Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8oylgzQYoEulfgJ8CRXbPrzvjME.roa
File: 8oylgzQYoEulfgJ8CRXbPrzvjME.roa (raw, json)
Hash identifier: IVd/P+PpPChaqvqS7cpvC60k4Hw0nmGaMaxyJBRM8oM=
Subject key identifier: F2:8C:A5:83:34:18:A0:4B:A5:7E:02:7C:09:15:DB:3E:BC:EF:8C:C1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0184F0B2CDF6306771280364FABD15E4F1DF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8oylgzQYoEulfgJ8CRXbPrzvjME.roa
Signing time: Thu 08 Dec 2022 07:46:00 +0000
ROA not before: Thu 08 Dec 2022 07:46:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 82.153.240.0/24 maxlen: 24
82.152.178.0/24 maxlen: 24
82.152.179.0/24 maxlen: 24
82.153.243.0/24 maxlen: 24
82.153.67.0/24 maxlen: 24
82.153.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f0:b2:cd:f6:30:67:71:28:03:64:fa:bd:15:e4:f1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 8 07:46:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f28ca5833418a04ba57e027c0915db3ebcef8cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ae:34:e2:5f:4c:80:b3:bc:f8:fd:eb:6b:68:
28:9d:12:9b:90:dd:7b:75:b0:58:74:21:08:e3:2d:
bf:28:4c:1d:52:1d:20:42:7e:f3:17:7c:10:84:5e:
26:be:4f:a7:9c:84:ea:ac:d3:02:5a:d0:fc:06:b3:
3b:77:9d:5a:07:99:36:f7:c1:3c:0c:7a:d8:63:d5:
e6:71:9d:f1:7d:82:3c:fe:ad:69:26:d8:62:4d:59:
fa:0c:f3:d4:4c:3e:6b:79:3e:fb:e0:54:3a:c3:91:
d7:f2:f0:06:94:ac:99:91:fc:86:16:98:e6:83:6f:
90:af:40:c8:7e:09:01:1b:f1:c4:89:ac:52:b1:31:
e7:c2:cd:86:e3:9b:6d:90:d1:ca:2d:66:10:22:a1:
02:86:23:37:a8:1a:3f:78:2c:d1:05:3a:ed:4b:83:
da:5d:4f:84:c9:d6:79:02:27:3d:1a:4f:2d:a7:16:
d4:65:68:5e:cc:23:94:53:e6:96:b2:8f:96:71:9d:
b0:7d:1c:e2:63:da:a3:51:0b:98:f9:77:3e:12:31:
22:37:92:dc:5c:7a:f2:f9:79:40:d2:73:98:94:be:
17:9d:d2:7d:4b:e1:93:06:5a:a2:87:13:97:bf:35:
ee:be:30:13:3b:e2:93:97:85:44:b6:85:c2:29:c8:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8C:A5:83:34:18:A0:4B:A5:7E:02:7C:09:15:DB:3E:BC:EF:8C:C1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8oylgzQYoEulfgJ8CRXbPrzvjME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.178.0/23
82.153.67.0-82.153.68.255
82.153.240.0/24
82.153.243.0/24
Signature Algorithm: sha256WithRSAEncryption
01:1d:de:f9:49:86:12:29:ce:46:7a:a2:b8:68:30:3b:81:92:
65:09:ae:48:a3:a1:22:1a:8d:f0:fb:80:d1:3b:90:af:41:16:
4d:de:02:60:90:60:8d:5f:c6:a8:ba:1d:c9:43:c4:76:58:70:
7a:73:3f:80:d2:59:9d:e3:2d:82:c0:b1:67:41:89:54:54:d0:
1d:71:1f:54:4b:46:92:8c:dc:26:4d:10:9e:72:1c:9c:52:8e:
55:9e:bc:39:a9:e1:d1:36:6c:e0:f5:9b:be:e5:ad:1c:8c:a8:
53:22:d2:a4:dc:b8:2b:1d:c0:ec:be:b8:0f:a1:a2:ca:05:46:
17:af:56:6e:79:3f:c0:19:ef:97:b6:7d:f5:bd:69:8f:c5:93:
4f:8c:92:55:f6:88:a3:83:aa:4e:5a:17:97:d6:8d:ca:53:94:
b8:b6:9a:9f:a7:6f:39:81:74:ca:48:a1:bb:c9:6c:7a:68:8d:
12:92:eb:c9:93:0b:12:65:9a:21:2b:c8:17:20:93:05:ec:a7:
66:32:30:1f:a1:72:46:94:6f:45:79:db:95:15:82:73:00:a6:
36:68:20:17:1e:ce:22:3c:6d:70:30:bb:c3:e8:90:00:c3:df:
27:00:81:2f:d9:fd:c8:d4:20:9e:c6:c1:60:62:2d:db:cb:09:
89:d2:e8:fa
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYTwss32MGdxKANk+r0V5PHfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjIxMjA4MDc0NjAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjhjYTU4MzM0MThhMDRiYTU3ZTAyN2MwOTE1ZGIzZWJjZWY4Y2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq404l9MgLO8+P3ra2gonRKbkN17
dbBYdCEI4y2/KEwdUh0gQn7zF3wQhF4mvk+nnITqrNMCWtD8BrM7d51aB5k298E8
DHrYY9XmcZ3xfYI8/q1pJthiTVn6DPPUTD5reT774FQ6w5HX8vAGlKyZkfyGFpjm
g2+Qr0DIfgkBG/HEiaxSsTHnws2G45ttkNHKLWYQIqEChiM3qBo/eCzRBTrtS4Pa
XU+EydZ5Aic9Gk8tpxbUZWhezCOUU+aWso+WcZ2wfRziY9qjUQuY+Xc+EjEiN5Lc
XHry+XlA0nOYlL4XndJ9S+GTBlqihxOXvzXuvjATO+KTl4VEtoXCKcgu7wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFPKMpYM0GKBLpX4CfAkV2z6874zBMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvOG95bGd6UVlvRXVsZmdKOENSWGJQcnp2ak1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBUpiyMAwD
BABSmUMDBABSmUQDBABSmfADBABSmfMwDQYJKoZIhvcNAQELBQADggEBAAEd3vlJ
hhIpzkZ6orhoMDuBkmUJrkijoSIajfD7gNE7kK9BFk3eAmCQYI1fxqi6HclDxHZY
cHpzP4DSWZ3jLYLAsWdBiVRU0B1xH1RLRpKM3CZNEJ5yHJxSjlWevDmp4dE2bOD1
m77lrRyMqFMi0qTcuCsdwOy+uA+hosoFRhevVm55P8AZ75e2ffW9aY/Fk0+MklX2
iKODqk5aF5fWjcpTlLi2mp+nbzmBdMpIobvJbHpojRKS68mTCxJlmiEryBcgkwXs
p2YyMB+hckaUb0V525UVgnMApjZoIBceziI8bXAwu8PokADD3ycAgS/Z/cjUIJ7G
wWBiLdvLCYnS6Po=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:20 2024 by rpki-client on console-ams.rpki-client.org