Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Y1mSkO9GSrDCruMPOUCXtOoumWw.roa
File: Y1mSkO9GSrDCruMPOUCXtOoumWw.roa (raw, json)
Hash identifier: azJchOPmh1n7yUCgL/vAMrArvlwGfGCGkebHaaRSyDE=
Subject key identifier: 63:59:92:90:EF:46:4A:B0:C2:AE:E3:0F:39:40:97:B4:EA:2E:99:6C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C5AAD38
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Y1mSkO9GSrDCruMPOUCXtOoumWw.roa
Signing time: Sat 01 Jan 2022 01:02:24 +0000
ROA not before: Sat 01 Jan 2022 01:02:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31490
IP address blocks: 87.120.66.0/24 maxlen: 24
85.217.188.0/24 maxlen: 24
93.123.23.0/24 maxlen: 24
2a00:1728:20::/48 maxlen: 48
2a00:1728:20:100::/56 maxlen: 56
2a00:1728:33::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475704632 (0x1c5aad38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63599290ef464ab0c2aee30f394097b4ea2e996c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:85:cb:7f:af:4a:f6:43:0f:f4:50:b2:a5:
c0:9b:0c:ea:66:d3:95:1e:06:bf:34:86:61:e7:34:
01:15:55:b8:6a:c9:97:6c:48:f0:a9:83:55:c3:38:
3f:ff:e2:7f:d6:84:88:b7:cf:d2:2d:0a:ab:8c:c3:
44:8e:f7:60:19:10:be:df:b5:3c:80:a4:4f:63:1b:
21:0c:f7:9b:d7:cb:83:6c:60:bc:fe:d1:e6:e3:b8:
56:81:3f:8d:85:ea:3f:30:bd:3d:74:6e:0c:e3:10:
ee:2d:c8:c3:cf:3b:b0:e6:1b:02:da:ec:88:ab:76:
d1:c0:57:c3:c5:8e:24:13:15:14:4f:35:3a:77:22:
80:3e:dd:c8:44:df:b2:fc:32:5e:94:30:66:6e:1b:
d6:82:26:4c:fa:98:a8:13:c3:e8:38:56:63:e0:77:
3a:5f:a7:29:f4:e3:3d:4b:2e:c0:46:16:8d:19:e9:
21:4f:35:00:15:d2:ea:d9:b5:42:89:bd:4e:4e:4a:
77:f1:34:f6:88:4b:5e:f1:26:10:0b:8e:3f:d1:f2:
f8:fa:69:9d:17:5e:f8:97:3d:29:50:95:90:45:6f:
df:4e:4c:74:98:47:5e:5b:31:a0:0d:b4:44:2b:45:
10:ed:71:33:58:e2:fe:67:67:b1:36:90:3d:4c:e7:
e0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:59:92:90:EF:46:4A:B0:C2:AE:E3:0F:39:40:97:B4:EA:2E:99:6C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Y1mSkO9GSrDCruMPOUCXtOoumWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.188.0/24
87.120.66.0/24
93.123.23.0/24
IPv6:
2a00:1728:20::/48
2a00:1728:33::/48
Signature Algorithm: sha256WithRSAEncryption
2a:c3:83:5c:4e:0c:33:10:e2:07:69:1f:eb:17:d6:2e:23:1e:
ef:d6:f9:55:cd:4e:72:4a:5b:6e:4f:f2:83:4b:7d:e4:56:18:
6d:f5:a5:1c:87:7a:29:71:ed:5b:60:a8:5e:1e:8d:d0:0d:1e:
c0:29:55:bd:7e:1f:52:88:e3:f0:0b:9a:47:d1:f8:fa:a4:b0:
d4:8a:64:97:47:99:27:b5:e6:3b:61:1a:42:56:ac:2a:92:d6:
8d:8c:d0:23:65:91:1f:14:ed:39:f3:d4:d4:a0:54:4b:ff:4d:
cd:e3:43:a6:b9:e0:a3:a2:c0:5f:47:74:bf:e1:ae:a5:51:b8:
be:9c:77:2f:17:43:94:88:3d:57:5e:2d:d9:dd:59:78:bd:c4:
d1:9d:6b:18:b3:ba:ed:bb:1f:ab:34:f7:63:fb:dc:15:f4:e4:
c6:c4:9b:3d:8d:27:6b:9f:de:88:78:eb:fa:fb:fc:9e:df:62:
f3:67:4f:8f:eb:53:20:56:e2:64:fe:8a:cc:95:c1:bb:c3:00:
fc:7f:0d:c5:9c:e8:0c:85:8f:dd:71:ab:b3:f3:50:81:fc:13:
c2:50:e9:38:48:e0:8d:f8:6e:e9:c9:99:49:aa:a3:5a:f2:fb:
d4:75:ee:f1:50:3e:51:ff:8e:47:d1:89:85:21:b4:24:46:fd:
1f:9b:be:20
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIEHFqtODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDEw
MTAxMDIyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjM1OTkyOTBlZjQ2
NGFiMGMyYWVlMzBmMzk0MDk3YjRlYTJlOTk2YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMI3hct/r0r2Qw/0ULKlwJsM6mbTlR4GvzSGYec0ARVVuGrJ
l2xI8KmDVcM4P//if9aEiLfP0i0Kq4zDRI73YBkQvt+1PICkT2MbIQz3m9fLg2xg
vP7R5uO4VoE/jYXqPzC9PXRuDOMQ7i3Iw887sOYbAtrsiKt20cBXw8WOJBMVFE81
OncigD7dyETfsvwyXpQwZm4b1oImTPqYqBPD6DhWY+B3Ol+nKfTjPUsuwEYWjRnp
IU81ABXS6tm1Qom9Tk5Kd/E09ohLXvEmEAuOP9Hy+PppnRde+Jc9KVCVkEVv305M
dJhHXlsxoA20RCtFEO1xM1ji/mdnsTaQPUzn4AECAwEAAaOCAi8wggIrMB0GA1Ud
DgQWBBRjWZKQ70ZKsMKu4w85QJe06i6ZbDAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
L1kxbVNrTzlHU3JEQ3J1TVBPVUNYdE9vdW1Xdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBF
BggrBgEFBQcBBwEB/wQ2MDQwGAQCAAEwEgMEAFXZvAMEAFd4QgMEAF17FzAYBAIA
AjASAwcAKgAXKAAgAwcAKgAXKAAzMA0GCSqGSIb3DQEBCwUAA4IBAQAqw4NcTgwz
EOIHaR/rF9YuIx7v1vlVzU5ySltuT/KDS33kVhht9aUch3opce1bYKheHo3QDR7A
KVW9fh9SiOPwC5pH0fj6pLDUimSXR5knteY7YRpCVqwqktaNjNAjZZEfFO0589TU
oFRL/03N40OmueCjosBfR3S/4a6lUbi+nHcvF0OUiD1XXi3Z3Vl4vcTRnWsYs7rt
ux+rNPdj+9wV9OTGxJs9jSdrn96IeOv6+/ye32LzZ0+P61MgVuJk/orMlcG7wwD8
fw3FnOgMhY/dcauz81CB/BPCUOk4SOCN+G7pyZlJqqNa8vvUde7xUD5R/45H0YmF
IbQkRv0fm74g
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:44 2023 by rpki-client on console-fra.rpki-client.org