Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/PpfC8bNs_WbXlXkWTAAlImdGsVU.roa
File: PpfC8bNs_WbXlXkWTAAlImdGsVU.roa (raw, json)
Hash identifier: y5Bp4v0ihMERY2YC8QN2MJbsY7YcO9aBpSsAzX3pj1Y=
Subject key identifier: 3E:97:C2:F1:B3:6C:FD:66:D7:95:79:16:4C:00:25:22:67:46:B1:55
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1AD782EC
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/PpfC8bNs_WbXlXkWTAAlImdGsVU.roa
Signing time: Wed 27 Apr 2022 15:49:13 +0000
ROA not before: Wed 27 Apr 2022 15:49:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8708
IP address blocks: 217.156.14.0/24 maxlen: 24
80.96.67.0/24 maxlen: 24
193.231.227.0/24 maxlen: 24
193.231.233.0/24 maxlen: 24
80.96.79.0/24 maxlen: 24
193.231.236.0/24 maxlen: 24
193.231.238.0/24 maxlen: 24
193.231.252.0/24 maxlen: 24
193.231.184.0/24 maxlen: 24
193.231.187.0/24 maxlen: 24
193.231.188.0/24 maxlen: 24
193.231.189.0/24 maxlen: 24
194.102.229.0/24 maxlen: 24
194.102.134.0/24 maxlen: 24
80.97.149.0/24 maxlen: 24
80.97.147.0/24 maxlen: 24
80.97.148.0/24 maxlen: 24
193.226.116.0/24 maxlen: 24
81.181.128.0/24 maxlen: 24
81.181.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450331372 (0x1ad782ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 27 15:49:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e97c2f1b36cfd66d79579164c0025226746b155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8f:4a:9b:e8:64:bd:c6:8f:67:2f:37:9c:6d:
a8:a4:27:b8:c9:5b:62:28:77:77:86:0d:21:9d:80:
44:06:0c:5a:80:18:94:ef:c8:8d:06:f1:eb:2f:70:
2b:2b:0e:a2:db:c4:24:39:7d:c9:64:37:ae:f6:a4:
84:9f:c9:49:89:61:86:33:e7:22:42:06:7c:a7:3b:
2a:40:49:7a:d5:ff:69:12:92:f2:fe:b6:cc:21:55:
a6:a3:94:08:15:f4:23:70:b2:fe:3b:37:c9:6e:5f:
37:f9:a6:92:40:b9:ce:98:20:a5:71:a4:77:4d:a1:
21:15:fd:92:ca:b5:00:fe:a8:17:6a:10:3e:05:78:
66:75:b1:62:70:b8:aa:d5:0e:60:e0:fa:eb:04:9a:
d0:55:ce:c3:7b:48:d0:75:5e:61:aa:6b:c3:57:8d:
d4:6b:f4:ed:cb:78:e3:31:d2:08:81:b3:9a:99:d1:
a6:5b:0e:bf:32:3e:7d:74:f8:5d:16:1b:08:c9:67:
38:83:31:f2:4f:6d:6e:c5:d3:06:3d:d9:17:58:fb:
37:22:d1:fc:d6:a3:c7:4e:76:a2:a7:d6:8b:dc:09:
0d:fe:9b:92:15:47:ce:8e:14:d3:a9:c3:9e:b3:8a:
d6:ed:78:a3:f5:18:b7:bc:54:1b:7c:94:1d:60:6f:
03:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:97:C2:F1:B3:6C:FD:66:D7:95:79:16:4C:00:25:22:67:46:B1:55
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/PpfC8bNs_WbXlXkWTAAlImdGsVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.67.0/24
80.96.79.0/24
80.97.147.0-80.97.149.255
81.181.128.0/24
81.181.167.0/24
193.226.116.0/24
193.231.184.0/24
193.231.187.0-193.231.189.255
193.231.227.0/24
193.231.233.0/24
193.231.236.0/24
193.231.238.0/24
