Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/1--a3BXl2D_vJ6KE05vUHCZD2JDU.roa
File: 1--a3BXl2D_vJ6KE05vUHCZD2JDU.roa (raw, json)
Hash identifier: 8WICZ+ibbrZqCl+IL193/XGV5gUwEixh3PU+SOEE9/g=
Subject key identifier: FB:E6:B7:05:79:76:0F:FB:C9:E8:A1:34:E6:F5:07:09:90:F6:24:35
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 0A049109
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/1--a3BXl2D_vJ6KE05vUHCZD2JDU.roa
Signing time: Sat 01 Jan 2022 11:02:17 +0000
ROA not before: Sat 01 Jan 2022 11:02:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42649
IP address blocks: 185.195.94.0/24 maxlen: 24
185.195.95.0/24 maxlen: 24
185.195.92.0/24 maxlen: 24
185.195.93.0/24 maxlen: 24
2a0a:56c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168071433 (0xa049109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Jan 1 11:02:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbe6b70579760ffbc9e8a134e6f5070990f62435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:02:32:28:95:cd:6a:a3:37:33:57:53:38:83:
ee:6f:0f:90:63:03:9d:cb:db:11:c5:ee:8f:84:fd:
dc:5b:ca:ba:48:2d:39:17:ef:25:84:25:b6:46:e0:
95:22:ec:b4:be:23:ce:9d:32:ee:16:59:ec:cd:23:
92:a0:5e:c9:23:49:02:84:88:a9:d4:31:66:65:e1:
08:ec:8e:ea:4f:b6:6a:c4:1f:46:0d:10:ca:8b:43:
db:33:84:a3:8a:ac:f1:df:25:f5:36:20:47:c4:60:
ef:b7:61:c6:75:7d:cf:1e:c8:f5:8b:70:9e:65:1f:
b7:75:61:db:90:be:49:3c:7e:b7:82:9d:79:57:0a:
37:49:71:54:6c:13:4d:71:fb:da:87:2f:88:8a:0a:
bc:d1:15:05:3d:74:d1:fe:a9:2e:c1:32:fc:7a:d6:
3d:b4:e9:37:6b:80:84:48:64:4a:26:22:3b:72:32:
5b:24:8b:75:27:df:f4:e9:cf:28:61:27:4f:0b:de:
39:37:55:17:0d:4e:f0:b1:dd:b3:da:0e:9f:0b:e4:
a9:1e:ca:7e:2b:5f:0b:ac:5b:b3:04:62:58:98:1e:
23:61:23:27:e1:22:fc:4d:b3:d5:ed:bf:19:63:64:
d7:9f:da:e6:92:94:e8:f0:0f:56:f0:1f:a6:46:f7:
7a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E6:B7:05:79:76:0F:FB:C9:E8:A1:34:E6:F5:07:09:90:F6:24:35
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/1--a3BXl2D_vJ6KE05vUHCZD2JDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.92.0/22
IPv6:
2a0a:56c0::/29
Signature Algorithm: sha256WithRSAEncryption
15:40:63:94:4a:58:e0:31:db:db:9c:12:00:83:c3:0c:72:60:
c1:9e:86:eb:9e:cc:be:97:f5:83:d6:a1:60:27:26:83:39:2b:
00:41:c9:fb:80:a6:61:b0:90:71:04:68:c8:2e:0d:e3:d6:4e:
26:a6:e1:81:43:9e:61:25:77:de:12:9a:b7:21:2f:26:44:48:
ea:07:85:4c:d8:34:51:28:18:26:69:36:d3:d4:2b:0f:46:32:
97:d6:34:98:19:a0:5d:10:4d:49:98:95:2d:0a:f4:39:a1:a9:
97:41:37:08:d4:f8:1d:c1:c4:1b:2f:07:73:13:f0:78:b3:b6:
0d:ed:87:eb:ea:f2:b2:d5:f9:e0:90:f2:c8:02:93:d5:fb:84:
18:f2:55:86:05:ee:4f:4f:22:2e:0c:bd:f9:87:4f:ea:2b:cd:
ab:36:dd:fa:1d:9a:41:c6:7b:f9:33:bc:a9:a2:5c:f6:41:85:
6d:54:fc:ea:10:ea:c8:7e:90:1d:8b:6e:ab:32:3f:8b:06:4d:
d2:67:0c:0e:44:2a:62:d4:c4:67:59:76:5d:9f:0f:91:86:d0:
1a:7e:b8:a9:11:e7:9c:ff:43:8e:49:7c:cf:aa:c2:40:f7:c7:
eb:71:1e:8d:37:13:64:cf:b1:8e:8a:20:00:a2:0e:0e:ea:e4:
af:7e:78:42
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIECgSRCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NmEwNDM0YmViZTVkZmE2M2RkYTc4YzI0YTRlYmMxZDJjZDczNjlkMB4XDTIyMDEw
MTExMDIxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmJlNmI3MDU3OTc2
MGZmYmM5ZThhMTM0ZTZmNTA3MDk5MGY2MjQzNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANoCMiiVzWqjNzNXUziD7m8PkGMDncvbEcXuj4T93FvKukgt
ORfvJYQltkbglSLstL4jzp0y7hZZ7M0jkqBeySNJAoSIqdQxZmXhCOyO6k+2asQf
Rg0QyotD2zOEo4qs8d8l9TYgR8Rg77dhxnV9zx7I9YtwnmUft3Vh25C+STx+t4Kd
eVcKN0lxVGwTTXH72ocviIoKvNEVBT100f6pLsEy/HrWPbTpN2uAhEhkSiYiO3Iy
WySLdSff9OnPKGEnTwveOTdVFw1O8LHds9oOnwvkqR7KfitfC6xbswRiWJgeI2Ej
J+Ei/E2z1e2/GWNk15/a5pKU6PAPVvAfpkb3em8CAwEAAaOCAhkwggIVMB0GA1Ud
DgQWBBT75rcFeXYP+8nooTTm9QcJkPYkNTAfBgNVHSMEGDAWgBSmoENL6+Xfpj3a
eMJKTrwdLNc2nTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BxQkRTLXZsMzZZOTJuakNTazY4SFN6WE5wMC5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjQvZDgzOThlLTIzMmMtNDVjMi1iOGUwLTljZTQ3NjdkYTJjMS8x
LzEtLWEzQlhsMkRfdko2S0UwNXZVSENaRDJKRFUucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0
L2Q4Mzk4ZS0yMzJjLTQ1YzItYjhlMC05Y2U0NzY3ZGEyYzEvMS9wcUJEUy12bDM2
WTkybmpDU2s2OEhTelhOcDAuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
LgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK5w1wwDQQCAAIwBwMFAyoKVsAw
DQYJKoZIhvcNAQELBQADggEBABVAY5RKWOAx29ucEgCDwwxyYMGehuuezL6X9YPW
oWAnJoM5KwBByfuApmGwkHEEaMguDePWTiam4YFDnmEld94SmrchLyZESOoHhUzY
NFEoGCZpNtPUKw9GMpfWNJgZoF0QTUmYlS0K9DmhqZdBNwjU+B3BxBsvB3MT8Hiz
tg3th+vq8rLV+eCQ8sgCk9X7hBjyVYYF7k9PIi4MvfmHT+orzas23fodmkHGe/kz
vKmiXPZBhW1U/OoQ6sh+kB2LbqsyP4sGTdJnDA5EKmLUxGdZdl2fD5GG0Bp+uKkR
55z/Q45JfM+qwkD3x+txHo03E2TPsY6KIACiDg7q5K9+eEI=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:21 2023 by rpki-client on console-ams.rpki-client.org