Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/0iiNL_SrQI2jUg_LhqD57V5t8CY.roa
File: 0iiNL_SrQI2jUg_LhqD57V5t8CY.roa (raw, json)
Hash identifier: rfi4IafhoZtbPCxEiY10FaSmV+mF4HdZSGAf1LK9UI8=
Subject key identifier: D2:28:8D:2F:F4:AB:40:8D:A3:52:0F:CB:86:A0:F9:ED:5E:6D:F0:26
Certificate issuer: /CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Certificate serial: 0A921B43
Authority key identifier: 2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/0iiNL_SrQI2jUg_LhqD57V5t8CY.roa
Signing time: Sat 01 Jan 2022 05:52:31 +0000
ROA not before: Sat 01 Jan 2022 05:52:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44002
IP address blocks: 185.4.200.0/24 maxlen: 24
185.4.201.0/24 maxlen: 24
185.4.202.0/24 maxlen: 24
185.4.203.0/24 maxlen: 24
185.4.200.0/22 maxlen: 22
79.98.79.0/24 maxlen: 24
79.98.76.0/24 maxlen: 24
79.98.77.0/24 maxlen: 24
79.98.78.0/24 maxlen: 24
79.98.72.0/24 maxlen: 24
79.98.73.0/24 maxlen: 24
79.98.74.0/24 maxlen: 24
79.98.75.0/24 maxlen: 24
79.98.72.0/21 maxlen: 21
2a02:970:1028::/48 maxlen: 48
2a02:970:1061::/48 maxlen: 48
2a02:970:1c01::/48 maxlen: 48
2a02:970:1::/48 maxlen: 48
2a02:970:1017::/48 maxlen: 48
2a02:970:1052::/48 maxlen: 48
2a02:970:1192::/48 maxlen: 48
2a02:970:1185::/48 maxlen: 48
2a02:970:1245::/48 maxlen: 48
2a02:970::/32 maxlen: 48
2a02:970:1176::/48 maxlen: 48
2a02:970:1019::/48 maxlen: 48
2a02:970:440::/43 maxlen: 43
2a02:970:470::/48 maxlen: 48
2a02:970:450::/48 maxlen: 48
2a02:970:1366::/48 maxlen: 48
2a02:970:1206::/48 maxlen: 48
2a02:970:1006::/48 maxlen: 48
2a02:970:1446::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177347395 (0xa921b43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Validity
Not Before: Jan 1 05:52:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2288d2ff4ab408da3520fcb86a0f9ed5e6df026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:05:d7:1a:4c:ad:c8:75:14:e3:33:df:9f:
a9:f4:50:5a:5e:ce:7b:fb:9e:59:00:25:8b:68:ef:
46:c7:fd:51:e0:43:bb:e0:7a:72:6f:70:73:79:79:
80:f1:46:f5:31:42:0d:6b:14:80:47:40:83:9c:a5:
23:95:5f:da:55:7a:3c:a4:f6:17:ae:a9:18:4f:1e:
67:49:d9:fe:52:3a:16:d6:4f:2f:1d:29:8a:cb:04:
f8:c3:d3:e9:fd:17:e6:b1:d6:ad:78:98:3e:a1:36:
7f:6c:09:b0:e1:04:25:c0:b0:2e:94:79:11:c4:a0:
2f:80:2a:6d:2e:01:47:e8:e7:26:9d:f4:88:d3:09:
ea:f1:da:72:8c:02:5d:03:27:d8:e7:3e:0d:24:a9:
17:d8:2a:14:ed:72:b1:42:ae:54:8c:75:6a:7f:bf:
33:c7:ac:8f:bf:bd:f5:da:74:5a:a0:78:ea:bc:52:
4d:5b:95:ee:e0:08:18:e7:cb:df:b0:ec:9e:86:d7:
20:9b:1a:80:d7:b2:72:bc:ea:1d:82:b6:ef:67:5b:
a8:43:da:0e:17:8d:78:27:8c:b4:5f:44:b7:3f:05:
a0:bc:69:6d:b2:d8:fa:e0:54:f6:e5:23:7a:14:20:
8a:60:d6:57:eb:85:ad:99:47:a9:24:97:61:aa:6d:
36:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:28:8D:2F:F4:AB:40:8D:A3:52:0F:CB:86:A0:F9:ED:5E:6D:F0:26
X509v3 Authority Key Identifier:
