Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/iagJgbonKhhu0JGuqxYX40rP7ug.roa
File: iagJgbonKhhu0JGuqxYX40rP7ug.roa (raw, json)
Hash identifier: q3MvF90nQ/z+5h0Sa1fWJbau42DgiIlhj2xeY4ZhuiQ=
Subject key identifier: 89:A8:09:81:BA:27:2A:18:6E:D0:91:AE:AB:16:17:E3:4A:CF:EE:E8
Certificate issuer: /CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
Certificate serial: 1654E031
Authority key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/iagJgbonKhhu0JGuqxYX40rP7ug.roa
Signing time: Sat 01 Jan 2022 03:53:40 +0000
ROA not before: Sat 01 Jan 2022 03:53:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59432
IP address blocks: 185.47.131.0/24 maxlen: 24
185.47.128.0/24 maxlen: 24
185.47.128.0/22 maxlen: 22
185.47.130.0/24 maxlen: 24
185.47.129.0/24 maxlen: 24
188.213.4.0/24 maxlen: 24
188.213.4.0/22 maxlen: 22
188.213.7.0/24 maxlen: 24
188.213.6.0/24 maxlen: 24
188.213.5.0/24 maxlen: 24
5.134.112.0/24 maxlen: 24
5.134.113.0/24 maxlen: 24
5.134.112.0/21 maxlen: 21
5.134.114.0/24 maxlen: 24
5.134.116.0/24 maxlen: 24
5.134.115.0/24 maxlen: 24
5.134.118.0/24 maxlen: 24
5.134.117.0/24 maxlen: 24
5.134.119.0/24 maxlen: 24
2a03:c7c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374661169 (0x1654e031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
Validity
Not Before: Jan 1 03:53:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89a80981ba272a186ed091aeab1617e34acfeee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:3e:24:55:24:0e:c4:c5:f6:1e:ba:b6:92:
b2:d8:9f:d0:87:3b:73:3c:60:6c:20:4e:1d:98:86:
4b:e0:bd:66:ec:c7:28:15:1c:0f:17:f4:ce:4c:85:
d0:69:c1:d9:10:6b:c7:77:f9:c5:8e:31:8a:43:b3:
2b:ab:96:34:97:07:ac:1e:86:c6:cc:fc:95:dd:84:
2e:45:5f:a7:2f:e2:ff:64:14:b5:e6:d5:0a:5e:78:
06:fe:2d:22:00:bf:f7:95:ec:65:a2:5a:98:4b:7b:
98:97:32:17:84:42:4f:38:35:e6:93:ec:44:ca:d5:
13:be:e7:bf:87:46:88:be:28:ba:34:db:4b:f9:d3:
20:37:73:f3:5d:46:64:bc:f4:7e:c1:1e:64:2b:43:
20:5d:dd:d1:1b:7f:d8:a9:bf:d0:ae:9b:73:a8:8f:
cb:3c:28:56:0a:02:fc:de:3c:3e:f1:55:f6:a8:9e:
65:43:81:5b:38:a6:d9:5b:21:76:74:1a:9c:a7:e4:
41:e7:12:3e:ee:21:47:6c:6d:ca:28:c2:e4:a4:3a:
2f:fc:08:86:90:b1:92:c6:45:d2:71:c7:c7:60:a2:
19:f1:cf:21:f6:c6:9a:4b:f8:9b:aa:4b:e9:ba:ce:
47:d2:08:f7:3b:da:1a:0a:b6:b9:d6:86:33:28:5c:
da:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A8:09:81:BA:27:2A:18:6E:D0:91:AE:AB:16:17:E3:4A:CF:EE:E8
X509v3 Authority Key Identifier:
keyid:11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/iagJgbonKhhu0JGuqxYX40rP7ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.112.0/21
185.47.128.0/22
188.213.4.0/22
IPv6:
2a03:c7c0::/32
