Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/jjnQTiLRfgDMmaD1ljB_Rot-fsI.roa
File: jjnQTiLRfgDMmaD1ljB_Rot-fsI.roa (raw, json)
Hash identifier: X8pfIdmnukJvP1mDDUZomcgy9JRd71nQOYJlP5jLbLI=
Subject key identifier: 8E:39:D0:4E:22:D1:7E:00:CC:99:A0:F5:96:30:7F:46:8B:7E:7E:C2
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0183702A5F640F45E2B729C76E480D3F4861
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/jjnQTiLRfgDMmaD1ljB_Rot-fsI.roa
Signing time: Sat 24 Sep 2022 15:42:48 +0000
ROA not before: Sat 24 Sep 2022 15:42:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 213.232.120.0/24 maxlen: 24
213.232.122.0/24 maxlen: 24
83.171.224.0/24 maxlen: 24
83.171.226.0/24 maxlen: 24
83.171.227.0/24 maxlen: 24
141.98.87.0/24 maxlen: 24
185.68.246.0/24 maxlen: 24
185.89.43.0/24 maxlen: 24
185.89.42.0/24 maxlen: 24
185.68.247.0/24 maxlen: 24
5.183.255.0/24 maxlen: 24
194.104.10.0/24 maxlen: 24
185.68.184.0/24 maxlen: 24
185.88.36.0/24 maxlen: 24
5.181.168.0/24 maxlen: 24
5.181.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:70:2a:5f:64:0f:45:e2:b7:29:c7:6e:48:0d:3f:48:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Sep 24 15:42:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e39d04e22d17e00cc99a0f596307f468b7e7ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:cc:28:72:7a:20:8a:35:be:af:69:7f:47:
51:e1:54:4b:91:47:39:dd:0b:95:f5:5a:c0:00:24:
80:64:64:e0:34:85:d9:b6:12:2b:42:c5:b5:4a:ae:
f0:7f:8b:8a:f3:13:30:5d:41:6d:58:50:47:fa:cd:
81:67:27:e7:6d:04:dc:c2:ef:1d:ad:43:6c:21:d8:
a2:61:25:28:f6:3d:4a:d6:98:6d:08:e7:bc:bb:f2:
62:9e:8f:06:fa:5f:3b:b1:f3:f3:ec:5b:87:34:00:
c9:8c:ef:21:5b:6a:80:36:22:c0:e0:61:96:16:37:
f4:25:5f:51:e9:c8:14:7e:34:46:4b:0b:6d:38:48:
53:a9:0e:50:33:ae:b2:38:7c:5c:42:fd:3f:77:41:
b6:54:e1:a5:ee:65:5e:69:32:e8:db:d4:57:9e:7c:
26:b2:dc:f6:59:39:68:eb:2d:08:06:35:df:75:6d:
07:7e:47:9d:2c:b1:cc:16:c0:4c:70:6c:c2:c5:a5:
77:41:a2:fb:5e:ac:18:65:3b:9a:b4:e0:91:f8:4e:
7f:59:5a:9f:b9:27:db:a0:14:ec:2c:96:bf:11:69:
e4:18:03:69:23:21:20:01:18:4b:80:9d:88:57:bd:
58:43:25:49:16:cc:e9:ff:49:fb:5c:b2:12:f8:da:
e7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:39:D0:4E:22:D1:7E:00:CC:99:A0:F5:96:30:7F:46:8B:7E:7E:C2
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/jjnQTiLRfgDMmaD1ljB_Rot-fsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.168.0/23
5.183.255.0/24
83.171.224.0/24
