Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ilKoCxZuzcHKi5Ety0vh4U9prFY.roa
File: ilKoCxZuzcHKi5Ety0vh4U9prFY.roa (raw, json)
Hash identifier: EBbL8ZY9vidaC4DHV7WDDQSx1OMHPyJcOkdm/MPVEn0=
Subject key identifier: 8A:52:A8:0B:16:6E:CD:C1:CA:8B:91:2D:CB:4B:E1:E1:4F:69:AC:56
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 0184858EA0337FFEE523EA95B457041CB95E
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ilKoCxZuzcHKi5Ety0vh4U9prFY.roa
Signing time: Thu 17 Nov 2022 12:27:07 +0000
ROA not before: Thu 17 Nov 2022 12:27:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200475
IP address blocks: 213.91.146.0/24 maxlen: 24
213.91.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:85:8e:a0:33:7f:fe:e5:23:ea:95:b4:57:04:1c:b9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Nov 17 12:27:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a52a80b166ecdc1ca8b912dcb4be1e14f69ac56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9e:af:f2:a9:fb:ed:ee:9a:ef:12:e0:7e:64:
f0:93:06:85:b1:c6:b7:6f:70:86:3d:98:77:3b:11:
14:d5:e2:c3:8e:e6:3b:9a:67:e2:6d:87:fa:97:9e:
46:8b:a7:8d:22:6e:1c:a8:48:e4:07:64:ca:f7:b5:
19:07:64:58:99:bb:af:2a:2a:35:41:e6:16:6a:25:
0b:cc:b9:cf:e8:7a:b1:b8:55:9f:88:21:15:70:33:
3c:0d:98:5b:06:94:b7:c8:89:ff:72:06:8e:c0:8e:
18:5a:6e:6f:9d:f8:8e:94:ca:c0:ef:f9:60:ea:12:
b6:ec:48:b8:c7:e3:27:33:4d:0f:7e:70:86:49:5a:
1f:d9:e7:80:76:91:02:5e:d6:d0:95:6d:32:46:d4:
3b:90:90:6d:cf:57:4e:8a:23:05:3f:d2:30:1c:b3:
6f:9d:ef:58:4a:c8:44:34:70:a5:84:2d:b1:27:88:
0d:b3:f7:78:de:d5:a3:20:36:7c:9b:32:fc:d3:af:
1e:fe:aa:e4:a2:84:91:1f:32:a2:a6:db:af:07:f3:
a7:4f:62:d1:84:54:88:11:f7:4b:8a:de:bf:ed:ef:
d3:91:54:20:14:90:71:b8:85:4b:be:3f:35:c9:08:
73:47:64:95:e0:e5:f3:69:c2:c4:eb:67:0f:06:a4:
b9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:52:A8:0B:16:6E:CD:C1:CA:8B:91:2D:CB:4B:E1:E1:4F:69:AC:56
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ilKoCxZuzcHKi5Ety0vh4U9prFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.91.140.0/24
213.91.146.0/24
Signature Algorithm: sha256WithRSAEncryption
04:8e:9e:77:9c:b5:91:d2:6c:ec:98:c5:4d:08:f4:4d:af:0e:
27:a7:29:a5:c9:70:41:eb:24:ea:de:ea:40:74:06:17:fb:20:
a0:23:f6:e6:84:88:26:d5:34:54:66:ce:84:f3:1a:5d:95:09:
1c:df:c4:8e:ce:ff:7a:26:8c:e2:c1:35:b3:93:f7:83:14:41:
d7:2f:64:c1:51:c3:60:43:c3:c3:2b:ce:a3:4b:da:b3:81:b7:
2a:49:00:da:41:90:e5:67:55:f3:a7:77:96:7e:29:f6:2d:a8:
cd:ab:a8:d5:1d:9f:61:b5:39:27:d3:4d:b7:ef:f4:4e:c5:c1:
6d:0a:0a:37:10:37:e4:40:73:dd:62:3f:07:cb:b3:14:1f:16:
0e:88:19:1e:3a:c1:a2:e0:43:3b:82:ea:93:d2:a5:15:00:89:
89:70:1c:d0:a6:df:07:48:94:fc:f4:96:c7:bf:e6:f9:b9:e1:
44:1e:36:2d:b7:19:e2:0c:7f:71:6c:f4:18:78:13:5c:92:6d:
bf:69:bc:1c:4d:da:7c:12:c1:b8:3a:f7:12:fe:7f:f9:41:0b:
d3:2d:39:8e:40:31:f3:33:1d:c3:7e:33:e1:03:5c:6c:90:74:
42:f2:ff:3b:52:50:59:7b:54:ac:5f:90:9f:2b:5f:1a:82:de:
10:54:df:64
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYSFjqAzf/7lI+qVtFcEHLleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjIxMTE3MTIyNzA3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTUyYTgwYjE2NmVjZGMxY2E4YjkxMmRjYjRiZTFlMTRmNjlhYzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Z6v8qn77e6a7xLgfmTwkwaFsca3
b3CGPZh3OxEU1eLDjuY7mmfibYf6l55Gi6eNIm4cqEjkB2TK97UZB2RYmbuvKio1
QeYWaiULzLnP6HqxuFWfiCEVcDM8DZhbBpS3yIn/cgaOwI4YWm5vnfiOlMrA7/lg
6hK27Ei4x+MnM00PfnCGSVof2eeAdpECXtbQlW0yRtQ7kJBtz1dOiiMFP9IwHLNv
ne9YSshENHClhC2xJ4gNs/d43tWjIDZ8mzL8068e/qrkooSRHzKiptuvB/OnT2LR
hFSIEfdLit6/7e/TkVQgFJBxuIVLvj81yQhzR2SV4OXzacLE62cPBqS5QQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIpSqAsWbs3ByouRLctL4eFPaaxWMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvaWxLb0N4WnV6Y0hLaTVFdHkwdmg0VTlwckZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1VuMAwQA
1VuSMA0GCSqGSIb3DQEBCwUAA4IBAQAEjp53nLWR0mzsmMVNCPRNrw4npymlyXBB
6yTq3upAdAYX+yCgI/bmhIgm1TRUZs6E8xpdlQkc38SOzv96JoziwTWzk/eDFEHX
L2TBUcNgQ8PDK86jS9qzgbcqSQDaQZDlZ1Xzp3eWfin2LajNq6jVHZ9htTkn0023
7/ROxcFtCgo3EDfkQHPdYj8Hy7MUHxYOiBkeOsGi4EM7guqT0qUVAImJcBzQpt8H
SJT89JbHv+b5ueFEHjYttxniDH9xbPQYeBNckm2/abwcTdp8EsG4OvcS/n/5QQvT
LTmOQDHzMx3DfjPhA1xskHRC8v87UlBZe1SsX5CfK18agt4QVN9k
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:54 2024 by rpki-client on console-ams.rpki-client.org