Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/lZOeft22YDztcSAWC1VsRHGr47M.roa
File: lZOeft22YDztcSAWC1VsRHGr47M.roa (raw, json)
Hash identifier: 20OiGl42UAfZeq+opfkWpo8VmSfNUo+t/BfSb39i5iY=
Subject key identifier: 95:93:9E:7E:DD:B6:60:3C:ED:71:20:16:0B:55:6C:44:71:AB:E3:B3
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 0181FD1DA4BC1CBFD7D4B449B0313794215A
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/lZOeft22YDztcSAWC1VsRHGr47M.roa
Signing time: Thu 14 Jul 2022 14:29:47 +0000
ROA not before: Thu 14 Jul 2022 14:29:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15755
IP address blocks: 185.96.171.0/24 maxlen: 24
94.103.40.0/24 maxlen: 24
185.35.21.0/24 maxlen: 24
2a0a:e0c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fd:1d:a4:bc:1c:bf:d7:d4:b4:49:b0:31:37:94:21:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Jul 14 14:29:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95939e7eddb6603ced7120160b556c4471abe3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:95:d0:0e:52:28:4a:dc:45:e7:3c:a3:a4:08:
12:6d:21:aa:75:fe:f8:07:3d:0c:d0:1f:8e:26:9a:
8a:67:4a:9b:e1:7a:31:aa:70:64:0f:a0:6c:fa:f9:
27:ca:5e:ff:11:c5:a2:4c:c9:83:a4:c6:5e:20:7e:
87:b1:7f:16:12:42:96:89:d7:f9:ca:30:28:c1:dd:
f4:df:17:18:d7:e7:b0:0b:15:83:96:e2:dd:cb:b5:
82:09:98:b9:4d:a6:d9:17:62:31:93:bc:cf:42:7c:
68:94:0c:7d:56:46:9d:9a:d4:cf:23:2d:b9:0d:e2:
1b:65:a5:99:ef:65:dd:e7:60:1a:a3:c0:a9:c7:f4:
78:c1:cd:9c:b2:45:77:87:be:6c:73:0d:22:04:04:
6b:62:18:4d:4b:9b:28:21:2b:f2:81:52:b7:b7:22:
b2:09:ae:d3:3a:5e:ee:14:2d:3e:73:06:fc:fd:ac:
67:a8:61:bc:7e:83:27:54:e1:7e:3c:d9:db:da:da:
f7:7b:89:a6:25:3f:25:00:3d:3b:b4:df:2e:74:c4:
ee:76:7a:74:06:fd:26:89:aa:74:f1:99:86:5b:ea:
00:4b:a8:82:ce:0e:d3:49:cf:e9:00:46:04:e5:d2:
a4:a2:98:cb:32:de:69:7f:4d:d6:2c:73:85:9a:8a:
96:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:93:9E:7E:DD:B6:60:3C:ED:71:20:16:0B:55:6C:44:71:AB:E3:B3
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/lZOeft22YDztcSAWC1VsRHGr47M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.40.0/24
185.35.21.0/24
185.96.171.0/24
IPv6:
2a0a:e0c0::/29
Signature Algorithm: sha256WithRSAEncryption
61:e7:c9:e7:10:52:2b:fa:8d:1d:6f:fe:d8:c5:cd:92:85:4d:
0e:b6:2c:bd:1f:d0:fb:d8:8e:0f:60:6f:7d:4b:d1:44:25:68:
c4:c6:5d:f5:18:aa:87:de:14:d7:ef:ca:83:02:03:35:7e:1d:
20:58:ec:55:26:fc:d3:e4:7d:df:1f:24:9a:bf:a7:f8:27:81:
72:31:64:3c:3a:43:9d:17:ac:c9:ea:90:4c:05:e7:a2:d7:da:
10:e8:db:85:91:0c:f0:ad:34:47:fd:a8:44:7b:5c:88:8b:80:
c4:c0:39:cc:c4:a8:57:23:f7:29:b8:91:cc:91:d0:bf:03:70:
74:20:cc:36:5a:0f:83:ab:91:e9:ce:8d:ee:eb:41:4a:0e:55:
cc:2d:9f:ad:1b:26:ac:d3:50:f5:17:fa:1a:5d:85:4e:a6:8b:
ff:f4:a4:4f:bb:92:71:79:10:5d:3c:2a:9a:b1:78:80:46:fc:
5b:75:ce:c9:f8:70:13:6d:7f:38:75:1b:a2:59:4c:eb:3f:c8:
15:c0:3c:d7:b0:97:40:52:c7:a5:2e:e9:ac:0c:d5:48:07:28:
1d:3b:ea:d6:b6:c5:bf:aa:18:01:ed:55:dc:4c:38:87:75:85:
01:f9:7f:8d:e7:6a:79:c0:96:04:5a:29:d1:ba:af:8c:03:93:
4d:a2:ad:6c
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYH9HaS8HL/X1LRJsDE3lCFaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MDE4MTVjNmY5OGYzYTJiNjE4NGFmZWJmMThlYTM0MWJl
ODgyZWEwHhcNMjIwNzE0MTQyOTQ3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTkzOWU3ZWRkYjY2MDNjZWQ3MTIwMTYwYjU1NmM0NDcxYWJlM2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5XQDlIoStxF5zyjpAgSbSGqdf74
Bz0M0B+OJpqKZ0qb4XoxqnBkD6Bs+vknyl7/EcWiTMmDpMZeIH6HsX8WEkKWidf5
yjAowd303xcY1+ewCxWDluLdy7WCCZi5TabZF2Ixk7zPQnxolAx9VkadmtTPIy25
DeIbZaWZ72Xd52Aao8Cpx/R4wc2cskV3h75scw0iBARrYhhNS5soISvygVK3tyKy
Ca7TOl7uFC0+cwb8/axnqGG8foMnVOF+PNnb2tr3e4mmJT8lAD07tN8udMTudnp0
Bv0miap08ZmGW+oAS6iCzg7TSc/pAEYE5dKkopjLMt5pf03WLHOFmoqWbwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFJWTnn7dtmA87XEgFgtVbERxq+OzMB8GA1UdIwQY
MBaAFOUBgVxvmPOithhK/r8Y6jQb6ILqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWIt
MDA1OWY3MzdlZjA1LzEvbFpPZWZ0MjJZRHp0Y1NBV0MxVnNSSEdyNDdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWItMDA1OWY3MzdlZjA1
LzEvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAXmcoAwQA
uSMVAwQAuWCrMA0EAgACMAcDBQMqCuDAMA0GCSqGSIb3DQEBCwUAA4IBAQBh58nn
EFIr+o0db/7Yxc2ShU0Otiy9H9D72I4PYG99S9FEJWjExl31GKqH3hTX78qDAgM1
fh0gWOxVJvzT5H3fHySav6f4J4FyMWQ8OkOdF6zJ6pBMBeei19oQ6NuFkQzwrTRH
/ahEe1yIi4DEwDnMxKhXI/cpuJHMkdC/A3B0IMw2Wg+Dq5Hpzo3u60FKDlXMLZ+t
Gyas01D1F/oaXYVOpov/9KRPu5JxeRBdPCqasXiARvxbdc7J+HATbX84dRuiWUzr
P8gVwDzXsJdAUselLumsDNVIBygdO+rWtsW/qhgB7VXcTDiHdYUB+X+N52p5wJYE
WinRuq+MA5NNoq1s
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:45 2023 by rpki-client on console-ams.rpki-client.org