Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JW_CmdmWeQt_h8v2yC3NbOrrk2c.roa
File: JW_CmdmWeQt_h8v2yC3NbOrrk2c.roa (raw, json)
Hash identifier: g5Hqvs9arJUw34d/dEPUNoAdW0cobeKsy9jJW5MQu9E=
Subject key identifier: 25:6F:C2:99:D9:96:79:0B:7F:87:CB:F6:C8:2D:CD:6C:EA:EB:93:67
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01853912B3EE8A231C17C52EB57BDAC41F98
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JW_CmdmWeQt_h8v2yC3NbOrrk2c.roa
Signing time: Thu 22 Dec 2022 09:03:25 +0000
ROA not before: Thu 22 Dec 2022 09:03:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9199
IP address blocks: 81.180.64.0/22 maxlen: 24
81.180.70.0/23 maxlen: 24
81.180.68.0/23 maxlen: 24
81.180.76.0/22 maxlen: 24
81.180.72.0/22 maxlen: 24
81.180.84.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:12:b3:ee:8a:23:1c:17:c5:2e:b5:7b:da:c4:1f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Dec 22 09:03:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=256fc299d996790b7f87cbf6c82dcd6ceaeb9367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:67:95:6d:52:9e:d1:54:7d:f1:63:ea:49:1e:
42:3d:69:85:f9:7f:c9:e0:a0:1b:e1:c8:9d:64:aa:
c4:da:99:ac:57:ad:f7:fd:47:ad:be:09:1d:33:18:
19:94:11:93:e2:8d:91:0c:96:73:71:ec:34:9b:04:
b9:7e:2f:b7:4f:89:7c:53:05:03:13:f7:fe:54:78:
99:08:68:13:fe:e7:a5:20:ba:67:5e:7e:f2:05:02:
b1:af:14:c9:4c:87:59:ba:d7:97:d5:76:34:61:c6:
33:57:88:a9:9d:10:8b:87:0e:0e:40:f4:16:e9:fb:
3e:cf:42:27:d1:76:47:db:3f:cb:e9:4c:63:27:3f:
5e:fb:98:83:77:e9:ab:19:3b:2e:06:5f:ce:2c:3f:
1a:05:8f:c9:61:9f:9c:7e:d1:73:40:c6:ea:c7:f0:
10:0d:ee:92:13:cb:d4:b4:9b:d6:13:24:8f:3b:9e:
04:b7:f9:c3:42:fd:e4:c0:9f:bf:d9:d0:58:06:3e:
2b:7a:4a:8b:23:e2:85:5f:ba:8d:a0:ab:b6:75:53:
c6:5a:4d:78:32:c4:52:92:15:e6:0c:4b:fa:a9:3f:
c0:23:ec:00:de:01:f4:24:73:82:45:f0:88:c5:8d:
d7:db:ba:25:b5:d1:57:12:b2:b3:54:96:cc:c4:e7:
ff:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6F:C2:99:D9:96:79:0B:7F:87:CB:F6:C8:2D:CD:6C:EA:EB:93:67
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JW_CmdmWeQt_h8v2yC3NbOrrk2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.64.0/20
81.180.84.0/23
Signature Algorithm: sha256WithRSAEncryption
43:f6:f2:c6:f3:14:5e:ac:4c:30:10:a1:08:1e:05:1b:7d:2a:
99:1b:33:c4:93:c3:64:d8:f2:0e:b8:a2:26:3e:9f:a7:e4:c3:
2b:58:40:94:0f:61:77:40:0c:e3:f1:89:5b:01:1f:87:17:af:
26:c0:ea:ca:a2:39:1e:1c:da:bb:05:ed:4d:94:9a:45:23:ca:
b4:56:ae:9e:16:75:22:17:26:bb:08:a0:38:7a:6d:3a:e2:22:
40:e0:14:ca:95:8f:f2:7d:68:52:a0:7f:0e:51:38:e4:37:15:
b1:93:8e:68:7f:f2:16:60:fa:61:a2:26:b5:aa:5a:0d:39:ec:
49:3b:c0:43:6a:62:72:41:e7:6b:ff:a4:ba:9c:c4:c5:41:90:
9c:ec:9a:b7:28:64:52:29:66:73:a2:0e:1d:fe:c3:c0:f5:ec:
0c:67:d7:e9:47:0b:ce:07:f3:5d:a2:fc:bc:ef:96:43:64:ef:
36:02:66:f2:7c:2a:19:2d:1d:7a:1b:f0:da:f1:45:3b:f8:a0:
54:3f:b5:81:df:00:48:56:50:b6:41:f9:68:84:b8:88:fe:02:
d5:d0:e5:87:fe:1f:85:bc:77:2d:c0:74:2d:de:34:a2:11:32:
45:30:22:19:84:f0:4d:a4:d6:e9:4a:cb:07:38:78:ba:af:0b:
bc:75:8e:a1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYU5ErPuiiMcF8UutXvaxB+YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjIxMjIyMDkwMzI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTZmYzI5OWQ5OTY3OTBiN2Y4N2NiZjZjODJkY2Q2Y2VhZWI5MzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2eVbVKe0VR98WPqSR5CPWmF+X/J
4KAb4cidZKrE2pmsV633/UetvgkdMxgZlBGT4o2RDJZzcew0mwS5fi+3T4l8UwUD
E/f+VHiZCGgT/uelILpnXn7yBQKxrxTJTIdZuteX1XY0YcYzV4ipnRCLhw4OQPQW
6fs+z0In0XZH2z/L6UxjJz9e+5iDd+mrGTsuBl/OLD8aBY/JYZ+cftFzQMbqx/AQ
De6SE8vUtJvWEySPO54Et/nDQv3kwJ+/2dBYBj4rekqLI+KFX7qNoKu2dVPGWk14
MsRSkhXmDEv6qT/AI+wA3gH0JHOCRfCIxY3X27oltdFXErKzVJbMxOf/7wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCVvwpnZlnkLf4fL9sgtzWzq65NnMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvSldfQ21kbVdlUXRfaDh2MnlDM05iT3JyazJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEUbRAAwQB
UbRUMA0GCSqGSIb3DQEBCwUAA4IBAQBD9vLG8xRerEwwEKEIHgUbfSqZGzPEk8Nk
2PIOuKImPp+n5MMrWECUD2F3QAzj8YlbAR+HF68mwOrKojkeHNq7Be1NlJpFI8q0
Vq6eFnUiFya7CKA4em064iJA4BTKlY/yfWhSoH8OUTjkNxWxk45of/IWYPphoia1
qloNOexJO8BDamJyQedr/6S6nMTFQZCc7Jq3KGRSKWZzog4d/sPA9ewMZ9fpRwvO
B/Ndovy875ZDZO82AmbyfCoZLR16G/Da8UU7+KBUP7WB3wBIVlC2QflohLiI/gLV
0OWH/h+FvHctwHQt3jSiETJFMCIZhPBNpNbpSssHOHi6rwu8dY6h
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:04 2024 by rpki-client on console-ams.rpki-client.org