Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/i3s6BrYTYutI1i2ffsTQFNZzx-8.roa
File: i3s6BrYTYutI1i2ffsTQFNZzx-8.roa (raw, json)
Hash identifier: Xlyg6l/R/jHNzPDSP4OMNJyjjFhRALv1+P3GXh/qWqk=
Subject key identifier: 8B:7B:3A:06:B6:13:62:EB:48:D6:2D:9F:7E:C4:D0:14:D6:73:C7:EF
Certificate issuer: /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Certificate serial: 35BC0499
Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/i3s6BrYTYutI1i2ffsTQFNZzx-8.roa
Signing time: Sat 01 Jan 2022 02:55:26 +0000
ROA not before: Sat 01 Jan 2022 02:55:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59931
IP address blocks: 109.75.64.0/24 maxlen: 24
109.75.66.0/24 maxlen: 24
109.75.67.0/24 maxlen: 24
109.75.65.0/24 maxlen: 24
109.75.70.0/24 maxlen: 24
109.75.71.0/24 maxlen: 24
109.75.68.0/24 maxlen: 24
109.75.69.0/24 maxlen: 24
109.75.73.0/24 maxlen: 24
109.75.74.0/24 maxlen: 24
109.75.72.0/24 maxlen: 24
109.75.77.0/24 maxlen: 24
109.75.78.0/24 maxlen: 24
109.75.75.0/24 maxlen: 24
109.75.76.0/24 maxlen: 24
109.75.79.0/24 maxlen: 24
185.204.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901514393 (0x35bc0499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Validity
Not Before: Jan 1 02:55:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b7b3a06b61362eb48d62d9f7ec4d014d673c7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ff:c8:70:59:bf:5f:27:f1:70:46:d1:c4:ee:
d6:78:9e:99:65:73:6c:eb:ac:cc:40:12:da:ed:c4:
4a:fa:36:94:7d:f4:9f:47:5c:5d:b5:50:21:b6:45:
6b:ae:65:cc:b0:ad:fe:19:15:0e:a8:b4:3e:40:48:
6f:24:83:d0:de:85:0d:b6:a4:9a:1c:8b:b2:fe:2c:
cf:12:80:8a:90:f1:a9:b6:b4:21:cc:db:f0:e0:d7:
27:c3:d7:1f:e1:4b:74:5e:ca:6f:1d:4c:47:59:90:
92:e0:b8:79:20:69:6b:b2:b1:b6:0d:84:e3:79:51:
a8:3a:84:5e:d5:1e:9d:c6:36:bb:d7:45:d2:d6:11:
9b:b0:1e:94:11:6f:75:07:ac:ae:a1:e5:af:2c:a9:
12:9e:95:d8:74:e8:59:e2:c4:b1:70:f5:13:30:ba:
3a:20:75:5c:3c:14:5a:21:58:1b:54:a2:10:d5:aa:
2f:36:a1:2f:85:25:2b:f0:ff:6a:73:11:db:d8:be:
75:5d:c1:f7:ea:c9:e3:b2:01:3b:ef:cc:ae:a8:5a:
e9:19:23:2a:0e:eb:7f:00:34:78:5a:b4:f8:08:b3:
cd:7c:cb:83:4d:4a:51:e4:56:ee:ff:03:ce:6c:2c:
e5:0d:3a:51:9b:8b:5f:58:8f:0a:ef:91:20:63:c2:
13:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7B:3A:06:B6:13:62:EB:48:D6:2D:9F:7E:C4:D0:14:D6:73:C7:EF
X509v3 Authority Key Identifier:
keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/i3s6BrYTYutI1i2ffsTQFNZzx-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.75.64.0/20
185.204.50.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f9:a4:4f:b0:70:06:dd:e1:aa:aa:2a:e6:81:f4:12:ec:e8:
8d:19:2a:bf:50:35:09:3d:88:5c:f0:fb:be:4a:c6:40:88:2c:
30:8d:fa:bd:07:7d:66:f4:45:ea:7f:56:90:86:c4:e5:00:85:
86:e3:cf:67:23:01:dc:eb:ca:6d:c0:0c:11:7a:1a:08:71:03:
c0:29:7b:9e:9c:ca:a0:29:69:a6:e3:42:63:ab:5f:2d:e3:56:
d1:ed:f2:9f:32:43:fc:6b:92:23:c8:fb:3a:22:cc:d4:3a:56:
d4:d5:17:c5:20:f7:e9:10:81:2c:64:c7:78:3a:3e:1c:4e:6c:
d3:06:7f:e7:e2:d5:95:20:b0:51:cd:b6:5d:b9:2b:dc:8d:fc:
41:65:f6:75:0c:52:20:69:6b:23:0f:31:41:24:15:60:bf:f0:
ed:73:30:46:3c:b9:1e:30:1c:c2:40:88:c9:9b:a8:7f:89:75:
e6:c7:36:a8:13:8f:65:8c:bc:df:4a:4e:23:f5:a0:60:85:09:
db:e4:ac:72:4a:82:18:17:46:d5:31:d0:52:07:1a:f5:1e:67:
74:63:90:39:2e:16:20:b1:fa:34:e8:c3:54:71:cf:5d:f1:3a:
8f:0a:63:82:56:03:30:6a:fa:49:ba:42:0c:ea:7f:ae:19:19:
a9:db:8f:48
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIENbwEmTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ZDVmMmU3Y2MyYzY4N2Y1OGMwZDFmNjEzMmJiMmRjZmRmMzhjYjY0MB4XDTIyMDEw
MTAyNTUyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGI3YjNhMDZiNjEz
NjJlYjQ4ZDYyZDlmN2VjNGQwMTRkNjczYzdlZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANb/yHBZv18n8XBG0cTu1niemWVzbOuszEAS2u3ESvo2lH30
n0dcXbVQIbZFa65lzLCt/hkVDqi0PkBIbySD0N6FDbakmhyLsv4szxKAipDxqba0
Iczb8ODXJ8PXH+FLdF7Kbx1MR1mQkuC4eSBpa7Kxtg2E43lRqDqEXtUencY2u9dF
0tYRm7AelBFvdQesrqHlryypEp6V2HToWeLEsXD1EzC6OiB1XDwUWiFYG1SiENWq
LzahL4UlK/D/anMR29i+dV3B9+rJ47IBO+/Mrqha6RkjKg7rfwA0eFq0+AizzXzL
g01KUeRW7v8Dzmws5Q06UZuLX1iPCu+RIGPCE58CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSLezoGthNi60jWLZ9+xNAU1nPH7zAfBgNVHSMEGDAWgBTdXy58wsaH9YwN
H2Eyuy3P3zjLZDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNWOHVmTUxHaF9XTURSOWhNcnN0ejk4NHkyUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWIvYmMwYTI1LTkzM2EtNGY1YS1hNWYzLTlkY2ZkMmVmMzAyMy8x
L2kzczZCcllUWXV0STFpMmZmc1RRRk5aengtOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIv
YmMwYTI1LTkzM2EtNGY1YS1hNWYzLTlkY2ZkMmVmMzAyMy8xLzNWOHVmTUxHaF9X
TURSOWhNcnN0ejk4NHkyUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBG1LQAMEALnMMjANBgkqhkiG9w0B
AQsFAAOCAQEABfmkT7BwBt3hqqoq5oH0EuzojRkqv1A1CT2IXPD7vkrGQIgsMI36
vQd9ZvRF6n9WkIbE5QCFhuPPZyMB3OvKbcAMEXoaCHEDwCl7npzKoClppuNCY6tf
LeNW0e3ynzJD/GuSI8j7OiLM1DpW1NUXxSD36RCBLGTHeDo+HE5s0wZ/5+LVlSCw
Uc22Xbkr3I38QWX2dQxSIGlrIw8xQSQVYL/w7XMwRjy5HjAcwkCIyZuof4l15sc2
qBOPZYy830pOI/WgYIUJ2+SsckqCGBdG1THQUgca9R5ndGOQOS4WILH6NOjDVHHP
XfE6jwpjglYDMGr6SbpCDOp/rhkZqduPSA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:51 2024 by rpki-client on console-ams.rpki-client.org