Signature Algorithm: sha256WithRSAEncryption
96:fd:2f:98:29:bd:67:4e:f1:bc:7f:fa:b7:9b:8d:e7:aa:a3:
01:c0:85:3a:f1:1e:bd:b2:da:c9:7a:cc:99:11:5e:1d:07:cd:
9b:cf:4e:c6:09:00:69:b1:39:a6:5c:fd:92:20:0e:2a:ab:4f:
82:44:78:94:4a:71:9c:29:22:bc:c8:65:9f:17:15:b3:91:79:
cf:f3:cf:26:fb:9e:ee:7d:f0:9c:ec:e4:35:13:d9:b5:ab:1a:
90:a4:4c:be:10:d0:00:f3:7d:81:a3:2b:c0:fe:fc:e9:03:a8:
db:15:08:03:b5:64:fa:fb:95:ef:7a:2e:50:58:a3:54:d8:c7:
8c:b8:16:23:a8:49:c6:41:d5:32:81:5b:0b:c7:74:0b:f4:1b:
c0:50:f7:74:0c:7b:d6:11:04:35:26:4c:86:24:ec:37:16:c4:
ca:31:e6:78:e9:2b:c4:43:1c:ac:31:1c:19:df:30:0a:83:3c:
cf:c8:5e:df:13:3e:06:b2:30:26:60:dc:56:98:3d:d9:4c:07:
93:15:28:88:19:df:31:90:0a:18:4e:3e:d9:88:30:d9:ba:df:
61:64:35:d8:dd:58:11:6a:6b:5e:87:70:ca:50:55:b0:66:f7:
1a:00:38:b4:1d:e0:f7:14:fc:eb:71:33:69:2b:04:4c:26:7d:
e7:4a:a4:01
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEFlTgMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MTdmOGM5YTdmYzdmMTM2NThkNjJhZmJlYjZmMzk4ODJkYTUxMWNjMB4XDTIyMDEw
MTAzNTM0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODlhODA5ODFiYTI3
MmExODZlZDA5MWFlYWIxNjE3ZTM0YWNmZWVlODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALBCPiRVJA7ExfYeuraSstif0Ic7czxgbCBOHZiGS+C9ZuzH
KBUcDxf0zkyF0GnB2RBrx3f5xY4xikOzK6uWNJcHrB6Gxsz8ld2ELkVfpy/i/2QU
tebVCl54Bv4tIgC/95XsZaJamEt7mJcyF4RCTzg15pPsRMrVE77nv4dGiL4oujTb
S/nTIDdz811GZLz0fsEeZCtDIF3d0Rt/2Km/0K6bc6iPyzwoVgoC/N48PvFV9qie
ZUOBWzim2VshdnQanKfkQecSPu4hR2xtyijC5KQ6L/wIhpCxksZF0nHHx2CiGfHP
IfbGmkv4m6pL6brOR9II9zvaGgq2udaGMyhc2v0CAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBSJqAmBuicqGG7Qka6rFhfjSs/u6DAfBgNVHSMEGDAWgBQRf4yaf8fxNljW
KvvrbzmILaURzDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VYLU1tbl9IOFRaWTFpcjc2Mjg1aUMybEVjdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmMvMTIyYjJkLTVkODctNDc4Yy04NTIyLTg5ZDY2YWM3MmUwMi8x
L2lhZ0pnYm9uS2hodTBKR3VxeFlYNDByUDd1Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMv
MTIyYjJkLTVkODctNDc4Yy04NTIyLTg5ZDY2YWM3MmUwMi8xL0VYLU1tbl9IOFRa
WTFpcjc2Mjg1aUMybEVjdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAwWGcAMEArkvgAMEArzVBDANBAIA
AjAHAwUAKgPHwDANBgkqhkiG9w0BAQsFAAOCAQEAlv0vmCm9Z07xvH/6t5uN56qj
AcCFOvEevbLayXrMmRFeHQfNm89OxgkAabE5plz9kiAOKqtPgkR4lEpxnCkivMhl
nxcVs5F5z/PPJvue7n3wnOzkNRPZtasakKRMvhDQAPN9gaMrwP786QOo2xUIA7Vk
+vuV73ouUFijVNjHjLgWI6hJxkHVMoFbC8d0C/QbwFD3dAx71hEENSZMhiTsNxbE
yjHmeOkrxEMcrDEcGd8wCoM8z8he3xM+BrIwJmDcVpg92UwHkxUoiBnfMZAKGE4+
2Ygw2brfYWQ12N1YEWprXodwylBVsGb3GgA4tB3g9xT863EzaSsETCZ950qkAQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:32 2024 by rpki-client on console-ams.rpki-client.org