Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/I2RbbXl5wKMOtC8ueUj2WMFCaNA.roa
File: I2RbbXl5wKMOtC8ueUj2WMFCaNA.roa (raw, json)
Hash identifier: SyQqMFA7QRbxjtAeb+amQ7EvoN54//uYB9kjRv3RwpE=
Subject key identifier: 23:64:5B:6D:79:79:C0:A3:0E:B4:2F:2E:79:48:F6:58:C1:42:68:D0
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 09E60CCA
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/I2RbbXl5wKMOtC8ueUj2WMFCaNA.roa
Signing time: Sat 01 Jan 2022 02:56:30 +0000
ROA not before: Sat 01 Jan 2022 02:56:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204814
IP address blocks: 185.239.28.0/22 maxlen: 24
45.128.248.0/22 maxlen: 24
84.252.96.0/22 maxlen: 24
45.158.24.0/22 maxlen: 24
2a0c:4780::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166071498 (0x9e60cca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: Jan 1 02:56:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23645b6d7979c0a30eb42f2e7948f658c14268d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:a2:6f:db:9e:d0:b6:9a:48:1d:72:f4:ae:
f9:15:5a:95:8e:f1:f3:75:00:28:7d:ff:d4:82:4d:
37:1d:50:14:72:ba:bb:04:fb:cd:a1:3d:b6:40:ef:
a2:bd:3d:a5:ac:41:1e:4d:21:d2:2f:81:54:1e:b8:
fc:5b:19:a6:eb:b3:b3:2d:a0:50:ec:d3:42:fa:ad:
09:2c:2a:11:3f:ec:e6:84:d9:68:73:c3:67:92:20:
44:d1:61:76:9f:1d:80:6a:33:65:fb:e6:8a:7d:3c:
cf:ea:67:6c:4f:39:03:b6:a4:c9:31:8b:93:c5:07:
93:df:2b:a4:2b:c8:6d:29:3c:5a:c9:90:6f:c8:10:
c7:f6:e2:34:54:0b:db:41:d0:30:aa:c2:18:2e:f7:
5e:e6:54:e8:a8:33:5c:7b:72:9d:04:d5:41:e1:f5:
3b:d3:ac:b6:5f:92:c1:81:2a:30:d5:57:a7:43:92:
af:de:ab:46:7f:54:71:f2:b3:87:b7:1c:8d:5e:e7:
41:10:67:82:29:8c:3f:86:f0:76:3d:7b:b0:ff:5b:
6a:72:b9:e4:2f:74:a2:a0:3c:65:a1:6f:05:ce:a4:
ed:50:74:33:01:7f:30:61:85:53:0d:1f:0b:c4:a7:
08:c1:dd:a8:e1:ce:e2:53:99:e9:cb:33:5c:d6:29:
34:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:64:5B:6D:79:79:C0:A3:0E:B4:2F:2E:79:48:F6:58:C1:42:68:D0
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/I2RbbXl5wKMOtC8ueUj2WMFCaNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.248.0/22
45.158.24.0/22
84.252.96.0/22
185.239.28.0/22
IPv6:
2a0c:4780::/29
Signature Algorithm: sha256WithRSAEncryption
4e:10:72:b5:c2:cc:96:39:11:cb:86:93:95:27:90:15:67:79:
3c:3e:53:62:1b:09:45:8c:79:c0:c1:bd:92:7c:fa:32:92:ad:
70:3d:df:83:16:64:16:98:cb:43:84:05:be:45:9c:c1:67:dd:
2a:46:08:8f:d0:3f:de:8e:1a:15:5a:90:97:58:20:b9:6c:a7:
d7:df:17:a2:81:bf:49:f7:67:85:7d:b5:21:bb:5c:9d:c2:6f:
e2:24:ec:dd:36:9b:c4:bc:d1:b0:7d:35:b8:67:f7:28:95:9b:
5f:a7:87:02:be:97:5d:7b:ba:1e:18:20:12:5b:bb:4b:37:9c:
12:66:36:24:1b:5e:b9:6e:3a:52:e0:37:7c:cc:39:8c:71:eb:
6a:69:a6:f6:5c:2c:5e:8a:9f:23:8b:b6:b1:3f:96:36:a7:f1:
d9:b7:bb:7f:d3:22:3f:a7:e6:6e:7c:0a:2d:7d:34:a0:44:69:
b6:f0:53:c6:d1:33:4a:9c:48:20:01:2b:3b:71:49:0b:17:22:
ab:3f:88:5d:ef:cc:0f:c7:98:1c:b8:cc:8f:01:4f:3d:eb:f1:
aa:8e:54:95:1a:ed:5a:c3:93:8f:97:25:69:24:7a:ad:43:39:
4f:7c:0c:53:4d:90:3d:7e:79:0c:27:b4:cd:7f:8e:b0:3a:0d:
74:9a:b2:ea
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIECeYMyjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MDZhOTIyNTBjMjg1ODBmMmFkNGNjMWMzNTdiMDJhMjVhNzkwY2Y3MB4XDTIyMDEw
MTAyNTYzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjM2NDViNmQ3OTc5
YzBhMzBlYjQyZjJlNzk0OGY2NThjMTQyNjhkMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKeYom/bntC2mkgdcvSu+RValY7x83UAKH3/1IJNNx1QFHK6
uwT7zaE9tkDvor09paxBHk0h0i+BVB64/FsZpuuzsy2gUOzTQvqtCSwqET/s5oTZ
aHPDZ5IgRNFhdp8dgGozZfvmin08z+pnbE85A7akyTGLk8UHk98rpCvIbSk8WsmQ
b8gQx/biNFQL20HQMKrCGC73XuZU6KgzXHtynQTVQeH1O9Ostl+SwYEqMNVXp0OS
r96rRn9UcfKzh7ccjV7nQRBngimMP4bwdj17sP9banK55C90oqA8ZaFvBc6k7VB0
MwF/MGGFUw0fC8SnCMHdqOHO4lOZ6cszXNYpNIMCAwEAAaOCAiowggImMB0GA1Ud
DgQWBBQjZFtteXnAow60Ly55SPZYwUJo0DAfBgNVHSMEGDAWgBRAapIlDChYDyrU
zBw1ewKiWnkM9zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FHcVNKUXdvV0E4cTFNd2NOWHNDb2xwNURQYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNmQwMTFiLTk0OWUtNGQwZi1hN2UzLTdmMjBlZjAyZjI2NC8x
L0kyUmJiWGw1d0tNT3RDOHVlVWoyV01GQ2FOQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NmQwMTFiLTk0OWUtNGQwZi1hN2UzLTdmMjBlZjAyZjI2NC8xL1FHcVNKUXdvV0E4
cTFNd2NOWHNDb2xwNURQYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAi2A+AMEAi2eGAMEAlT8YAMEArnv
HDANBAIAAjAHAwUDKgxHgDANBgkqhkiG9w0BAQsFAAOCAQEAThBytcLMljkRy4aT
lSeQFWd5PD5TYhsJRYx5wMG9knz6MpKtcD3fgxZkFpjLQ4QFvkWcwWfdKkYIj9A/
3o4aFVqQl1gguWyn198XooG/SfdnhX21IbtcncJv4iTs3TabxLzRsH01uGf3KJWb
X6eHAr6XXXu6HhggElu7SzecEmY2JBteuW46UuA3fMw5jHHrammm9lwsXoqfI4u2
sT+WNqfx2be7f9MiP6fmbnwKLX00oERptvBTxtEzSpxIIAErO3FJCxciqz+IXe/M
D8eYHLjMjwFPPevxqo5UlRrtWsOTj5claSR6rUM5T3wMU02QPX55DCe0zX+OsDoN
dJqy6g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:07 2024 by rpki-client on console-ams.rpki-client.org