Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e19744-dabe-4096-8e67-ff65ae2c1032/1/tU1TbNxISFD12qXPdOEKsZsB8DM.roa
File: tU1TbNxISFD12qXPdOEKsZsB8DM.roa (raw, json)
Hash identifier: ItjP+sdHmTpCZoGzmO/zZVpeUIgOJK80KsITddlL80w=
Subject key identifier: B5:4D:53:6C:DC:48:48:50:F5:DA:A5:CF:74:E1:0A:B1:9B:01:F0:33
Certificate issuer: /CN=041f2ec8e276c17d76f95c78d4a92a2b87ef2542
Certificate serial: 09F98346
Authority key identifier: 04:1F:2E:C8:E2:76:C1:7D:76:F9:5C:78:D4:A9:2A:2B:87:EF:25:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BB8uyOJ2wX12-Vx41KkqK4fvJUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e19744-dabe-4096-8e67-ff65ae2c1032/1/tU1TbNxISFD12qXPdOEKsZsB8DM.roa
Signing time: Sat 01 Jan 2022 14:03:44 +0000
ROA not before: Sat 01 Jan 2022 14:03:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209858
IP address blocks: 213.184.73.0/24 maxlen: 24
213.184.72.0/22 maxlen: 22
213.184.74.0/24 maxlen: 24
213.184.75.0/24 maxlen: 24
213.184.72.0/24 maxlen: 24
185.186.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167347014 (0x9f98346)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041f2ec8e276c17d76f95c78d4a92a2b87ef2542
Validity
Not Before: Jan 1 14:03:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b54d536cdc484850f5daa5cf74e10ab19b01f033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:d2:93:96:bd:bd:65:98:bc:2d:e5:ac:d4:
07:9a:fe:22:41:c1:83:5a:ea:ce:11:1c:31:7a:0b:
c7:84:0c:63:01:ea:08:23:83:d1:70:92:6b:fd:0b:
cf:89:3e:6d:a4:01:78:8b:57:09:fb:7e:2a:06:3d:
2f:db:d4:e1:00:ed:97:36:12:a4:4f:57:ea:1b:de:
1d:21:dd:65:59:ff:5d:62:14:f4:95:57:84:67:cb:
64:76:c8:f7:8d:25:09:43:46:e9:66:e1:f9:99:12:
7a:b2:b3:36:f2:fd:d9:51:bc:e7:61:29:db:32:db:
37:d7:31:28:73:64:6e:d9:cb:ea:b4:d5:fc:1d:8a:
d1:84:4b:5d:c7:7a:6c:5e:ab:7e:11:fb:ed:85:a1:
2f:91:d0:73:ba:e5:0d:61:0f:43:a6:b1:8f:ac:68:
33:dd:b0:9a:5c:83:60:0a:e0:4c:7f:66:a4:04:86:
c0:1a:5d:4f:3b:b9:0d:fb:c4:da:ef:d7:4a:62:cc:
9a:08:c1:78:6c:d4:0f:2c:98:38:e4:bd:55:2c:c5:
2e:74:5c:85:6c:93:6e:29:8c:6e:73:fa:86:b2:11:
b8:4a:96:88:71:79:85:49:ba:ac:ac:42:19:83:5d:
d2:84:bb:a2:ac:7f:8e:3b:4c:61:bf:fc:91:44:5e:
55:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4D:53:6C:DC:48:48:50:F5:DA:A5:CF:74:E1:0A:B1:9B:01:F0:33
X509v3 Authority Key Identifier:
keyid:04:1F:2E:C8:E2:76:C1:7D:76:F9:5C:78:D4:A9:2A:2B:87:EF:25:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BB8uyOJ2wX12-Vx41KkqK4fvJUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e19744-dabe-4096-8e67-ff65ae2c1032/1/tU1TbNxISFD12qXPdOEKsZsB8DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e19744-dabe-4096-8e67-ff65ae2c1032/1/BB8uyOJ2wX12-Vx41KkqK4fvJUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.183.0/24