193.231.252.0/24
194.102.134.0/24
194.102.229.0/24
217.156.14.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d3:e6:4a:3f:6c:b6:9f:e2:57:34:3f:81:bd:47:fb:15:17:
b8:28:9a:24:c1:f3:c9:d4:4e:1a:29:2d:b1:7f:53:d2:ed:59:
b7:9a:87:5e:10:0e:8e:1d:2b:32:11:2f:6f:dc:a1:4c:94:ef:
ed:41:1c:cd:61:b4:ca:9d:7e:07:d6:9f:18:bb:02:9c:ff:ec:
e9:24:04:40:c6:8c:cf:a5:ac:8a:b2:89:80:e6:8b:39:e9:55:
9d:b2:11:b9:12:76:bd:c6:e5:80:cf:7c:60:c3:76:28:28:30:
c4:f3:11:90:cf:cb:3e:cf:27:03:22:70:aa:11:88:1a:fa:25:
8f:d9:c2:cd:d3:31:60:a3:6f:e6:17:ce:94:a2:a3:8e:59:c9:
1d:8c:fb:2f:55:0b:7c:34:8c:54:52:b7:ed:66:ea:34:82:f9:
45:ac:ee:d3:e8:be:fe:da:90:26:39:dc:08:e5:5e:f3:1e:d8:
15:1a:5f:64:1f:ca:02:4d:88:4a:dc:dc:ab:39:07:a4:99:ea:
39:51:37:a9:23:62:15:a9:54:fa:25:f2:a1:b7:64:47:2a:01:
c0:b2:fc:dc:51:de:a2:6f:a0:1f:e9:be:78:2c:bc:4a:c7:e3:
60:68:a9:67:25:7b:40:04:96:e7:b2:c0:60:bd:eb:a7:1e:c3:
71:74:45:e4
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIEGteC7DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MTgzNzg1OTE2Y2Q5OGQ3Yzc3MGQ2ODUxNDU0OTlhOGEwYTE1NzIyMB4XDTIyMDQy
NzE1NDkxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2U5N2MyZjFiMzZj
ZmQ2NmQ3OTU3OTE2NGMwMDI1MjI2NzQ2YjE1NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMyPSpvoZL3Gj2cvN5xtqKQnuMlbYih3d4YNIZ2ARAYMWoAY
lO/IjQbx6y9wKysOotvEJDl9yWQ3rvakhJ/JSYlhhjPnIkIGfKc7KkBJetX/aRKS
8v62zCFVpqOUCBX0I3Cy/js3yW5fN/mmkkC5zpggpXGkd02hIRX9ksq1AP6oF2oQ
PgV4ZnWxYnC4qtUOYOD66wSa0FXOw3tI0HVeYaprw1eN1Gv07ct44zHSCIGzmpnR
plsOvzI+fXT4XRYbCMlnOIMx8k9tbsXTBj3ZF1j7NyLR/Najx052oqfWi9wJDf6b
khVHzo4U06nDnrOK1u14o/UYt7xUG3yUHWBvAzkCAwEAAaOCAnQwggJwMB0GA1Ud
DgQWBBQ+l8Lxs2z9ZteVeRZMACUiZ0axVTAfBgNVHSMEGDAWgBQxg3hZFs2Y18dw
1oUUVJmooKFXIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01ZTjRXUmJObU5mSGNOYUZGRlNacUtDaFZ5SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8x
L1BwZkM4Yk5zX1diWGxYa1dUQUFsSW1kR3NWVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8xL01ZTjRXUmJObU5m
SGNOYUZGRlNacUtDaFZ5SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
iQYIKwYBBQUHAQcBAf8EejB4MHYEAgABMHADBABQYEMDBABQYE8wDAMEAFBhkwME
AVBhlAMEAFG1gAMEAFG1pwMEAMHidAMEAMHnuDAMAwQAwee7AwQBwee8AwQAwefj
AwQAwefpAwQAwefsAwQAwefuAwQAwef8AwQAwmaGAwQAwmblAwQA2ZwOMA0GCSqG
SIb3DQEBCwUAA4IBAQCx0+ZKP2y2n+JXND+BvUf7FRe4KJokwfPJ1E4aKS2xf1PS
7Vm3modeEA6OHSsyES9v3KFMlO/tQRzNYbTKnX4H1p8YuwKc/+zpJARAxozPpayK
somA5os56VWdshG5Ena9xuWAz3xgw3YoKDDE8xGQz8s+zycDInCqEYga+iWP2cLN
0zFgo2/mF86UoqOOWckdjPsvVQt8NIxUUrftZuo0gvlFrO7T6L7+2pAmOdwI5V7z
HtgVGl9kH8oCTYhK3NyrOQekmeo5UTepI2IVqVT6JfKht2RHKgHAsvzcUd6ib6Af
6b54LLxKx+NgaKlnJXtABJbnssBgveunHsNxdEXk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org