Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/JGPOJfJMnlYgc6oXtn_YnaVQCp4.roa
File: JGPOJfJMnlYgc6oXtn_YnaVQCp4.roa (raw, json)
Hash identifier: SbLoxUdd4YLhqbgDdHLDY/00f/McReFrgQsXzOfO4Aw=
Subject key identifier: 24:63:CE:25:F2:4C:9E:56:20:73:AA:17:B6:7F:D8:9D:A5:50:0A:9E
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 0A9BE100
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/JGPOJfJMnlYgc6oXtn_YnaVQCp4.roa
Signing time: Wed 15 Jun 2022 13:18:01 +0000
ROA not before: Wed 15 Jun 2022 13:18:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34471
IP address blocks: 185.5.84.0/22 maxlen: 24
89.40.84.0/22 maxlen: 24
185.176.104.0/22 maxlen: 24
46.28.160.0/24 maxlen: 24
31.25.176.0/21 maxlen: 24
185.176.107.0/24 maxlen: 24
91.242.148.0/22 maxlen: 24
109.235.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177987840 (0xa9be100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jun 15 13:18:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2463ce25f24c9e562073aa17b67fd89da5500a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c2:c7:e4:b1:bb:4a:62:c5:d1:f9:95:81:d2:
04:b4:76:5d:cf:68:7f:b2:e2:e8:4a:ee:b3:b4:ce:
2e:f9:de:02:c1:7f:69:67:df:62:3a:d5:a9:c1:e9:
25:4b:4c:f5:0b:c1:92:8d:54:da:cb:be:5c:1e:96:
c6:a9:9f:79:0d:37:08:d9:34:ab:82:58:44:05:c3:
48:00:e9:5c:26:5e:9b:3e:53:ae:e7:a9:95:58:12:
13:58:a3:4c:da:f8:d5:98:81:d7:12:44:fe:7a:64:
12:cc:19:28:23:44:07:e1:8e:2c:c6:d4:f5:49:4e:
bb:50:76:3b:f2:d5:9b:6b:18:94:fe:9c:e6:d1:41:
22:b9:69:7e:61:03:99:e6:4d:89:76:54:03:36:be:
d7:b5:12:43:05:22:c8:55:56:b9:fe:5d:57:82:1c:
ed:15:1c:bb:8d:bd:7e:2d:f9:45:2b:04:0e:19:d1:
2a:d8:8e:03:28:cc:4e:54:a2:18:d5:37:76:33:dc:
05:b6:95:a9:22:e3:43:e4:f9:f2:fd:70:27:e3:ff:
24:2c:8d:97:66:79:0e:cb:13:69:de:d5:bd:4a:94:
96:eb:8a:bf:93:e2:05:49:32:92:fe:78:8e:64:2f:
ef:c9:15:19:ac:f9:9d:83:38:d8:bd:ce:94:5b:0d:
42:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:63:CE:25:F2:4C:9E:56:20:73:AA:17:B6:7F:D8:9D:A5:50:0A:9E
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/JGPOJfJMnlYgc6oXtn_YnaVQCp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.176.0/21
46.28.160.0/24
89.40.84.0/22
91.242.148.0/22
109.235.16.0/21
185.5.84.0/22
185.176.104.0/22
Signature Algorithm: sha256WithRSAEncryption
25:96:36:96:ce:a0:15:1b:e3:ee:7a:ac:5c:27:96:ed:e5:41:
17:02:fa:5f:a9:9b:1a:26:7b:38:b2:1d:5f:31:f0:87:a0:64:
08:5c:2b:f1:bd:da:4d:be:ca:23:e4:2f:a0:41:be:b4:e9:48:
dd:20:08:c7:42:9f:ad:7b:80:9e:7d:8e:ce:93:0c:82:bf:87:
1d:3b:ab:f8:3e:e9:1b:ca:81:06:7a:b3:45:72:6a:e7:50:19:
b0:32:37:bd:ed:ad:87:fb:ac:3d:79:99:24:dd:4f:c8:da:7c:
2b:0b:df:bc:9e:9a:b5:a2:8a:06:28:17:a1:62:15:43:aa:f3:
b9:a2:72:4e:fa:7e:98:1d:03:29:7d:55:0a:a4:7e:56:0e:de:
ab:de:e5:da:75:7b:a5:31:8b:a3:27:ee:5a:6f:52:7f:29:6a:
a5:19:1f:83:1f:a6:ab:5c:75:2a:43:1f:46:cd:79:e2:64:9b:
41:2c:1c:21:5b:1b:ff:46:7f:30:36:6c:93:52:8c:e9:80:f1:
7a:65:c9:2c:88:3c:24:f9:ee:56:47:58:75:93:dc:f2:11:63:
55:3c:51:ba:68:34:a3:29:8a:f7:b6:51:f2:e0:73:a5:40:cd:
f1:ab:34:5c:f0:4f:e4:8e:b1:fe:e2:50:33:28:75:2d:33:da:
20:38:27:78
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIECpvhADANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NWIzMDExMWIwYjcyMGEyMDlmNzg4YzhiOTBmNjAzODBiNDY1YzJlMB4XDTIyMDYx
NTEzMTgwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjQ2M2NlMjVmMjRj
OWU1NjIwNzNhYTE3YjY3ZmQ4OWRhNTUwMGE5ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANjCx+Sxu0pixdH5lYHSBLR2Xc9of7Li6Erus7TOLvneAsF/
aWffYjrVqcHpJUtM9QvBko1U2su+XB6WxqmfeQ03CNk0q4JYRAXDSADpXCZemz5T
rueplVgSE1ijTNr41ZiB1xJE/npkEswZKCNEB+GOLMbU9UlOu1B2O/LVm2sYlP6c
5tFBIrlpfmEDmeZNiXZUAza+17USQwUiyFVWuf5dV4Ic7RUcu429fi35RSsEDhnR
KtiOAyjMTlSiGNU3djPcBbaVqSLjQ+T58v1wJ+P/JCyNl2Z5DssTad7VvUqUluuK
v5PiBUkykv54jmQv78kVGaz5nYM42L3OlFsNQikCAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBQkY84l8kyeViBzqhe2f9idpVAKnjAfBgNVHSMEGDAWgBSVswERsLcgogn3
iMi5D2A4C0ZcLjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2xiTUJFYkMzSUtJSjk0akl1UTlnT0F0R1hDNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvMDNiZjI4LWM1NWQtNGM3YS05MWJiLTkxNjQ2YmYwMTUzZC8x
L0pHUE9KZkpNbmxZZ2M2b1h0bl9ZbmFWUUNwNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
MDNiZjI4LWM1NWQtNGM3YS05MWJiLTkxNjQ2YmYwMTUzZC8xL2xiTUJFYkMzSUtJ
Sjk0akl1UTlnT0F0R1hDNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAx8ZsAMEAC4coAMEAlkoVAMEAlvy
lAMEA23rEAMEArkFVAMEArmwaDANBgkqhkiG9w0BAQsFAAOCAQEAJZY2ls6gFRvj
7nqsXCeW7eVBFwL6X6mbGiZ7OLIdXzHwh6BkCFwr8b3aTb7KI+QvoEG+tOlI3SAI
x0KfrXuAnn2OzpMMgr+HHTur+D7pG8qBBnqzRXJq51AZsDI3ve2th/usPXmZJN1P
yNp8KwvfvJ6ataKKBigXoWIVQ6rzuaJyTvp+mB0DKX1VCqR+Vg7eq97l2nV7pTGL
oyfuWm9SfylqpRkfgx+mq1x1KkMfRs154mSbQSwcIVsb/0Z/MDZsk1KM6YDxemXJ
LIg8JPnuVkdYdZPc8hFjVTxRumg0oymK97ZR8uBzpUDN8as0XPBP5I6x/uJQMyh1
LTPaIDgneA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:47 2024 by rpki-client on console-ams.rpki-client.org