Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/sFmuxMjPyLZXSBELYaAB_ONRzCc.roa
File: sFmuxMjPyLZXSBELYaAB_ONRzCc.roa (raw, json)
Hash identifier: 9SFFr4/8OWlRAnKOvY1izEpd9rYBs6aja0ozNan0dVw=
Subject key identifier: B0:59:AE:C4:C8:CF:C8:B6:57:48:11:0B:61:A0:01:FC:E3:51:CC:27
Certificate issuer: /CN=68383ffa9f20bf021c090262994212d71667ed02
Certificate serial: 1055EB29
Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/sFmuxMjPyLZXSBELYaAB_ONRzCc.roa
Signing time: Sat 01 Jan 2022 09:54:26 +0000
ROA not before: Sat 01 Jan 2022 09:54:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 81.90.143.0/24 maxlen: 24
2a00:e27:143::/48 maxlen: 48
2a00:e20:150::/44 maxlen: 48
2a00:e20:143::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274066217 (0x1055eb29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02
Validity
Not Before: Jan 1 09:54:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b059aec4c8cfc8b65748110b61a001fce351cc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ea:56:77:23:ae:2b:0c:4b:8e:41:a8:60:48:
5b:76:ae:fd:a9:d8:26:0b:38:f9:06:63:68:aa:ef:
4b:8f:f6:7b:71:9c:1c:87:f8:45:a4:ad:a8:ae:76:
82:d5:49:04:72:e3:2a:37:be:1b:96:1e:e9:98:b4:
c5:ed:9a:95:72:13:e6:46:09:63:c2:3b:21:70:5f:
46:9a:34:5e:76:69:94:15:dd:11:65:e9:1c:8d:3c:
96:9f:16:69:28:9e:7d:1a:a7:99:ed:43:52:7f:e7:
47:7d:cb:ba:9a:fc:ed:86:aa:f5:57:d0:73:8f:f9:
72:e1:95:25:fb:1c:2d:e5:79:27:e0:51:e1:cc:8e:
68:59:7a:01:26:fd:5e:3e:68:2a:fd:be:68:b3:6d:
6f:5b:94:64:1d:5c:38:42:25:53:3d:55:2e:db:de:
46:7d:5f:82:6a:1a:f6:12:0d:55:f1:37:9b:aa:a0:
84:33:0b:2e:29:03:87:34:cd:af:33:66:3d:ec:de:
1e:d0:bc:b7:9a:37:5d:b1:99:98:55:40:7b:38:d2:
34:3a:78:a5:0e:3f:3c:03:5f:47:27:ac:99:e7:8b:
74:59:bf:b1:21:ca:ed:dd:bc:c1:f2:f4:12:29:08:
18:eb:33:ce:02:e3:ba:e7:fe:1b:5a:37:d0:8c:0c:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:59:AE:C4:C8:CF:C8:B6:57:48:11:0B:61:A0:01:FC:E3:51:CC:27
X509v3 Authority Key Identifier:
keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/sFmuxMjPyLZXSBELYaAB_ONRzCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.143.0/24
IPv6:
2a00:e20:143::/48
2a00:e20:150::/44
2a00:e27:143::/48
Signature Algorithm: sha256WithRSAEncryption
21:96:db:d5:95:22:28:6d:36:c7:80:14:41:69:14:dc:0b:85:
00:7e:b4:3f:02:37:6c:33:fe:ff:e8:97:dc:f2:61:a5:39:71:
cf:c8:b9:2c:08:b3:de:8a:a1:de:48:83:4e:8e:a2:9c:f4:7f:
2d:c1:20:cc:d7:80:b8:c8:fb:9a:23:fc:a7:50:76:e2:60:0b:
