Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/lYzbKOJE8iZr5WriITddgWmIO28.roa
File: lYzbKOJE8iZr5WriITddgWmIO28.roa (raw, json)
Hash identifier: 2Oc5pZzLT4eOCIk7cG8nL08BVNpHzU/NcPbPO5NUj6Q=
Subject key identifier: 95:8C:DB:28:E2:44:F2:26:6B:E5:6A:E2:21:37:5D:81:69:88:3B:6F
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 04FCF75C
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/lYzbKOJE8iZr5WriITddgWmIO28.roa
Signing time: Wed 25 May 2022 12:55:15 +0000
ROA not before: Wed 25 May 2022 12:55:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13307
IP address blocks: 195.95.202.0/23 maxlen: 24
91.90.16.0/21 maxlen: 24
194.88.206.0/23 maxlen: 24
194.143.144.0/23 maxlen: 24
91.203.88.0/22 maxlen: 24
195.140.168.0/22 maxlen: 24
193.43.224.0/22 maxlen: 24
195.234.68.0/22 maxlen: 24
195.20.96.0/23 maxlen: 24
2a01:6d80::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83687260 (0x4fcf75c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: May 25 12:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=958cdb28e244f2266be56ae221375d8169883b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:70:fc:d1:5b:3d:f1:00:18:5f:07:d7:b8:33:
75:52:ae:54:36:83:00:ec:c5:1c:ed:a7:88:55:66:
58:cf:e8:50:4f:76:77:0b:4f:7a:1a:d4:64:ca:7d:
56:f2:fc:5b:3e:97:b8:e6:6a:87:73:47:fe:1f:cd:
5e:0c:8f:cb:15:5b:d1:47:ca:10:f2:24:ed:2d:aa:
fe:48:84:20:a9:17:16:b6:d5:1a:0c:6c:86:09:07:
19:be:bc:49:15:8e:be:e0:f2:5e:df:e6:ff:7e:a4:
d3:ea:64:72:bf:2f:9f:b9:05:af:5a:57:4a:2d:79:
2e:a1:f7:77:a9:34:88:b1:eb:c8:81:01:56:e1:cb:
34:ff:11:ae:33:8b:e5:f3:cf:68:10:d3:96:f0:e7:
5d:58:0b:70:38:b0:90:c3:f8:4d:87:3a:96:0f:25:
66:34:a7:93:3d:e2:ed:2c:46:e7:55:23:2e:65:1d:
3a:2f:6d:f1:9c:91:5b:04:bc:20:ff:69:79:2d:6f:
d8:ed:a2:f0:7f:a6:28:71:b6:56:7b:69:d7:07:59:
bd:af:3e:c8:9c:2a:d8:0c:09:25:57:a5:5b:4c:eb:
ce:65:86:e7:b2:e4:57:2d:10:75:05:2a:13:da:4b:
38:9f:f0:50:0c:bc:3c:2e:21:99:e4:9c:ea:77:c8:
2e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8C:DB:28:E2:44:F2:26:6B:E5:6A:E2:21:37:5D:81:69:88:3B:6F
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/lYzbKOJE8iZr5WriITddgWmIO28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.16.0/21
91.203.88.0/22
193.43.224.0/22
194.88.206.0/23
194.143.144.0/23
195.20.96.0/23
195.95.202.0/23
195.140.168.0/22
195.234.68.0/22
IPv6:
2a01:6d80::/36
Signature Algorithm: sha256WithRSAEncryption
5a:97:e8:87:c2:24:6e:e5:57:a5:15:18:95:6c:c8:df:53:09:
17:f9:80:36:6a:5e:b7:9f:4e:3d:d3:bb:2e:f9:bf:54:2f:1d:
