f0:fc:ba:29:7d:73:e5:f1:16:0f:3c:24:9c:
54:7a:ea:43:15:8a:e5:da:76:f3:fd:00:4a:0c:eb:
2c:64:49:5f:73:db:23:50:cd:b7:d0:22:43:5b:b9:
2a:01:ba:28:1b:65:40:83:d4:8d:c0:19:6d:e9:b0:
15:9e:8b:e4:77:6f:4d:bb:38:db:13:44:db:40:1a:
61:87:ef:ab:8d:dc:36:02:96:e9:b6:c1:f9:1b:f1:
00:c8:43:ef:67:45:ff:ad:0c:ec:49:af:c9:82:23:
a7:21:70:bd:a6:13:7b:61:be:8c:ca:16:8d:ed:53:
8d:20:5e:de:90:bb:b9:4a:7c:cd:9b:9a:ca:d5:48:
4a:5c:6c:d6:1e:b0:23:c0:c3:59:73:2c:14:d1:36:
ab:95:b5:2c:69:a0:ea:a4:f8:9e:79:7f:30:4f:27:
b6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CC:C5:B4:31:6D:B4:20:BB:4F:81:6D:A3:67:5C:4F:FF:F4:5F:F7
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/t8zFtDFttCC7T4Fto2dcT__0X_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.24.0/21
91.190.168.0/21
185.85.76.0/22
IPv6:
2a02:798::/32
Signature Algorithm: sha256WithRSAEncryption
ba:ef:ff:9d:92:b6:45:3b:b9:d4:78:27:8c:e4:b9:df:01:af:
68:e1:2a:b2:a9:65:40:de:86:e2:9a:05:02:09:f7:e8:3b:83:
8c:18:9d:a5:3a:28:b1:5b:1e:6d:33:f0:f4:78:6a:0d:bb:53:
36:c8:9d:7f:f9:a5:f7:5f:28:7d:e7:5b:f8:8f:ba:ab:e0:ec:
82:b7:90:8e:09:7d:22:f2:e9:1d:39:53:47:4c:b6:7e:9c:40:
0d:08:8d:86:e5:a2:4e:a5:07:67:d1:13:fd:4a:6f:aa:52:6c:
d6:7e:78:0f:d5:d4:8f:9d:f7:6a:d2:0f:77:da:59:7c:9a:1d:
b3:91:a2:cc:2c:75:45:0e:96:fd:01:b7:0d:a9:17:9a:d4:12:
48:cf:52:3e:fc:63:76:70:13:82:51:09:68:ba:25:e4:96:a3:
c4:36:04:70:f2:98:ee:50:e1:63:95:8c:af:45:c0:8c:ea:ac:
5a:56:d9:47:0f:1c:26:29:79:b2:d5:3f:d1:7e:6c:7d:d6:e6:
17:eb:c1:6e:98:11:09:df:b9:d5:16:73:5f:c4:ba:04:29:e0:
d0:60:ae:3d:e5:91:44:95:6b:a2:35:11:28:d2:71:e8:fb:09:
38:ea:8d:33:76:60:fd:00:a1:d4:91:06:aa:40:4d:a4:0a:21:
80:19:28:cc
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIENp3ssDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YTE0MWM1MDkwODI0ZDBhMTdjMjllYzQwNTBlMjEwMDcxMTNmYmRhMB4XDTIyMDEw
MTA3MDM0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjdjY2M1YjQzMTZk
YjQyMGJiNGY4MTZkYTM2NzVjNGZmZmY0NWZmNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMCuiLn8Olv70qXoPZN3+WflxF1P20LCCUUQlzn4SgzbP/Of
ecR0jHgGZJyW2BdauJsUsPJiuUkrE3NMhFTIRlrbodtzyK+CKtXtBkReZGbHmeyF
vluscJgZxCjw/LopfXPl8RYPPCScVHrqQxWK5dp28/0ASgzrLGRJX3PbI1DNt9Ai
Q1u5KgG6KBtlQIPUjcAZbemwFZ6L5HdvTbs42xNE20AaYYfvq43cNgKW6bbB+Rvx
AMhD72dF/60M7EmvyYIjpyFwvaYTe2G+jMoWje1TjSBe3pC7uUp8zZuaytVISlxs
1h6wI8DDWXMsFNE2q5W1LGmg6qT4nnl/ME8ntscCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBS3zMW0MW20ILtPgW2jZ1xP//Rf9zAfBgNVHSMEGDAWgBRaFBxQkIJNChfC
nsQFDiEAcRP72jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1doUWNVSkNDVFFvWHdwN0VCUTRoQUhFVC05by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWUvYjIwZTkwLWJmNmUtNGUyNS04N2Q1LWVjZWVmZjhlODRlMC8x
L3Q4ekZ0REZ0dENDN1Q0RnRvMmRjVF9fMFhfYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUv
YjIwZTkwLWJmNmUtNGUyNS04N2Q1LWVjZWVmZjhlODRlMC8xL1doUWNVSkNDVFFv
WHdwN0VCUTRoQUhFVC05by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAwU/GAMEA1u+qAMEArlVTDANBAIA
AjAHAwUAKgIHmDANBgkqhkiG9w0BAQsFAAOCAQEAuu//nZK2RTu51HgnjOS53wGv
aOEqsqllQN6G4poFAgn36DuDjBidpToosVsebTPw9HhqDbtTNsidf/ml918ofedb
+I+6q+DsgreQjgl9IvLpHTlTR0y2fpxADQiNhuWiTqUHZ9ET/UpvqlJs1n54D9XU
j533atIPd9pZfJods5GizCx1RQ6W/QG3DakXmtQSSM9SPvxjdnATglEJaLol5Jaj
xDYEcPKY7lDhY5WMr0XAjOqsWlbZRw8cJil5stU/0X5sfdbmF+vBbpgRCd+51RZz
X8S6BCng0GCuPeWRRJVrojURKNJx6PsJOOqNM3Zg/QCh1JEGqkBNpAohgBkozA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:58 2023 by rpki-client on console-ams.rpki-client.org