Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/yXh7_G5dHjjwLH2iLffrUqA_1FE.roa
File: yXh7_G5dHjjwLH2iLffrUqA_1FE.roa (raw, json)
Hash identifier: xriKNexxefR6gcxjccfnndMh7//UpHAzoWRmCH0PafA=
Subject key identifier: C9:78:7B:FC:6E:5D:1E:38:F0:2C:7D:A2:2D:F7:EB:52:A0:3F:D4:51
Certificate issuer: /CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
Certificate serial: 0181FC5751AE1FD39B4389663D9D457C3006
Authority key identifier: 8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/yXh7_G5dHjjwLH2iLffrUqA_1FE.roa
Signing time: Thu 14 Jul 2022 10:53:09 +0000
ROA not before: Thu 14 Jul 2022 10:53:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44513
IP address blocks: 195.181.176.0/22 maxlen: 22
195.181.176.0/20 maxlen: 20
213.32.208.0/20 maxlen: 20
80.69.240.0/20 maxlen: 20
185.129.88.0/22 maxlen: 22
31.15.72.0/21 maxlen: 21
92.43.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fc:57:51:ae:1f:d3:9b:43:89:66:3d:9d:45:7c:30:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
Validity
Not Before: Jul 14 10:53:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9787bfc6e5d1e38f02c7da22df7eb52a03fd451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:59:a1:b8:89:c3:0c:2d:54:51:f8:d7:7f:5d:
9e:28:b3:ee:c2:aa:3b:39:d4:3c:43:15:12:06:a6:
26:5b:19:48:c8:e2:f0:64:66:ef:83:a1:cd:31:5d:
57:2e:21:92:ba:90:96:92:7e:43:d8:24:b5:1d:87:
e4:6b:c8:c0:26:83:cd:7a:17:11:37:19:17:6f:fb:
08:d4:69:b2:4a:1e:85:b4:ec:09:17:0c:ec:bb:02:
64:69:ee:a1:93:60:9b:b6:17:1d:df:ad:68:ce:5f:
7c:96:38:fb:90:56:6a:34:c9:25:6c:df:44:b6:cf:
38:b8:83:ad:ac:2d:78:02:2f:95:76:4c:bf:33:30:
07:04:78:c8:6a:0e:49:f8:ea:a5:4b:f9:91:b3:a3:
ad:49:92:9f:68:45:fb:e6:0a:a4:01:a6:61:e3:8d:
ab:7a:af:1b:ca:b5:28:a5:8a:ec:11:e6:ee:74:a4:
21:79:0b:c4:f2:e0:09:87:f4:e2:cd:3f:b8:38:e1:
1e:d2:c1:42:5e:32:97:bb:34:62:45:a0:e4:89:4f:
46:34:cc:35:38:73:c4:72:2e:da:d6:6a:87:f6:75:
8f:a7:d2:6f:a1:bb:e0:89:23:29:d5:10:90:15:51:
13:8f:31:c0:41:6a:06:90:87:18:f9:73:54:04:c1:
7f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:78:7B:FC:6E:5D:1E:38:F0:2C:7D:A2:2D:F7:EB:52:A0:3F:D4:51
X509v3 Authority Key Identifier:
keyid:8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/yXh7_G5dHjjwLH2iLffrUqA_1FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.72.0/21
80.69.240.0/20
92.43.240.0/21
185.129.88.0/22
195.181.176.0/20
213.32.208.0/20
Signature Algorithm: sha256WithRSAEncryption
10:64:a1:e7:d6:c3:34:92:54:9c:b2:22:77:a1:c3:fe:00:44:
92:0e:58:4e:21:a7:da:2f:66:14:09:1d:d0:24:9b:c4:32:63:
