Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/AA5KBhnZqxNjnC7OkHVwzkxHIg4.roa
File: AA5KBhnZqxNjnC7OkHVwzkxHIg4.roa (raw, json)
Hash identifier: B/v6XxkMZBq5jiuotn2w/sJuvPSXuKPBr+xW8mkIsS8=
Subject key identifier: 00:0E:4A:06:19:D9:AB:13:63:9C:2E:CE:90:75:70:CE:4C:47:22:0E
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1C8C34B8
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/AA5KBhnZqxNjnC7OkHVwzkxHIg4.roa
Signing time: Thu 17 Mar 2022 16:11:35 +0000
ROA not before: Thu 17 Mar 2022 16:11:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60558
IP address blocks: 178.213.180.0/22 maxlen: 22
91.245.184.0/21 maxlen: 21
93.120.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478950584 (0x1c8c34b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Mar 17 16:11:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=000e4a0619d9ab13639c2ece907570ce4c47220e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:1f:9c:33:0e:86:92:98:7a:cc:7c:80:00:
be:03:8f:65:d4:03:22:95:ab:0c:c8:30:ac:87:f3:
bb:d2:69:5f:da:b9:85:7d:aa:a9:ef:d6:9a:c1:70:
46:58:d1:5e:a3:3c:ea:ae:94:3b:83:85:a5:9d:ae:
e8:77:94:f9:02:b7:1b:f0:9a:bd:44:d2:59:10:d7:
02:29:ec:2a:bb:9e:c3:0b:45:41:81:8d:5c:0a:5c:
e1:c6:a8:96:e5:ee:2c:42:5c:7c:11:f3:ca:16:12:
ba:39:db:0d:01:3e:38:be:96:ef:28:95:4a:96:3d:
3b:b8:25:0a:e8:64:f6:46:ea:c4:84:f2:44:f4:15:
e8:98:27:37:47:cc:32:44:eb:0f:bf:e3:f8:21:22:
e3:40:09:af:04:ae:0e:c1:23:6b:1b:9d:7a:c2:7e:
be:19:12:98:68:1f:5e:e1:e6:f9:af:c0:43:35:b6:
4d:49:80:c2:de:8b:01:81:ce:be:ea:dc:50:00:97:
d5:56:11:d1:29:0f:eb:7e:a5:49:5f:09:9e:f0:2c:
8c:49:31:ea:0d:85:47:05:77:36:96:c9:e1:8a:70:
16:1a:75:fa:53:b3:b4:6a:4e:dd:26:8c:ec:36:ec:
6e:17:3d:b8:32:05:34:37:20:97:de:41:93:59:8c:
ad:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0E:4A:06:19:D9:AB:13:63:9C:2E:CE:90:75:70:CE:4C:47:22:0E
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/AA5KBhnZqxNjnC7OkHVwzkxHIg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.184.0/21
93.120.36.0/22
178.213.180.0/22
Signature Algorithm: sha256WithRSAEncryption
89:49:23:59:f4:f8:58:9e:d0:f0:e5:01:5d:f4:f0:ab:29:bc:
67:0b:fb:6f:ab:73:d1:87:cf:0f:15:88:ed:42:c6:82:da:c4:
b8:28:3e:cd:99:50:94:50:f8:db:04:17:31:89:83:a8:ec:4e:
52:fd:bc:73:fa:76:9c:25:42:77:85:4e:dc:b2:a4:88:06:e7:
9c:19:85:30:86:09:40:66:32:a2:90:0d:d7:e9:4b:8b:b6:d8:
44:29:19:98:74:ba:25:4a:d6:50:94:d7:b2:8a:4d:05:58:2f:
6c:16:1a:29:fb:86:2b:79:07:e9:58:1c:5c:d0:e9:e5:62:2c:
3b:a0:b8:2c:c3:de:45:35:03:be:a0:5a:05:8c:24:01:a2:fe:
f6:4d:44:02:df:9b:f1:ef:7b:43:5c:30:ee:29:24:e0:ba:6b:
db:7d:9d:cf:eb:17:f9:cb:a8:4f:d0:21:13:b9:53:6b:b8:81:
53:5e:8f:04:2b:e6:ca:0a:f6:53:39:49:59:ef:28:4f:2a:82:
a7:5b:84:5c:79:8c:0d:73:3d:c2:d8:ca:13:86:af:c8:41:1f:
73:53:3e:8d:1c:a7:ff:1c:ae:b0:ad:b0:3d:ae:4f:93:1c:03:
ef:1f:29:01:54:25:22:0a:ba:f3:4c:5a:ac:e1:ff:8d:ad:3d:
16:1f:e2:ad
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEHIw0uDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NDljYmJkNWMyY2Y0MTk1Y2M2ZWM3ZjIxZjYwNzU4MWEwMjI0ZGFhMB4XDTIyMDMx
NzE2MTEzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDAwZTRhMDYxOWQ5
YWIxMzYzOWMyZWNlOTA3NTcwY2U0YzQ3MjIwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALitH5wzDoaSmHrMfIAAvgOPZdQDIpWrDMgwrIfzu9JpX9q5
hX2qqe/WmsFwRljRXqM86q6UO4OFpZ2u6HeU+QK3G/CavUTSWRDXAinsKruewwtF
QYGNXApc4caoluXuLEJcfBHzyhYSujnbDQE+OL6W7yiVSpY9O7glCuhk9kbqxITy
RPQV6JgnN0fMMkTrD7/j+CEi40AJrwSuDsEjaxudesJ+vhkSmGgfXuHm+a/AQzW2
TUmAwt6LAYHOvurcUACX1VYR0SkP636lSV8JnvAsjEkx6g2FRwV3NpbJ4YpwFhp1
+lOztGpO3SaM7Dbsbhc9uDIFNDcgl95Bk1mMrfUCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQADkoGGdmrE2OcLs6QdXDOTEciDjAfBgNVHSMEGDAWgBQ0nLvVws9Blcxu
x/IfYHWBoCJNqjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05KeTcxY0xQUVpYTWJzZnlIMkIxZ2FBaVRhby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmQvY2RmNWY2LTJmMTgtNDJjNy05MzBlLWRjMDZkZDgwNTk2MC8x
L0FBNUtCaG5acXhOam5DN09rSFZ3emt4SElnNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQv
Y2RmNWY2LTJmMTgtNDJjNy05MzBlLWRjMDZkZDgwNTk2MC8xL05KeTcxY0xQUVpY
TWJzZnlIMkIxZ2FBaVRhby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEA1v1uAMEAl14JAMEArLVtDANBgkq
hkiG9w0BAQsFAAOCAQEAiUkjWfT4WJ7Q8OUBXfTwqym8Zwv7b6tz0YfPDxWI7ULG
gtrEuCg+zZlQlFD42wQXMYmDqOxOUv28c/p2nCVCd4VO3LKkiAbnnBmFMIYJQGYy
opAN1+lLi7bYRCkZmHS6JUrWUJTXsopNBVgvbBYaKfuGK3kH6VgcXNDp5WIsO6C4
LMPeRTUDvqBaBYwkAaL+9k1EAt+b8e97Q1ww7ikk4Lpr232dz+sX+cuoT9AhE7lT
a7iBU16PBCvmygr2UzlJWe8oTyqCp1uEXHmMDXM9wtjKE4avyEEfc1M+jRyn/xyu
sK2wPa5PkxwD7x8pAVQlIgq680xarOH/ja09Fh/irQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org