Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/f-Ol_LVf_Vcq_EJr85pXb7uP1s4.roa
File: f-Ol_LVf_Vcq_EJr85pXb7uP1s4.roa (raw, json)
Hash identifier: qQy+IohqDyKEgsq9D14qIvmztlHWUXzKaS41pjPrcQc=
Subject key identifier: 7F:E3:A5:FC:B5:5F:FD:57:2A:FC:42:6B:F3:9A:57:6F:BB:8F:D6:CE
Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial: 392F2088
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/f-Ol_LVf_Vcq_EJr85pXb7uP1s4.roa
Signing time: Tue 31 May 2022 07:54:13 +0000
ROA not before: Tue 31 May 2022 07:54:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210776
IP address blocks: 185.242.220.0/24 maxlen: 24
185.242.222.0/24 maxlen: 24
185.242.221.0/24 maxlen: 24
185.242.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 959389832 (0x392f2088)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
Validity
Not Before: May 31 07:54:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fe3a5fcb55ffd572afc426bf39a576fbb8fd6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:18:12:14:1a:4f:1b:f9:d7:62:1f:41:31:5d:
ea:81:57:92:5d:cc:27:22:e1:41:bc:71:b4:b5:ac:
ef:11:a1:5b:da:e1:80:db:26:0d:b7:8d:ca:35:0a:
33:ac:b1:f7:b5:7b:87:0a:e1:f2:ef:a5:d8:f8:ea:
e9:ac:fb:1b:c3:db:89:ec:3a:e8:3d:4d:63:2d:cf:
5c:23:bd:2b:44:c2:8b:57:7a:f7:0d:b3:1c:8c:3e:
5e:4b:c8:a1:9d:8b:38:c5:8d:ea:54:78:80:46:35:
a7:43:6d:35:e5:28:8b:48:03:15:a7:07:03:89:fe:
63:1d:1e:af:5c:42:77:f6:0e:66:31:a1:ae:ec:56:
dc:e4:85:cc:1d:16:ab:4c:d5:f1:28:fc:99:d5:29:
aa:83:24:f5:18:83:62:5e:ed:2f:20:d8:c8:44:f2:
a9:63:7b:ab:1c:58:e1:89:7a:5b:d8:b0:97:db:d5:
6a:b4:1a:69:83:d5:15:c0:87:bc:81:db:e1:b1:84:
31:73:d7:2e:ab:e9:a5:41:ef:22:2f:80:5c:5a:ee:
9d:44:0a:1a:08:5c:5a:66:3d:8d:2e:fc:f5:95:21:
2b:86:e7:8d:f0:76:49:05:1c:0f:11:de:4e:cc:86:
d5:d6:ce:d5:17:be:a4:9a:ab:75:75:f7:20:c8:32:
b1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E3:A5:FC:B5:5F:FD:57:2A:FC:42:6B:F3:9A:57:6F:BB:8F:D6:CE
X509v3 Authority Key Identifier:
keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/f-Ol_LVf_Vcq_EJr85pXb7uP1s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.220.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:68:23:ec:c1:ed:79:65:13:c5:6b:01:09:69:a8:59:4c:3e:
88:2a:a7:14:b3:15:97:a8:99:19:2d:b8:e3:08:b7:e8:81:5e:
cf:76:9a:48:89:45:81:72:e5:29:43:06:02:e9:92:d1:89:7e:
79:c6:bf:c0:1c:8e:d9:b6:d2:4a:37:26:b9:8a:79:9c:c0:33:
53:8c:4b:83:c4:a7:db:ba:19:df:46:79:5d:57:a2:9c:79:99:
4c:14:eb:6a:5d:18:91:98:66:67:10:70:00:33:eb:25:76:f3:
08:e2:44:44:f3:d7:6f:04:c8:84:67:10:7c:95:49:65:fc:ce:
f2:84:09:1b:bb:d7:29:6f:79:45:6d:5e:45:79:f6:90:bc:07:
d3:27:f1:90:05:fa:ab:fd:74:2d:ba:2b:c2:6d:bc:b3:43:e1:
54:9e:82:5c:05:b1:cf:77:09:b9:2b:b3:d7:13:7d:a9:3b:a6:
2c:6a:5c:7b:3a:ca:37:23:21:3f:e7:da:a4:f4:f6:7d:a5:86:
42:66:05:d9:0c:ee:44:d8:20:b1:b5:bf:55:1a:29:f2:4e:8a:
be:24:fb:93:f3:8b:99:09:6e:77:0d:69:48:4f:10:f8:f2:f9:
a2:f4:29:e6:19:ed:4e:13:7d:a9:bb:8e:90:49:98:79:6b:b1:
4a:96:04:c1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOS8giDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
Yzk2OTQ2YzUwMWRkZjQ4Njk2ZGEyY2YxMTBmZGNlYjI4NmZhYzk4MB4XDTIyMDUz
MTA3NTQxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2ZlM2E1ZmNiNTVm
ZmQ1NzJhZmM0MjZiZjM5YTU3NmZiYjhmZDZjZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOUYEhQaTxv512IfQTFd6oFXkl3MJyLhQbxxtLWs7xGhW9rh
gNsmDbeNyjUKM6yx97V7hwrh8u+l2Pjq6az7G8Pbiew66D1NYy3PXCO9K0TCi1d6
9w2zHIw+XkvIoZ2LOMWN6lR4gEY1p0NtNeUoi0gDFacHA4n+Yx0er1xCd/YOZjGh
ruxW3OSFzB0Wq0zV8Sj8mdUpqoMk9RiDYl7tLyDYyETyqWN7qxxY4Yl6W9iwl9vV
arQaaYPVFcCHvIHb4bGEMXPXLqvppUHvIi+AXFrunUQKGghcWmY9jS789ZUhK4bn
jfB2SQUcDxHeTsyG1dbO1Re+pJqrdXX3IMgysZUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR/46X8tV/9Vyr8Qmvzmldvu4/WzjAfBgNVHSMEGDAWgBQslpRsUB3fSGlt
os8RD9zrKG+smDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xKYVViRkFkMzBocGJhTFBFUV9jNnlodnJKZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTIvMDRmZWY4LWQyZGYtNGY3YS05MmI0LTdmOTcwYTNhZjljZC8x
L2YtT2xfTFZmX1ZjcV9FSnI4NXBYYjd1UDFzNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIv
MDRmZWY4LWQyZGYtNGY3YS05MmI0LTdmOTcwYTNhZjljZC8xL0xKYVViRkFkMzBo
cGJhTFBFUV9jNnlodnJKZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArny3DANBgkqhkiG9w0BAQsFAAOC
AQEAyWgj7MHteWUTxWsBCWmoWUw+iCqnFLMVl6iZGS244wi36IFez3aaSIlFgXLl
KUMGAumS0Yl+eca/wByO2bbSSjcmuYp5nMAzU4xLg8Sn27oZ30Z5XVeinHmZTBTr
al0YkZhmZxBwADPrJXbzCOJERPPXbwTIhGcQfJVJZfzO8oQJG7vXKW95RW1eRXn2
kLwH0yfxkAX6q/10Lborwm28s0PhVJ6CXAWxz3cJuSuz1xN9qTumLGpcezrKNyMh
P+fapPT2faWGQmYF2QzuRNggsbW/VRop8k6KviT7k/OLmQludw1pSE8Q+PL5ovQp
5hntThN9qbuOkEmYeWuxSpYEwQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:52 2023 by rpki-client on console.sobornost.net