Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/0QDor-S4Sp269TXuGENNU2M1C2M.roa
File: 0QDor-S4Sp269TXuGENNU2M1C2M.roa (raw, json)
Hash identifier: JQfan0fkuTvvsbFSwVDlMyvaif8cnQPOEv3VkaZUmWU=
Subject key identifier: D1:00:E8:AF:E4:B8:4A:9D:BA:F5:35:EE:18:43:4D:53:63:35:0B:63
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 0181E83D5873C0A3AC1DDDF888EEA0B2043F
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/0QDor-S4Sp269TXuGENNU2M1C2M.roa
Signing time: Sun 10 Jul 2022 13:12:23 +0000
ROA not before: Sun 10 Jul 2022 13:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43950
IP address blocks: 193.239.8.0/22 maxlen: 22
5.252.156.0/22 maxlen: 22
79.98.32.0/21 maxlen: 21
79.98.33.0/24 maxlen: 24
79.98.32.0/24 maxlen: 24
79.98.35.0/24 maxlen: 24
79.98.39.0/24 maxlen: 24
2a01:568::/32 maxlen: 32
2a01:568:5000::/36 maxlen: 36
2a01:568:4000::/36 maxlen: 36
2a01:568:3000::/36 maxlen: 36
2a01:568::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e8:3d:58:73:c0:a3:ac:1d:dd:f8:88:ee:a0:b2:04:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Jul 10 13:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d100e8afe4b84a9dbaf535ee18434d5363350b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:cc:9a:11:47:6f:5c:cc:b2:af:95:7f:16:
22:79:93:da:34:07:5c:ab:a0:2c:cc:5c:b8:3f:92:
ec:cd:02:fb:67:8a:c8:5c:9e:15:3f:5f:4f:d1:95:
f0:cf:a6:31:d6:5e:c3:eb:6c:1e:d8:79:51:cb:3e:
db:23:12:81:06:0f:ba:91:46:d3:4a:a5:89:0a:f9:
15:88:e8:fd:cc:9e:bc:7c:ec:da:42:3f:8c:bf:24:
9c:d3:24:a7:1c:0e:27:60:44:05:da:64:d4:6a:00:
69:35:16:6e:21:c3:30:49:d8:8a:9d:f3:ea:e3:69:
a4:ca:54:8c:f8:71:31:6e:21:4d:9e:fb:dc:61:b7:
3e:20:26:d1:a7:4d:8e:14:7a:c9:ac:4d:e7:8e:19:
bd:a6:17:eb:cc:8a:d0:7b:18:aa:a0:c9:c2:a7:a0:
df:42:9e:37:5b:c3:fd:fb:72:07:5f:34:57:a8:ea:
17:63:20:38:0c:4c:87:bb:bd:bd:a7:c7:94:52:b4:
4f:ab:63:dd:64:23:7e:31:3a:d7:53:aa:e2:ee:36:
3b:8e:f7:e9:e2:4b:2d:8f:76:31:f2:c9:2a:e9:94:
20:c0:c0:69:68:fb:f4:29:92:a2:47:69:9e:2f:37:
40:b4:50:35:e5:28:bb:45:e9:e0:56:12:d5:4b:53:
3e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:00:E8:AF:E4:B8:4A:9D:BA:F5:35:EE:18:43:4D:53:63:35:0B:63
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/0QDor-S4Sp269TXuGENNU2M1C2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.156.0/22
79.98.32.0/21
193.239.8.0/22
IPv6:
2a01:568::/32
Signature Algorithm: sha256WithRSAEncryption
