Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/OO4RNNUxG_UhZVe-L7Fwr7HeT_I.roa
File: OO4RNNUxG_UhZVe-L7Fwr7HeT_I.roa (raw, json)
Hash identifier: yVs3Ut4tDnPtfXvOnKyYIfGqTqA2TIHW0Yp0bPmQYOs=
Subject key identifier: 38:EE:11:34:D5:31:1B:F5:21:65:57:BE:2F:B1:70:AF:B1:DE:4F:F2
Certificate issuer: /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Certificate serial: 1BFC21A8
Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/OO4RNNUxG_UhZVe-L7Fwr7HeT_I.roa
Signing time: Sat 01 Jan 2022 04:51:36 +0000
ROA not before: Sat 01 Jan 2022 04:51:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2847
IP address blocks: 193.219.152.0/21 maxlen: 21
193.219.160.0/19 maxlen: 19
193.219.60.0/24 maxlen: 24
193.219.60.0/22 maxlen: 22
193.219.64.0/20 maxlen: 20
83.171.0.0/18 maxlen: 18
193.219.32.0/21 maxlen: 21
2001:778::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469508520 (0x1bfc21a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Validity
Not Before: Jan 1 04:51:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38ee1134d5311bf5216557be2fb170afb1de4ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:35:04:28:fd:9e:7a:0d:57:ac:7f:97:24:3c:
b4:0f:9e:d4:a1:8e:73:75:bc:6e:69:73:b9:5d:1c:
8e:ec:f3:34:fa:49:47:13:a3:09:25:d8:0d:17:a2:
39:2f:c4:35:0d:51:db:a4:a8:39:8c:a0:58:c6:60:
c3:36:93:94:05:d2:db:0b:b1:d4:53:cf:ee:28:02:
3a:f5:ec:af:d4:59:1f:d9:55:17:bc:92:2e:21:eb:
77:c2:22:d9:23:43:31:92:ae:d2:17:5e:60:55:7f:
7b:90:08:1c:25:d2:8d:7f:c6:e4:7f:11:af:83:96:
d1:14:07:23:0d:40:cb:44:c7:44:f7:8e:c4:b4:e4:
88:a2:f2:23:6a:35:2e:bc:68:32:59:ea:d7:68:b5:
0b:7d:d4:ae:ff:48:9c:1e:10:25:bc:ab:10:cf:d0:
e6:cb:7a:02:66:e6:c1:b1:d2:c1:1e:e6:2f:8a:32:
42:84:77:ee:62:26:99:63:2d:b9:30:ec:33:9f:79:
6b:7e:b3:36:50:12:a6:e6:a2:53:eb:0c:a2:b6:dd:
96:42:cc:aa:93:c0:49:5d:00:93:76:f5:cc:94:ec:
fd:db:ff:51:24:cf:aa:88:e8:c7:19:2d:08:cf:70:
98:79:65:1d:c7:05:fc:a8:83:83:62:56:0a:9a:6a:
f8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EE:11:34:D5:31:1B:F5:21:65:57:BE:2F:B1:70:AF:B1:DE:4F:F2
X509v3 Authority Key Identifier:
keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/OO4RNNUxG_UhZVe-L7Fwr7HeT_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.0.0/18
193.219.32.0/21
193.219.60.0-193.219.79.255
193.219.152.0-193.219.191.255
IPv6:
2001:778::/32
Signature Algorithm: sha256WithRSAEncryption
77:49:58:52:66:22:96:a6:10:1e:04:4d:4d:c2:9d:1b:a8:6f:
27:8c:87:f6:84:fc:39:4c:35:1c:ef:96:4c:6d:28:d9:99:e6:
