Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/Y9TCjMKniRYY3kY1LqUZ07Akjg8.roa
File: Y9TCjMKniRYY3kY1LqUZ07Akjg8.roa (raw, json)
Hash identifier: z3Gt1FI8YhsShXNvofoedcPJ8UUwbSmaGn4kHhHhctA=
Subject key identifier: 63:D4:C2:8C:C2:A7:89:16:18:DE:46:35:2E:A5:19:D3:B0:24:8E:0F
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 447DF467
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/Y9TCjMKniRYY3kY1LqUZ07Akjg8.roa
Signing time: Sat 01 Jan 2022 11:01:01 +0000
ROA not before: Sat 01 Jan 2022 11:01:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33854
IP address blocks: 194.150.253.0/24 maxlen: 24
194.150.252.0/24 maxlen: 24
217.172.128.0/20 maxlen: 24
92.60.96.0/20 maxlen: 24
80.93.170.0/24 maxlen: 24
2a00:1a90::/32 maxlen: 34
2a00:1a90:8000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149105255 (0x447df467)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Jan 1 11:01:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63d4c28cc2a7891618de46352ea519d3b0248e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:73:e8:a5:f3:4d:ec:c5:74:52:e3:f7:49:
ef:80:f9:44:14:0d:cb:e8:dd:33:58:6c:35:d7:23:
d5:1e:4b:55:02:b2:58:a3:bf:9b:fd:ae:b4:36:45:
db:57:82:09:03:79:ab:ce:6e:f7:0d:47:30:12:27:
0b:b4:1e:d4:9b:55:c8:b4:eb:c5:39:82:1c:31:0e:
02:6a:ac:e0:93:34:7d:eb:2d:de:e6:bf:ba:83:ca:
23:40:3b:92:63:04:ef:50:84:a8:14:ed:73:eb:6e:
35:a6:8b:f7:3d:7d:7c:f3:7d:d7:25:1c:2c:dc:d9:
fc:01:07:b8:27:48:29:fc:ed:13:00:d8:5b:c1:df:
2c:48:44:7c:4f:d9:23:72:dc:e6:d8:3a:e1:02:d0:
1f:e0:0f:da:d0:f6:00:ea:0d:b0:aa:1e:bd:d6:47:
44:0d:13:41:64:dd:c3:7a:8c:34:81:e5:35:dd:56:
ef:08:5f:0b:ec:ce:e1:7a:c5:ae:a6:15:f0:14:ef:
53:df:05:b5:ac:6b:bc:36:7d:66:2f:fd:5e:b5:cc:
dc:81:6c:01:27:d0:45:8d:f7:82:66:50:fd:ae:bf:
6d:c7:f8:22:37:0e:0a:af:9e:17:04:7a:c2:c4:0a:
98:32:d4:bb:0a:51:a5:bc:30:ad:df:f2:37:cd:bc:
a7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D4:C2:8C:C2:A7:89:16:18:DE:46:35:2E:A5:19:D3:B0:24:8E:0F
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/Y9TCjMKniRYY3kY1LqUZ07Akjg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.170.0/24
92.60.96.0/20
194.150.252.0/23
217.172.128.0/20
IPv6:
2a00:1a90::/32
Signature Algorithm: sha256WithRSAEncryption
46:74:a8:34:2f:a6:b9:0c:17:8b:c4:62:d7:6b:e6:0d:58:0d:
84:b0:d0:f2:fa:86:de:bf:f7:e4:96:ca:2b:4a:c7:7d:12:a0:
59:d0:39:ce:0c:2c:45:68:23:29:fe:ea:75:33:69:f6:ec:2c:
75:db:33:54:83:1a:5d:21:cc:7a:af:f6:2a:63:a5:00:93:b1:
87:df:c8:47:76:5d:06:2a:0e:3d:5e:97:19:e3:89:f2:e7:e7:
ee:c4:50:9c:93:19:7a:dc:aa:a2:44:f3:4f:ae:c6:82:c6:98:
46:2e:41:7b:29:8f:02:db:fc:e1:60:2a:b2:d2:a8:9c:fd:15:
fc:5c:74:1c:ea:ac:5c:11:c9:d3:8a:fb:4e:23:16:50:86:be:
ed:83:e2:3d:da:94:de:63:26:19:5d:4b:e3:8f:1a:2c:73:ae:
6f:55:3a:81:27:75:01:90:07:00:19:9c:35:98:85:7a:41:db:
1a:92:29:c5:ae:da:8b:39:02:02:6d:9a:9b:7e:8c:dd:08:08:
49:dc:27:d6:76:86:7a:16:0a:99:f4:6f:f6:3e:25:d0:db:97:
52:6c:8c:b1:64:32:b4:9a:72:42:cd:36:24:de:6e:85:f2:7a:
df:f8:b9:16:7e:5d:9c:af:7e:28:00:f2:27:5b:e0:66:c9:c8:
a8:b4:f8:1c
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIERH30ZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YmUwY2E3YzFlMGU4YTFjN2FkMDJkMGJiODI4YjQxMTg4YWU1MjQzMB4XDTIyMDEw
MTExMDEwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjNkNGMyOGNjMmE3
ODkxNjE4ZGU0NjM1MmVhNTE5ZDNiMDI0OGUwZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK04c+il803sxXRS4/dJ74D5RBQNy+jdM1hsNdcj1R5LVQKy
WKO/m/2utDZF21eCCQN5q85u9w1HMBInC7Qe1JtVyLTrxTmCHDEOAmqs4JM0fest
3ua/uoPKI0A7kmME71CEqBTtc+tuNaaL9z19fPN91yUcLNzZ/AEHuCdIKfztEwDY
W8HfLEhEfE/ZI3Lc5tg64QLQH+AP2tD2AOoNsKoevdZHRA0TQWTdw3qMNIHlNd1W
7whfC+zO4XrFrqYV8BTvU98FtaxrvDZ9Zi/9XrXM3IFsASfQRY33gmZQ/a6/bcf4
IjcOCq+eFwR6wsQKmDLUuwpRpbwwrd/yN828p70CAwEAAaOCAiowggImMB0GA1Ud
DgQWBBRj1MKMwqeJFhjeRjUupRnTsCSODzAfBgNVHSMEGDAWgBTb4Mp8Hg6KHHrQ
LQu4KLQRiK5SQzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzItREtmQjRPaWh4NjBDMEx1Q2kwRVlpdVVrTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTUvZjNjOGU4LWM1YmMtNDIxMS1hOWFjLTRmOTExMmVkZTk2OC8x
L1k5VENqTUtuaVJZWTNrWTFMcVVaMDdBa2pnOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUv
ZjNjOGU4LWM1YmMtNDIxMS1hOWFjLTRmOTExMmVkZTk2OC8xLzItREtmQjRPaWh4
NjBDMEx1Q2kwRVlpdVVrTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAFBdqgMEBFw8YAMEAcKW/AMEBNms
gDANBAIAAjAHAwUAKgAakDANBgkqhkiG9w0BAQsFAAOCAQEARnSoNC+muQwXi8Ri
12vmDVgNhLDQ8vqG3r/35JbKK0rHfRKgWdA5zgwsRWgjKf7qdTNp9uwsddszVIMa
XSHMeq/2KmOlAJOxh9/IR3ZdBioOPV6XGeOJ8ufn7sRQnJMZetyqokTzT67GgsaY
Ri5BeymPAtv84WAqstKonP0V/Fx0HOqsXBHJ04r7TiMWUIa+7YPiPdqU3mMmGV1L
448aLHOub1U6gSd1AZAHABmcNZiFekHbGpIpxa7aizkCAm2am36M3QgISdwn1naG
ehYKmfRv9j4l0NuXUmyMsWQytJpyQs02JN5uhfJ63/i5Fn5dnK9+KADyJ1vgZsnI
qLT4HA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:18 2023 by rpki-client on console-ams.rpki-client.org