Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/AF8cbsniQPpL8r_VbETkTlt1FZ8.roa
File: AF8cbsniQPpL8r_VbETkTlt1FZ8.roa (raw, json)
Hash identifier: Lp3suoYJjftiPd9fdT8+It3X5XSfIHn0uT7Ckzvh7T8=
Subject key identifier: 00:5F:1C:6E:C9:E2:40:FA:4B:F2:BF:D5:6C:44:E4:4E:5B:75:15:9F
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0183FF5A4E2B631432199EB43208713B5834
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/AF8cbsniQPpL8r_VbETkTlt1FZ8.roa
Signing time: Sat 22 Oct 2022 11:00:51 +0000
ROA not before: Sat 22 Oct 2022 11:00:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60860
IP address blocks: 89.185.24.0/22 maxlen: 22
109.72.122.0/24 maxlen: 24
109.72.123.0/24 maxlen: 24
185.30.200.0/23 maxlen: 23
185.30.203.0/24 maxlen: 24
185.30.202.0/24 maxlen: 24
89.185.0.0/22 maxlen: 22
93.185.214.0/24 maxlen: 24
81.22.128.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ff:5a:4e:2b:63:14:32:19:9e:b4:32:08:71:3b:58:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Oct 22 11:00:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=005f1c6ec9e240fa4bf2bfd56c44e44e5b75159f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:de:0d:a5:b0:b4:1d:92:e2:f3:02:e8:10:
c5:51:f0:da:43:78:e1:5e:c1:61:8c:95:75:32:71:
5c:d4:d6:e5:38:e5:03:13:1c:44:17:0c:e3:f1:78:
89:5d:3b:1f:86:43:1b:c7:db:8c:62:59:91:0e:0d:
71:46:ac:84:aa:d2:71:ba:37:5d:86:46:87:e7:bd:
c5:45:34:64:80:5d:25:d4:db:12:ab:7f:ba:3c:06:
29:d0:a4:54:44:fc:b9:e0:f3:ea:c0:fa:db:e3:b9:
67:bd:5b:91:b7:b7:4e:33:9a:40:4e:46:fd:d6:23:
a8:b4:eb:8b:92:52:f6:6b:b4:e9:76:25:34:c3:dd:
58:70:4a:ff:47:74:4c:f8:bd:73:4d:8a:79:97:d8:
0b:57:da:6b:36:5d:ee:c5:0a:96:80:e1:f5:9f:ac:
aa:a8:42:af:c3:9c:e2:c5:23:41:99:b8:29:ac:03:
78:ab:65:f5:61:7c:f7:2b:ad:be:cb:15:2d:e8:b0:
9e:bb:6f:d1:84:dc:13:5c:51:6c:47:1a:b2:0e:3c:
53:e5:e4:0b:1d:16:9b:1c:c0:ad:a4:da:aa:c4:35:
be:17:0e:12:a4:fb:2b:ea:a6:03:4c:bc:86:b0:e2:
25:4b:55:7a:6d:92:97:75:df:37:f5:e7:25:d7:03:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5F:1C:6E:C9:E2:40:FA:4B:F2:BF:D5:6C:44:E4:4E:5B:75:15:9F
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/AF8cbsniQPpL8r_VbETkTlt1FZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.128.0/21
89.185.0.0/22
89.185.24.0/22
93.185.214.0/24
109.72.122.0/23
185.30.200.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:d6:27:98:05:97:0d:41:b8:6f:ee:b2:cf:3b:a3:8f:a2:d7:
2c:2e:40:21:a0:ac:fc:86:50:f2:cb:a5:e9:37:d2:10:8d:ae:
8c:1d:63:47:2b:5f:e3:cd:1c:2c:93:6b:87:0b:6e:fc:7d:35:
2b:94:18:3d:4f:67:81:26:a7:ef:02:e8:84:95:13:9f:01:6c:
61:11:19:0d:50:ec:df:07:7d:bb:3e:13:f8:c3:93:8c:65:4a:
07:f8:f4:1f:8f:f0:dc:ef:d8:b7:e5:8f:8c:94:df:8d:1b:07:
4f:c8:30:2b:8c:7d:f9:3c:65:44:75:7b:88:8f:95:66:97:fc:
6a:83:ac:72:eb:1b:f6:18:84:21:aa:73:75:58:a4:d0:da:52:
0a:f4:0b:c7:73:01:07:3f:89:92:06:f0:12:54:be:04:5c:c2:
72:70:f9:50:44:25:80:ba:4b:88:2c:9a:d7:98:bc:4c:8d:2b:
21:41:14:26:83:88:30:9d:3f:17:fd:5f:03:61:fb:d3:7a:69:
22:62:6d:d8:71:30:61:71:26:47:d2:c0:29:37:4c:8d:bd:a2:
dd:aa:5f:24:8a:93:51:12:af:d8:a3:4d:3d:72:69:a4:19:75:
9b:6a:87:b0:35:9e:bd:f7:e1:03:7a:2e:ca:46:87:96:05:f7:
1a:13:14:0e
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYP/Wk4rYxQyGZ60MghxO1g0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjIxMDIyMTEwMDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDVmMWM2ZWM5ZTI0MGZhNGJmMmJmZDU2YzQ0ZTQ0ZTViNzUxNTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YveDaWwtB2S4vMC6BDFUfDaQ3jh
XsFhjJV1MnFc1NblOOUDExxEFwzj8XiJXTsfhkMbx9uMYlmRDg1xRqyEqtJxujdd
hkaH573FRTRkgF0l1NsSq3+6PAYp0KRURPy54PPqwPrb47lnvVuRt7dOM5pATkb9
1iOotOuLklL2a7TpdiU0w91YcEr/R3RM+L1zTYp5l9gLV9prNl3uxQqWgOH1n6yq
qEKvw5zixSNBmbgprAN4q2X1YXz3K62+yxUt6LCeu2/RhNwTXFFsRxqyDjxT5eQL
HRabHMCtpNqqxDW+Fw4SpPsr6qYDTLyGsOIlS1V6bZKXdd839ecl1wPJPQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFABfHG7J4kD6S/K/1WxE5E5bdRWfMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvQUY4Y2JzbmlRUHBMOHJfVmJFVGtUbHQxRlo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDURaAAwQC
WbkAAwQCWbkYAwQAXbnWAwQBbUh6AwQCuR7IMA0GCSqGSIb3DQEBCwUAA4IBAQCl
1ieYBZcNQbhv7rLPO6OPotcsLkAhoKz8hlDyy6XpN9IQja6MHWNHK1/jzRwsk2uH
C278fTUrlBg9T2eBJqfvAuiElROfAWxhERkNUOzfB327PhP4w5OMZUoH+PQfj/Dc
79i35Y+MlN+NGwdPyDArjH35PGVEdXuIj5Vml/xqg6xy6xv2GIQhqnN1WKTQ2lIK
9AvHcwEHP4mSBvASVL4EXMJycPlQRCWAukuILJrXmLxMjSshQRQmg4gwnT8X/V8D
YfvTemkiYm3YcTBhcSZH0sApN0yNvaLdql8kipNREq/Yo009cmmkGXWbaoewNZ69
9+EDei7KRoeWBfcaExQO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org