Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/qN45P3TFA7valyZRCKNRDD0radY.roa
File: qN45P3TFA7valyZRCKNRDD0radY.roa (raw, json)
Hash identifier: CmK+6kVqK+Dx0DiJaHRWEUfddLiKAbOOUmpV2PmKfTo=
Subject key identifier: A8:DE:39:3F:74:C5:03:BB:DA:97:26:51:08:A3:51:0C:3D:2B:69:D6
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 01828249FA82AB6F22B584A053ED69549E21
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/qN45P3TFA7valyZRCKNRDD0radY.roa
Signing time: Tue 09 Aug 2022 11:07:42 +0000
ROA not before: Tue 09 Aug 2022 11:07:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49033
IP address blocks: 185.232.160.0/22 maxlen: 24
185.171.48.0/22 maxlen: 24
185.166.91.0/24 maxlen: 24
185.166.88.0/24 maxlen: 24
185.166.89.0/24 maxlen: 24
185.166.90.0/24 maxlen: 24
185.166.90.0/23 maxlen: 24
94.46.216.0/22 maxlen: 24
94.46.218.0/23 maxlen: 23
185.238.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:82:49:fa:82:ab:6f:22:b5:84:a0:53:ed:69:54:9e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Aug 9 11:07:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8de393f74c503bbda97265108a3510c3d2b69d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7d:17:b3:1f:61:a5:a7:96:38:a5:e7:67:78:
ef:d0:4f:ac:36:b4:f4:63:70:2f:e2:5c:0c:92:6a:
a8:31:13:a4:b3:e0:07:f3:43:f7:4d:4e:48:98:98:
50:cf:c4:77:c7:35:0c:ef:c4:d9:2a:2f:9f:52:13:
ed:1c:96:7c:3e:60:f2:61:4c:1c:7a:2d:c6:a4:67:
09:af:99:75:a8:d5:f9:ce:8b:ad:f5:9e:41:fc:f1:
02:f1:26:e5:60:8d:0f:1a:cc:8d:91:fb:93:46:66:
13:41:3f:4f:da:55:f8:27:36:2a:49:a2:76:1c:28:
37:b5:1c:8f:61:38:c2:dc:d1:9d:39:5b:90:b3:ac:
d5:47:f9:0e:45:51:9c:fe:e3:38:5f:53:7c:39:b0:
1e:7c:7b:2a:af:3c:49:da:37:cd:00:28:52:44:0b:
b9:e5:52:9f:7d:41:08:ef:4c:ea:16:55:fa:be:18:
e5:7c:39:be:47:cd:51:1d:82:61:b9:92:3c:38:b6:
4d:c7:2a:02:de:4d:42:8d:5f:b6:24:cc:b9:43:d7:
dc:2a:f3:e8:03:72:b9:5f:6b:2b:1c:af:6b:5d:e5:
a0:3a:2f:02:b7:50:b0:06:b6:23:ab:f1:be:fd:1a:
95:21:2e:6e:42:cd:2e:0a:a5:ed:21:62:05:be:43:
a9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DE:39:3F:74:C5:03:BB:DA:97:26:51:08:A3:51:0C:3D:2B:69:D6
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/qN45P3TFA7valyZRCKNRDD0radY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.46.216.0/22
185.166.88.0/22
185.171.48.0/22
185.232.160.0/22
185.238.108.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:88:53:17:29:54:d6:b2:54:84:0d:a1:57:ed:c8:49:81:e0:
4d:20:a2:df:bd:7d:53:ef:43:37:8e:1a:fd:a4:1d:19:08:82:
68:36:7a:77:71:5c:34:07:56:4b:a1:03:a9:3d:1a:ba:77:e5:
f0:79:29:1f:07:b4:59:b1:ef:c3:94:f4:78:e0:88:c6:c3:bd:
4a:02:26:d6:10:a2:93:dd:09:1d:b8:49:9e:6f:33:67:c5:8f:
2d:45:7e:77:b4:d4:97:04:94:fa:65:b3:c5:30:07:99:5e:02:
c7:a0:cf:e1:e5:76:55:ae:c0:9c:0f:38:dd:00:84:fa:20:15:
97:06:f9:bb:59:32:d9:f0:c3:49:ba:9a:70:4c:a0:17:72:6c:
b6:8f:8a:20:42:4f:19:3a:07:57:12:63:db:22:fc:92:eb:e3:
de:6b:c7:66:bd:1a:f7:54:6a:d9:0d:fc:7f:39:cc:c3:05:ec:
c1:71:76:a7:4f:8a:9d:36:0d:f1:33:1b:4e:b9:68:43:f3:35:
14:d2:85:4c:2f:40:dc:a5:3d:3d:a0:6c:5d:09:6a:66:33:47:
49:e5:d2:1c:09:ce:55:73:c7:88:48:d6:a7:70:88:e4:f7:cb:
bd:d4:f1:2d:bd:3b:56:ce:85:45:47:00:ed:b9:72:b2:bc:ac:
e9:64:f3:6c
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYKCSfqCq28itYSgU+1pVJ4hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzk0MzUxN2Y1ZTNiNzQ3ZTc1MzAzMjA3ODlhMDM0NDRi
NDM5MTIwHhcNMjIwODA5MTEwNzQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGRlMzkzZjc0YzUwM2JiZGE5NzI2NTEwOGEzNTEwYzNkMmI2OWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg30Xsx9hpaeWOKXnZ3jv0E+sNrT0
Y3Av4lwMkmqoMROks+AH80P3TU5ImJhQz8R3xzUM78TZKi+fUhPtHJZ8PmDyYUwc
ei3GpGcJr5l1qNX5zout9Z5B/PEC8SblYI0PGsyNkfuTRmYTQT9P2lX4JzYqSaJ2
HCg3tRyPYTjC3NGdOVuQs6zVR/kORVGc/uM4X1N8ObAefHsqrzxJ2jfNAChSRAu5
5VKffUEI70zqFlX6vhjlfDm+R81RHYJhuZI8OLZNxyoC3k1CjV+2JMy5Q9fcKvPo
A3K5X2srHK9rXeWgOi8Ct1CwBrYjq/G+/RqVIS5uQs0uCqXtIWIFvkOpiwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKjeOT90xQO72pcmUQijUQw9K2nWMB8GA1UdIwQY
MBaAFCrJQ1F/Xjt0fnUwMgeJoDREtDkSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgt
MmQ5MWNmZDdhYWY0LzEvcU40NVAzVEZBN3ZhbHlaUkNLTlJERDByYWRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgtMmQ5MWNmZDdhYWY0
LzEvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCXi7YAwQC
uaZYAwQCuaswAwQCueigAwQCue5sMA0GCSqGSIb3DQEBCwUAA4IBAQDCiFMXKVTW
slSEDaFX7chJgeBNIKLfvX1T70M3jhr9pB0ZCIJoNnp3cVw0B1ZLoQOpPRq6d+Xw
eSkfB7RZse/DlPR44IjGw71KAibWEKKT3QkduEmebzNnxY8tRX53tNSXBJT6ZbPF
MAeZXgLHoM/h5XZVrsCcDzjdAIT6IBWXBvm7WTLZ8MNJuppwTKAXcmy2j4ogQk8Z
OgdXEmPbIvyS6+Pea8dmvRr3VGrZDfx/OczDBezBcXanT4qdNg3xMxtOuWhD8zUU
0oVML0DcpT09oGxdCWpmM0dJ5dIcCc5Vc8eISNancIjk98u91PEtvTtWzoVFRwDt
uXKyvKzpZPNs
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:42 2023 by rpki-client on console-fra.rpki-client.org