Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/niKyzvdbxzgitcF_EbeurxXtQSU.roa
File: niKyzvdbxzgitcF_EbeurxXtQSU.roa (raw, json)
Hash identifier: FAIX83S4AGFZqvSJl17c+DiWoEaISrRxg1ykmjMvxJY=
Subject key identifier: 9E:22:B2:CE:F7:5B:C7:38:22:B5:C1:7F:11:B7:AE:AF:15:ED:41:25
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 0182E9B2D2749E815A2A281EED533F4C67F5
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/niKyzvdbxzgitcF_EbeurxXtQSU.roa
Signing time: Mon 29 Aug 2022 13:03:06 +0000
ROA not before: Mon 29 Aug 2022 13:03:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204720
IP address blocks: 185.31.113.0/24 maxlen: 24
91.231.238.0/24 maxlen: 24
91.238.111.0/24 maxlen: 24
151.236.110.0/24 maxlen: 24
151.236.108.0/24 maxlen: 24
151.236.112.0/24 maxlen: 24
151.236.118.0/24 maxlen: 24
151.236.117.0/24 maxlen: 24
151.236.116.0/24 maxlen: 24
151.236.115.0/24 maxlen: 24
151.236.114.0/24 maxlen: 24
151.236.124.0/24 maxlen: 24
151.236.121.0/24 maxlen: 24
151.236.120.0/24 maxlen: 24
151.236.119.0/24 maxlen: 24
151.236.127.0/24 maxlen: 24
151.236.126.0/24 maxlen: 24
151.236.71.0/24 maxlen: 24
151.236.70.0/24 maxlen: 24
151.236.69.0/24 maxlen: 24
151.236.68.0/24 maxlen: 24
151.236.66.0/24 maxlen: 24
151.236.82.0/24 maxlen: 24
151.236.79.0/24 maxlen: 24
151.236.98.0/24 maxlen: 24
151.236.97.0/24 maxlen: 24
151.236.92.0/24 maxlen: 24
151.236.105.0/24 maxlen: 24
151.236.103.0/24 maxlen: 24
151.236.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e9:b2:d2:74:9e:81:5a:2a:28:1e:ed:53:3f:4c:67:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Aug 29 13:03:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e22b2cef75bc73822b5c17f11b7aeaf15ed4125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cd:99:42:0a:fb:33:81:7e:cf:56:cb:b1:5b:
6d:12:2b:43:ed:38:f1:f8:02:62:89:b6:6f:53:49:
59:a9:0c:a4:ee:25:64:3d:ad:b5:91:18:9e:45:65:
23:3c:53:20:ac:25:35:73:75:b8:d6:dc:0f:e5:41:
d1:65:36:01:13:a1:22:01:9e:40:f0:83:6c:f2:2e:
85:55:e1:07:33:33:46:6f:95:ce:6e:de:88:b1:14:
d2:86:1b:5e:06:c5:df:7f:3d:c5:50:2c:86:15:44:
ba:8e:cd:8d:cb:a9:d8:f6:67:74:a4:38:69:66:5e:
03:09:9e:6c:65:66:59:9c:20:90:e9:84:36:c6:f3:
36:d2:88:44:b1:c3:36:56:ae:06:c1:7f:c0:cd:e7:
f5:7d:6e:3c:65:97:d6:fb:16:5a:82:22:77:c5:ba:
bd:c7:01:a8:17:d1:ab:4a:d2:ca:52:8f:1b:f8:aa:
55:36:20:5d:82:1c:40:28:c0:85:2c:59:73:ec:17:
a7:72:3e:b2:fd:c7:61:59:b8:58:d6:6b:c6:fe:5c:
84:ce:88:cd:2f:24:e7:8d:31:e9:13:fc:d1:0a:b1:
89:31:44:32:16:9d:1a:15:1a:1e:46:16:ee:3b:42:
a9:1e:e4:af:70:24:22:8d:5c:ba:5a:11:30:47:bd:
1f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:22:B2:CE:F7:5B:C7:38:22:B5:C1:7F:11:B7:AE:AF:15:ED:41:25
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/niKyzvdbxzgitcF_EbeurxXtQSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.238.0/24
91.238.111.0/24
151.236.66.0/24
151.236.68.0/22
151.236.79.0/24
151.236.82.0/24
