Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/DRmCmyNVCLaamDfrmDbTNaIS4KI.roa
File: DRmCmyNVCLaamDfrmDbTNaIS4KI.roa (raw, json)
Hash identifier: 42Dsuo+0NL4fs69A9BsjmsuT0kSlhYRYd1E097gB87s=
Subject key identifier: 0D:19:82:9B:23:55:08:B6:9A:98:37:EB:98:36:D3:35:A2:12:E0:A2
Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Certificate serial: 042ED6AD
Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/DRmCmyNVCLaamDfrmDbTNaIS4KI.roa
Signing time: Sat 01 Jan 2022 06:03:33 +0000
ROA not before: Sat 01 Jan 2022 06:03:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43938
IP address blocks: 188.208.30.0/24 maxlen: 24
89.36.89.0/24 maxlen: 24
89.36.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70178477 (0x42ed6ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Validity
Not Before: Jan 1 06:03:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d19829b235508b69a9837eb9836d335a212e0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:2c:cf:bc:04:5a:c4:7a:69:66:c1:d4:f9:
07:7f:7c:e9:d6:9f:44:23:4e:a3:d5:ba:f5:5f:ac:
48:47:16:2c:d1:14:9d:7f:36:28:76:47:c8:ae:2a:
ee:d7:d7:dc:c6:4e:a4:c5:0c:32:aa:ea:be:fe:0b:
a9:9c:31:3a:11:dd:69:12:e4:5b:21:a5:dc:58:75:
94:5d:4c:7b:cf:86:11:17:85:f6:8d:03:08:3a:0d:
0b:de:50:4f:ae:90:2a:61:b0:39:fb:98:75:1a:ab:
8d:95:27:02:57:96:08:59:1c:5e:a8:e1:56:07:d5:
8a:dd:d2:9d:e3:9c:6f:69:d2:8d:c6:a6:cd:68:c2:
31:6e:17:bf:60:14:6d:71:2b:63:b5:3c:bc:bb:3a:
9c:39:11:6a:4b:1e:7b:9a:a8:0a:cb:4d:5f:d7:72:
21:3c:db:e8:35:e3:f7:14:43:7d:a7:01:0b:c1:07:
7d:d5:ea:5d:8f:4c:73:14:17:dd:f9:c4:70:1d:e4:
cb:74:ac:3a:c9:4d:9d:7c:cd:da:68:fa:2a:83:86:
1c:33:a2:81:0b:a9:8b:57:b3:a6:98:2d:a4:f0:76:
71:09:fb:ac:6b:88:11:88:4f:3e:04:b6:cb:ec:3b:
4c:8b:7f:c9:61:a0:1b:17:a5:b4:25:58:ae:62:85:
6b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:19:82:9B:23:55:08:B6:9A:98:37:EB:98:36:D3:35:A2:12:E0:A2
X509v3 Authority Key Identifier:
keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/DRmCmyNVCLaamDfrmDbTNaIS4KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.89.0/24
89.36.193.0/24
188.208.30.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:a2:de:71:18:3e:e7:5e:df:36:74:ab:58:3c:4d:87:d2:1e:
db:be:0f:46:5b:74:99:94:d8:19:6e:da:4f:a8:ed:31:a3:e2:
63:30:92:5e:37:43:d1:43:54:fb:62:c6:ea:30:77:b5:06:3d:
8f:bc:95:d5:63:b7:d3:87:a5:16:f1:dc:6b:16:18:9a:33:61:
00:7d:ef:07:a5:57:6c:32:5b:6a:75:cd:91:ac:d4:ac:65:f4:
4b:c1:25:4f:5f:9a:41:18:9a:6f:e9:bd:26:fd:7b:0e:06:2d:
94:b1:52:e7:07:d3:20:88:ca:8b:ba:33:80:67:5d:82:09:a1:
ba:a3:d9:17:9a:c7:73:c7:b7:6c:da:86:ce:b7:3e:d3:e0:5c:
06:a6:38:76:c8:c5:f8:3a:80:c0:c1:05:b4:95:04:ee:39:96:
39:d4:cf:dc:c9:e9:1f:2a:c1:ce:de:e7:ed:e7:ba:21:1e:88:
1c:d4:55:c6:8b:23:57:50:f0:92:d4:70:0f:a1:7c:52:9a:99:
4b:5b:a5:9f:71:a9:43:63:1e:dd:79:6f:98:55:d1:61:77:19:
9b:fc:b1:1e:eb:cb:db:af:b6:1d:9c:d7:bc:9d:c6:84:43:19:
46:f7:06:90:28:46:90:04:b0:d8:9f:6c:d5:38:2f:27:fc:2d:
cc:11:2a:5e
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBC7WrTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MTQ1ZWFkOGQzZjEyODQ0MDJiNmY3NTYxNGE4NzI1NzUwM2NlMWJjMB4XDTIyMDEw
MTA2MDMzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGQxOTgyOWIyMzU1
MDhiNjlhOTgzN2ViOTgzNmQzMzVhMjEyZTBhMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKPjLM+8BFrEemlmwdT5B3986dafRCNOo9W69V+sSEcWLNEU
nX82KHZHyK4q7tfX3MZOpMUMMqrqvv4LqZwxOhHdaRLkWyGl3Fh1lF1Me8+GEReF
9o0DCDoNC95QT66QKmGwOfuYdRqrjZUnAleWCFkcXqjhVgfVit3SneOcb2nSjcam
zWjCMW4Xv2AUbXErY7U8vLs6nDkRaksee5qoCstNX9dyITzb6DXj9xRDfacBC8EH
fdXqXY9McxQX3fnEcB3ky3SsOslNnXzN2mj6KoOGHDOigQupi1ezppgtpPB2cQn7
rGuIEYhPPgS2y+w7TIt/yWGgGxeltCVYrmKFa3sCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQNGYKbI1UItpqYN+uYNtM1ohLgojAfBgNVHSMEGDAWgBSRRerY0/EoRAK2
91YUqHJXUDzhvDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2tVWHEyTlB4S0VRQ3R2ZFdGS2h5VjFBODRidy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTEvYTUyMzVmLTYyZmItNGFiYi04MDM3LTJhZDE5NTI2NGM3Mi8x
L0RSbUNteU5WQ0xhYW1EZnJtRGJUTmFJUzRLSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEv
YTUyMzVmLTYyZmItNGFiYi04MDM3LTJhZDE5NTI2NGM3Mi8xL2tVWHEyTlB4S0VR
Q3R2ZFdGS2h5VjFBODRidy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFkkWQMEAFkkwQMEALzQHjANBgkq
hkiG9w0BAQsFAAOCAQEAtKLecRg+517fNnSrWDxNh9Ie274PRlt0mZTYGW7aT6jt
MaPiYzCSXjdD0UNU+2LG6jB3tQY9j7yV1WO304elFvHcaxYYmjNhAH3vB6VXbDJb
anXNkazUrGX0S8ElT1+aQRiab+m9Jv17DgYtlLFS5wfTIIjKi7ozgGddggmhuqPZ
F5rHc8e3bNqGzrc+0+BcBqY4dsjF+DqAwMEFtJUE7jmWOdTP3MnpHyrBzt7n7ee6
IR6IHNRVxosjV1DwktRwD6F8UpqZS1uln3GpQ2Me3XlvmFXRYXcZm/yxHuvL26+2
HZzXvJ3GhEMZRvcGkChGkASw2J9s1TgvJ/wtzBEqXg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:01 2023 by rpki-client on console-ams.rpki-client.org