Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/8VUI3sVhuFZ2nO96420SCx2x1GQ.roa
File: 8VUI3sVhuFZ2nO96420SCx2x1GQ.roa (raw, json)
Hash identifier: cL6/uhwNlswopjUJasVJeRycaKffRsUUFyt3ZEgG4Fo=
Subject key identifier: F1:55:08:DE:C5:61:B8:56:76:9C:EF:7A:E3:6D:12:0B:1D:B1:D4:64
Certificate issuer: /CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Certificate serial: 043BF9CD
Authority key identifier: 88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/8VUI3sVhuFZ2nO96420SCx2x1GQ.roa
Signing time: Sat 01 Jan 2022 00:53:37 +0000
ROA not before: Sat 01 Jan 2022 00:53:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61964
IP address blocks: 185.199.11.0/24 maxlen: 24
80.244.33.0/24 maxlen: 24
80.244.32.0/24 maxlen: 24
80.244.39.0/24 maxlen: 24
185.17.202.0/24 maxlen: 24
2a0a:9741::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71039437 (0x43bf9cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Validity
Not Before: Jan 1 00:53:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f15508dec561b856769cef7ae36d120b1db1d464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:6e:85:db:a7:ec:66:4d:21:ae:3e:c7:fa:
07:b8:6f:12:74:c1:e9:70:e0:fd:1b:1e:0e:37:88:
9f:53:08:15:7c:2b:5f:85:f4:b1:6f:7b:bd:a4:01:
86:ba:63:71:de:2a:3a:34:55:03:9f:08:44:ae:c1:
5d:e7:e2:5d:66:19:84:7b:8e:51:d7:72:60:7d:c8:
2d:73:1c:7d:50:70:a1:5c:3f:2a:67:fb:de:cb:71:
3a:f6:f5:ea:61:9b:dc:7b:f4:26:2e:f2:14:13:9f:
e0:28:87:19:a2:13:a4:2a:ec:0d:88:77:10:3e:92:
79:9d:fb:a0:1d:56:fe:01:f2:e3:6f:89:ba:69:40:
94:70:11:06:6a:08:48:89:ac:86:1b:fd:a1:c1:79:
53:80:28:45:5e:1a:d4:23:dc:f9:ed:7d:cd:b2:4d:
2a:05:b9:e2:64:8e:a5:ea:60:65:b4:72:32:fb:df:
aa:b8:03:9a:02:3e:16:5d:a9:2e:58:d8:4a:bb:64:
a4:35:e0:45:a2:8a:52:c1:dd:42:04:ff:b1:24:9d:
e0:ac:a2:53:15:00:97:e2:56:c3:60:cb:0e:70:a9:
48:0b:95:15:ec:ad:18:fe:04:22:7e:63:1a:27:cc:
1b:e7:fd:90:bb:8c:fd:7b:91:bc:1c:4d:85:0a:70:
c4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:55:08:DE:C5:61:B8:56:76:9C:EF:7A:E3:6D:12:0B:1D:B1:D4:64
X509v3 Authority Key Identifier:
keyid:88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/8VUI3sVhuFZ2nO96420SCx2x1GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.32.0/23
80.244.39.0/24
185.17.202.0/24
185.199.11.0/24
IPv6:
2a0a:9741::/32
Signature Algorithm: sha256WithRSAEncryption
1b:7d:5f:d2:45:c0:98:17:5f:c7:25:47:46:41:f3:05:0d:e4:
c8:36:d6:6b:c9:e1:e0:44:0a:dd:57:e5:74:f6:6a:96:5e:13:
92:7e:76:ef:47:ca:9b:2c:04:96:61:57:53:f2:d8:02:6c:0a:
f1:e9:f4:d4:f2:7d:73:6a:5d:c4:80:b0:b5:98:9c:e9:56:4b:
10:9e:9d:09:7f:56:11:6c:96:99:90:1d:29:66:b7:c1:ef:23:
04:66:b2:ce:03:33:51:07:81:cc:4c:c6:26:b4:da:d8:e1:4a:
e5:c1:d7:a9:80:8f:08:dc:be:d0:6d:43:6d:0a:45:0f:a3:11:
75:24:f2:89:42:17:f1:82:4b:c5:47:29:8d:a9:78:11:ba:8f:
75:5e:94:b5:fc:9d:43:de:55:70:04:ee:a8:2d:45:8b:f4:58:
7c:3a:6a:5e:cc:07:68:66:cd:dd:5b:67:69:75:bc:ac:21:2d:
0d:39:b8:4e:ff:f9:91:95:70:7a:a6:84:e4:95:df:41:2b:a8:
47:30:82:6e:01:03:09:b1:86:3b:3a:f8:37:c8:77:8b:4a:41:
d3:92:76:81:83:56:a8:14:26:41:d7:44:97:57:f5:24:4f:d8:
36:18:6a:b1:c7:96:76:0a:90:3f:3f:ed:a2:9c:ef:84:4d:aa:
c9:3a:f9:7f
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIEBDv5zTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ODJmYTAxOTAyZjRlOGMzNDdmMjExNmU0NjQ1ZGExYTZiNGUwOTYyMB4XDTIyMDEw
MTAwNTMzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjE1NTA4ZGVjNTYx
Yjg1Njc2OWNlZjdhZTM2ZDEyMGIxZGIxZDQ2NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMRWboXbp+xmTSGuPsf6B7hvEnTB6XDg/RseDjeIn1MIFXwr
X4X0sW97vaQBhrpjcd4qOjRVA58IRK7BXefiXWYZhHuOUddyYH3ILXMcfVBwoVw/
Kmf73stxOvb16mGb3Hv0Ji7yFBOf4CiHGaITpCrsDYh3ED6SeZ37oB1W/gHy42+J
umlAlHARBmoISImshhv9ocF5U4AoRV4a1CPc+e19zbJNKgW54mSOpepgZbRyMvvf
qrgDmgI+Fl2pLljYSrtkpDXgRaKKUsHdQgT/sSSd4KyiUxUAl+JWw2DLDnCpSAuV
FeytGP4EIn5jGifMG+f9kLuM/XuRvBxNhQpwxKcCAwEAAaOCAiowggImMB0GA1Ud
DgQWBBTxVQjexWG4Vnac73rjbRILHbHUZDAfBgNVHSMEGDAWgBSIL6AZAvTow0fy
EW5GRdoaa04JYjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2lDLWdHUUwwNk1OSDhoRnVSa1hhR210T0NXSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzgvZWMwOTgxLWQ2ODItNGY3Yi1iMjEwLTVjMmQyNjU3MDVlMC8x
LzhWVUkzc1ZodUZaMm5POTY0MjBTQ3gyeDFHUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgv
ZWMwOTgxLWQ2ODItNGY3Yi1iMjEwLTVjMmQyNjU3MDVlMC8xL2lDLWdHUUwwNk1O
SDhoRnVSa1hhR210T0NXSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAVD0IAMEAFD0JwMEALkRygMEALnH
CzANBAIAAjAHAwUAKgqXQTANBgkqhkiG9w0BAQsFAAOCAQEAG31f0kXAmBdfxyVH
RkHzBQ3kyDbWa8nh4EQK3VfldPZqll4Tkn5270fKmywElmFXU/LYAmwK8en01PJ9
c2pdxICwtZic6VZLEJ6dCX9WEWyWmZAdKWa3we8jBGayzgMzUQeBzEzGJrTa2OFK
5cHXqYCPCNy+0G1DbQpFD6MRdSTyiUIX8YJLxUcpjal4EbqPdV6UtfydQ95VcATu
qC1Fi/RYfDpqXswHaGbN3VtnaXW8rCEtDTm4Tv/5kZVweqaE5JXfQSuoRzCCbgED
CbGGOzr4N8h3i0pB05J2gYNWqBQmQddEl1f1JE/YNhhqsceWdgqQPz/topzvhE2q
yTr5fw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:54 2024 by rpki-client on console-ams.rpki-client.org