Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/ABBcbs3BTlpBuCc9vJIvFnqRCA4.roa
File: ABBcbs3BTlpBuCc9vJIvFnqRCA4.roa (raw, json)
Hash identifier: oDV83HftIwhmNQxXvEm0b8j1ssiwfT3M7hVXXmD4xkM=
Subject key identifier: 00:10:5C:6E:CD:C1:4E:5A:41:B8:27:3D:BC:92:2F:16:7A:91:08:0E
Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial: 0185678EFBFB1A11D96D54B5A0B71295476F
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/ABBcbs3BTlpBuCc9vJIvFnqRCA4.roa
Signing time: Sat 31 Dec 2022 09:41:41 +0000
ROA not before: Sat 31 Dec 2022 09:41:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51093
IP address blocks: 185.108.16.0/24 maxlen: 24
212.48.224.0/22 maxlen: 24
212.48.232.0/24 maxlen: 24
212.48.228.0/22 maxlen: 24
2a06:300::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:67:8e:fb:fb:1a:11:d9:6d:54:b5:a0:b7:12:95:47:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
Validity
Not Before: Dec 31 09:41:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00105c6ecdc14e5a41b8273dbc922f167a91080e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:28:71:53:b5:43:05:2a:52:bc:56:fe:18:5f:
1e:63:fb:8c:cc:cc:7f:7c:25:79:ce:c0:b5:d4:1c:
9d:87:5a:a4:0d:1c:95:03:58:8a:e7:02:2e:46:e3:
a7:de:fb:1a:89:db:ab:67:8f:d5:a8:cc:1e:e6:97:
63:c3:ec:fb:42:0b:12:28:df:a7:48:00:c3:1c:13:
8a:2b:83:de:27:da:93:f6:36:dd:3c:0f:d7:65:01:
8a:57:2b:c1:06:04:09:d8:10:d5:4a:21:a1:fb:0d:
61:b2:50:78:6a:6e:ac:44:f1:cb:de:4b:e7:2a:63:
3c:f9:34:58:b0:35:67:10:ab:38:3b:f7:6c:86:a4:
0d:5e:c2:bd:81:b4:c5:af:10:cf:b8:da:6e:cd:ce:
23:d7:20:5d:e8:19:21:cc:5e:97:db:57:39:10:e6:
9b:2e:0e:aa:76:df:f6:37:aa:ae:b0:71:52:da:93:
88:2e:05:c0:40:24:04:4c:bd:ea:5f:ab:b3:e2:26:
73:f5:2c:ae:bf:ee:4e:e6:ed:f7:09:45:62:dd:dd:
c6:c7:43:83:97:66:d5:14:be:35:95:3e:be:8a:c5:
03:b0:5e:e2:d7:72:16:4b:ae:6e:38:07:fe:5a:63:
c5:b0:27:9f:d0:93:5f:ec:20:13:36:d3:fa:0e:90:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:10:5C:6E:CD:C1:4E:5A:41:B8:27:3D:BC:92:2F:16:7A:91:08:0E
X509v3 Authority Key Identifier:
keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/ABBcbs3BTlpBuCc9vJIvFnqRCA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.16.0/24
212.48.224.0-212.48.232.255
IPv6:
2a06:300::/29
Signature Algorithm: sha256WithRSAEncryption
48:6a:9e:8c:35:d6:27:51:53:fd:4e:4a:a4:cd:f4:2e:ce:a8:
87:3a:a1:43:47:9d:75:86:ae:de:86:d2:f9:23:7c:ea:f1:69:
2d:b9:73:a6:cf:41:ad:00:d5:cc:f8:45:2d:f2:98:68:87:e0:
e9:71:9c:29:b2:13:aa:7f:d3:5c:38:b9:6b:23:42:c0:80:b4:
5b:f9:b7:33:e2:ef:53:ca:18:56:5a:77:f8:6d:33:9c:0b:f9:
e9:44:17:17:df:10:1b:a4:d7:0f:30:37:5d:df:80:fa:8d:04:
58:1f:61:fd:d5:57:f6:0e:bf:29:52:0d:15:ae:6b:f0:41:6c:
aa:28:05:df:37:c6:76:dc:85:0a:65:33:c6:03:11:36:f2:f8:
f5:0e:d4:38:3e:ac:7d:50:9e:60:18:b8:aa:19:ac:0b:56:65:
c3:15:f0:70:24:47:c3:10:6f:49:60:4c:d9:b5:31:4c:dd:df:
8c:2b:71:35:47:4a:03:e7:09:2a:93:5e:66:3c:3c:fc:85:a7:
56:36:a0:ff:0b:8a:fa:31:0e:d8:dd:d3:56:0b:b6:d8:71:18:
9c:12:e1:75:fc:f6:14:eb:3a:69:00:3e:21:e5:39:3a:3a:a2:
c2:9c:9d:03:49:39:fe:09:b8:f1:f9:99:96:ae:88:86:8d:09:
ec:07:86:f2
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYVnjvv7GhHZbVS1oLcSlUdvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MTBhYTg5MjM5MjQyZGFjYzlkMDNlM2FmMjJkNGU4N2E3
ODM0MTQwHhcNMjIxMjMxMDk0MTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDEwNWM2ZWNkYzE0ZTVhNDFiODI3M2RiYzkyMmYxNjdhOTEwODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyChxU7VDBSpSvFb+GF8eY/uMzMx/
fCV5zsC11Bydh1qkDRyVA1iK5wIuRuOn3vsaidurZ4/VqMwe5pdjw+z7QgsSKN+n
SADDHBOKK4PeJ9qT9jbdPA/XZQGKVyvBBgQJ2BDVSiGh+w1hslB4am6sRPHL3kvn
KmM8+TRYsDVnEKs4O/dshqQNXsK9gbTFrxDPuNpuzc4j1yBd6BkhzF6X21c5EOab
Lg6qdt/2N6qusHFS2pOILgXAQCQETL3qX6uz4iZz9Syuv+5O5u33CUVi3d3Gx0OD
l2bVFL41lT6+isUDsF7i13IWS65uOAf+WmPFsCef0JNf7CATNtP6DpBJ4wIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFAAQXG7NwU5aQbgnPbySLxZ6kQgOMB8GA1UdIwQY
MBaAFGgQqokjkkLazJ0D468i1Oh6eDQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wMjQ0ZTQtNzNlMy00NDlkLWEwNmEt
MWY2ODk5MzViOTBmLzEvQUJCY2JzM0JUbHBCdUNjOXZKSXZGbnFSQ0E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8wMjQ0ZTQtNzNlMy00NDlkLWEwNmEtMWY2ODk5MzViOTBm
LzEvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQAuWwQMAwD
BAXUMOADBADUMOgwDQQCAAIwBwMFAyoGAwAwDQYJKoZIhvcNAQELBQADggEBAEhq
now11idRU/1OSqTN9C7OqIc6oUNHnXWGrt6G0vkjfOrxaS25c6bPQa0A1cz4RS3y
mGiH4OlxnCmyE6p/01w4uWsjQsCAtFv5tzPi71PKGFZad/htM5wL+elEFxffEBuk
1w8wN13fgPqNBFgfYf3VV/YOvylSDRWua/BBbKooBd83xnbchQplM8YDETby+PUO
1Dg+rH1QnmAYuKoZrAtWZcMV8HAkR8MQb0lgTNm1MUzd34wrcTVHSgPnCSqTXmY8
PPyFp1Y2oP8LivoxDtjd01YLtthxGJwS4XX89hTrOmkAPiHlOTo6osKcnQNJOf4J
uPH5mZauiIaNCewHhvI=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:54 2023 by rpki-client on console.sobornost.net