213.184.72.0/22
Signature Algorithm: sha256WithRSAEncryption
33:f5:a2:a1:0c:eb:65:91:a5:4a:95:55:2a:a7:9e:da:ba:20:
15:76:55:7f:40:08:ce:72:40:32:c5:1f:23:bd:b7:2a:bc:59:
21:99:e7:49:79:5d:72:4c:2d:ab:23:da:6d:24:6f:46:46:70:
af:51:33:f3:ee:8c:0c:c3:d5:5c:9e:74:73:c6:de:30:e6:fc:
1b:8a:62:25:17:b8:c8:88:84:a1:f5:c3:c8:72:ca:0b:4c:92:
be:8c:01:10:34:cd:2a:c7:55:d7:35:53:76:e8:da:e4:b8:62:
3b:43:98:ab:ef:c1:d9:3e:36:0c:69:33:7f:24:57:e7:64:c4:
70:3f:bb:c2:74:b7:69:02:8d:f1:d8:6d:b4:ca:a7:94:c6:06:
ce:f2:7c:0d:cd:c0:d8:52:f6:8e:6e:a3:51:0b:4d:86:ac:5d:
bd:a9:33:14:3b:39:93:76:62:a4:8a:35:b2:37:ef:42:da:d0:
31:d1:62:7f:97:50:cf:9d:5a:20:b6:1c:0b:96:58:d5:0c:11:
fe:bc:70:5f:53:67:2d:87:34:c5:07:57:58:4c:3c:fd:22:7b:
c0:df:f5:00:bb:9d:0b:d4:4c:1d:b5:e2:89:b7:46:af:b5:3b:
bf:2c:dc:3e:bc:a9:ca:40:1c:c6:b0:95:f1:a7:67:42:e0:81:
38:d2:e3:c4
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECfmDRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NDFmMmVjOGUyNzZjMTdkNzZmOTVjNzhkNGE5MmEyYjg3ZWYyNTQyMB4XDTIyMDEw
MTE0MDM0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjU0ZDUzNmNkYzQ4
NDg1MGY1ZGFhNWNmNzRlMTBhYjE5YjAxZjAzMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKNI0pOWvb1lmLwt5azUB5r+IkHBg1rqzhEcMXoLx4QMYwHq
CCOD0XCSa/0Lz4k+baQBeItXCft+KgY9L9vU4QDtlzYSpE9X6hveHSHdZVn/XWIU
9JVXhGfLZHbI940lCUNG6Wbh+ZkSerKzNvL92VG852Ep2zLbN9cxKHNkbtnL6rTV
/B2K0YRLXcd6bF6rfhH77YWhL5HQc7rlDWEPQ6axj6xoM92wmlyDYArgTH9mpASG
wBpdTzu5DfvE2u/XSmLMmgjBeGzUDyyYOOS9VSzFLnRchWyTbimMbnP6hrIRuEqW
iHF5hUm6rKxCGYNd0oS7oqx/jjtMYb/8kUReVVECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBS1TVNs3EhIUPXapc904QqxmwHwMzAfBgNVHSMEGDAWgBQEHy7I4nbBfXb5
XHjUqSorh+8lQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JCOHV5T0oyd1gxMi1WeDQxS2txSzRmdkpVSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjMvZTE5NzQ0LWRhYmUtNDA5Ni04ZTY3LWZmNjVhZTJjMTAzMi8x
L3RVMVRiTnhJU0ZEMTJxWFBkT0VLc1pzQjhETS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMv
ZTE5NzQ0LWRhYmUtNDA5Ni04ZTY3LWZmNjVhZTJjMTAzMi8xL0JCOHV5T0oyd1gx
Mi1WeDQxS2txSzRmdkpVSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALm6twMEAtW4SDANBgkqhkiG9w0B
AQsFAAOCAQEAM/WioQzrZZGlSpVVKqee2rogFXZVf0AIznJAMsUfI723KrxZIZnn
SXldckwtqyPabSRvRkZwr1Ez8+6MDMPVXJ50c8beMOb8G4piJRe4yIiEofXDyHLK
C0ySvowBEDTNKsdV1zVTduja5LhiO0OYq+/B2T42DGkzfyRX52TEcD+7wnS3aQKN
8dhttMqnlMYGzvJ8Dc3A2FL2jm6jUQtNhqxdvakzFDs5k3ZipIo1sjfvQtrQMdFi
f5dQz51aILYcC5ZY1QwR/rxwX1NnLYc0xQdXWEw8/SJ7wN/1ALudC9RMHbXiibdG
r7U7vyzcPrypykAcxrCV8adnQuCBONLjxA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:18 2023 by rpki-client on console-ams.rpki-client.org