Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/80HmMw7PEtyZyufcRTQATMdHSSQ.roa
File: 80HmMw7PEtyZyufcRTQATMdHSSQ.roa (raw, json)
Hash identifier: j8gjfFkFjE7OL9ugnZxGv84W74aUe8eMWve6u7dyDBs=
Subject key identifier: F3:41:E6:33:0E:CF:12:DC:99:CA:E7:DC:45:34:00:4C:C7:47:49:24
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 140173F0
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/80HmMw7PEtyZyufcRTQATMdHSSQ.roa
Signing time: Wed 26 Jan 2022 11:29:23 +0000
ROA not before: Wed 26 Jan 2022 11:29:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203459
IP address blocks: 185.133.225.0/24 maxlen: 24
185.133.226.0/24 maxlen: 24
185.133.224.0/24 maxlen: 24
185.133.227.0/24 maxlen: 24
2a06:7fc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335639536 (0x140173f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Jan 26 11:29:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f341e6330ecf12dc99cae7dc4534004cc7474924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:a0:87:5a:34:8a:66:76:14:d2:b0:bb:21:
6e:d7:0f:c2:6c:ef:6d:1c:14:85:fd:3c:44:10:5e:
0b:af:e4:c0:df:2f:33:9a:0f:b2:99:56:32:80:d4:
57:24:88:c0:76:d3:de:7b:2b:bf:08:a7:cc:c0:40:
73:8e:b0:e7:07:da:02:f2:24:d3:55:e2:7a:cf:ce:
05:a2:9f:7a:2e:17:17:f2:13:0c:11:3d:01:82:e2:
17:1e:f6:78:cd:3a:22:02:34:6c:40:a7:06:50:4e:
60:78:ce:5e:6b:cf:68:0f:07:f1:14:2d:f0:e5:22:
d2:18:3b:c6:08:3a:8f:b5:97:05:a5:62:e0:11:81:
84:85:13:ab:d3:46:46:02:e6:83:11:07:09:f5:1c:
de:f7:d4:4a:20:e2:81:b7:3d:5b:21:ec:ca:4e:87:
67:db:e4:f6:29:51:63:f5:0f:bc:d5:2f:e3:64:f3:
70:f9:6c:56:d4:55:4d:8c:54:dc:d0:d3:56:66:0d:
5a:dc:27:5c:10:5e:11:0c:2b:b5:ff:b8:c1:39:a0:
fb:50:25:e1:22:af:9b:b9:9b:71:58:cc:c1:fb:9b:
08:c2:8f:83:d1:ee:4f:bd:67:4a:30:41:7f:0c:2e:
e4:82:d9:36:08:0e:60:7a:80:65:03:ca:09:7f:25:
03:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:41:E6:33:0E:CF:12:DC:99:CA:E7:DC:45:34:00:4C:C7:47:49:24
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/80HmMw7PEtyZyufcRTQATMdHSSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.224.0/22
IPv6:
2a06:7fc0::/29
Signature Algorithm: sha256WithRSAEncryption
34:1f:0b:8e:f0:a6:a3:27:b8:13:4b:c8:e9:48:7b:77:da:a8:
35:c8:7e:e4:01:31:98:a8:f2:dc:12:bc:72:47:6a:60:cd:6b:
d3:e0:47:08:16:7b:db:96:55:45:ad:5f:a9:97:80:a0:d2:dd:
aa:cc:35:93:51:b7:c0:2a:fe:49:14:75:ac:c6:29:8e:af:c0:
d4:73:29:24:33:c4:93:59:74:9a:ac:9f:dc:ce:e8:3e:fd:ac:
7a:c8:62:d7:c7:61:bc:9e:48:31:30:e5:53:a1:a5:50:5e:c9:
25:f5:56:30:81:7d:29:20:e0:da:77:ce:42:a9:41:bb:c8:17:
2e:aa:bd:5d:c7:59:1a:f9:09:1e:ac:d1:ed:22:d5:ed:a3:d7:
ca:36:cf:85:0e:56:32:c3:80:58:a1:b6:90:a0:11:c7:4b:3d:
b2:71:ee:fd:ec:0f:bc:cf:8a:cd:84:a1:e5:a4:51:5e:b3:88:
16:f5:46:89:ed:e7:d9:77:09:3e:67:9d:3b:2d:6f:9e:59:4d:
d8:a0:83:80:ed:b8:4b:36:76:02:5c:42:6a:7f:5e:46:3c:ad:
63:4a:1c:09:33:49:72:34:b3:5c:8e:4f:cb:ac:41:e3:f6:fb:
c4:e0:0a:46:ea:a8:93:42:e8:f3:fa:f3:a3:bf:11:c1:30:1b:
1a:e0:ca:50
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEFAFz8DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MjNjM2RlNjEwMTFkZTA3MTAxZTE0ZGMwNzI3Mzk1MTcxY2IwM2FiMB4XDTIyMDEy
NjExMjkyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjM0MWU2MzMwZWNm
MTJkYzk5Y2FlN2RjNDUzNDAwNGNjNzQ3NDkyNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALJzoIdaNIpmdhTSsLshbtcPwmzvbRwUhf08RBBeC6/kwN8v
M5oPsplWMoDUVySIwHbT3nsrvwinzMBAc46w5wfaAvIk01Xies/OBaKfei4XF/IT
DBE9AYLiFx72eM06IgI0bECnBlBOYHjOXmvPaA8H8RQt8OUi0hg7xgg6j7WXBaVi
4BGBhIUTq9NGRgLmgxEHCfUc3vfUSiDigbc9WyHsyk6HZ9vk9ilRY/UPvNUv42Tz
cPlsVtRVTYxU3NDTVmYNWtwnXBBeEQwrtf+4wTmg+1Al4SKvm7mbcVjMwfubCMKP
g9HuT71nSjBBfwwu5ILZNggOYHqAZQPKCX8lA20CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTzQeYzDs8S3JnK59xFNABMx0dJJDAfBgNVHSMEGDAWgBQSPD3mEBHeBxAe
FNwHJzlRccsDqzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Vqdzk1aEFSM2djUUhoVGNCeWM1VVhITEE2cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmIvMjI5NjUwLThhMDEtNDM3MC05OTFlLWI1MDRjOWFlOWJiYy8x
LzgwSG1NdzdQRXR5Wnl1ZmNSVFFBVE1kSFNTUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIv
MjI5NjUwLThhMDEtNDM3MC05OTFlLWI1MDRjOWFlOWJiYy8xL0Vqdzk1aEFSM2dj
UUhoVGNCeWM1VVhITEE2cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArmF4DANBAIAAjAHAwUDKgZ/wDAN
BgkqhkiG9w0BAQsFAAOCAQEANB8LjvCmoye4E0vI6Uh7d9qoNch+5AExmKjy3BK8
ckdqYM1r0+BHCBZ725ZVRa1fqZeAoNLdqsw1k1G3wCr+SRR1rMYpjq/A1HMpJDPE
k1l0mqyf3M7oPv2seshi18dhvJ5IMTDlU6GlUF7JJfVWMIF9KSDg2nfOQqlBu8gX
Lqq9XcdZGvkJHqzR7SLV7aPXyjbPhQ5WMsOAWKG2kKARx0s9snHu/ewPvM+KzYSh
5aRRXrOIFvVGie3n2XcJPmedOy1vnllN2KCDgO24SzZ2AlxCan9eRjytY0ocCTNJ
cjSzXI5Py6xB4/b7xOAKRuqok0Lo8/rzo78RwTAbGuDKUA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:30 2023 by rpki-client on console.sobornost.net