Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/IsYNXcOI-a1JPRUn9EYF-e0kIu8.roa
File: IsYNXcOI-a1JPRUn9EYF-e0kIu8.roa (raw, json)
Hash identifier: qtQNzUcuFSJbJEa0r2uUfoapsb+Ii2e2NTJjYmTRxcQ=
Subject key identifier: 22:C6:0D:5D:C3:88:F9:AD:49:3D:15:27:F4:46:05:F9:ED:24:22:EF
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 35B2E943
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/IsYNXcOI-a1JPRUn9EYF-e0kIu8.roa
Signing time: Sat 01 Jan 2022 06:58:11 +0000
ROA not before: Sat 01 Jan 2022 06:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8678
IP address blocks: 185.22.248.0/22 maxlen: 22
5.23.120.0/21 maxlen: 21
46.182.64.0/21 maxlen: 21
92.61.0.0/20 maxlen: 20
80.251.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900917571 (0x35b2e943)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: Jan 1 06:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22c60d5dc388f9ad493d1527f44605f9ed2422ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:47:fc:12:f2:88:d4:27:9a:ef:9f:c8:59:
a1:6c:80:d6:d6:af:ed:c4:aa:19:c8:99:aa:02:ca:
a1:91:4e:0a:16:60:aa:e8:57:d8:54:99:af:d4:75:
d4:d0:81:18:8e:4e:75:40:d0:15:f9:55:84:44:b6:
2a:d4:dd:c0:81:68:a5:78:49:04:14:e0:b3:a1:63:
fc:06:9b:fa:f1:2b:a5:48:f6:39:d0:ae:23:00:d9:
54:d9:ed:1b:d4:f3:66:5a:c6:5d:f3:b8:f7:cf:b5:
d2:ee:ba:a5:a9:9a:61:b0:de:a3:45:c0:08:8c:b4:
19:4d:48:b9:cf:39:42:ac:12:7d:6d:21:b9:a1:b0:
8e:f1:0d:af:b2:1d:d8:a5:8d:16:1d:f2:bb:f7:c3:
f9:fc:0a:f7:6c:c7:7e:d6:7f:ef:1e:48:76:3b:ed:
36:cf:74:03:55:56:43:bb:78:c4:b7:35:f5:41:cf:
e2:65:cf:0b:d4:76:74:82:34:7f:ba:7b:c1:36:cd:
b5:ca:b2:b3:88:2b:d0:ac:b4:a4:9e:10:25:7d:60:
c5:74:f3:41:8b:81:ab:ea:ca:1b:48:ee:f7:03:62:
b4:dd:b4:1a:a4:14:7a:95:8a:86:dd:5f:c3:80:25:
62:f1:2b:3b:64:f1:7e:52:ab:a6:90:65:03:74:e7:
d5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C6:0D:5D:C3:88:F9:AD:49:3D:15:27:F4:46:05:F9:ED:24:22:EF
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/IsYNXcOI-a1JPRUn9EYF-e0kIu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.120.0/21
46.182.64.0/21
80.251.32.0/20
92.61.0.0/20
185.22.248.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:de:bb:ba:3a:85:3d:7e:e4:21:ed:31:37:79:e2:cf:df:11:
8c:4c:20:48:f0:bf:62:e8:00:8d:f1:7a:dc:10:86:7b:aa:90:
8e:69:28:95:8b:07:01:80:32:e2:d8:b9:a1:c8:4f:aa:51:44:
3a:1a:66:fe:7a:06:09:e6:88:8c:3c:14:b9:ac:78:c2:19:12:
64:23:d4:0f:a3:c3:43:46:78:d8:d9:c3:2e:15:b0:01:1b:c9:
dc:90:9d:ce:bc:13:06:72:77:82:7e:b9:d1:cc:00:22:fa:ce:
18:78:98:fe:ef:a3:fb:5f:99:19:b3:59:a2:ad:3b:37:92:86:
12:90:37:d6:d7:1c:a0:ec:c9:0f:f5:12:76:7b:50:57:13:a8:
ca:f6:78:19:14:a1:a6:f1:fe:e2:be:af:83:1d:62:7a:b0:fe:
78:a7:03:4f:c5:f1:3c:18:69:9d:f3:b9:8a:f7:69:d1:e5:7b:
55:da:58:29:4d:90:ea:a7:eb:9a:e8:44:99:39:5a:63:67:3b:
cc:da:68:8a:4c:3e:7a:f8:45:6f:29:5e:a0:74:e7:49:e0:dd:
2a:99:36:27:c4:45:39:4f:79:b1:09:37:77:87:fe:13:89:d1:
a9:0c:f9:e6:7e:63:ab:bd:90:62:60:07:da:a7:46:a5:1e:55:
82:0e:63:88
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIENbLpQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZGY2OGVjMTI3ZmIzMmM2NzkyMThhZmM3NmUxYjZlYWE1OTUyMWJiMB4XDTIyMDEw
MTA2NTgxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjJjNjBkNWRjMzg4
ZjlhZDQ5M2QxNTI3ZjQ0NjA1ZjllZDI0MjJlZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKxuR/wS8ojUJ5rvn8hZoWyA1tav7cSqGciZqgLKoZFOChZg
quhX2FSZr9R11NCBGI5OdUDQFflVhES2KtTdwIFopXhJBBTgs6Fj/Aab+vErpUj2
OdCuIwDZVNntG9TzZlrGXfO498+10u66pamaYbDeo0XACIy0GU1Iuc85QqwSfW0h
uaGwjvENr7Id2KWNFh3yu/fD+fwK92zHftZ/7x5IdjvtNs90A1VWQ7t4xLc19UHP
4mXPC9R2dII0f7p7wTbNtcqys4gr0Ky0pJ4QJX1gxXTzQYuBq+rKG0ju9wNitN20
GqQUepWKht1fw4AlYvErO2TxflKrppBlA3Tn1UkCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBQixg1dw4j5rUk9FSf0RgX57SQi7zAfBgNVHSMEGDAWgBTN9o7BJ/syxnkh
ivx24bbqpZUhuzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pmYU93U2Y3TXNaNUlZcjhkdUcyNnFXVklicy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmEvMDgzNzdmLWYyMzItNDRiMC1hM2I1LTk4MjQ2YTRjYjZmOC8x
L0lzWU5YY09JLWExSlBSVW45RVlGLWUwa0l1OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEv
MDgzNzdmLWYyMzItNDRiMC1hM2I1LTk4MjQ2YTRjYjZmOC8xL3pmYU93U2Y3TXNa
NUlZcjhkdUcyNnFXVklicy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAwUXeAMEAy62QAMEBFD7IAMEBFw9
AAMEArkW+DANBgkqhkiG9w0BAQsFAAOCAQEALt67ujqFPX7kIe0xN3niz98RjEwg
SPC/YugAjfF63BCGe6qQjmkolYsHAYAy4ti5ochPqlFEOhpm/noGCeaIjDwUuax4
whkSZCPUD6PDQ0Z42NnDLhWwARvJ3JCdzrwTBnJ3gn650cwAIvrOGHiY/u+j+1+Z
GbNZoq07N5KGEpA31tccoOzJD/USdntQVxOoyvZ4GRShpvH+4r6vgx1ierD+eKcD
T8XxPBhpnfO5ivdp0eV7VdpYKU2Q6qfrmuhEmTlaY2c7zNpoikw+evhFbyleoHTn
SeDdKpk2J8RFOU95sQk3d4f+E4nRqQz55n5jq72QYmAH2qdGpR5Vgg5jiA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:43 2024 by rpki-client on console-ams.rpki-client.org