Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/yNr1CD1PN6w4FIGw0_hEcf08bdM.roa
File: yNr1CD1PN6w4FIGw0_hEcf08bdM.roa (raw, json)
Hash identifier: OdUBYOeqb1JqgK8y6ZDPwdwpRImkUmcpA0OoGxXrhT0=
Subject key identifier: C8:DA:F5:08:3D:4F:37:AC:38:14:81:B0:D3:F8:44:71:FD:3C:6D:D3
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 0183BB9F962E8975C379A8E1E8E7E86C251C
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/yNr1CD1PN6w4FIGw0_hEcf08bdM.roa
Signing time: Sun 09 Oct 2022 07:22:21 +0000
ROA not before: Sun 09 Oct 2022 07:22:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204650
IP address blocks: 185.201.51.0/24 maxlen: 24
185.201.48.0/24 maxlen: 24
185.201.49.0/24 maxlen: 24
185.82.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:bb:9f:96:2e:89:75:c3:79:a8:e1:e8:e7:e8:6c:25:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Oct 9 07:22:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8daf5083d4f37ac381481b0d3f84471fd3c6dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:ab:40:3b:ac:1d:fe:b4:c7:a4:f4:5b:9a:
a3:e8:2c:d8:65:39:a7:9d:82:1f:77:72:9f:d5:8d:
a0:36:57:f6:32:5d:11:6f:2e:70:ec:5a:a2:04:0e:
e9:62:32:16:64:96:4c:92:a9:a8:ad:1d:b6:50:c2:
6e:c5:5b:7d:19:79:a3:0d:97:27:7f:4c:55:e1:86:
ad:29:9b:c1:b2:60:e5:e5:50:21:75:58:89:f9:df:
32:23:34:d1:6d:46:b0:58:f1:0b:d6:0b:98:00:70:
87:9e:99:26:10:12:ca:20:d0:ad:56:bf:d2:77:c8:
cb:c5:b1:50:45:c5:20:70:e3:62:a8:25:1d:eb:b2:
ba:0b:78:82:81:18:76:69:2c:0b:9c:1a:e2:c6:08:
d6:44:6d:c8:01:86:51:2c:f9:81:35:8c:a4:73:ee:
9e:b9:5d:b9:41:85:9c:20:87:ed:c7:b9:3e:b1:20:
dc:c8:ba:f8:12:71:de:fc:90:0f:5f:99:1c:ab:2d:
ac:c8:c6:91:e5:b6:ba:a5:0e:a6:98:22:40:0b:3d:
f8:b9:31:e9:cb:cf:ad:33:1f:86:8f:c1:26:ff:fa:
03:09:fe:94:a4:c7:01:aa:05:99:be:cc:7e:3e:66:
ec:d4:2a:7a:37:f4:b0:39:9e:9a:49:22:52:d2:8c:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DA:F5:08:3D:4F:37:AC:38:14:81:B0:D3:F8:44:71:FD:3C:6D:D3
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/yNr1CD1PN6w4FIGw0_hEcf08bdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.136.0/22
185.201.48.0/23
185.201.51.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ad:41:f9:51:b9:c4:7a:dd:14:07:d2:4f:68:6e:e3:a8:81:
8b:33:e6:9c:7c:20:9a:0e:5d:34:4d:4d:65:61:16:2a:b7:43:
ed:48:35:8a:e6:7d:7c:86:88:be:58:aa:0e:8d:fb:d9:16:26:
ff:53:1f:53:90:83:fa:84:b4:ea:8f:23:93:c6:cb:23:8e:44:
f3:a0:4c:cb:50:8c:28:d1:41:2c:54:39:21:b5:c1:d1:6d:70:
79:21:eb:5a:8e:ae:cd:9b:a2:cf:d3:16:a6:21:80:52:3b:df:
3d:08:ba:af:e6:b8:fc:04:b9:22:3f:35:ce:d3:c0:73:32:a4:
d4:7c:b6:b1:79:72:f6:03:b5:e9:f4:7c:ea:b2:2c:6f:22:b4:
a2:93:e1:5d:e0:c4:90:33:c0:fb:15:81:7b:cb:95:65:96:de:
7b:7d:11:b7:63:db:d7:96:18:64:9f:84:96:c4:e6:a9:37:d4:
32:74:aa:ad:22:ea:59:2c:de:36:b7:d6:d0:98:2d:cc:f6:76:
8f:18:7b:4f:1a:07:bd:0d:8e:9a:4f:78:8a:44:db:73:10:72:
b2:40:23:65:01:1b:fa:b6:08:ce:09:92:d5:96:06:51:06:0b:
06:94:29:f2:90:15:eb:cc:16:ba:d4:13:55:fa:a1:c7:ba:1d:
92:d7:2c:98
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYO7n5YuiXXDeajh6OfobCUcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNTI2NjQzNTYxN2ZhMGYxZmQyODM3ZWM4MGM2ZDgzYjBi
OWQ2MDgwHhcNMjIxMDA5MDcyMjIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGRhZjUwODNkNGYzN2FjMzgxNDgxYjBkM2Y4NDQ3MWZkM2M2ZGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbSrQDusHf60x6T0W5qj6CzYZTmn
nYIfd3Kf1Y2gNlf2Ml0Rby5w7FqiBA7pYjIWZJZMkqmorR22UMJuxVt9GXmjDZcn
f0xV4YatKZvBsmDl5VAhdViJ+d8yIzTRbUawWPEL1guYAHCHnpkmEBLKINCtVr/S
d8jLxbFQRcUgcONiqCUd67K6C3iCgRh2aSwLnBrixgjWRG3IAYZRLPmBNYykc+6e
uV25QYWcIIftx7k+sSDcyLr4EnHe/JAPX5kcqy2syMaR5ba6pQ6mmCJACz34uTHp
y8+tMx+Gj8Em//oDCf6UpMcBqgWZvsx+Pmbs1Cp6N/SwOZ6aSSJS0owR9wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMja9Qg9TzesOBSBsNP4RHH9PG3TMB8GA1UdIwQY
MBaAFCFSZkNWF/oPH9KDfsgMbYOwudYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzIt
YmM5M2NhNjc5ZTFmLzEveU5yMUNEMVBONnc0RklHdzBfaEVjZjA4YmRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzItYmM5M2NhNjc5ZTFm
LzEvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuVKIAwQB
uckwAwQAuckzMA0GCSqGSIb3DQEBCwUAA4IBAQB5rUH5UbnEet0UB9JPaG7jqIGL
M+acfCCaDl00TU1lYRYqt0PtSDWK5n18hoi+WKoOjfvZFib/Ux9TkIP6hLTqjyOT
xssjjkTzoEzLUIwo0UEsVDkhtcHRbXB5Ietajq7Nm6LP0xamIYBSO989CLqv5rj8
BLkiPzXO08BzMqTUfLaxeXL2A7Xp9HzqsixvIrSik+Fd4MSQM8D7FYF7y5Vllt57
fRG3Y9vXlhhkn4SWxOapN9QydKqtIupZLN42t9bQmC3M9naPGHtPGge9DY6aT3iK
RNtzEHKyQCNlARv6tgjOCZLVlgZRBgsGlCnykBXrzBa61BNV+qHHuh2S1yyY
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:03 2023 by rpki-client on console-fra.rpki-client.org