Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/cSGGLQfVu-PiLzyPLcu981emMOY.roa
File: cSGGLQfVu-PiLzyPLcu981emMOY.roa (raw, json)
Hash identifier: iNo1Fc/YvazM3t6ezFkcSxxcKqLz09s9NetMJ9vREZQ=
Subject key identifier: 71:21:86:2D:07:D5:BB:E3:E2:2F:3C:8F:2D:CB:BD:F3:57:A6:30:E6
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 030E00C6
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/cSGGLQfVu-PiLzyPLcu981emMOY.roa
Signing time: Mon 23 May 2022 12:03:29 +0000
ROA not before: Mon 23 May 2022 12:03:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46261
IP address blocks: 91.201.140.0/23 maxlen: 23
91.201.142.0/23 maxlen: 23
139.28.136.0/24 maxlen: 24
5.182.101.0/24 maxlen: 24
195.206.111.0/24 maxlen: 24
195.206.110.0/24 maxlen: 24
92.119.181.0/24 maxlen: 24
92.119.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51249350 (0x30e00c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: May 23 12:03:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7121862d07d5bbe3e22f3c8f2dcbbdf357a630e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a2:14:d6:05:a9:76:b3:8a:3b:13:71:f2:4e:
c8:94:ae:1c:91:e7:44:1d:30:98:6f:01:a2:26:94:
cf:7b:fb:8c:88:00:60:47:c5:76:bd:45:1f:d6:fc:
9b:fb:2f:e2:aa:40:eb:81:6e:80:a3:80:d6:5c:6d:
15:40:52:55:59:d3:5d:8e:13:e9:fb:94:9b:bc:1a:
a3:26:1d:83:0b:98:db:4d:20:27:5a:0f:72:8a:26:
60:09:3c:6f:60:2f:27:18:f7:2c:9b:e2:69:78:49:
53:34:9c:13:76:4c:d7:a6:b3:88:71:df:4d:02:c0:
14:ba:78:04:10:de:ba:23:3c:fd:7c:43:d6:5c:eb:
83:94:95:ab:25:02:20:12:46:08:e9:4a:b7:5e:bf:
db:e0:33:a3:21:5e:ff:29:6a:1a:6f:f0:4e:51:d0:
e8:0d:49:8d:9f:c8:bd:78:5a:28:e3:e8:3c:47:87:
be:ac:52:b1:13:8a:e2:4d:9d:a2:12:49:9b:24:3f:
3b:8f:f9:14:b4:04:22:81:d7:3e:cd:98:17:d0:fd:
2c:d1:45:6d:40:99:2e:6f:93:57:d2:c6:9b:66:59:
3e:cc:1c:80:d5:03:59:33:bb:d8:b4:d7:4d:bd:ad:
5f:8a:5c:39:97:d4:29:c6:1c:d8:f9:01:5a:98:60:
1b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:21:86:2D:07:D5:BB:E3:E2:2F:3C:8F:2D:CB:BD:F3:57:A6:30:E6
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/cSGGLQfVu-PiLzyPLcu981emMOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.101.0/24
91.201.140.0/22
92.119.181.0/24
92.119.183.0/24
139.28.136.0/24
195.206.110.0/23
Signature Algorithm: sha256WithRSAEncryption
44:66:e2:8d:88:70:7a:84:b3:89:c3:c6:ac:d6:ce:d2:9e:43:
68:91:31:ee:14:bf:94:aa:79:43:ab:08:c8:ee:af:be:c2:d2:
c6:71:fe:49:71:d2:29:50:96:d5:23:29:ad:e2:9f:04:6f:fd:
