Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/JuDdMpc77SMLr4Dp2Z16ym2sRcM.roa
File: JuDdMpc77SMLr4Dp2Z16ym2sRcM.roa (raw, json)
Hash identifier: 1uomXZIjfj4itHChhc8mPoj9tzFB7slfHx+ur/FaKmo=
Subject key identifier: 26:E0:DD:32:97:3B:ED:23:0B:AF:80:E9:D9:9D:7A:CA:6D:AC:45:C3
Certificate issuer: /CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
Certificate serial: 08337228
Authority key identifier: 63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/JuDdMpc77SMLr4Dp2Z16ym2sRcM.roa
Signing time: Sat 01 Jan 2022 05:00:35 +0000
ROA not before: Sat 01 Jan 2022 05:00:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200653
IP address blocks: 185.100.30.0/23 maxlen: 23
185.100.30.0/24 maxlen: 24
185.100.28.0/23 maxlen: 23
185.100.29.0/24 maxlen: 24
185.100.31.0/24 maxlen: 24
185.100.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137589288 (0x8337228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
Validity
Not Before: Jan 1 05:00:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26e0dd32973bed230baf80e9d99d7aca6dac45c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:25:c5:fc:7f:80:0d:b8:d2:e7:e6:02:63:
7c:72:0d:46:20:f0:fc:29:47:77:b6:0c:c2:61:32:
47:be:8e:2a:63:b7:b0:27:c4:96:c8:d5:ec:3a:89:
73:b7:92:65:29:5c:0b:df:6f:74:c7:ee:16:ca:c2:
7f:4f:6c:05:75:3b:ff:53:2e:1d:f3:25:9a:e6:8f:
46:b1:4d:48:22:1b:c4:a8:44:d6:0c:72:a6:76:04:
a9:95:fa:59:d8:8d:dd:fa:bc:76:0f:44:b8:20:59:
56:c3:7c:35:ec:54:a0:e4:1b:1a:14:b8:9c:9e:e6:
40:aa:05:0a:5e:6f:b4:de:09:ae:53:ef:e2:da:05:
b6:f6:4c:15:ee:f9:e1:51:3f:a6:84:4e:d2:e9:03:
13:de:dd:21:28:75:9d:3a:fb:cd:bf:de:39:eb:32:
40:7e:fc:dc:31:b7:b6:5a:6b:0e:84:b8:90:ba:a7:
d6:5b:09:63:8b:b8:0e:cf:aa:f7:cb:ce:b1:c3:ec:
f2:1a:6d:87:a5:c6:d4:0e:57:f8:ef:b4:66:86:21:
27:cc:14:08:ae:15:36:31:79:d1:72:08:b8:a7:59:
28:c2:bd:59:73:9f:6a:ec:f0:42:07:12:48:50:ef:
f7:d8:92:ce:4e:81:bb:35:7f:14:22:3c:fe:a5:5e:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E0:DD:32:97:3B:ED:23:0B:AF:80:E9:D9:9D:7A:CA:6D:AC:45:C3
X509v3 Authority Key Identifier:
keyid:63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/JuDdMpc77SMLr4Dp2Z16ym2sRcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.28.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:94:e8:80:5d:0c:8b:f8:8d:56:d4:91:26:05:b8:9a:78:3c:
be:0d:7e:a7:74:87:39:fa:7d:c9:a4:05:94:f8:15:e9:5a:a7:
78:66:2d:b9:a9:07:7b:b4:31:94:70:21:76:47:c2:eb:84:1b:
db:f1:32:3f:3e:01:12:ee:d1:23:f0:cc:e4:ba:94:0e:ce:d8:
fc:60:b8:97:79:bf:69:13:be:6e:67:2c:ba:09:2f:f6:9b:21:
8d:d1:8e:92:f1:10:4f:d8:38:cf:4a:9d:7b:88:b9:f0:f4:49:
80:6c:ca:df:d4:54:d0:c4:a7:d1:fb:e7:40:97:69:77:5b:5a:
4b:bd:da:46:98:01:a4:0e:05:b3:57:5f:49:45:a0:21:38:ce:
14:dc:08:45:d2:36:50:c6:e1:1d:d1:91:ce:7a:09:92:cb:09:
8b:2f:b8:1f:7f:e8:38:01:ba:dc:04:ca:0e:47:f2:81:35:59:
27:08:0e:a6:a8:b0:2f:f5:6b:f8:9b:69:26:30:b2:a6:0b:ee:
53:36:27:75:fe:18:ac:c5:16:bd:08:ad:63:62:29:fc:69:be:
4b:ec:6b:84:ff:f1:17:df:71:43:c3:a4:9b:ee:42:3a:6f:95:
d1:a0:1a:7d:db:db:5b:71:d3:d1:3a:0a:27:11:5a:db:00:87:
fc:07:10:f5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECDNyKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MzE1ZGQwYmExMWZkYWY3NGQ1M2I5NTZmYzFjODQ2YTdlMmY2MWZlMB4XDTIyMDEw
MTA1MDAzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjZlMGRkMzI5NzNi
ZWQyMzBiYWY4MGU5ZDk5ZDdhY2E2ZGFjNDVjMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKNEJcX8f4ANuNLn5gJjfHINRiDw/ClHd7YMwmEyR76OKmO3
sCfElsjV7DqJc7eSZSlcC99vdMfuFsrCf09sBXU7/1MuHfMlmuaPRrFNSCIbxKhE
1gxypnYEqZX6WdiN3fq8dg9EuCBZVsN8NexUoOQbGhS4nJ7mQKoFCl5vtN4JrlPv
4toFtvZMFe754VE/poRO0ukDE97dISh1nTr7zb/eOesyQH783DG3tlprDoS4kLqn
1lsJY4u4Ds+q98vOscPs8hpth6XG1A5X+O+0ZoYhJ8wUCK4VNjF50XIIuKdZKMK9
WXOfauzwQgcSSFDv99iSzk6BuzV/FCI8/qVejx8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQm4N0ylzvtIwuvgOnZnXrKbaxFwzAfBgNVHSMEGDAWgBRjFd0LoR/a901T
uVb8HIRqfi9h/jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1l4WGRDNkVmMnZkTlU3bFdfQnlFYW40dllmNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmMvZGFjYjkyLWZmNzAtNDlmZS1iNGI4LTg5ODliNGNhYTIwNi8x
L0p1RGRNcGM3N1NNTHI0RHAyWjE2eW0yc1JjTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMv
ZGFjYjkyLWZmNzAtNDlmZS1iNGI4LTg5ODliNGNhYTIwNi8xL1l4WGRDNkVmMnZk
TlU3bFdfQnlFYW40dllmNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlkHDANBgkqhkiG9w0BAQsFAAOC
AQEAT5TogF0Mi/iNVtSRJgW4mng8vg1+p3SHOfp9yaQFlPgV6VqneGYtuakHe7Qx
lHAhdkfC64Qb2/EyPz4BEu7RI/DM5LqUDs7Y/GC4l3m/aRO+bmcsugkv9pshjdGO
kvEQT9g4z0qde4i58PRJgGzK39RU0MSn0fvnQJdpd1taS73aRpgBpA4Fs1dfSUWg
ITjOFNwIRdI2UMbhHdGRznoJkssJiy+4H3/oOAG63ATKDkfygTVZJwgOpqiwL/Vr
+JtpJjCypgvuUzYndf4YrMUWvQitY2Ip/Gm+S+xrhP/xF99xQ8Okm+5COm+V0aAa
fdvbW3HT0ToKJxFa2wCH/AcQ9Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:49 2024 by rpki-client on console-fra.rpki-client.org