Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/cUxCDta72nlKFFevvKMUYrXEg-s.roa
File: cUxCDta72nlKFFevvKMUYrXEg-s.roa (raw, json)
Hash identifier: m3DkM+o3//s5Ei/S3vieA/T9kEYJkQ90RPmSge9yYp4=
Subject key identifier: 71:4C:42:0E:D6:BB:DA:79:4A:14:57:AF:BC:A3:14:62:B5:C4:83:EB
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 0182202FD9F720EC0AD0B1D3DCEEB3114232
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/cUxCDta72nlKFFevvKMUYrXEg-s.roa
Signing time: Thu 21 Jul 2022 09:56:23 +0000
ROA not before: Thu 21 Jul 2022 09:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12850
IP address blocks: 212.29.128.0/19 maxlen: 24
80.247.64.0/20 maxlen: 24
178.239.176.0/20 maxlen: 24
87.248.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:2f:d9:f7:20:ec:0a:d0:b1:d3:dc:ee:b3:11:42:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Jul 21 09:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=714c420ed6bbda794a1457afbca31462b5c483eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d5:7e:84:d4:52:b2:dd:50:2d:a1:19:53:c2:
96:e3:89:98:5b:f5:f1:4c:0f:bf:3f:65:3a:fa:ba:
e8:52:f3:d2:e5:9c:dc:e7:0a:8a:31:a9:7b:6c:ae:
a1:bf:e8:42:a1:56:aa:6f:66:68:94:d1:dd:31:17:
9c:09:fd:d2:9b:7d:b8:e1:f9:12:ff:70:cb:ad:ca:
d0:f3:ca:99:01:4c:26:09:46:25:87:80:94:7e:10:
9c:9f:33:49:e3:c5:43:ae:2e:bf:74:46:bb:a0:43:
b9:63:a3:2b:2a:4e:ad:24:01:8f:39:3c:ae:0f:80:
6c:61:cb:7c:c8:d3:8c:2b:9f:92:79:0a:70:7d:b6:
f5:fd:2a:72:ff:9a:f9:4b:5c:6a:da:96:35:f7:ba:
54:fc:a1:58:44:f6:4a:1e:38:c9:43:2a:4c:b4:f8:
5c:a8:e8:9d:86:ee:e0:1d:60:53:d8:14:1c:62:e8:
13:9d:56:3b:6f:0f:85:ec:06:07:3c:0b:d2:f6:21:
be:00:36:fe:e0:14:c6:ca:67:44:24:12:70:f4:b3:
dd:c9:0c:80:d3:2d:7a:f8:25:b4:33:ed:c3:20:c5:
ca:c7:5f:09:e2:68:36:b0:08:af:7d:ca:c5:91:0c:
11:2d:42:41:b4:cd:1a:2e:d0:09:7b:0f:51:f1:5d:
4e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4C:42:0E:D6:BB:DA:79:4A:14:57:AF:BC:A3:14:62:B5:C4:83:EB
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/cUxCDta72nlKFFevvKMUYrXEg-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.64.0/20
87.248.32.0/19
178.239.176.0/20
212.29.128.0/19
Signature Algorithm: sha256WithRSAEncryption
04:c5:53:61:76:e6:74:c7:35:29:fd:07:6e:fe:99:c5:9c:83:
75:f0:f8:46:c5:46:2d:d3:f5:00:9b:ed:d5:5f:88:74:cc:9d:
87:36:3d:71:8c:fc:e6:12:47:f0:b3:07:b6:82:9f:1a:40:63:
f8:73:9b:b5:47:ea:b8:3d:22:ee:ef:5b:18:98:e9:91:8d:61:
e4:08:2e:16:fe:e3:9a:3f:c5:fe:09:4e:bf:b6:3a:29:81:82:
31:c1:76:6f:a3:60:52:a9:72:14:ce:7e:be:0f:a2:9c:80:f9:
9b:c8:25:53:9a:49:e4:1c:12:28:c0:a2:3d:79:9a:30:b0:ce:
f3:36:e3:d0:98:a2:bd:63:43:0c:55:22:ee:af:42:7b:6a:19:
60:89:23:ca:42:17:fd:08:35:f8:a2:24:f8:22:9e:be:bf:c0:
a4:26:74:25:7b:bf:15:8f:7a:26:8d:f5:67:d6:d3:75:66:25:
ee:da:32:6f:09:3e:d6:a0:61:5e:0c:84:e2:9c:64:3d:5a:a6:
00:40:32:5d:00:bd:22:8c:18:ba:83:ed:1d:6b:fb:ca:6d:16:
9f:8d:f2:b7:39:64:f9:5d:33:49:8e:64:73:83:49:b4:c4:43:
7f:4b:09:8a:2f:7d:5a:7d:5d:46:95:a9:8b:d5:63:24:87:a7:
ac:33:04:73
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYIgL9n3IOwK0LHT3O6zEUIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi
MGNhMDkwHhcNMjIwNzIxMDk1NjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTRjNDIwZWQ2YmJkYTc5NGExNDU3YWZiY2EzMTQ2MmI1YzQ4M2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dV+hNRSst1QLaEZU8KW44mYW/Xx
TA+/P2U6+rroUvPS5Zzc5wqKMal7bK6hv+hCoVaqb2ZolNHdMRecCf3Sm3244fkS
/3DLrcrQ88qZAUwmCUYlh4CUfhCcnzNJ48VDri6/dEa7oEO5Y6MrKk6tJAGPOTyu
D4BsYct8yNOMK5+SeQpwfbb1/Spy/5r5S1xq2pY197pU/KFYRPZKHjjJQypMtPhc
qOidhu7gHWBT2BQcYugTnVY7bw+F7AYHPAvS9iG+ADb+4BTGymdEJBJw9LPdyQyA
0y16+CW0M+3DIMXKx18J4mg2sAivfcrFkQwRLUJBtM0aLtAJew9R8V1OzwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHFMQg7Wu9p5ShRXr7yjFGK1xIPrMB8GA1UdIwQY
MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct
NWI1ZTMzY2U3MGFkLzEvY1V4Q0R0YTcybmxLRkZldnZLTVVZclhFZy1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk
LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEUPdAAwQF
V/ggAwQEsu+wAwQF1B2AMA0GCSqGSIb3DQEBCwUAA4IBAQAExVNhduZ0xzUp/Qdu
/pnFnIN18PhGxUYt0/UAm+3VX4h0zJ2HNj1xjPzmEkfwswe2gp8aQGP4c5u1R+q4
PSLu71sYmOmRjWHkCC4W/uOaP8X+CU6/tjopgYIxwXZvo2BSqXIUzn6+D6KcgPmb
yCVTmknkHBIowKI9eZowsM7zNuPQmKK9Y0MMVSLur0J7ahlgiSPKQhf9CDX4oiT4
Ip6+v8CkJnQle78Vj3omjfVn1tN1ZiXu2jJvCT7WoGFeDITinGQ9WqYAQDJdAL0i
jBi6g+0da/vKbRafjfK3OWT5XTNJjmRzg0m0xEN/SwmKL31afV1GlamL1WMkh6es
MwRz
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:37 2023 by rpki-client on console.sobornost.net