Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/HdI9yMrV0wzfkkkQZYbk_CYR0Js.roa
File: HdI9yMrV0wzfkkkQZYbk_CYR0Js.roa (raw, json)
Hash identifier: +oczm87UAnUI8C8KNcaiJ8YuGYkXOlksJn088RqDLIc=
Subject key identifier: 1D:D2:3D:C8:CA:D5:D3:0C:DF:92:49:10:65:86:E4:FC:26:11:D0:9B
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 01850523449E3FDB712C8FA69E0CBB2605D6
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/HdI9yMrV0wzfkkkQZYbk_CYR0Js.roa
Signing time: Mon 12 Dec 2022 07:01:15 +0000
ROA not before: Mon 12 Dec 2022 07:01:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61333
IP address blocks: 94.228.108.0/24 maxlen: 24
94.228.110.0/24 maxlen: 24
185.251.52.0/24 maxlen: 24
185.251.54.0/24 maxlen: 24
185.251.53.0/24 maxlen: 24
94.228.96.0/24 maxlen: 24
94.228.96.0/20 maxlen: 24
94.228.98.0/24 maxlen: 24
94.228.100.0/24 maxlen: 24
94.228.104.0/24 maxlen: 24
94.228.105.0/24 maxlen: 24
149.126.64.0/24 maxlen: 24
149.126.64.0/21 maxlen: 24
149.126.65.0/24 maxlen: 24
149.126.67.0/24 maxlen: 24
149.126.66.0/24 maxlen: 24
149.126.70.0/24 maxlen: 24
194.169.198.0/24 maxlen: 24
193.200.249.0/24 maxlen: 24
2a00:e30:a00::/40 maxlen: 48
2a00:e30:ed00::/41 maxlen: 48
2a00:e30:6900::/41 maxlen: 41
2a00:e30:3000::/41 maxlen: 41
2a00:e30:2100::/41 maxlen: 41
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:23:44:9e:3f:db:71:2c:8f:a6:9e:0c:bb:26:05:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Dec 12 07:01:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1dd23dc8cad5d30cdf9249106586e4fc2611d09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:54:f5:07:9e:b0:40:91:3f:af:3d:81:ca:
ad:7f:da:1a:34:08:e2:97:b5:e0:4c:f4:1b:5f:2f:
aa:4c:bf:4d:03:82:36:56:11:d6:83:f9:f2:81:06:
c7:cf:63:72:fc:74:81:8e:c6:db:3c:bf:39:60:75:
0c:ec:84:c4:85:b2:e6:23:86:cc:2f:5d:68:c0:fc:
b8:b5:67:ad:00:1d:74:f3:79:10:18:5b:4f:ab:25:
72:bd:a8:99:61:49:22:56:e5:d7:82:b2:3c:94:d3:
25:ed:39:33:17:6c:36:9f:05:aa:cd:9b:72:95:5c:
bf:52:ad:f3:34:54:4e:70:38:1b:d7:f3:1d:c9:0f:
3d:bd:5a:5a:de:63:8e:db:00:fa:41:fe:10:06:f4:
17:f0:b3:2e:51:23:0f:07:e8:26:d0:71:f5:07:05:
f2:4f:09:e5:5c:cc:a3:f0:77:d3:f7:a6:bc:35:e2:
f6:e2:7d:9a:16:55:49:0e:29:4e:2d:96:a0:62:52:
08:f3:7d:83:81:dc:fd:74:dd:e5:c9:a7:5c:15:5b:
94:01:12:7b:f6:d8:6d:0c:21:a6:c2:9c:18:c0:ad:
56:b1:e7:58:5b:5a:1e:1c:3b:fe:19:b2:d7:55:42:
be:2d:d2:a2:90:4d:f7:d6:4f:f4:60:80:e6:90:f5:
4a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D2:3D:C8:CA:D5:D3:0C:DF:92:49:10:65:86:E4:FC:26:11:D0:9B
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/HdI9yMrV0wzfkkkQZYbk_CYR0Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.96.0/20
149.126.64.0/21
185.251.52.0-185.251.54.255
