Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/t8zH-I6rEbS_2sOIPHVE5L1XKSc.roa
File: t8zH-I6rEbS_2sOIPHVE5L1XKSc.roa (raw, json)
Hash identifier: 48juY0eKZtI8tYLqZZidYnOyzuqyHns5rXdLSnnOr5o=
Subject key identifier: B7:CC:C7:F8:8E:AB:11:B4:BF:DA:C3:88:3C:75:44:E4:BD:57:29:27
Certificate issuer: /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial: 0184C9336A7AE88C26410F476C83C8286D2F
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/t8zH-I6rEbS_2sOIPHVE5L1XKSc.roa
Signing time: Wed 30 Nov 2022 15:41:40 +0000
ROA not before: Wed 30 Nov 2022 15:41:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34625
IP address blocks: 195.242.236.0/24 maxlen: 24
212.119.57.0/24 maxlen: 24
212.119.58.0/24 maxlen: 24
212.119.56.0/24 maxlen: 24
212.119.59.0/24 maxlen: 24
37.75.232.0/24 maxlen: 24
37.75.233.0/24 maxlen: 24
37.75.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c9:33:6a:7a:e8:8c:26:41:0f:47:6c:83:c8:28:6d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Validity
Not Before: Nov 30 15:41:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7ccc7f88eab11b4bfdac3883c7544e4bd572927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:05:a4:4f:d8:07:9e:fd:50:d1:ce:71:f9:
0b:89:43:15:5d:38:14:87:75:79:ee:52:74:09:1d:
87:db:cc:36:ff:be:98:4d:04:de:06:c7:e2:3c:be:
ce:95:23:f0:3e:3b:1a:35:69:69:a4:7d:b1:e3:e9:
e3:ca:8a:25:4f:c9:17:a0:9a:6c:da:e1:27:29:5b:
a8:8c:e0:0c:13:f2:76:73:a5:20:09:97:2e:3b:73:
19:f1:4b:65:be:7a:95:b1:4f:5e:d1:91:75:43:81:
e8:6a:45:c1:ba:c0:a7:11:b9:83:2c:0d:5a:ba:2e:
af:48:ef:a6:1b:fb:8b:77:b5:9c:c7:10:4d:e9:a8:
05:1d:02:2a:02:51:95:8a:12:9a:28:3d:62:57:30:
37:a4:c8:70:43:e3:0a:12:2b:2c:0a:79:1c:cd:a6:
6a:42:5f:e4:65:d8:bd:4f:8b:4a:11:06:d8:c7:0c:
ae:a8:7a:4e:3b:dc:85:5d:19:e9:f7:2a:8a:02:ca:
61:62:bd:27:a0:1d:74:47:ba:ed:80:cd:7e:67:b0:
53:56:b9:7f:07:fd:f0:bc:38:02:61:84:dc:52:fd:
79:cd:f2:e4:8b:ee:1e:13:2b:e0:61:af:c0:74:40:
ac:c2:dc:72:35:13:a5:77:bc:21:cc:f7:82:1c:99:
bd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CC:C7:F8:8E:AB:11:B4:BF:DA:C3:88:3C:75:44:E4:BD:57:29:27
X509v3 Authority Key Identifier:
keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/t8zH-I6rEbS_2sOIPHVE5L1XKSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.232.0/23
37.75.236.0/24
195.242.236.0/24
212.119.56.0/22
Signature Algorithm: sha256WithRSAEncryption
97:7d:07:36:7b:3a:12:f6:94:70:8b:d8:10:00:a8:9a:0e:f8:
