Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/L_cCgZy3V5ePVm1dcxjoYSW9Qcw.roa
File: L_cCgZy3V5ePVm1dcxjoYSW9Qcw.roa (raw, json)
Hash identifier: mrHkUCn7FBwopgIO4AoWYzR7gFBzyDn4WCSy3k/kdmc=
Subject key identifier: 2F:F7:02:81:9C:B7:57:97:8F:56:6D:5D:73:18:E8:61:25:BD:41:CC
Certificate issuer: /CN=a4e786e4809373c1985455858c6b02b30a71ad1b
Certificate serial: 0C0BBF3E
Authority key identifier: A4:E7:86:E4:80:93:73:C1:98:54:55:85:8C:6B:02:B3:0A:71:AD:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeG5ICTc8GYVFWFjGsCswpxrRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/L_cCgZy3V5ePVm1dcxjoYSW9Qcw.roa
Signing time: Mon 30 May 2022 09:43:13 +0000
ROA not before: Mon 30 May 2022 09:43:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34432
IP address blocks: 185.39.220.0/22 maxlen: 24
91.151.16.0/21 maxlen: 24
178.250.8.0/21 maxlen: 24
37.228.152.0/21 maxlen: 24
85.158.176.0/21 maxlen: 24
185.61.40.0/22 maxlen: 24
77.75.248.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202096446 (0xc0bbf3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e786e4809373c1985455858c6b02b30a71ad1b
Validity
Not Before: May 30 09:43:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ff702819cb757978f566d5d7318e86125bd41cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:dd:e6:20:57:39:df:31:27:e3:6b:6f:33:
a2:b1:93:fc:7f:5d:37:1d:b2:38:99:88:56:12:f8:
b0:ef:4e:8d:65:d4:c6:73:a5:33:e2:3e:09:36:a9:
ea:2f:61:ba:a9:a7:99:f7:3d:ed:25:bf:86:65:16:
f1:1c:cc:f6:1e:f3:2a:32:59:3e:1f:fc:2f:98:dc:
4a:5e:ff:fa:5a:6a:e7:39:ca:d0:a9:77:c9:f2:bf:
93:6d:83:41:56:f4:6a:8c:a7:e4:07:09:67:25:27:
af:cd:93:73:61:75:a9:d8:e3:34:c6:b7:fb:99:8c:
82:96:4b:0a:2e:c3:cf:51:29:64:d3:03:5f:f1:8c:
09:4e:20:17:75:62:06:5c:9d:ae:9a:76:77:01:d4:
5f:60:53:28:90:20:ba:7e:e1:0a:87:41:d3:07:27:
fb:b8:d8:6d:03:12:6e:dd:29:c6:f7:39:59:ca:85:
b1:15:74:6e:bf:8a:75:d1:77:19:c7:e1:19:ac:b8:
83:49:a4:01:dd:5a:a2:be:55:eb:65:08:d7:41:79:
da:c0:14:a2:83:30:a7:76:27:1b:ef:dc:9f:6e:3b:
c5:bf:84:ec:f7:c2:76:b8:b9:74:fc:31:d3:eb:61:
11:73:08:8e:0e:f5:c6:12:15:d3:2c:85:78:b0:05:
02:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F7:02:81:9C:B7:57:97:8F:56:6D:5D:73:18:E8:61:25:BD:41:CC
X509v3 Authority Key Identifier:
keyid:A4:E7:86:E4:80:93:73:C1:98:54:55:85:8C:6B:02:B3:0A:71:AD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeG5ICTc8GYVFWFjGsCswpxrRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/L_cCgZy3V5ePVm1dcxjoYSW9Qcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/pOeG5ICTc8GYVFWFjGsCswpxrRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.152.0/21
77.75.248.0/21
85.158.176.0/21
91.151.16.0/21
178.250.8.0/21