92:89:40:12:8f:c2:67:d8:c8:4c:1c:14:3d:e0:05:b1:85:ea:
a5:d0:6f:e5:99:68:f9:cb:ea:02:5c:21:52:82:38:14:45:1f:
c5:de:c0:6b:b4:8b:53:99:c9:94:f6:63:c8:75:9a:ca:33:1c:
75:50:8b:68:c4:57:03:37:10:d5:05:71:d1:63:81:bd:b9:23:
5e:5a:f2:1c:ac:95:04:ce:21:f2:56:a6:e2:4d:97:23:8f:a8:
ab:30:dd:d6:72:a1:23:cb:86:1b:63:7b:90:5a:fc:f2:0c:e8:
94:c8:f7:b2:f5:98:49:8a:27:b1:9d:a7:05:b8:c2:11:aa:24:
6f:8f:cd:60:e9:b3:17:bb:ab:22:f6:44:e2:0d:c9:8e:20:d6:
81:24:29:f0:0f:95:13:3c:e9:a6:b5:7f:92:23:b1:b3:3c:54:
dc:eb:12:0d:8f:97:5e:69:b1:95:ca:21:d5:99:d2:48:1b:a6:
ad:7b:c9:36:c8:d3:24:75:f9:ce:60:ff:e6:4d:d1:d3:50:66:
a2:e2:07:64:d1:c0:79:57:57:4c:fb:54:af:00:9e:22:29:61:
33:78:61:bb
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIEG/whqDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NDNmMjNkNjg5Mzc0OTQyODhkZmNjN2EwZWZlMWZlNzRhMjAzNmUxMB4XDTIyMDEw
MTA0NTEzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzhlZTExMzRkNTMx
MWJmNTIxNjU1N2JlMmZiMTcwYWZiMWRlNGZmMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN01BCj9nnoNV6x/lyQ8tA+e1KGOc3W8bmlzuV0cjuzzNPpJ
RxOjCSXYDReiOS/ENQ1R26SoOYygWMZgwzaTlAXS2wux1FPP7igCOvXsr9RZH9lV
F7ySLiHrd8Ii2SNDMZKu0hdeYFV/e5AIHCXSjX/G5H8Rr4OW0RQHIw1Ay0THRPeO
xLTkiKLyI2o1LrxoMlnq12i1C33Urv9InB4QJbyrEM/Q5st6AmbmwbHSwR7mL4oy
QoR37mImmWMtuTDsM595a36zNlASpuaiU+sMorbdlkLMqpPASV0Ak3b1zJTs/dv/
USTPqojoxxktCM9wmHllHccF/KiDg2JWCppq+OkCAwEAAaOCAjowggI2MB0GA1Ud
DgQWBBQ47hE01TEb9SFlV74vsXCvsd5P8jAfBgNVHSMEGDAWgBTkPyPWiTdJQojf
zHoO/h/nSiA24TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVEOGoxb2szU1VLSTM4eDZEdjRmNTBvZ051RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzgvYWI1ZmRjLTlkNmItNDY3NS05YTEzLTlkMTg1ZjczODIxMS8x
L09PNFJOTlV4R19VaFpWZS1MN0Z3cjdIZVRfSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgv
YWI1ZmRjLTlkNmItNDY3NS05YTEzLTlkMTg1ZjczODIxMS8xLzVEOGoxb2szU1VL
STM4eDZEdjRmNTBvZ051RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBQ
BggrBgEFBQcBBwEB/wRBMD8wLgQCAAEwKAMEBlOrAAMEA8HbIDAMAwQCwds8AwQE
wdtAMAwDBAPB25gDBAbB24AwDQQCAAIwBwMFACABB3gwDQYJKoZIhvcNAQELBQAD
ggEBAHdJWFJmIpamEB4ETU3CnRuobyeMh/aE/DlMNRzvlkxtKNmZ5pKJQBKPwmfY
yEwcFD3gBbGF6qXQb+WZaPnL6gJcIVKCOBRFH8XewGu0i1OZyZT2Y8h1msozHHVQ
i2jEVwM3ENUFcdFjgb25I15a8hyslQTOIfJWpuJNlyOPqKsw3dZyoSPLhhtje5Ba
/PIM6JTI97L1mEmKJ7GdpwW4whGqJG+PzWDpsxe7qyL2ROINyY4g1oEkKfAPlRM8
6aa1f5IjsbM8VNzrEg2Pl15psZXKIdWZ0kgbpq17yTbI0yR1+c5g/+ZN0dNQZqLi
B2TRwHlXV0z7VK8AniIpYTN4Ybs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:24 2024 by rpki-client on console-ams.rpki-client.org