Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/1iLtWREN90bm9AcyaGcxjK0gSis.roa
File: 1iLtWREN90bm9AcyaGcxjK0gSis.roa (raw, json)
Hash identifier: 6y70Lmlhd1iJ52YcpVfd4xQ/UJlcW2fAqbRjWs83xVc=
Subject key identifier: D6:22:ED:59:11:0D:F7:46:E6:F4:07:32:68:67:31:8C:AD:20:4A:2B
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0183DC3703D33B20DEB6B5CD3EB93E365E51
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/1iLtWREN90bm9AcyaGcxjK0gSis.roa
Signing time: Sat 15 Oct 2022 15:15:36 +0000
ROA not before: Sat 15 Oct 2022 15:15:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30793
IP address blocks: 87.239.216.0/22 maxlen: 22
87.239.216.0/21 maxlen: 21
85.31.252.0/24 maxlen: 24
93.180.160.0/19 maxlen: 19
185.58.160.0/23 maxlen: 23
185.58.160.0/22 maxlen: 22
185.58.162.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:dc:37:03:d3:3b:20:de:b6:b5:cd:3e:b9:3e:36:5e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Oct 15 15:15:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d622ed59110df746e6f407326867318cad204a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9a:63:83:1a:aa:c1:f6:f9:2c:b2:6d:73:70:
50:99:f8:50:17:6c:2e:ca:ef:ba:1b:80:21:1d:8e:
7b:7a:9e:95:8c:fd:af:1f:7d:13:e9:94:14:c2:54:
1a:17:69:6c:ce:f8:06:35:46:e7:46:35:16:a2:c9:
f9:d6:14:77:52:65:9d:5f:b2:d9:cb:d8:8d:81:67:
8d:d3:8d:bb:be:f5:aa:fe:f6:2e:3d:a6:66:d7:c0:
a7:54:9f:f2:14:df:b8:aa:20:a9:72:c0:d4:0f:79:
6c:30:92:b6:5a:6f:56:f2:7a:ad:8f:38:74:80:88:
13:52:20:4d:0d:ee:4b:d3:fb:d0:ea:b0:4d:5a:86:
11:58:d2:11:f6:df:81:01:75:a7:e2:96:7f:58:77:
ce:52:2d:73:3a:55:b5:fc:ce:87:3a:05:74:fb:50:
30:03:88:5d:41:5e:b6:85:95:c9:14:52:eb:a2:29:
b5:3c:cb:21:d8:1b:1f:4d:e4:e2:55:ce:1c:8f:bc:
ae:3c:18:86:9e:8e:f7:dd:8f:10:b5:db:6f:9c:cd:
6d:45:fd:8f:b6:bd:4d:39:0f:3e:7a:f8:bb:af:73:
c0:fd:98:36:5e:f3:b9:76:96:29:d3:16:40:c1:c5:
15:14:45:04:e5:3e:dd:30:5c:01:fb:66:98:2a:c8:
8e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:22:ED:59:11:0D:F7:46:E6:F4:07:32:68:67:31:8C:AD:20:4A:2B
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/1iLtWREN90bm9AcyaGcxjK0gSis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.252.0/24
87.239.216.0/21
93.180.160.0/19
185.58.160.0/22
Signature Algorithm: sha256WithRSAEncryption
46:0c:a2:d4:3b:b4:61:27:e1:4b:ae:33:8d:75:9c:15:51:29:
3d:3e:ac:23:8f:bf:16:d1:49:fb:89:eb:7b:62:c6:8d:ac:1d:
2d:07:a3:68:19:79:78:a6:0b:9b:89:4f:96:5c:a8:76:ed:60:
56:4f:b5:dd:1e:71:ad:a5:d1:17:a7:5d:96:e3:b1:35:3f:7a:
e8:80:36:4f:39:0f:5e:45:12:16:69:ec:26:58:36:91:c7:c5:
ad:01:75:94:82:c7:49:25:dc:52:39:e4:83:16:c8:45:f0:84:
76:9d:54:5b:09:33:ac:69:e0:ab:d7:30:b0:ff:4f:46:21:45:
c4:43:cb:fa:3c:8b:50:18:e0:29:f0:2c:40:95:5a:ea:ef:20:
a6:30:b8:d4:07:f5:a4:df:4b:80:9b:2f:63:e3:68:d7:ea:5c:
95:fc:2b:53:a0:26:f1:55:d5:eb:f8:40:bf:d0:48:a8:46:fe:
8f:5b:e0:ad:75:37:62:2f:e0:64:bf:41:70:f6:f8:3e:f7:84:
d0:6e:10:07:96:c6:6b:e7:ba:50:8c:0b:b2:37:b8:85:b4:76:
e6:21:6b:5a:5e:01:a5:09:b3:41:29:c3:ec:b7:cc:32:17:77:
32:a8:71:3e:d4:5a:65:97:2b:44:87:4b:f4:9f:a2:5e:e8:a0:
a3:6b:bb:95
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYPcNwPTOyDetrXNPrk+Nl5RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjIxMDE1MTUxNTM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjIyZWQ1OTExMGRmNzQ2ZTZmNDA3MzI2ODY3MzE4Y2FkMjA0YTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Jpjgxqqwfb5LLJtc3BQmfhQF2wu
yu+6G4AhHY57ep6VjP2vH30T6ZQUwlQaF2lszvgGNUbnRjUWosn51hR3UmWdX7LZ
y9iNgWeN0427vvWq/vYuPaZm18CnVJ/yFN+4qiCpcsDUD3lsMJK2Wm9W8nqtjzh0
gIgTUiBNDe5L0/vQ6rBNWoYRWNIR9t+BAXWn4pZ/WHfOUi1zOlW1/M6HOgV0+1Aw
A4hdQV62hZXJFFLroim1PMsh2BsfTeTiVc4cj7yuPBiGno733Y8QtdtvnM1tRf2P
tr1NOQ8+evi7r3PA/Zg2XvO5dpYp0xZAwcUVFEUE5T7dMFwB+2aYKsiOqQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNYi7VkRDfdG5vQHMmhnMYytIEorMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvMWlMdFdSRU45MGJtOUFjeWFHY3hqSzBnU2lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVR/8AwQD
V+/YAwQFXbSgAwQCuTqgMA0GCSqGSIb3DQEBCwUAA4IBAQBGDKLUO7RhJ+FLrjON
dZwVUSk9Pqwjj78W0Un7iet7YsaNrB0tB6NoGXl4pgubiU+WXKh27WBWT7XdHnGt
pdEXp12W47E1P3rogDZPOQ9eRRIWaewmWDaRx8WtAXWUgsdJJdxSOeSDFshF8IR2
nVRbCTOsaeCr1zCw/09GIUXEQ8v6PItQGOAp8CxAlVrq7yCmMLjUB/Wk30uAmy9j
42jX6lyV/CtToCbxVdXr+EC/0EioRv6PW+CtdTdiL+Bkv0Fw9vg+94TQbhAHlsZr
57pQjAuyN7iFtHbmIWtaXgGlCbNBKcPst8wyF3cyqHE+1FpllytEh0v0n6Je6KCj
a7uV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org