f6:97:b7:fc:fd:dd:e4:05:7a:a2:d9:fb:5e:d2:c9:92:33:77:
0a:ab:95:ba:84:16:d6:ca:0f:1a:15:ee:97:03:4d:bc:b9:a8:
c1:88:ec:fc:ea:ec:79:2f:49:01:1d:6a:22:a0:ef:a2:75:bf:
18:09:e1:bf:c8:b7:15:5e:1b:1d:e5:a0:ac:ba:fc:33:c8:98:
04:a0:03:2c:0f:96:36:d2:6a:e9:ba:a5:61:77:a1:ba:d9:81:
cd:25:f9:d1:3c:90:79:47:c4:8f:4f:bb:13:3e:1b:b8:06:b8:
7f:70:1d:65:6e:73:3c:90:1c:cf:ef:05:a1:9f:93:17:18:55:
3c:da:b2:fc:26:76:5a:7e:3e:ba:30:88:5d:4f:ce:b7:f3:f5:
1d:ee:88:2c:8c:39:d9:89:e9:d2:bb:8b:4b:ea:8d:b7:46:45:
40:27:b1:d1:22:e0:4d:8d:c5:17:62:0b:ad:05:86:12:c5:e2:
9d:97:02:8d:25:81:bd:c2:cc:b3:57:b6:f5:e2:6c:16:64:70:
20:27:d8:a3:3a:85:6d:1e:11:f7:5b:14:95:63:c7:b2:e5:23:
74:fe:8f:93
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIEBPz3XDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
Yzk0YmI2OTQ1M2YxMzlhNjAwMjllMjJkYjBmYjM0MjRhOTA2Y2VlMB4XDTIyMDUy
NTEyNTUxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTU4Y2RiMjhlMjQ0
ZjIyNjZiZTU2YWUyMjEzNzVkODE2OTg4M2I2ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJRw/NFbPfEAGF8H17gzdVKuVDaDAOzFHO2niFVmWM/oUE92
dwtPehrUZMp9VvL8Wz6XuOZqh3NH/h/NXgyPyxVb0UfKEPIk7S2q/kiEIKkXFrbV
GgxshgkHGb68SRWOvuDyXt/m/36k0+pkcr8vn7kFr1pXSi15LqH3d6k0iLHryIEB
VuHLNP8RrjOL5fPPaBDTlvDnXVgLcDiwkMP4TYc6lg8lZjSnkz3i7SxG51UjLmUd
Oi9t8ZyRWwS8IP9peS1v2O2i8H+mKHG2Vntp1wdZva8+yJwq2AwJJVelW0zrzmWG
57LkVy0QdQUqE9pLOJ/wUAy8PC4hmeSc6nfILmECAwEAAaOCAkkwggJFMB0GA1Ud
DgQWBBSVjNso4kTyJmvlauIhN12BaYg7bzAfBgNVHSMEGDAWgBTclLtpRT8TmmAC
niLbD7NCSpBs7jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNKUzdhVVVfRTVwZ0FwNGkydy16UWtxUWJPNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2UvZDA0NWNhLWMxZjctNGVkOS1hZmRiLTA5MGM0NmU5ZjJlZC8x
L2xZemJLT0pFOGlacjVXcmlJVGRkZ1dtSU8yOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Uv
ZDA0NWNhLWMxZjctNGVkOS1hZmRiLTA5MGM0NmU5ZjJlZC8xLzNKUzdhVVVfRTVw
Z0FwNGkydy16UWtxUWJPNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBf
BggrBgEFBQcBBwEB/wRQME4wPAQCAAEwNgMEA1taEAMEAlvLWAMEAsEr4AMEAcJY
zgMEAcKPkAMEAcMUYAMEAcNfygMEAsOMqAMEAsPqRDAOBAIAAjAIAwYEKgFtgAAw
DQYJKoZIhvcNAQELBQADggEBAFqX6IfCJG7lV6UVGJVsyN9TCRf5gDZqXrefTj3T
uy75v1QvHfaXt/z93eQFeqLZ+17SyZIzdwqrlbqEFtbKDxoV7pcDTby5qMGI7Pzq
7HkvSQEdaiKg76J1vxgJ4b/ItxVeGx3loKy6/DPImASgAywPljbSaum6pWF3obrZ
gc0l+dE8kHlHxI9PuxM+G7gGuH9wHWVuczyQHM/vBaGfkxcYVTzasvwmdlp+Prow
iF1Pzrfz9R3uiCyMOdmJ6dK7i0vqjbdGRUAnsdEi4E2NxRdiC60FhhLF4p2XAo0l
gb3CzLNXtvXibBZkcCAn2KM6hW0eEfdbFJVjx7LlI3T+j5M=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:30 2023 by rpki-client on console-fra.rpki-client.org