5e:c8:dd:03:f8:19:66:52:e4:87:19:5b:b3:6f:89:29:6a:77:
c6:10:0f:d9:62:14:cf:79:a0:be:61:72:0a:ca:d8:56:81:e3:
f8:e8:46:d7:95:92:f8:2c:d7:b4:df:7c:28:f9:63:e6:6f:ce:
8d:63:24:a3:4e:7e:ef:24:17:3e:8a:5a:c3:2d:c8:db:da:e6:
b9:92:5c:17:58:16:8c:77:a6:63:9b:6b:1a:33:51:68:56:f2:
f9:3c:11:86:88:8c:bc:b3:ac:29:f5:83:5a:f8:7d:3b:4c:d8:
62:49:2c:1b:7a:f9:09:50:b3:13:4b:78:8c:3c:b5:b7:db:39:
b9:70:24:79:d2:d3:2c:b4:88:b4:e8:cc:0b:1b:34:50:e3:dc:
9f:fe:bd:de:09:8b:30:de:1c:8c:36:f4:b8:67:25:c8:d3:a4:
2d:9a:e9:70:3e:73:4e:3a:a7:da:a3:b0:46:08:d2:69:3c:33:
3a:de:b2:4c
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIEEFXrKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ODM4M2ZmYTlmMjBiZjAyMWMwOTAyNjI5OTQyMTJkNzE2NjdlZDAyMB4XDTIyMDEw
MTA5NTQyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjA1OWFlYzRjOGNm
YzhiNjU3NDgxMTBiNjFhMDAxZmNlMzUxY2MyNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJTqVncjrisMS45BqGBIW3au/anYJgs4+QZjaKrvS4/2e3Gc
HIf4RaStqK52gtVJBHLjKje+G5Ye6Zi0xe2alXIT5kYJY8I7IXBfRpo0XnZplBXd
EWXpHI08lp8WaSiefRqnme1DUn/nR33Lupr87Yaq9VfQc4/5cuGVJfscLeV5J+BR
4cyOaFl6ASb9Xj5oKv2+aLNtb1uUZB1cOEIlUz1VLtveRn1fgmoa9hINVfE3m6qg
hDMLLikDhzTNrzNmPezeHtC8t5o3XbGZmFVAezjSNDp4pQ4/PANfRyesmeeLdFm/
sSHK7d28wfL0EikIGOszzgLjuuf+G1o30IwMKCcCAwEAAaOCAiwwggIoMB0GA1Ud
DgQWBBSwWa7EyM/ItldIEQthoAH841HMJzAfBgNVHSMEGDAWgBRoOD/6nyC/AhwJ
AmKZQhLXFmftAjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FEZ18tcDhndndJY0NRSmltVUlTMXhabjdRSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGYvYjhlOTQwLTIyMDEtNDA2ZS04YWFmLTQwNjBlOWVlZWI5ZS8x
L3NGbXV4TWpQeUxaWFNCRUxZYUFCX09OUnpDYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYv
YjhlOTQwLTIyMDEtNDA2ZS04YWFmLTQwNjBlOWVlZWI5ZS8xL2FEZ18tcDhndndJ
Y0NRSmltVUlTMXhabjdRSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBC
BggrBgEFBQcBBwEB/wQzMDEwDAQCAAEwBgMEAFFajzAhBAIAAjAbAwcAKgAOIAFD
AwcEKgAOIAFQAwcAKgAOJwFDMA0GCSqGSIb3DQEBCwUAA4IBAQAhltvVlSIobTbH
gBRBaRTcC4UAfrQ/AjdsM/7/6Jfc8mGlOXHPyLksCLPeiqHeSINOjqKc9H8twSDM
14C4yPuaI/ynUHbiYAteyN0D+BlmUuSHGVuzb4kpanfGEA/ZYhTPeaC+YXIKythW
geP46EbXlZL4LNe033wo+WPmb86NYySjTn7vJBc+ilrDLcjb2ua5klwXWBaMd6Zj
m2saM1FoVvL5PBGGiIy8s6wp9YNa+H07TNhiSSwbevkJULMTS3iMPLW32zm5cCR5
0tMstIi06MwLGzRQ49yf/r3eCYsw3hyMNvS4ZyXI06QtmulwPnNOOqfao7BGCNJp
PDM63rJM
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:28 2024 by rpki-client on console-ams.rpki-client.org