8b:3a:58:34:53:1c:22:f4:31:b0:ac:c0:e3:95:df:80:6a:a5:
55:4c:d6:3c:02:89:5e:8f:23:27:dc:90:3f:fe:f3:9c:52:52:
34:30:75:3f:19:99:41:30:d4:bb:48:d7:b6:96:28:d4:7b:87:
bd:69:39:1d:4d:32:62:4b:7a:95:14:02:75:1b:95:a4:c4:7f:
ea:55:d8:c7:a3:4b:8b:9f:66:04:e3:4d:30:55:67:6f:d7:3e:
d4:7d:0e:b7:3b:cc:d5:11:c5:be:39:b5:4c:31:fc:be:fa:4a:
00:e5:30:ba:15:25:d3:4b:51:a6:86:66:5c:7a:31:ca:f7:9a:
c1:28:ea:ec:8a:2f:e1:d8:31:1c:03:4a:3d:95:2a:d4:bf:2d:
3b:3f:59:25:a9:d6:b0:d7:03:76:ad:c4:ef:9f:93:d3:62:64:
97:09:d9:c1:7a:5e:59:f5:93:78:0d:46:bf:92:88:1a:90:16:
d0:0f:95:1d:ef:02:0d:b6:ed:09:9f:02:bb:9a:b2:39:9d:f5:
fd:da:60:83:08:18:18:e6:89:20:5a:10:d9:b1:c5:69:3a:71:
6b:ec:76:25:25:bd:68:9a:aa:3a:07:bc:74:24:fa:c7:86:3c:
b7:21:8a:4e
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYTJM2p66IwmQQ9HbIPIKG0vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZjg0OTZiNzlkMWMwNGQwODJhZjgzZjFiZTZhNWVhYjBj
NjYwODkwHhcNMjIxMTMwMTU0MTQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2NjYzdmODhlYWIxMWI0YmZkYWMzODgzYzc1NDRlNGJkNTcyOTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWEFpE/YB579UNHOcfkLiUMVXTgU
h3V57lJ0CR2H28w2/76YTQTeBsfiPL7OlSPwPjsaNWlppH2x4+njyoolT8kXoJps
2uEnKVuojOAME/J2c6UgCZcuO3MZ8UtlvnqVsU9e0ZF1Q4HoakXBusCnEbmDLA1a
ui6vSO+mG/uLd7WcxxBN6agFHQIqAlGVihKaKD1iVzA3pMhwQ+MKEissCnkczaZq
Ql/kZdi9T4tKEQbYxwyuqHpOO9yFXRnp9yqKAsphYr0noB10R7rtgM1+Z7BTVrl/
B/3wvDgCYYTcUv15zfLki+4eEyvgYa/AdECswtxyNROld7whzPeCHJm97wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLfMx/iOqxG0v9rDiDx1ROS9VyknMB8GA1UdIwQY
MBaAFBP4SWt50cBNCCr4PxvmpeqwxmCJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9lZWIyNmYtNjc5MC00MmNlLThjY2Mt
NTRhMjVlMmNkYWE5LzEvdDh6SC1JNnJFYlNfMnNPSVBIVkU1TDFYS1NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9lZWIyNmYtNjc5MC00MmNlLThjY2MtNTRhMjVlMmNkYWE5
LzEvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBJUvoAwQA
JUvsAwQAw/LsAwQC1Hc4MA0GCSqGSIb3DQEBCwUAA4IBAQCXfQc2ezoS9pRwi9gQ
AKiaDviLOlg0Uxwi9DGwrMDjld+AaqVVTNY8AolejyMn3JA//vOcUlI0MHU/GZlB
MNS7SNe2lijUe4e9aTkdTTJiS3qVFAJ1G5WkxH/qVdjHo0uLn2YE400wVWdv1z7U
fQ63O8zVEcW+ObVMMfy++koA5TC6FSXTS1GmhmZcejHK95rBKOrsii/h2DEcA0o9
lSrUvy07P1klqdaw1wN2rcTvn5PTYmSXCdnBel5Z9ZN4DUa/kogakBbQD5Ud7wIN
tu0JnwK7mrI5nfX92mCDCBgY5okgWhDZscVpOnFr7HYlJb1omqo6B7x0JPrHhjy3
IYpO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:55 2024 by rpki-client on console-fra.rpki-client.org