Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/YNCm7UiEqQ5v7CfSZ2Dg8FbWgRI.roa
File: YNCm7UiEqQ5v7CfSZ2Dg8FbWgRI.roa (raw, json)
Hash identifier: X1fB4voIyXa9Bikp7xPV8KdAHEOT2l33NUQ/4qTUG0c=
Subject key identifier: 60:D0:A6:ED:48:84:A9:0E:6F:EC:27:D2:67:60:E0:F0:56:D6:81:12
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 06CF462E
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/YNCm7UiEqQ5v7CfSZ2Dg8FbWgRI.roa
Signing time: Sat 01 Jan 2022 03:59:25 +0000
ROA not before: Sat 01 Jan 2022 03:59:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8820
IP address blocks: 81.92.0.0/20 maxlen: 24
212.60.128.0/19 maxlen: 24
78.41.48.0/22 maxlen: 24
82.139.192.0/18 maxlen: 24
195.8.224.0/19 maxlen: 24
213.240.128.0/18 maxlen: 24
46.236.192.0/18 maxlen: 24
195.8.253.0/24 maxlen: 24
212.17.224.0/19 maxlen: 24
2a01:170:1000::/36 maxlen: 48
2a01:170::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114247214 (0x6cf462e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Jan 1 03:59:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60d0a6ed4884a90e6fec27d26760e0f056d68112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:70:4a:e2:17:b2:a2:fa:70:bf:53:77:8b:aa:
54:a4:f9:24:3c:74:82:a9:b6:03:84:b2:1f:e6:a7:
0e:be:42:84:74:22:30:fc:ae:6c:ba:37:10:d2:dd:
2d:07:7a:7e:3e:3c:af:5e:71:55:e4:20:a0:cd:32:
bc:10:d3:9c:3b:88:a1:64:ca:2a:c7:95:22:c6:c6:
09:38:7f:60:65:05:f2:6b:67:90:7f:6c:13:cd:96:
58:15:d0:0b:0e:28:d0:1b:ae:1f:68:8a:c6:38:85:
7a:52:8c:97:e5:7e:3a:5f:52:40:5b:ac:83:bc:21:
7d:14:5b:cb:a2:17:d1:61:7b:1a:24:95:c9:5a:39:
a5:08:37:d1:97:43:7e:f1:66:79:1d:fe:38:15:0d:
a1:e7:28:87:2f:f8:4b:0b:cc:3f:cf:cc:d8:77:25:
c9:1c:4d:f4:87:44:8e:43:9c:fa:e7:a1:fd:21:5a:
19:1c:6d:1c:2f:ea:c0:4b:bb:4b:32:8e:ec:ac:8a:
60:fa:94:99:70:d0:98:c9:71:1e:79:fb:f1:28:7e:
6e:a5:a6:83:24:30:01:8c:ad:ff:c2:e6:42:b9:71:
c9:6a:99:bb:8d:b5:c1:f0:82:89:b9:a3:f5:e5:f1:
09:3e:5c:72:16:7b:17:8b:02:3a:39:af:23:59:69:
01:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D0:A6:ED:48:84:A9:0E:6F:EC:27:D2:67:60:E0:F0:56:D6:81:12
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/YNCm7UiEqQ5v7CfSZ2Dg8FbWgRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.192.0/18
78.41.48.0/22
81.92.0.0/20
82.139.192.0/18
195.8.224.0/19
212.17.224.0/19
212.60.128.0/19
213.240.128.0/18
IPv6:
2a01:170::/32
Signature Algorithm: sha256WithRSAEncryption
8e:62:44:16:d4:cb:11:ec:b1:6e:ac:0b:69:5d:a6:de:49:81:
dc:49:9d:9d:c7:8c:d8:7b:13:a7:54:ec:f8:ab:bf:f5:30:e4:
cc:c3:d8:9e:2c:ea:89:e5:4b:58:e5:00:3c:7a:ea:ee:b3:cc:
c2:b7:25:00:c9:7d:6d:94:60:ac:ec:bf:29:c6:1e:47:f5:0c:
72:1d:ed:37:6b:c4:ef:76:8d:b8:ec:20:c9:1c:5d:1e:25:4f:
89:36:ee:1f:ab:d8:06:81:05:3c:f2:7f:85:27:c1:75:6f:3f:
98:86:79:16:db:6c:2e:30:61:4f:f5:20:c4:eb:fc:2c:02:6f:
22:ea:a0:b1:bf:62:4a:47:69:d0:6a:5d:5c:67:9c:19:b1:38:
68:8b:4d:ad:95:c3:76:87:26:a3:bb:5d:a6:cb:a8:ee:a2:d5:
8c:05:c4:07:53:7e:9d:8b:ae:d3:d1:39:fa:34:fb:54:a9:52:
19:e2:84:3b:ab:8d:7d:c0:92:9c:68:76:b3:70:ab:e0:bb:6c:
5f:97:2e:f7:bf:9c:40:4f:1b:b2:60:1f:bd:10:f8:9c:3f:00:
a3:e4:8a:ee:1b:d9:01:a2:de:19:7a:82:56:06:50:fd:94:0e:
b7:61:95:b0:88:23:20:d3:64:85:36:a3:bd:95:73:93:e9:23:
cf:d1:f7:94
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIEBs9GLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MmIxMmU4ZGYzYWJkNTU1OWY5Y2Y5NjgwYWY2NWRkMTY1ODlkZTg2MB4XDTIyMDEw
MTAzNTkyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjBkMGE2ZWQ0ODg0
YTkwZTZmZWMyN2QyNjc2MGUwZjA1NmQ2ODExMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI5wSuIXsqL6cL9Td4uqVKT5JDx0gqm2A4SyH+anDr5ChHQi
MPyubLo3ENLdLQd6fj48r15xVeQgoM0yvBDTnDuIoWTKKseVIsbGCTh/YGUF8mtn
kH9sE82WWBXQCw4o0BuuH2iKxjiFelKMl+V+Ol9SQFusg7whfRRby6IX0WF7GiSV
yVo5pQg30ZdDfvFmeR3+OBUNoecohy/4SwvMP8/M2HclyRxN9IdEjkOc+ueh/SFa
GRxtHC/qwEu7SzKO7KyKYPqUmXDQmMlxHnn78Sh+bqWmgyQwAYyt/8LmQrlxyWqZ
u421wfCCibmj9eXxCT5cchZ7F4sCOjmvI1lpAc0CAwEAAaOCAkIwggI+MB0GA1Ud
DgQWBBRg0KbtSISpDm/sJ9JnYODwVtaBEjAfBgNVHSMEGDAWgBSisS6N86vVVZ+c
+WgK9l3RZYnehjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29yRXVqZk9yMVZXZm5QbG9DdlpkMFdXSjNvWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzYvZWM0NGVhLWVmNDMtNGIzYS1hNjlhLWI0Y2I2MzdkYThjMy8x
L1lOQ203VWlFcVE1djdDZlNaMkRnOEZiV2dSSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYv
ZWM0NGVhLWVmNDMtNGIzYS1hNjlhLWI0Y2I2MzdkYThjMy8xL29yRXVqZk9yMVZX
Zm5QbG9DdlpkMFdXSjNvWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBY
BggrBgEFBQcBBwEB/wRJMEcwNgQCAAEwMAMEBi7swAMEAk4pMAMEBFFcAAMEBlKL
wAMEBcMI4AMEBdQR4AMEBdQ8gAMEBtXwgDANBAIAAjAHAwUAKgEBcDANBgkqhkiG
9w0BAQsFAAOCAQEAjmJEFtTLEeyxbqwLaV2m3kmB3EmdnceM2HsTp1Ts+Ku/9TDk
zMPYnizqieVLWOUAPHrq7rPMwrclAMl9bZRgrOy/KcYeR/UMch3tN2vE73aNuOwg
yRxdHiVPiTbuH6vYBoEFPPJ/hSfBdW8/mIZ5FttsLjBhT/UgxOv8LAJvIuqgsb9i
Skdp0GpdXGecGbE4aItNrZXDdocmo7tdpsuo7qLVjAXEB1N+nYuu09E5+jT7VKlS
GeKEO6uNfcCSnGh2s3Cr4LtsX5cu97+cQE8bsmAfvRD4nD8Ao+SK7hvZAaLeGXqC
VgZQ/ZQOt2GVsIgjINNkhTajvZVzk+kjz9H3lA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:06 2024 by rpki-client on console-ams.rpki-client.org