keyid:2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/0iiNL_SrQI2jUg_LhqD57V5t8CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.72.0/21
185.4.200.0/22
IPv6:
2a02:970::/32
Signature Algorithm: sha256WithRSAEncryption
28:cc:f1:22:06:a8:5c:93:3a:f7:6c:d2:f7:c2:46:ba:1b:a5:
68:1c:a2:0d:b6:c9:4d:99:24:3b:0c:ee:8e:1a:bd:e5:62:25:
7d:72:9e:30:4a:2d:be:36:60:5e:91:f6:35:cb:d6:35:13:06:
9f:82:dc:e5:09:87:2d:f8:dd:63:37:6e:31:9e:12:ce:e1:7e:
d8:e5:f4:3c:d8:7a:37:17:1b:0a:c3:69:77:26:5e:37:db:1d:
3c:96:fa:47:19:67:13:b0:f1:57:a3:70:0e:99:fb:af:76:2f:
91:22:6b:78:d5:7d:bd:77:c5:70:c2:ee:37:84:af:59:a8:a0:
ed:95:7e:13:d1:02:47:d8:87:a8:dd:64:2f:2e:0d:94:77:64:
4b:f4:db:1e:a2:1d:18:bd:ad:2b:4f:0a:20:d8:1d:59:37:a6:
94:ba:30:fb:6a:b2:ba:8a:d1:41:97:b1:8c:bb:c5:18:06:48:
65:12:60:81:df:1b:4d:a4:db:a1:f7:6e:c0:81:12:a8:fd:9b:
43:32:70:86:bc:83:1e:1d:10:81:8f:80:c3:6c:4f:a7:7e:b5:
4e:4c:c2:0a:5e:f5:41:3e:9e:d9:a4:9c:30:b4:38:d9:99:e9:
ed:cf:6b:3b:08:27:94:97:73:8f:e7:cf:cb:76:f8:97:05:18:
52:31:e9:b5
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIECpIbQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZjAzNDJlMGQyM2VmN2UwNmIxZGZmNWNjNmVlNGZhMTdhZjhiZDk4MB4XDTIyMDEw
MTA1NTIzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDIyODhkMmZmNGFi
NDA4ZGEzNTIwZmNiODZhMGY5ZWQ1ZTZkZjAyNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMoFBdcaTK3IdRTjM9+fqfRQWl7Oe/ueWQAli2jvRsf9UeBD
u+B6cm9wc3l5gPFG9TFCDWsUgEdAg5ylI5Vf2lV6PKT2F66pGE8eZ0nZ/lI6FtZP
Lx0pissE+MPT6f0X5rHWrXiYPqE2f2wJsOEEJcCwLpR5EcSgL4AqbS4BR+jnJp30
iNMJ6vHacowCXQMn2Oc+DSSpF9gqFO1ysUKuVIx1an+/M8esj7+99dp0WqB46rxS
TVuV7uAIGOfL37DsnobXIJsagNeycrzqHYK272dbqEPaDheNeCeMtF9Etz8FoLxp
bbLY+uBU9uUjehQgimDWV+uFrZlHqSSXYaptNsMCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBTSKI0v9KtAjaNSD8uGoPntXm3wJjAfBgNVHSMEGDAWgBQvA0Lg0j734Gsd
/1zG7k+hevi9mDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0x3TkM0TkktOS1CckhmOWN4dTVQb1hyNHZaZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjMvZDFmZDQ4LTkxNmItNGQ4My05NmNjLWM5MTBhZjkzZTQyNi8x
LzBpaU5MX1NyUUkyalVnX0xocUQ1N1Y1dDhDWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMv
ZDFmZDQ4LTkxNmItNGQ4My05NmNjLWM5MTBhZjkzZTQyNi8xL0x3TkM0TkktOS1C
ckhmOWN4dTVQb1hyNHZaZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEA09iSAMEArkEyDANBAIAAjAHAwUA
KgIJcDANBgkqhkiG9w0BAQsFAAOCAQEAKMzxIgaoXJM692zS98JGuhulaByiDbbJ
TZkkOwzujhq95WIlfXKeMEotvjZgXpH2NcvWNRMGn4Lc5QmHLfjdYzduMZ4SzuF+
2OX0PNh6NxcbCsNpdyZeN9sdPJb6RxlnE7DxV6NwDpn7r3YvkSJreNV9vXfFcMLu
N4SvWaig7ZV+E9ECR9iHqN1kLy4NlHdkS/TbHqIdGL2tK08KINgdWTemlLow+2qy
uorRQZexjLvFGAZIZRJggd8bTaTbofduwIESqP2bQzJwhryDHh0QgY+Aw2xPp361
TkzCCl71QT6e2aScMLQ42Znp7c9rOwgnlJdzj+fPy3b4lwUYUjHptQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:28 2024 by rpki-client on console-fra.rpki-client.org