Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/BLEmK5hMS8AjswEPsOq8nyZP6h0.roa
File: BLEmK5hMS8AjswEPsOq8nyZP6h0.roa (raw, json)
Hash identifier: xUbMjZ1umbfXfONqMyZ1u7NA7zw6VeHzbxZjB1s0RgU=
Subject key identifier: 04:B1:26:2B:98:4C:4B:C0:23:B3:01:0F:B0:EA:BC:9F:26:4F:EA:1D
Certificate issuer: /CN=97310ada6a1bbd7aa68e140223bf9c625a33be41
Certificate serial: 028ACF19
Authority key identifier: 97:31:0A:DA:6A:1B:BD:7A:A6:8E:14:02:23:BF:9C:62:5A:33:BE:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzEK2mobvXqmjhQCI7-cYlozvkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/BLEmK5hMS8AjswEPsOq8nyZP6h0.roa
Signing time: Sat 01 Jan 2022 08:56:00 +0000
ROA not before: Sat 01 Jan 2022 08:56:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21105
IP address blocks: 80.89.15.0/24 maxlen: 24
80.89.12.0/24 maxlen: 24
80.89.0.0/20 maxlen: 20
80.89.4.0/22 maxlen: 22
80.89.0.0/22 maxlen: 22
80.89.3.0/24 maxlen: 24
80.89.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42651417 (0x28acf19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97310ada6a1bbd7aa68e140223bf9c625a33be41
Validity
Not Before: Jan 1 08:56:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04b1262b984c4bc023b3010fb0eabc9f264fea1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:fc:17:7f:5a:f8:8c:ec:44:29:28:1a:69:
d1:84:8a:3b:e0:41:f7:fa:d8:52:9d:10:23:02:93:
05:d8:9c:64:95:ac:81:c6:2a:65:b9:54:ca:ac:27:
c2:94:84:f5:05:be:67:10:9d:ac:57:b1:26:6c:2a:
5e:44:56:2f:17:85:ca:c2:8c:e1:b7:7e:f1:37:ef:
77:eb:f2:ca:f5:21:82:67:a2:f6:bc:a8:51:34:1c:
a5:0b:c3:eb:2c:1a:94:8e:16:5c:f6:71:1f:c3:e2:
da:5d:54:d1:f1:5b:97:7d:f1:34:27:0d:99:3f:4e:
90:fd:82:92:3a:cc:8c:77:50:e7:0f:6f:db:c4:8c:
a9:84:23:a5:72:63:19:92:fa:3b:f3:d0:f5:b4:69:
18:ad:10:a3:85:a0:c0:34:54:20:21:55:ac:55:6d:
f9:b1:91:89:c9:40:97:cb:82:7f:62:f0:15:56:02:
63:9e:87:53:f1:66:09:b6:d1:d4:11:b2:a4:a6:bf:
ac:b8:0f:48:64:4f:62:0a:be:ec:cc:d0:a9:76:55:
7d:74:9b:84:50:c3:dd:4e:ca:86:04:7a:1f:4f:be:
3a:1d:4b:cc:82:29:8e:a9:00:de:68:03:7e:e7:b7:
49:a2:05:be:34:66:ff:ba:eb:65:26:22:2f:4f:14:
93:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B1:26:2B:98:4C:4B:C0:23:B3:01:0F:B0:EA:BC:9F:26:4F:EA:1D
X509v3 Authority Key Identifier:
keyid:97:31:0A:DA:6A:1B:BD:7A:A6:8E:14:02:23:BF:9C:62:5A:33:BE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzEK2mobvXqmjhQCI7-cYlozvkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/BLEmK5hMS8AjswEPsOq8nyZP6h0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/lzEK2mobvXqmjhQCI7-cYlozvkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.0.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:07:9f:fa:fa:23:49:8f:82:58:eb:a8:37:fe:2f:9f:42:81:
0a:3f:ea:6e:47:60:26:ca:aa:c6:b9:6d:60:67:10:e4:8c:0e:
19:3b:a7:f0:42:ca:8c:5f:24:a3:8e:64:49:4f:bd:ae:b8:00:
f0:f7:82:87:2d:a3:b7:27:72:e8:16:2f:19:13:0b:47:89:08:
26:6a:57:a6:6c:a1:70:ba:d4:22:da:b2:85:3f:b0:d6:17:cf:
4f:0e:84:13:f3:80:ff:53:23:55:ce:7f:4c:46:85:11:47:02:
41:40:69:70:d8:d8:75:ac:d5:ee:f1:14:98:d4:83:3f:1e:68:
55:d5:19:60:f6:77:17:bc:7d:d7:cb:80:6e:f0:7d:d7:63:be:
c2:59:04:b6:31:ae:4d:4b:c7:56:ec:ef:39:b4:71:9c:c4:90:
23:44:aa:28:4d:85:da:96:18:ee:8e:1a:35:83:cf:69:43:25:
ea:68:10:f5:9c:3d:6b:f0:2b:46:c6:8a:34:f1:6b:ae:55:a5:
27:de:e8:f4:50:cc:54:7d:c8:0f:d1:2b:56:45:fb:c5:ca:b1:
90:8e:7d:34:27:d8:d6:58:f2:a3:35:70:f3:3d:38:21:a5:6d:
d8:3d:c7:02:95:74:a7:dd:06:28:2d:ba:c3:5c:4f:55:38:88:
47:8c:68:7d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAorPGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NzMxMGFkYTZhMWJiZDdhYTY4ZTE0MDIyM2JmOWM2MjVhMzNiZTQxMB4XDTIyMDEw
MTA4NTYwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDRiMTI2MmI5ODRj
NGJjMDIzYjMwMTBmYjBlYWJjOWYyNjRmZWExZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKui/Bd/WviM7EQpKBpp0YSKO+BB9/rYUp0QIwKTBdicZJWs
gcYqZblUyqwnwpSE9QW+ZxCdrFexJmwqXkRWLxeFysKM4bd+8Tfvd+vyyvUhgmei
9ryoUTQcpQvD6ywalI4WXPZxH8Pi2l1U0fFbl33xNCcNmT9OkP2CkjrMjHdQ5w9v
28SMqYQjpXJjGZL6O/PQ9bRpGK0Qo4WgwDRUICFVrFVt+bGRiclAl8uCf2LwFVYC
Y56HU/FmCbbR1BGypKa/rLgPSGRPYgq+7MzQqXZVfXSbhFDD3U7KhgR6H0++Oh1L
zIIpjqkA3mgDfue3SaIFvjRm/7rrZSYiL08Uk2ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQEsSYrmExLwCOzAQ+w6ryfJk/qHTAfBgNVHSMEGDAWgBSXMQraahu9eqaO
FAIjv5xiWjO+QTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2x6RUsybW9idlhxbWpoUUNJNy1jWWxvenZrRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzkvNWIzNmNlLWQ4ZGQtNDU2MS04ZWJmLTUzZTllZjYwNzNjNS8x
L0JMRW1LNWhNUzhBanN3RVBzT3E4bnlaUDZoMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkv
NWIzNmNlLWQ4ZGQtNDU2MS04ZWJmLTUzZTllZjYwNzNjNS8xL2x6RUsybW9idlhx
bWpoUUNJNy1jWWxvenZrRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBFBZADANBgkqhkiG9w0BAQsFAAOC
AQEAXQef+vojSY+CWOuoN/4vn0KBCj/qbkdgJsqqxrltYGcQ5IwOGTun8ELKjF8k
o45kSU+9rrgA8PeChy2jtydy6BYvGRMLR4kIJmpXpmyhcLrUItqyhT+w1hfPTw6E
E/OA/1MjVc5/TEaFEUcCQUBpcNjYdazV7vEUmNSDPx5oVdUZYPZ3F7x918uAbvB9
12O+wlkEtjGuTUvHVuzvObRxnMSQI0SqKE2F2pYY7o4aNYPPaUMl6mgQ9Zw9a/Ar
RsaKNPFrrlWlJ97o9FDMVH3ID9ErVkX7xcqxkI59NCfY1ljyozVw8z04IaVt2D3H
ApV0p90GKC26w1xPVTiIR4xofQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:45 2024 by rpki-client on console-fra.rpki-client.org