193.200.249.0/24
194.169.198.0/24
IPv6:
2a00:e30:a00::/40
2a00:e30:2100::/41
2a00:e30:3000::/41
2a00:e30:6900::/41
2a00:e30:ed00::/41
Signature Algorithm: sha256WithRSAEncryption
29:d8:64:8b:15:91:1f:87:1e:fb:85:6a:b0:a9:8a:01:12:8d:
df:c0:19:35:00:58:88:4a:76:06:de:4d:72:0c:4b:ae:56:e4:
21:1d:9c:1f:4c:9a:d1:c6:4c:d0:a5:bf:11:33:f8:82:0e:2b:
0a:3c:87:e1:3f:68:17:c0:5a:4a:d4:9d:a1:21:79:4f:85:88:
38:db:f4:93:d4:11:dd:c1:52:74:81:1d:14:9f:15:aa:01:7e:
85:76:86:bd:46:76:7a:b5:1f:5c:77:c7:b8:d2:54:0f:72:c3:
89:05:35:da:15:23:6a:fe:a1:dd:d6:ed:f4:01:f9:68:a4:7b:
55:e0:20:c3:73:4c:44:db:dc:2c:f3:b3:a2:20:38:59:db:70:
b4:9a:e5:78:5d:89:b9:e0:a5:32:61:80:c0:e7:eb:e6:f1:11:
a1:db:64:21:b9:a9:38:57:e1:71:38:48:f7:3f:0d:df:4e:7d:
96:70:b2:09:7b:eb:0a:49:5e:e9:bf:fc:85:da:62:bd:6b:72:
1e:da:f5:63:38:3a:5b:2f:c1:f1:de:15:52:0a:92:05:02:26:
b5:99:27:00:86:d7:a8:9f:19:ef:78:34:d7:e6:df:7d:5b:32:
42:43:9a:54:4c:ca:56:81:10:63:4c:b2:bb:6a:9e:d2:91:f2:
73:c7:77:00
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAYUFI0SeP9txLI+mngy7JgXWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMzUyNmFkOWZiZWM1NzRmYTRlYzNkOWJhZGI1NDMzZmRh
YWNhN2IwHhcNMjIxMjEyMDcwMTE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGQyM2RjOGNhZDVkMzBjZGY5MjQ5MTA2NTg2ZTRmYzI2MTFkMDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRZU9QeesECRP689gcqtf9oaNAji
l7XgTPQbXy+qTL9NA4I2VhHWg/nygQbHz2Ny/HSBjsbbPL85YHUM7ITEhbLmI4bM
L11owPy4tWetAB1083kQGFtPqyVyvaiZYUkiVuXXgrI8lNMl7TkzF2w2nwWqzZty
lVy/Uq3zNFROcDgb1/MdyQ89vVpa3mOO2wD6Qf4QBvQX8LMuUSMPB+gm0HH1BwXy
TwnlXMyj8HfT96a8NeL24n2aFlVJDilOLZagYlII832Dgdz9dN3lyadcFVuUARJ7
9thtDCGmwpwYwK1WsedYW1oeHDv+GbLXVUK+LdKikE331k/0YIDmkPVKcQIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFB3SPcjK1dMM35JJEGWG5PwmEdCbMB8GA1UdIwQY
MBaAFGI1Jq2fvsV0+k7D2brbVDP9qsp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2Yt
ODFjOGNlNzUwMTI0LzEvSGRJOXlNclYwd3pma2trUVpZYmtfQ1lSMEpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2YtODFjOGNlNzUwMTI0
LzEvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjAsBAIAATAmAwQEXuRgAwQD
lX5AMAwDBAK5+zQDBAC5+zYDBADByPkDBADCqcYwMgQCAAIwLAMGACoADjAKAwcH
KgAOMCEAAwcHKgAOMDAAAwcHKgAOMGkAAwcHKgAOMO0AMA0GCSqGSIb3DQEBCwUA
A4IBAQAp2GSLFZEfhx77hWqwqYoBEo3fwBk1AFiISnYG3k1yDEuuVuQhHZwfTJrR
xkzQpb8RM/iCDisKPIfhP2gXwFpK1J2hIXlPhYg42/ST1BHdwVJ0gR0UnxWqAX6F
doa9RnZ6tR9cd8e40lQPcsOJBTXaFSNq/qHd1u30AflopHtV4CDDc0xE29ws87Oi
IDhZ23C0muV4XYm54KUyYYDA5+vm8RGh22Qhuak4V+FxOEj3Pw3fTn2WcLIJe+sK
SV7pv/yF2mK9a3Ie2vVjODpbL8Hx3hVSCpIFAia1mScAhteonxnveDTX5t99WzJC
Q5pUTMpWgRBjTLK7ap7SkfJzx3cA
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:01 2024 by rpki-client on console-ams.rpki-client.org