88:05:91:c6:1d:ac:b8:05:2f:7e:36:78:5e:57:48:2c:52:bd:
ce:84:94:b4:f3:b9:b5:03:17:14:c4:e8:39:89:3b:fc:ce:c3:
8b:17:7b:90:e9:29:d5:05:6a:d4:8e:c3:46:70:06:53:ac:8f:
25:c5:11:6a:f7:a8:7b:60:cb:f7:8e:75:b0:c8:ed:f4:fc:14:
a1:19:c0:15:0c:b2:49:8e:a0:72:fd:9c:a6:75:ef:fa:a2:8c:
a5:d8:b7:07:a9:cb:58:5b:de:3f:11:5f:a1:17:dc:ea:d7:40:
73:ec:27:83:c8:c7:b7:49:b0:3d:64:71:b3:a7:5b:df:96:04:
f1:a5:37:aa:ad:3d:16:fb:bb:c7:c7:d1:08:21:92:9d:6a:94:
58:9f:1d:82:75:4f:dc:f8:d8:6c:43:8e:3d:c8:0a:95:90:e9:
3a:a6:a1:eb:44:7d:9e:a3:ed:44:3e:91:8f:cb:63:57:d9:7f:
95:43:f0:d8:5a:f1:fb:2f:bc:cf:e5:65:c9:10:04:3e:19:39:
35:9b:08:f3:27:f5:68:6d:56:50:43:ab:b9:5a:f7:c6:52:95:
ba:a8:78:38
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYH8V1GuH9ObQ4lmPZ1FfDAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzk1YWZmNzhiZDIxZGQ4ZTliZDVmNDUxZGZjOGY4MDJl
ZjY5MTYwHhcNMjIwNzE0MTA1MzA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTc4N2JmYzZlNWQxZTM4ZjAyYzdkYTIyZGY3ZWI1MmEwM2ZkNDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lmhuInDDC1UUfjXf12eKLPuwqo7
OdQ8QxUSBqYmWxlIyOLwZGbvg6HNMV1XLiGSupCWkn5D2CS1HYfka8jAJoPNehcR
NxkXb/sI1GmySh6FtOwJFwzsuwJkae6hk2Cbthcd361ozl98ljj7kFZqNMklbN9E
ts84uIOtrC14Ai+Vdky/MzAHBHjIag5J+OqlS/mRs6OtSZKfaEX75gqkAaZh442r
eq8byrUopYrsEebudKQheQvE8uAJh/TizT+4OOEe0sFCXjKXuzRiRaDkiU9GNMw1
OHPEci7a1mqH9nWPp9JvobvgiSMp1RCQFVETjzHAQWoGkIcY+XNUBMF/2QIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFMl4e/xuXR448Cx9oi3361KgP9RRMB8GA1UdIwQY
MBaAFI7JWv94vSHdjpvV9FHfyPgC72kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNsYV8zaTlJZDJPbTlYMFVkX0ktQUx2YVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lNWM0ODMtNDRiZi00MWFkLTllOGYt
OTNkMGIwMGU3ZTA0LzEveVhoN19HNWRIamp3TEgyaUxmZnJVcUFfMUZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9lNWM0ODMtNDRiZi00MWFkLTllOGYtOTNkMGIwMGU3ZTA0
LzEvanNsYV8zaTlJZDJPbTlYMFVkX0ktQUx2YVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDHw9IAwQE
UEXwAwQDXCvwAwQCuYFYAwQEw7WwAwQE1SDQMA0GCSqGSIb3DQEBCwUAA4IBAQAQ
ZKHn1sM0klScsiJ3ocP+AESSDlhOIafaL2YUCR3QJJvEMmOIBZHGHay4BS9+Nnhe
V0gsUr3OhJS087m1AxcUxOg5iTv8zsOLF3uQ6SnVBWrUjsNGcAZTrI8lxRFq96h7
YMv3jnWwyO30/BShGcAVDLJJjqBy/Zymde/6ooyl2LcHqctYW94/EV+hF9zq10Bz
7CeDyMe3SbA9ZHGzp1vflgTxpTeqrT0W+7vHx9EIIZKdapRYnx2CdU/c+NhsQ449
yAqVkOk6pqHrRH2eo+1EPpGPy2NX2X+VQ/DYWvH7L7zP5WXJEAQ+GTk1mwjzJ/Vo
bVZQQ6u5WvfGUpW6qHg4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:08 2024 by rpki-client on console-fra.rpki-client.org