Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/Ji89WI0pzL7bUyFkA79AtMVY_E8.roa
File: Ji89WI0pzL7bUyFkA79AtMVY_E8.roa (raw, json)
Hash identifier: NHa8j7vNho+eLVLochsxF5VbgQBeF91nlUDZf6hJSIs=
Subject key identifier: 26:2F:3D:58:8D:29:CC:BE:DB:53:21:64:03:BF:40:B4:C5:58:FC:4F
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 07047D0E
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/Ji89WI0pzL7bUyFkA79AtMVY_E8.roa
Signing time: Fri 22 Apr 2022 14:54:40 +0000
ROA not before: Fri 22 Apr 2022 14:54:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.98.0/24 maxlen: 24
94.137.74.0/24 maxlen: 24
94.137.76.0/24 maxlen: 24
94.137.79.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117734670 (0x7047d0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Apr 22 14:54:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=262f3d588d29ccbedb53216403bf40b4c558fc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:68:0e:bb:3a:f6:b6:92:45:3c:9a:5e:7b:
b9:92:2f:9f:78:99:ef:23:30:1f:8b:da:a6:e1:38:
74:9f:5b:b4:1a:2f:c8:57:67:20:b0:64:80:6e:92:
7f:a2:aa:37:dc:65:59:e7:55:3a:d0:2d:3c:c7:02:
d9:83:a4:90:85:0a:5a:1f:de:c3:01:c9:77:2f:ce:
87:cb:83:6d:23:29:bd:fd:41:50:78:e3:b3:51:63:
ed:81:1d:3b:a5:3a:ff:56:d3:13:8b:1e:68:2d:ba:
b5:96:b3:62:1d:8f:dc:01:d5:ac:02:c6:d6:c8:3c:
55:95:54:f1:e1:d0:5a:0a:8f:7a:f6:9b:06:8f:ca:
77:8f:c9:f2:0d:77:cf:b2:0c:51:4a:a0:6a:99:3d:
aa:71:4c:ee:27:c8:10:a7:2b:a1:78:bb:db:6f:40:
27:83:a8:c9:ee:69:2b:91:76:6e:ba:a5:b5:18:80:
be:24:fd:42:41:a5:b7:00:6e:b8:68:ce:dc:0e:3d:
3d:69:6f:ca:90:00:fa:ce:fe:50:09:9e:f2:50:af:
42:08:f9:82:51:35:71:ff:06:dc:26:56:0b:7c:ca:
f7:c6:fa:34:fa:2f:6a:d5:b3:5f:b4:99:63:26:60:
dd:14:67:2f:85:09:ba:27:93:ba:58:df:87:1e:bf:
ed:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2F:3D:58:8D:29:CC:BE:DB:53:21:64:03:BF:40:B4:C5:58:FC:4F
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/Ji89WI0pzL7bUyFkA79AtMVY_E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.98.0/24
94.137.74.0/24
94.137.76.0/24
94.137.79.0/24
94.137.89.0/24
94.137.91.0/24
94.137.93.0/24
Signature Algorithm: sha256WithRSAEncryption
48:61:92:a4:40:bd:5a:e2:da:b4:05:52:f6:1e:34:51:b8:7f:
bc:a0:c7:6d:d8:45:9c:22:4f:77:37:a7:f5:cf:b0:06:15:3d:
4c:b0:02:93:29:d1:56:1b:73:05:87:50:95:e7:93:7a:66:32:
5b:ea:4a:b5:55:7c:34:c8:18:67:3a:00:69:70:8e:fc:47:15:
65:ef:aa:f1:5c:d8:72:b6:f9:f5:2c:88:a4:4f:8d:b9:ad:15:
1d:a9:18:0e:49:d0:1e:c4:71:60:0b:52:f6:8d:ea:a6:b9:9e:
cc:04:e2:f0:cb:5f:8e:b3:12:4c:cf:a2:9b:a9:4d:2d:9e:83:
eb:85:cc:84:5c:e4:8d:c4:41:67:13:f1:02:8e:9e:79:f3:ac:
e0:76:5b:af:0d:1c:a6:81:28:92:2e:66:ee:f0:ca:dc:76:a0:
c0:b3:4b:8c:6d:8e:f8:0d:d8:d0:df:ee:48:8b:23:43:74:ec:
e1:03:b9:5f:55:31:2b:b2:e8:be:ce:2a:89:17:22:09:2a:fb:
5f:d7:f7:8e:8c:80:3d:11:52:20:d5:ba:3a:6b:8a:da:78:4f:
2b:7b:2e:f9:a6:9f:61:a5:3e:c0:f4:b7:44:e6:de:80:f4:82:
7a:98:db:35:0f:3e:bc:20:63:2f:e7:c3:3f:f0:2f:b4:ef:b1:
9e:3b:b3:d3
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIEBwR9DjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
OWFjMGFjYmZkYjdhMjc0ZWYzNmMxNmY1ODYwYWRhMmEyNDcwNjk3MB4XDTIyMDQy
MjE0NTQ0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjYyZjNkNTg4ZDI5
Y2NiZWRiNTMyMTY0MDNiZjQwYjRjNTU4ZmM0ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL9CaA67Ova2kkU8ml57uZIvn3iZ7yMwH4vapuE4dJ9btBov
yFdnILBkgG6Sf6KqN9xlWedVOtAtPMcC2YOkkIUKWh/ewwHJdy/Oh8uDbSMpvf1B
UHjjs1Fj7YEdO6U6/1bTE4seaC26tZazYh2P3AHVrALG1sg8VZVU8eHQWgqPevab
Bo/Kd4/J8g13z7IMUUqgapk9qnFM7ifIEKcroXi7229AJ4Ooye5pK5F2brqltRiA
viT9QkGltwBuuGjO3A49PWlvypAA+s7+UAme8lCvQgj5glE1cf8G3CZWC3zK98b6
NPovatWzX7SZYyZg3RRnL4UJuieTuljfhx6/7XMCAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBQmLz1YjSnMvttTIWQDv0C0xVj8TzAfBgNVHSMEGDAWgBSJrArL/beidO82
wW9YYK2iokcGlzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2lhd0t5XzIzb25Udk5zRnZXR0N0b3FKSEJwYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzEvOTNhNzY4LTI2NzctNDhkNi05MTRjLWQ0ZGJmNzA2NmZkMy8x
L0ppODlXSTBwekw3YlV5RmtBNzlBdE1WWV9FOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEv
OTNhNzY4LTI2NzctNDhkNi05MTRjLWQ0ZGJmNzA2NmZkMy8xL2lhd0t5XzIzb25U
dk5zRnZXR0N0b3FKSEJwYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAC2XYgMEAF6JSgMEAF6JTAMEAF6J
TwMEAF6JWQMEAF6JWwMEAF6JXTANBgkqhkiG9w0BAQsFAAOCAQEASGGSpEC9WuLa
tAVS9h40Ubh/vKDHbdhFnCJPdzen9c+wBhU9TLACkynRVhtzBYdQleeTemYyW+pK
tVV8NMgYZzoAaXCO/EcVZe+q8VzYcrb59SyIpE+Nua0VHakYDknQHsRxYAtS9o3q
prmezATi8MtfjrMSTM+im6lNLZ6D64XMhFzkjcRBZxPxAo6eefOs4HZbrw0cpoEo
ki5m7vDK3HagwLNLjG2O+A3Y0N/uSIsjQ3Ts4QO5X1UxK7Lovs4qiRciCSr7X9f3
joyAPRFSINW6OmuK2nhPK3su+aafYaU+wPS3RObegPSCepjbNQ8+vCBjL+fDP/Av
tO+xnjuz0w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:11 2023 by rpki-client on console-fra.rpki-client.org