185.39.220.0/22
185.61.40.0/22
Signature Algorithm: sha256WithRSAEncryption
46:be:88:13:61:bd:9e:3e:44:aa:42:3a:51:8c:72:6f:2d:4c:
d5:8c:7c:a8:43:99:b2:28:c3:27:a5:f8:15:4e:2c:27:c3:31:
d4:83:3d:47:3c:bc:dc:5d:bc:6e:bd:b9:9d:eb:84:9f:c9:67:
4a:c0:f9:d5:fe:43:b6:08:b3:fc:2f:c1:6a:9f:d3:b0:15:d3:
0f:c1:39:72:6e:a7:f5:c2:a8:0d:78:fd:71:25:1f:86:ba:0d:
9e:78:f8:d4:eb:02:b8:9f:eb:ab:82:b7:47:23:50:a3:2d:80:
97:a3:e8:43:02:20:38:0c:cc:b3:f9:f3:ff:e9:21:3d:fb:d1:
9e:16:fa:ce:02:b3:06:27:6c:08:ca:c8:c5:1c:f8:c2:57:0f:
0b:67:d8:74:64:90:02:02:fc:cf:ae:18:39:7b:b5:ff:a8:12:
34:ea:b4:88:6a:d0:0b:3b:36:27:0d:d2:e9:c5:6c:82:f9:82:
d6:12:d3:8d:2d:07:09:6d:2f:fd:c6:e0:61:3e:a9:2b:8a:24:
8b:ff:6b:aa:3f:6e:a2:d8:b8:bb:18:94:57:3c:31:c7:66:8a:
37:c0:58:fb:46:9f:eb:5a:d2:9a:c6:da:0c:26:93:18:00:23:
0c:fe:d1:aa:32:40:71:12:ee:36:da:73:cf:09:95:12:f8:27:
51:0a:85:46
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIEDAu/PjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NGU3ODZlNDgwOTM3M2MxOTg1NDU1ODU4YzZiMDJiMzBhNzFhZDFiMB4XDTIyMDUz
MDA5NDMxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmZmNzAyODE5Y2I3
NTc5NzhmNTY2ZDVkNzMxOGU4NjEyNWJkNDFjYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK2z3eYgVznfMSfja28zorGT/H9dNx2yOJmIVhL4sO9OjWXU
xnOlM+I+CTap6i9huqmnmfc97SW/hmUW8RzM9h7zKjJZPh/8L5jcSl7/+lpq5znK
0Kl3yfK/k22DQVb0aoyn5AcJZyUnr82Tc2F1qdjjNMa3+5mMgpZLCi7Dz1EpZNMD
X/GMCU4gF3ViBlydrpp2dwHUX2BTKJAgun7hCodB0wcn+7jYbQMSbt0pxvc5WcqF
sRV0br+KddF3GcfhGay4g0mkAd1aor5V62UI10F52sAUooMwp3YnG+/cn247xb+E
7PfCdri5dPwx0+thEXMIjg71xhIV0yyFeLAFAmcCAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBQv9wKBnLdXl49WbV1zGOhhJb1BzDAfBgNVHSMEGDAWgBSk54bkgJNzwZhU
VYWMawKzCnGtGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BPZUc1SUNUYzhHWVZGV0ZqR3NDc3dweHJScy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzYvM2NlMzk1LTY3ZGEtNDE2MS1hZWYxLWY2Njk3YmZkMmQ0Zi8x
L0xfY0NnWnkzVjVlUFZtMWRjeGpvWVNXOVFjdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYv
M2NlMzk1LTY3ZGEtNDE2MS1hZWYxLWY2Njk3YmZkMmQ0Zi8xL3BPZUc1SUNUYzhH
WVZGV0ZqR3NDc3dweHJScy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAyXkmAMEA01L+AMEA1WesAMEA1uX
EAMEA7L6CAMEArkn3AMEArk9KDANBgkqhkiG9w0BAQsFAAOCAQEARr6IE2G9nj5E
qkI6UYxyby1M1Yx8qEOZsijDJ6X4FU4sJ8Mx1IM9Rzy83F28br25neuEn8lnSsD5
1f5Dtgiz/C/Bap/TsBXTD8E5cm6n9cKoDXj9cSUfhroNnnj41OsCuJ/rq4K3RyNQ
oy2Al6PoQwIgOAzMs/nz/+khPfvRnhb6zgKzBidsCMrIxRz4wlcPC2fYdGSQAgL8
z64YOXu1/6gSNOq0iGrQCzs2Jw3S6cVsgvmC1hLTjS0HCW0v/cbgYT6pK4oki/9r
qj9uoti4uxiUVzwxx2aKN8BY+0af61rSmsbaDCaTGAAjDP7RqjJAcRLuNtpzzwmV
EvgnUQqFRg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:18 2023 by rpki-client on console.sobornost.net