Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/AtB_cn5icrKT16RAydd3JiBRWG0.roa
File: AtB_cn5icrKT16RAydd3JiBRWG0.roa (raw, json)
Hash identifier: 1S+LyPt4pjO5gNMfbat590qyfwUmtLcSXNF3+Hx15V0=
Subject key identifier: 02:D0:7F:72:7E:62:72:B2:93:D7:A4:40:C9:D7:77:26:20:51:58:6D
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 0182D3E156BE675190E46DC7CAF7A6880AD0
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/AtB_cn5icrKT16RAydd3JiBRWG0.roa
Signing time: Thu 25 Aug 2022 07:22:16 +0000
ROA not before: Thu 25 Aug 2022 07:22:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61976
IP address blocks: 79.141.65.0/24 maxlen: 24
79.141.66.0/24 maxlen: 24
185.193.90.0/23 maxlen: 23
79.141.64.0/20 maxlen: 20
79.141.64.0/24 maxlen: 24
2a00:ab00:6000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d3:e1:56:be:67:51:90:e4:6d:c7:ca:f7:a6:88:0a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Aug 25 07:22:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02d07f727e6272b293d7a440c9d777262051586d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:e0:41:c1:9c:3b:1c:ab:4b:21:1a:67:4e:
a0:47:7a:2b:b7:20:06:86:74:1a:43:cc:62:a3:37:
d2:6d:5c:22:e3:8d:b5:9c:1a:37:1b:d3:0a:fe:37:
7f:ec:bf:1b:cd:a7:d1:5a:4d:94:77:fd:b5:43:60:
7a:50:05:37:31:ec:7f:8d:ff:30:e3:5d:99:e2:f0:
b1:2e:c6:76:f0:d1:85:d6:b4:90:ea:06:b1:2f:7d:
ea:3c:27:11:a9:69:98:ce:4b:85:51:55:02:39:04:
86:73:a9:06:36:de:9a:5f:9b:f2:f3:db:8c:b1:35:
a3:79:98:bf:a1:1a:7c:ad:6f:96:2c:6c:48:13:98:
83:ce:53:34:87:08:a1:4f:54:6b:48:7a:a6:ee:18:
c3:ba:f2:4e:75:33:52:bd:8f:11:da:97:49:fb:75:
cb:80:eb:fb:e3:61:a8:25:25:15:53:df:b6:5e:ba:
39:b6:4a:c8:a9:cd:84:01:6a:51:79:43:f0:54:38:
7e:d0:53:03:24:88:80:f7:f0:76:46:b6:b8:90:7a:
4a:26:fe:c0:de:32:11:69:41:f0:42:c3:f6:e8:6b:
97:be:5d:03:8c:ac:48:19:2f:7f:c2:ed:42:1c:88:
2e:6f:63:a9:7d:6c:e1:ad:3f:5d:f6:b7:dd:c3:93:
3a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D0:7F:72:7E:62:72:B2:93:D7:A4:40:C9:D7:77:26:20:51:58:6D
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/AtB_cn5icrKT16RAydd3JiBRWG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.64.0/20
185.193.90.0/23
IPv6:
2a00:ab00:6000::/36
Signature Algorithm: sha256WithRSAEncryption
59:28:cb:ce:4e:52:75:38:1c:7a:76:26:b8:e1:6b:ad:37:d0:
d1:61:9c:e4:50:b6:c5:c5:4b:76:1e:27:0c:ef:fe:ca:c4:76:
3b:2f:68:7a:04:a0:3c:89:ee:2f:f5:80:09:2e:ab:c5:48:7b:
0d:cf:67:78:19:12:19:43:91:33:d0:17:12:29:8b:56:66:17:
d3:10:8b:c8:b8:d4:a1:2f:16:57:82:0e:80:e4:30:cb:73:0b:
55:55:b6:a4:ca:e4:20:d8:da:95:30:a5:39:37:96:a5:5c:58:
e3:d8:37:95:8c:7e:dd:5f:54:97:22:67:c7:31:ee:3b:24:ec:
49:09:4a:63:ce:8b:92:63:9d:82:ca:c8:95:c6:bb:8b:74:7d:
f3:ed:a4:67:98:63:bb:f6:c7:b7:f6:40:d8:3d:5d:a5:40:86:
85:bd:d6:46:7b:c1:1a:18:1d:69:80:ec:3d:0d:87:6a:39:26:
9d:c9:d8:10:b9:db:f7:08:95:79:3f:8e:b6:bc:03:61:05:41:
41:9b:0f:83:b5:f2:c9:83:43:93:f6:71:01:f0:74:c7:7b:85:
a6:32:29:13:97:82:80:34:62:7b:1f:fb:be:80:66:4b:48:32:
ff:a1:34:d5:dc:8a:e4:ea:ec:dc:83:76:83:e1:56:2c:ba:b1:
cf:6e:2f:23
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYLT4Va+Z1GQ5G3HyvemiArQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYjY5YjU5ZDE5ZjI5ODdlNDlmMTg1MmQ2MGJiMTc3N2Y4
MGEzMDEwHhcNMjIwODI1MDcyMjE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmQwN2Y3MjdlNjI3MmIyOTNkN2E0NDBjOWQ3NzcyNjIwNTE1ODZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIHgQcGcOxyrSyEaZ06gR3ortyAG
hnQaQ8xiozfSbVwi4421nBo3G9MK/jd/7L8bzafRWk2Ud/21Q2B6UAU3Mex/jf8w
412Z4vCxLsZ28NGF1rSQ6gaxL33qPCcRqWmYzkuFUVUCOQSGc6kGNt6aX5vy89uM
sTWjeZi/oRp8rW+WLGxIE5iDzlM0hwihT1RrSHqm7hjDuvJOdTNSvY8R2pdJ+3XL
gOv742GoJSUVU9+2Xro5tkrIqc2EAWpReUPwVDh+0FMDJIiA9/B2Rra4kHpKJv7A
3jIRaUHwQsP26GuXvl0DjKxIGS9/wu1CHIgub2OpfWzhrT9d9rfdw5M6qQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFALQf3J+YnKyk9ekQMnXdyYgUVhtMB8GA1UdIwQY
MBaAFBG2m1nRnymH5J8YUtYLsXd/gKMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTIt
ZDE2OWMwODhiNDEyLzEvQXRCX2NuNWljcktUMTZSQXlkZDNKaUJSV0cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTItZDE2OWMwODhiNDEy
LzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQET41AAwQB
ucFaMA4EAgACMAgDBgQqAKsAYDANBgkqhkiG9w0BAQsFAAOCAQEAWSjLzk5SdTgc
enYmuOFrrTfQ0WGc5FC2xcVLdh4nDO/+ysR2Oy9oegSgPInuL/WACS6rxUh7Dc9n
eBkSGUORM9AXEimLVmYX0xCLyLjUoS8WV4IOgOQwy3MLVVW2pMrkINjalTClOTeW
pVxY49g3lYx+3V9UlyJnxzHuOyTsSQlKY86LkmOdgsrIlca7i3R98+2kZ5hju/bH
t/ZA2D1dpUCGhb3WRnvBGhgdaYDsPQ2HajkmncnYELnb9wiVeT+OtrwDYQVBQZsP
g7XyyYNDk/ZxAfB0x3uFpjIpE5eCgDRiex/7voBmS0gy/6E01dyK5Ors3IN2g+FW
LLqxz24vIw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:36 2024 by rpki-client on console-fra.rpki-client.org