Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/iW1Uuqr-Sec9aQDmSw6mQgDbg_k.roa
File: iW1Uuqr-Sec9aQDmSw6mQgDbg_k.roa (raw, json)
Hash identifier: xVLge/WI5yXApYWHxRDjq/C+U8e1kxnUwjbz5W6bVA4=
Subject key identifier: 89:6D:54:BA:AA:FE:49:E7:3D:69:00:E6:4B:0E:A6:42:00:DB:83:F9
Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial: 01831C2FE106252293610B6E6A4EA0373E82
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/iW1Uuqr-Sec9aQDmSw6mQgDbg_k.roa
Signing time: Thu 08 Sep 2022 08:20:43 +0000
ROA not before: Thu 08 Sep 2022 08:20:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211106
IP address blocks: 85.88.58.0/24 maxlen: 24
85.88.63.0/24 maxlen: 24
85.88.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:2f:e1:06:25:22:93:61:0b:6e:6a:4e:a0:37:3e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
Validity
Not Before: Sep 8 08:20:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=896d54baaafe49e73d6900e64b0ea64200db83f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:f9:6d:5a:24:09:ff:3a:01:54:80:b5:b9:
88:b0:b6:8d:fc:7a:ae:c0:53:b3:63:db:b6:82:e8:
a7:6b:fd:f0:d8:57:6f:e6:f0:81:bf:9f:01:29:0d:
bb:e4:42:a6:01:23:cf:d3:fe:33:da:f0:2e:32:60:
5d:b3:c9:7d:4d:f4:6f:70:64:bd:ec:b5:40:38:d1:
ad:73:45:fe:5b:5b:d3:a2:4c:51:e4:a9:ae:a7:2b:
86:7e:c5:10:a4:dc:79:5d:d7:dc:6a:3c:ec:01:0c:
72:b1:a8:2d:5f:d3:06:88:2e:25:ef:16:36:2e:aa:
02:1e:49:a7:a0:e2:5d:f0:ba:d0:1d:8b:ad:f3:80:
57:df:5b:df:0c:f0:0c:78:19:f2:1e:47:b3:77:f7:
92:09:16:c0:c2:9c:54:c3:b7:c8:1f:fd:e7:11:07:
4d:9f:f0:e5:f0:9a:c9:69:70:cc:00:6c:39:3c:80:
f8:f6:bb:2c:2c:a1:b1:35:4a:3c:d4:ad:84:84:87:
33:56:7a:13:cd:0d:7a:5d:5a:35:73:47:ad:0b:6d:
93:27:92:b0:e6:dc:8b:cf:c5:18:22:40:c2:a5:fd:
fa:dd:11:63:27:58:88:88:53:2b:6b:f3:39:cd:b8:
f0:63:e6:10:c0:70:7a:af:fd:33:6a:80:df:60:2a:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6D:54:BA:AA:FE:49:E7:3D:69:00:E6:4B:0E:A6:42:00:DB:83:F9
X509v3 Authority Key Identifier:
keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/iW1Uuqr-Sec9aQDmSw6mQgDbg_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.88.58.0/23
85.88.63.0/24
Signature Algorithm: sha256WithRSAEncryption
06:4f:9c:80:b1:1d:89:85:65:92:bd:fa:81:ea:50:40:82:4e:
e4:4c:87:43:4e:fe:2c:ed:44:c5:79:28:eb:68:5c:66:5f:d9:
15:54:2a:e9:d4:f0:7f:c3:61:ff:53:4f:54:5f:c8:a8:90:a2:
92:e2:af:d2:e9:89:c2:59:e5:2d:fd:13:ca:5f:47:30:09:d2:
3c:6d:46:44:97:fa:af:42:9d:ff:fd:b3:b3:e5:75:d3:89:f5:
31:13:27:29:b2:a4:75:2d:75:bd:7f:88:d6:7e:33:a8:d7:e7:
a7:f4:82:04:67:d4:81:10:51:47:c1:64:47:fc:b3:b2:fa:20:
35:8f:45:5d:f3:e1:82:2f:6c:55:9f:f0:d8:6d:cd:77:3b:be:
2b:80:5a:3c:cf:24:af:de:ac:71:c5:02:df:57:2d:ad:06:ce:
b4:1f:bf:c3:31:c2:4f:d9:d1:db:ec:41:1a:03:99:84:7f:f6:
4a:fb:0a:f2:56:03:24:96:85:92:50:e7:f9:07:34:56:1a:45:
9a:ab:f3:a6:f8:c2:c0:1a:cb:6e:f4:56:20:bc:81:1c:db:48:
77:22:69:a6:20:eb:d2:e9:a9:f5:9e:54:af:e4:41:d7:5f:8c:
f9:98:f4:ba:4e:59:7e:a6:4f:aa:e7:e4:91:cf:86:e5:af:a7:
96:10:a5:8d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYMcL+EGJSKTYQtuak6gNz6CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx
NWQwNzMwHhcNMjIwOTA4MDgyMDQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTZkNTRiYWFhZmU0OWU3M2Q2OTAwZTY0YjBlYTY0MjAwZGI4M2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb35bVokCf86AVSAtbmIsLaN/Hqu
wFOzY9u2guina/3w2Fdv5vCBv58BKQ275EKmASPP0/4z2vAuMmBds8l9TfRvcGS9
7LVAONGtc0X+W1vTokxR5KmupyuGfsUQpNx5XdfcajzsAQxysagtX9MGiC4l7xY2
LqoCHkmnoOJd8LrQHYut84BX31vfDPAMeBnyHkezd/eSCRbAwpxUw7fIH/3nEQdN
n/Dl8JrJaXDMAGw5PID49rssLKGxNUo81K2EhIczVnoTzQ16XVo1c0etC22TJ5Kw
5tyLz8UYIkDCpf363RFjJ1iIiFMra/M5zbjwY+YQwHB6r/0zaoDfYCpwBwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIltVLqq/knnPWkA5ksOpkIA24P5MB8GA1UdIwQY
MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt
ZWQxZjMwY2MxYzU3LzEvaVcxVXVxci1TZWM5YVFEbVN3Nm1RZ0RiZ19rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3
LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBVVg6AwQA
VVg/MA0GCSqGSIb3DQEBCwUAA4IBAQAGT5yAsR2JhWWSvfqB6lBAgk7kTIdDTv4s
7UTFeSjraFxmX9kVVCrp1PB/w2H/U09UX8iokKKS4q/S6YnCWeUt/RPKX0cwCdI8
bUZEl/qvQp3//bOz5XXTifUxEycpsqR1LXW9f4jWfjOo1+en9IIEZ9SBEFFHwWRH
/LOy+iA1j0Vd8+GCL2xVn/DYbc13O74rgFo8zySv3qxxxQLfVy2tBs60H7/DMcJP
2dHb7EEaA5mEf/ZK+wryVgMkloWSUOf5BzRWGkWaq/Om+MLAGstu9FYgvIEc20h3
ImmmIOvS6an1nlSv5EHXX4z5mPS6Tll+pk+q5+SRz4blr6eWEKWN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:29 2024 by rpki-client on console-fra.rpki-client.org