Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/r-ukAjj9z2nHitgUouNaflQUm7M.roa
File: r-ukAjj9z2nHitgUouNaflQUm7M.roa (raw, json)
Hash identifier: /ukx7FL4IiGyDN37qWKITqUSc2HR1cUjEwIJTDDKWa4=
Subject key identifier: AF:EB:A4:02:38:FD:CF:69:C7:8A:D8:14:A2:E3:5A:7E:54:14:9B:B3
Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Certificate serial: 1133D575
Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/r-ukAjj9z2nHitgUouNaflQUm7M.roa
Signing time: Sat 01 Jan 2022 04:01:54 +0000
ROA not before: Sat 01 Jan 2022 04:01:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49796
IP address blocks: 185.167.72.3/32 maxlen: 32
185.167.72.254/32 maxlen: 32
185.167.72.253/32 maxlen: 32
185.167.72.13/32 maxlen: 32
185.167.74.0/23 maxlen: 23
185.167.74.0/24 maxlen: 24
185.167.72.0/24 maxlen: 24
185.167.72.0/23 maxlen: 23
185.167.72.0/22 maxlen: 22
185.167.75.0/24 maxlen: 24
185.167.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288609653 (0x1133d575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Validity
Not Before: Jan 1 04:01:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=afeba40238fdcf69c78ad814a2e35a7e54149bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:fc:41:40:85:e4:c8:2d:c3:0a:b6:f7:f8:
fc:ba:e2:70:7f:04:70:df:2c:c9:12:96:4f:26:a0:
ec:d2:87:ad:5c:4f:4d:78:d7:26:a3:57:ce:2c:ef:
6c:21:52:3c:dc:1e:82:56:e2:62:d2:7a:4f:25:21:
35:77:a0:eb:3c:c9:6e:59:14:09:da:13:cd:d5:81:
ba:12:af:6a:d1:19:c1:21:a9:e6:5d:ad:04:e0:84:
84:f3:ee:1c:25:ef:89:cc:bf:5d:75:f3:1a:1d:12:
b0:55:ac:03:3e:66:34:bb:53:92:4b:2a:36:41:1d:
8e:f4:fd:77:20:1a:48:ee:e9:c7:6b:5b:02:09:ec:
62:a3:c7:61:9b:f0:79:3c:9c:c8:8a:10:e2:f0:04:
e7:a5:76:4c:9e:4f:dd:7b:02:7b:a4:fe:e7:18:6d:
68:6a:bd:ca:b6:67:8b:de:c6:96:db:7b:dd:a5:ea:
86:35:81:1e:1f:02:30:61:74:50:fc:98:dd:7b:23:
29:23:5e:05:85:50:59:eb:ba:f9:8d:bb:0b:db:be:
86:c8:4a:3c:4a:1d:84:33:d0:16:d6:3b:f1:14:0c:
49:7d:5c:09:a0:e4:61:72:5f:71:9a:5a:5b:11:1d:
6e:e7:84:34:99:9d:e9:c8:3d:4f:1c:f5:bd:1f:f7:
1f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EB:A4:02:38:FD:CF:69:C7:8A:D8:14:A2:E3:5A:7E:54:14:9B:B3
X509v3 Authority Key Identifier:
keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/r-ukAjj9z2nHitgUouNaflQUm7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.72.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:95:be:4a:0b:f4:85:3c:a9:eb:d4:cd:0a:87:10:1f:5d:53:
9e:a9:df:e2:f8:76:67:71:eb:fd:8f:6f:1c:63:55:5d:44:77:
18:db:b8:a9:a5:5f:6e:ce:b9:dc:91:75:83:3b:99:5f:bf:de:
c8:1c:63:a6:3b:6d:db:0d:94:c2:20:c3:f2:ef:53:bd:cb:21:
69:0d:c7:f5:25:da:53:83:92:93:b1:22:6d:bb:68:cd:ce:50:
22:01:cc:d2:0c:38:60:38:1a:70:f1:ac:0e:2b:58:70:8e:75:
7d:43:01:2b:ed:6f:ec:10:ad:b2:c9:44:d8:f8:37:84:ab:fe:
9b:0e:55:8d:b4:a0:25:e7:13:b9:97:ec:bb:db:85:d4:02:8a:
77:cf:4a:b8:20:fd:d8:3e:1c:50:4b:7c:97:19:87:1f:aa:f7:
46:cd:f6:a5:d6:29:81:f1:75:4b:34:2b:0d:df:6c:16:2d:bb:
19:22:63:41:a8:c3:1c:b2:bb:5c:93:62:a1:c6:ee:d7:e5:7a:
e2:22:0e:12:57:3b:c2:b2:16:56:bf:d1:80:aa:7e:b1:c7:0b:
e9:db:fd:e8:77:1a:ed:00:1c:5d:9a:ca:45:2a:c4:e5:b3:92:
6f:c2:91:b5:ce:f4:de:30:38:2b:82:bd:8f:e7:96:9c:9a:77:
d9:dd:ad:30
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEETPVdTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YmVmNWFhMTRkMzE0MGM3YzdjNDk4OGYxOWRhOTQzMWViMWE0MGYxMB4XDTIyMDEw
MTA0MDE1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWZlYmE0MDIzOGZk
Y2Y2OWM3OGFkODE0YTJlMzVhN2U1NDE0OWJiMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKtJ/EFAheTILcMKtvf4/LricH8EcN8syRKWTyag7NKHrVxP
TXjXJqNXzizvbCFSPNweglbiYtJ6TyUhNXeg6zzJblkUCdoTzdWBuhKvatEZwSGp
5l2tBOCEhPPuHCXvicy/XXXzGh0SsFWsAz5mNLtTkksqNkEdjvT9dyAaSO7px2tb
AgnsYqPHYZvweTycyIoQ4vAE56V2TJ5P3XsCe6T+5xhtaGq9yrZni97Gltt73aXq
hjWBHh8CMGF0UPyY3XsjKSNeBYVQWeu6+Y27C9u+hshKPEodhDPQFtY78RQMSX1c
CaDkYXJfcZpaWxEdbueENJmd6cg9Txz1vR/3HxUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSv66QCOP3PaceK2BSi41p+VBSbszAfBgNVHSMEGDAWgBQb71qhTTFAx8fE
mI8Z2pQx6xpA8TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ctOWFvVTB4UU1mSHhKaVBHZHFVTWVzYVFQRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjAvNWQ2MTY3LWYwMmItNDRkYi1iNTY1LTBlNDM4MjMxMGNhNS8x
L3ItdWtBamo5ejJuSGl0Z1VvdU5hZmxRVW03TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAv
NWQ2MTY3LWYwMmItNDRkYi1iNTY1LTBlNDM4MjMxMGNhNS8xL0ctOWFvVTB4UU1m
SHhKaVBHZHFVTWVzYVFQRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmnSDANBgkqhkiG9w0BAQsFAAOC
AQEAnJW+Sgv0hTyp69TNCocQH11Tnqnf4vh2Z3Hr/Y9vHGNVXUR3GNu4qaVfbs65
3JF1gzuZX7/eyBxjpjtt2w2UwiDD8u9TvcshaQ3H9SXaU4OSk7Eibbtozc5QIgHM
0gw4YDgacPGsDitYcI51fUMBK+1v7BCtsslE2Pg3hKv+mw5VjbSgJecTuZfsu9uF
1AKKd89KuCD92D4cUEt8lxmHH6r3Rs32pdYpgfF1SzQrDd9sFi27GSJjQajDHLK7
XJNiocbu1+V64iIOElc7wrIWVr/RgKp+sccL6dv96Hca7QAcXZrKRSrE5bOSb8KR
tc703jA4K4K9j+eWnJp32d2tMA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:13 2023 by rpki-client on console-fra.rpki-client.org