151.236.92.0/24
151.236.97.0-151.236.98.255
151.236.101.0/24
151.236.103.0/24
151.236.105.0/24
151.236.108.0/24
151.236.110.0/24
151.236.112.0/24
151.236.114.0-151.236.121.255
151.236.124.0/24
151.236.126.0/23
185.31.113.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:d1:3a:58:bd:23:02:b0:93:fc:09:f1:68:d5:5b:8d:b0:bd:
36:01:c3:ec:99:08:31:fa:b6:3c:96:dc:eb:0f:ee:fa:e5:83:
dd:b8:27:e9:d6:ce:c9:6a:94:2b:69:18:bf:42:6f:85:a2:f0:
54:32:66:bc:6d:70:54:dc:75:76:b2:8c:c7:ca:6e:97:a6:61:
78:00:a6:df:11:ba:1b:46:ef:d1:1a:c2:31:3d:9a:16:19:8a:
f2:5c:93:f5:c0:8d:97:c1:a1:85:f0:81:dd:ed:6c:95:41:a2:
9f:bf:31:f0:ff:ec:91:fa:0b:1d:12:02:85:1a:b9:7b:e2:4e:
b5:0f:3c:20:ef:65:22:e9:d2:9e:5c:46:1d:7b:d1:3e:0c:c5:
1e:fc:b6:8c:68:83:d9:cb:24:6b:90:ff:fb:c4:21:64:d4:7e:
2b:87:45:b7:5b:1f:7a:b6:94:f4:29:91:f7:1a:50:c7:7c:79:
30:9e:b1:94:86:3c:3b:6a:cb:e7:e2:e3:ae:e9:06:43:2e:af:
cf:af:1e:04:7b:6b:1f:c8:75:14:20:68:e1:b8:b7:ed:54:53:
83:7d:83:52:9b:a6:d0:35:24:31:c3:2a:bc:66:2d:12:47:a2:
1b:7c:ac:d5:dd:51:47:c8:c3:90:2f:4b:e2:27:c1:78:f7:ee:
59:12:2b:83
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAYLpstJ0noFaKige7VM/TGf1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNGM0OTRmNTYxOTNiNGU5YWRmM2RiNzJlNGYwMTk3OGM1
ODdmMTgwHhcNMjIwODI5MTMwMzA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTIyYjJjZWY3NWJjNzM4MjJiNWMxN2YxMWI3YWVhZjE1ZWQ0MTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk82ZQgr7M4F+z1bLsVttEitD7Tjx
+AJiibZvU0lZqQyk7iVkPa21kRieRWUjPFMgrCU1c3W41twP5UHRZTYBE6EiAZ5A
8INs8i6FVeEHMzNGb5XObt6IsRTShhteBsXffz3FUCyGFUS6js2Ny6nY9md0pDhp
Zl4DCZ5sZWZZnCCQ6YQ2xvM20ohEscM2Vq4GwX/Azef1fW48ZZfW+xZagiJ3xbq9
xwGoF9GrStLKUo8b+KpVNiBdghxAKMCFLFlz7Bencj6y/cdhWbhY1mvG/lyEzojN
LyTnjTHpE/zRCrGJMUQyFp0aFRoeRhbuO0KpHuSvcCQijVy6WhEwR70fKwIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFJ4iss73W8c4IrXBfxG3rq8V7UElMB8GA1UdIwQY
MBaAFGJMSU9WGTtOmt89ty5PAZeMWH8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wOTg4YWYtOGQ3Zi00YzI5LWI1Y2Mt
N2FhYjZlZjk1NWExLzEvbmlLeXp2ZGJ4emdpdGNGX0ViZXVyeFh0UVNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wOTg4YWYtOGQ3Zi00YzI5LWI1Y2MtN2FhYjZlZjk1NWEx
LzEvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTCBggQCAAEwfAMEAFvn
7gMEAFvubwMEAJfsQgMEApfsRAMEAJfsTwMEAJfsUgMEAJfsXDAMAwQAl+xhAwQA
l+xiAwQAl+xlAwQAl+xnAwQAl+xpAwQAl+xsAwQAl+xuAwQAl+xwMAwDBAGX7HID
BAGX7HgDBACX7HwDBAGX7H4DBAC5H3EwDQYJKoZIhvcNAQELBQADggEBALDROli9
IwKwk/wJ8WjVW42wvTYBw+yZCDH6tjyW3OsP7vrlg924J+nWzslqlCtpGL9Cb4Wi
8FQyZrxtcFTcdXayjMfKbpemYXgApt8RuhtG79EawjE9mhYZivJck/XAjZfBoYXw
gd3tbJVBop+/MfD/7JH6Cx0SAoUauXviTrUPPCDvZSLp0p5cRh170T4MxR78toxo
g9nLJGuQ//vEIWTUfiuHRbdbH3q2lPQpkfcaUMd8eTCesZSGPDtqy+fi467pBkMu
r8+vHgR7ax/IdRQgaOG4t+1UU4N9g1KbptA1JDHDKrxmLRJHoht8rNXdUUfIw5Av
S+InwXj37lkSK4M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:23 2024 by rpki-client on console-ams.rpki-client.org