18:bd:b9:e2:14:59:6c:c9:43:7d:d1:2e:d0:ec:25:ba:2a:04:
c5:16:80:9f:2e:3b:c0:90:5f:6d:bd:77:a5:07:40:e0:49:c4:
09:f5:86:b7:5f:ac:77:7b:4c:c7:cc:d8:cc:4d:8b:53:26:16:
56:30:43:79:70:2d:ab:93:c8:88:5b:aa:15:89:7d:a3:67:68:
ab:65:17:01:d1:25:3f:76:a6:c9:83:0a:f9:b3:3b:45:c6:b3:
73:86:09:14:71:22:54:b8:59:2b:02:23:d9:f3:96:1d:bc:ab:
f1:7a:f3:73:1a:6b:45:4c:35:a4:b0:ab:fa:1a:35:5f:b8:0b:
de:be:05:02:ca:bb:96:12:73:86:49:f3:35:da:12:38:ad:9e:
3c:39:3b:48:63:77:25:6c:b2:1d:d8:4f:f7:1e:b0:da:7c:46:
56:77:52:2e:3a:3f:11:1b:36:31:12:58:3a:5a:ce:1f:91:6c:
bd:f8:51:2d:bb:5e:d0:88:77:12:3a:84:0b:c2:f3:39:64:eb:
2c:3d:0d:fa:7f:ee:a0:ad:a7:c8:de:ad:a4:ac:f1:38:ab:45:
e6:95:5b:5e:56:60:b0:ed:fb:c2:08:bf:71:28:0f:2e:cb:6a:
44:77:6c:dd:d9:f5:e4:1a:07:a5:b4:3c:f2:89:ff:d6:94:b8:
bf:c6:18:aa
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYHoPVhzwKOsHd34iO6gsgQ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMzAyYTJkZDUxN2E2MWEzYjk1Mjc0NmYyZWU5ZmJlNDM2
ZDYzNDkwHhcNMjIwNzEwMTMxMjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTAwZThhZmU0Yjg0YTlkYmFmNTM1ZWUxODQzNGQ1MzYzMzUwYjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOHMmhFHb1zMsq+VfxYieZPaNAdc
q6AszFy4P5LszQL7Z4rIXJ4VP19P0ZXwz6Yx1l7D62we2HlRyz7bIxKBBg+6kUbT
SqWJCvkViOj9zJ68fOzaQj+MvySc0ySnHA4nYEQF2mTUagBpNRZuIcMwSdiKnfPq
42mkylSM+HExbiFNnvvcYbc+ICbRp02OFHrJrE3njhm9phfrzIrQexiqoMnCp6Df
Qp43W8P9+3IHXzRXqOoXYyA4DEyHu729p8eUUrRPq2PdZCN+MTrXU6ri7jY7jvfp
4kstj3Yx8skq6ZQgwMBpaPv0KZKiR2meLzdAtFA15Si7RengVhLVS1M+QQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFNEA6K/kuEqduvU17hhDTVNjNQtjMB8GA1UdIwQY
MBaAFE0wKi3VF6YaO5UnRvLun75DbWNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDct
MTY2ZmI5ZGI2ZGIzLzEvMFFEb3ItUzRTcDI2OVRYdUdFTk5VMk0xQzJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDctMTY2ZmI5ZGI2ZGIz
LzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCBfycAwQD
T2IgAwQCwe8IMA0EAgACMAcDBQAqAQVoMA0GCSqGSIb3DQEBCwUAA4IBAQAYvbni
FFlsyUN90S7Q7CW6KgTFFoCfLjvAkF9tvXelB0DgScQJ9Ya3X6x3e0zHzNjMTYtT
JhZWMEN5cC2rk8iIW6oViX2jZ2irZRcB0SU/dqbJgwr5sztFxrNzhgkUcSJUuFkr
AiPZ85YdvKvxevNzGmtFTDWksKv6GjVfuAvevgUCyruWEnOGSfM12hI4rZ48OTtI
Y3clbLId2E/3HrDafEZWd1IuOj8RGzYxElg6Ws4fkWy9+FEtu17QiHcSOoQLwvM5
ZOssPQ36f+6grafI3q2krPE4q0XmlVteVmCw7fvCCL9xKA8uy2pEd2zd2fXkGgel
tDzyif/WlLi/xhiq
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:50 2023 by rpki-client on console-fra.rpki-client.org