83.171.226.0/23
141.98.87.0/24
185.68.184.0/24
185.68.246.0/23
185.88.36.0/24
185.89.42.0/23
194.104.10.0/24
213.232.120.0/24
213.232.122.0/24
Signature Algorithm: sha256WithRSAEncryption
28:72:f9:33:1a:6f:f3:dd:5c:87:f4:d3:de:47:e2:5d:8f:64:
b8:22:09:2a:a2:6c:4a:36:5e:10:7d:0f:da:5d:91:cb:d9:1f:
4f:65:98:b9:83:10:f1:8d:2b:f3:bf:a9:f2:05:94:29:4f:7c:
b4:3c:16:8e:34:24:ed:e7:6c:7c:32:a0:5d:3d:12:e8:2a:49:
57:a4:84:9c:0d:8c:43:d3:21:db:04:4d:59:e9:6d:39:c7:a1:
b6:7c:fb:ee:b5:2b:f2:92:8f:51:f6:f2:c2:73:31:69:c4:74:
98:d0:a0:a2:78:84:07:4f:c8:e3:f1:48:f0:6f:fe:20:4c:02:
6a:e1:4c:3b:4c:de:06:f0:62:f4:f2:1a:58:5c:93:7a:e6:0d:
28:74:e8:bb:e3:4a:92:06:47:c6:aa:0b:00:33:ec:17:1d:5f:
4c:10:18:2a:6f:48:9e:9c:60:3a:05:20:1d:80:e4:e0:4d:e0:
30:6d:b4:f3:f2:95:e7:2d:dd:29:99:ba:82:34:d3:08:bd:c2:
f3:a4:b6:61:fd:27:b5:7f:ae:15:10:d7:6d:93:41:20:d4:21:
38:a6:a1:fe:67:7d:6d:55:ed:0e:e9:45:99:7b:ab:7b:a1:4b:
94:e4:bd:40:27:1b:34:3b:0b:c9:a5:b0:64:c4:d6:07:8d:61:
a1:c0:5d:5f
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAYNwKl9kD0XitynHbkgNP0hhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjIwOTI0MTU0MjQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTM5ZDA0ZTIyZDE3ZTAwY2M5OWEwZjU5NjMwN2Y0NjhiN2U3ZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnojMKHJ6IIo1vq9pf0dR4VRLkUc5
3QuV9VrAACSAZGTgNIXZthIrQsW1Sq7wf4uK8xMwXUFtWFBH+s2BZyfnbQTcwu8d
rUNsIdiiYSUo9j1K1phtCOe8u/Jino8G+l87sfPz7FuHNADJjO8hW2qANiLA4GGW
Fjf0JV9R6cgUfjRGSwttOEhTqQ5QM66yOHxcQv0/d0G2VOGl7mVeaTLo29RXnnwm
stz2WTlo6y0IBjXfdW0HfkedLLHMFsBMcGzCxaV3QaL7XqwYZTuatOCR+E5/WVqf
uSfboBTsLJa/EWnkGANpIyEgARhLgJ2IV71YQyVJFszp/0n7XLIS+NrniQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFI450E4i0X4AzJmg9ZYwf0aLfn7CMB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvampuUVRpTFJmZ0RNbWFEMWxqQl9Sb3QtZnNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQBBbWoAwQA
Bbf/AwQAU6vgAwQBU6viAwQAjWJXAwQAuUS4AwQBuUT2AwQAuVgkAwQBuVkqAwQA
wmgKAwQA1eh4AwQA1eh6MA0GCSqGSIb3DQEBCwUAA4IBAQAocvkzGm/z3VyH9NPe
R+Jdj2S4IgkqomxKNl4QfQ/aXZHL2R9PZZi5gxDxjSvzv6nyBZQpT3y0PBaONCTt
52x8MqBdPRLoKklXpIScDYxD0yHbBE1Z6W05x6G2fPvutSvyko9R9vLCczFpxHSY
0KCieIQHT8jj8Ujwb/4gTAJq4Uw7TN4G8GL08hpYXJN65g0odOi740qSBkfGqgsA
M+wXHV9MEBgqb0ienGA6BSAdgOTgTeAwbbTz8pXnLd0pmbqCNNMIvcLzpLZh/Se1
f64VENdtk0Eg1CE4pqH+Z31tVe0O6UWZe6t7oUuU5L1AJxs0OwvJpbBkxNYHjWGh
wF1f
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org