Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/cnKe-IyhJiYHKtkpz06uJXBKnuo.roa
File: cnKe-IyhJiYHKtkpz06uJXBKnuo.roa (raw, json)
Hash identifier: x63kEQpAxhRQv2iLb/z3v0qSP1fu6usKJ8S+qchSUeQ=
Subject key identifier: 72:72:9E:F8:8C:A1:26:26:07:2A:D9:29:CF:4E:AE:25:70:4A:9E:EA
Certificate issuer: /CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
Certificate serial: 39B216
Authority key identifier: BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/cnKe-IyhJiYHKtkpz06uJXBKnuo.roa
Signing time: Sat 01 Jan 2022 01:52:35 +0000
ROA not before: Sat 01 Jan 2022 01:52:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28847
IP address blocks: 81.94.64.0/19 maxlen: 19
80.245.224.0/20 maxlen: 20
185.145.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3781142 (0x39b216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
Validity
Not Before: Jan 1 01:52:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72729ef88ca12626072ad929cf4eae25704a9eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:87:54:db:aa:8b:cd:5e:6a:a8:a6:7c:ef:
48:4b:e2:e4:ae:32:b0:fe:19:88:56:7f:4a:f2:f0:
16:a2:a0:06:9f:48:f7:09:a9:b8:07:43:30:ae:68:
db:c3:95:79:9d:33:3a:45:2f:14:fe:c2:96:31:57:
48:ec:37:0e:ef:af:a2:40:eb:3c:6d:0a:ea:ff:22:
7b:2c:9b:47:6e:99:32:19:75:8c:2e:80:2c:1c:b4:
ff:23:d1:4a:64:77:1a:89:46:0e:4e:40:f0:5d:be:
a6:c1:53:a0:5c:4f:12:0a:37:a3:0d:a6:39:f5:18:
a5:81:00:d1:ce:ff:b2:13:c4:e2:73:9e:ec:bc:5e:
e2:d9:ec:d0:f5:27:6a:cb:7c:c0:b2:6d:2e:27:e7:
cb:f9:d9:46:79:d1:17:16:c1:6b:9d:61:53:c2:00:
17:87:74:60:14:17:b2:a1:28:64:db:18:7d:ce:b0:
df:bf:2b:aa:0c:60:3d:8d:4a:ef:33:a3:b2:0d:e8:
85:c4:ef:5d:ae:73:9d:25:b8:1e:52:3c:b2:46:61:
1d:c5:c0:db:b4:fc:b3:1e:ad:2e:11:2b:ae:7a:9f:
96:0d:e5:1a:84:82:93:b0:50:b9:76:d4:d8:3e:4e:
de:9e:db:be:4d:37:a0:f8:8f:1d:dc:a4:6d:8a:3e:
88:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:72:9E:F8:8C:A1:26:26:07:2A:D9:29:CF:4E:AE:25:70:4A:9E:EA
X509v3 Authority Key Identifier:
keyid:BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/cnKe-IyhJiYHKtkpz06uJXBKnuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.224.0/20
81.94.64.0/19
185.145.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:23:ad:d2:6b:b0:38:5f:af:d7:74:14:74:45:a6:8c:05:c1:
57:c6:1d:4f:9e:d2:e3:f8:9f:a2:3e:ba:4b:a5:bc:f8:15:5a:
ee:87:24:59:e4:f7:0d:a1:74:41:57:9e:53:1d:db:c4:99:00:
56:cf:7a:1e:4b:79:da:a9:58:9f:1b:4f:b4:a4:ca:c6:ba:9d:
f5:38:c6:86:64:75:44:75:cd:72:5f:40:7f:0b:93:86:03:55:
74:1a:67:3d:ab:83:bc:c6:42:c6:ea:e6:8c:37:17:2d:54:7c:
a9:b1:2d:84:11:04:00:45:5e:30:6b:b8:01:0c:a1:de:a5:56:
5c:a4:22:fd:bb:74:c2:c3:ed:e6:62:d3:5e:42:85:09:47:2d:
b9:d4:e7:5e:9b:00:d3:32:94:76:01:cb:ff:e9:3f:f9:4b:cd:
6e:ff:fe:9a:2c:56:23:ca:0b:61:39:75:2b:1c:50:79:fe:00:
3b:03:d6:1d:4a:e4:0d:53:13:e8:c9:0a:4c:28:f2:2e:64:8a:
f6:88:d8:b7:98:f5:47:e3:86:d8:86:86:74:f1:0c:e0:1a:d2:
64:b1:be:cb:a0:78:6d:a7:e3:57:eb:54:f3:e7:d6:62:d3:4f:
01:ea:5b:f5:7d:a1:b9:39:e1:c1:67:eb:9a:4a:04:5f:a0:28:
93:bb:20:04
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIDObIWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJi
MzAxNTU3NjRjYjJlZTBmNWVlZWZjZGY1MmE3YjEyZDM3MmVkZGQwHhcNMjIwMTAx
MDE1MjM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3MjcyOWVmODhjYTEy
NjI2MDcyYWQ5MjljZjRlYWUyNTcwNGE5ZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzbGHVNuqi81eaqimfO9IS+LkrjKw/hmIVn9K8vAWoqAGn0j3
Cam4B0Mwrmjbw5V5nTM6RS8U/sKWMVdI7DcO76+iQOs8bQrq/yJ7LJtHbpkyGXWM
LoAsHLT/I9FKZHcaiUYOTkDwXb6mwVOgXE8SCjejDaY59RilgQDRzv+yE8Tic57s
vF7i2ezQ9Sdqy3zAsm0uJ+fL+dlGedEXFsFrnWFTwgAXh3RgFBeyoShk2xh9zrDf
vyuqDGA9jUrvM6OyDeiFxO9drnOdJbgeUjyyRmEdxcDbtPyzHq0uESuuep+WDeUa
hIKTsFC5dtTYPk7entu+TTeg+I8d3KRtij6IjQIDAQABo4ICFTCCAhEwHQYDVR0O
BBYEFHJynviMoSYmByrZKc9OriVwSp7qMB8GA1UdIwQYMBaAFLswFVdkyy7g9e7v
zfUqexLTcu3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
dXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8xNi9iNzk4NzEtYjFkZC00ZTZlLTk1ZTctZGUwMjVlNmY4NTg5LzEv
Y25LZS1JeWhKaVlIS3RrcHowNnVKWEJLbnVvLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9i
Nzk4NzEtYjFkZC00ZTZlLTk1ZTctZGUwMjVlNmY4NTg5LzEvdXpBVlYyVExMdUQx
N3VfTjlTcDdFdE55N2QwLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG
CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEUPXgAwQFUV5AAwQCuZFcMA0GCSqG
SIb3DQEBCwUAA4IBAQA9I63Sa7A4X6/XdBR0RaaMBcFXxh1PntLj+J+iPrpLpbz4
FVruhyRZ5PcNoXRBV55THdvEmQBWz3oeS3naqVifG0+0pMrGup31OMaGZHVEdc1y
X0B/C5OGA1V0Gmc9q4O8xkLG6uaMNxctVHypsS2EEQQARV4wa7gBDKHepVZcpCL9
u3TCw+3mYtNeQoUJRy251OdemwDTMpR2Acv/6T/5S81u//6aLFYjygthOXUrHFB5
/gA7A9YdSuQNUxPoyQpMKPIuZIr2iNi3mPVH44bYhoZ08QzgGtJksb7LoHhtp+NX
61Tz59Zi008B6lv1faG5OeHBZ+uaSgRfoCiTuyAE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:35 2024 by rpki-client on console-fra.rpki-client.org