b9:4d:cc:84:5f:0f:f0:6b:53:35:f3:14:9b:61:02:f8:b4:d1:
1f:be:c2:73:3b:09:ae:d5:fd:cd:42:53:44:78:9b:00:c3:88:
6d:59:9e:3f:b2:bb:ac:84:29:7b:0b:f3:2a:46:76:e9:fe:99:
a2:7d:e3:55:bb:cd:c9:c6:f9:52:15:f0:53:9d:5b:f5:e1:6f:
96:cf:05:d5:d1:83:b2:36:57:fa:b0:88:ba:f2:32:c2:04:a6:
55:6e:bb:e1:5a:fe:f4:1c:bb:8a:34:99:11:5e:ca:e3:f1:31:
12:74:35:c6:d2:b5:c2:17:77:d2:8e:7e:c6:fb:4b:a0:5a:cf:
65:39:39:1a:74:27:e9:1e:13:aa:92:60:b5:9d:89:3e:ea:df:
f5:13:25:91:a4:3e:ba:90:7f:52:88:0e:65:65:4f:da:08:28:
e8:14:fe:18:42:2f:3b:80:96:6a:3f:df:96:dd:2e:f8:7f:74:
ac:e0:10:bd:d7:3b:9c:e4:51:d8:bf:d2:9b:5a:ad:93:52:fa:
52:f1:68:88
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIEAw4AxjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MjFhM2YyMWZiMGMyOTRkNmQ0YTUyOWIyZjFkYmQ0YmQxMTE5YmQ3MB4XDTIyMDUy
MzEyMDMyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzEyMTg2MmQwN2Q1
YmJlM2UyMmYzYzhmMmRjYmJkZjM1N2E2MzBlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJGiFNYFqXazijsTcfJOyJSuHJHnRB0wmG8BoiaUz3v7jIgA
YEfFdr1FH9b8m/sv4qpA64FugKOA1lxtFUBSVVnTXY4T6fuUm7waoyYdgwuY200g
J1oPcoomYAk8b2AvJxj3LJviaXhJUzScE3ZM16aziHHfTQLAFLp4BBDeuiM8/XxD
1lzrg5SVqyUCIBJGCOlKt16/2+AzoyFe/ylqGm/wTlHQ6A1JjZ/IvXhaKOPoPEeH
vqxSsROK4k2dohJJmyQ/O4/5FLQEIoHXPs2YF9D9LNFFbUCZLm+TV9LGm2ZZPswc
gNUDWTO72LTXTb2tX4pcOZfUKcYc2PkBWphgG8cCAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBRxIYYtB9W74+IvPI8ty73zV6Yw5jAfBgNVHSMEGDAWgBSCGj8h+wwpTW1K
UpsvHb1L0RGb1zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dob19JZnNNS1UxdFNsS2JMeDI5UzlFUm05Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTIvZWRjODU1LWYyYmMtNGU5Yy04YzBjLWI2ZjJhYzg2ZWYyNy8x
L2NTR0dMUWZWdS1QaUx6eVBMY3U5ODFlbU1PWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIv
ZWRjODU1LWYyYmMtNGU5Yy04YzBjLWI2ZjJhYzg2ZWYyNy8xL2dob19JZnNNS1Ux
dFNsS2JMeDI5UzlFUm05Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAAW2ZQMEAlvJjAMEAFx3tQMEAFx3
twMEAIsciAMEAcPObjANBgkqhkiG9w0BAQsFAAOCAQEARGbijYhweoSzicPGrNbO
0p5DaJEx7hS/lKp5Q6sIyO6vvsLSxnH+SXHSKVCW1SMpreKfBG/9uU3MhF8P8GtT
NfMUm2EC+LTRH77CczsJrtX9zUJTRHibAMOIbVmeP7K7rIQpewvzKkZ26f6Zon3j
VbvNycb5UhXwU51b9eFvls8F1dGDsjZX+rCIuvIywgSmVW674Vr+9By7ijSZEV7K
4/ExEnQ1xtK1whd30o5+xvtLoFrPZTk5GnQn6R4TqpJgtZ2JPurf9RMlkaQ+upB/
UogOZWVP2ggo6BT+GEIvO4CWaj/flt0u+H90rOAQvdc7nORR2L/Sm1qtk1L6UvFo
iA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:06 2023 by rpki-client on console-ams.rpki-client.org