Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/s6igYlhPqMDJrp4jEvZSGpBpCRg.roa
File: s6igYlhPqMDJrp4jEvZSGpBpCRg.roa (raw, json)
Hash identifier: AG0DvUiREaB3+XuCWvc3LePs8/1JZ2/YO7EiRe/T6E4=
Subject key identifier: B3:A8:A0:62:58:4F:A8:C0:C9:AE:9E:23:12:F6:52:1A:90:69:09:18
Certificate issuer: /CN=3144e609e361913e3c3b0a78d7486aa45b562401
Certificate serial: 0182D05E486648123680C869962CD04B52B2
Authority key identifier: 31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/s6igYlhPqMDJrp4jEvZSGpBpCRg.roa
Signing time: Wed 24 Aug 2022 15:00:15 +0000
ROA not before: Wed 24 Aug 2022 15:00:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39279
IP address blocks: 89.32.226.0/24 maxlen: 24
89.32.224.0/20 maxlen: 24
185.108.182.0/24 maxlen: 24
185.108.181.0/24 maxlen: 24
185.108.180.0/22 maxlen: 24
185.33.105.0/24 maxlen: 24
185.33.104.0/22 maxlen: 22
2a00:c5a0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d0:5e:48:66:48:12:36:80:c8:69:96:2c:d0:4b:52:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3144e609e361913e3c3b0a78d7486aa45b562401
Validity
Not Before: Aug 24 15:00:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3a8a062584fa8c0c9ae9e2312f6521a90690918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:93:7a:6e:d4:fa:c6:8f:90:13:b7:26:08:c3:
26:1b:01:d3:ad:a7:13:36:c7:f2:9f:f5:c7:c8:66:
81:84:df:bf:08:fb:2e:89:89:01:bc:4b:f8:b9:c8:
bf:5a:5c:87:b8:6b:7f:fa:15:21:c6:39:f3:46:5b:
74:f6:5e:55:22:ac:09:56:50:a2:bd:92:42:3d:66:
24:fa:67:1e:06:64:63:a6:ad:61:9b:85:6b:81:16:
dd:16:e3:96:c9:ad:43:5d:a0:1e:c6:08:a3:b4:6e:
72:8b:37:69:06:45:db:02:0b:95:05:1c:6e:fa:e4:
27:d6:0c:e7:25:97:f0:a4:5c:9d:3e:66:16:b3:9f:
10:a3:60:5c:8d:83:ce:dc:4a:ef:16:70:b5:9e:aa:
ac:b6:f3:4b:2a:d5:04:63:9f:2b:94:9e:50:b2:08:
22:4f:01:f9:b6:c2:50:9c:b8:9e:ee:ee:44:86:51:
de:08:46:79:c0:ab:bf:4d:f4:4b:3f:79:16:b0:46:
6c:c3:25:a1:1e:95:d9:5c:90:7e:5d:d1:55:a4:eb:
c0:cd:29:68:22:36:e0:be:87:23:ec:30:a4:da:dd:
18:28:9b:fa:ce:59:8a:f9:a4:37:2e:ba:f3:50:c3:
c5:c3:c3:7b:f5:fb:d0:a5:af:a1:40:96:fe:5d:ff:
d1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A8:A0:62:58:4F:A8:C0:C9:AE:9E:23:12:F6:52:1A:90:69:09:18
X509v3 Authority Key Identifier:
keyid:31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/s6igYlhPqMDJrp4jEvZSGpBpCRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.224.0/20
185.33.104.0/22
185.108.180.0/22
IPv6:
2a00:c5a0::/32
Signature Algorithm: sha256WithRSAEncryption
39:87:6b:36:74:23:94:60:a2:4d:09:af:11:40:d8:25:6f:69:
2d:51:b3:00:9c:85:3f:ce:61:88:f9:fb:a3:f8:ff:5e:34:ad:
18:30:3b:bb:63:b6:c7:d3:e9:bb:e9:27:1c:5b:f6:d2:f5:82:
92:fa:a9:a5:61:15:20:10:8c:b1:35:01:98:b7:e6:80:f2:e0:
4e:14:8d:97:4c:0a:69:a4:fd:e4:35:9e:59:a2:42:81:d7:c9:
ca:9c:bf:f5:3d:8d:ad:66:53:f0:83:51:df:73:16:2d:d3:c5:
3f:d4:65:ae:b1:fb:56:be:fd:53:81:95:73:8c:70:8e:e5:50:
d5:82:08:1e:64:30:da:86:c8:68:fe:2e:f5:01:1c:8e:aa:fc:
a7:f0:55:f2:e6:c5:e5:ef:66:25:ca:b0:f6:e5:22:5a:97:7a:
36:19:43:e4:ef:61:0b:a5:df:ea:2c:e5:cc:2f:df:d9:8a:4a:
d0:97:df:a6:f5:a4:d5:67:95:1e:59:26:24:3d:ee:c5:23:7a:
17:7c:12:c8:a1:a2:76:85:0a:3d:38:08:fe:cb:7a:db:d6:30:
b2:9f:55:a4:4d:55:86:18:34:03:83:b6:ef:92:09:ad:63:45:
70:eb:d0:af:07:9f:30:c3:83:1f:1b:f2:56:38:f8:96:7f:43:
9f:75:bf:c3
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYLQXkhmSBI2gMhplizQS1KyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNDRlNjA5ZTM2MTkxM2UzYzNiMGE3OGQ3NDg2YWE0NWI1
NjI0MDEwHhcNMjIwODI0MTUwMDE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2E4YTA2MjU4NGZhOGMwYzlhZTllMjMxMmY2NTIxYTkwNjkwOTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5N6btT6xo+QE7cmCMMmGwHTracT
Nsfyn/XHyGaBhN+/CPsuiYkBvEv4uci/WlyHuGt/+hUhxjnzRlt09l5VIqwJVlCi
vZJCPWYk+mceBmRjpq1hm4VrgRbdFuOWya1DXaAexgijtG5yizdpBkXbAguVBRxu
+uQn1gznJZfwpFydPmYWs58Qo2BcjYPO3ErvFnC1nqqstvNLKtUEY58rlJ5Qsggi
TwH5tsJQnLie7u5EhlHeCEZ5wKu/TfRLP3kWsEZswyWhHpXZXJB+XdFVpOvAzSlo
Ijbgvocj7DCk2t0YKJv6zlmK+aQ3LrrzUMPFw8N79fvQpa+hQJb+Xf/RvwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFLOooGJYT6jAya6eIxL2UhqQaQkYMB8GA1UdIwQY
MBaAFDFE5gnjYZE+PDsKeNdIaqRbViQBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVVUbUNlTmhrVDQ4T3dwNDEwaHFwRnRXSkFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jYWEyYjYtODdlOC00ZTI0LWE0NDYt
Nzc1ODg4YTg3MTk0LzEvczZpZ1lsaFBxTURKcnA0akV2WlNHcEJwQ1JnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jYWEyYjYtODdlOC00ZTI0LWE0NDYtNzc1ODg4YTg3MTk0
LzEvTVVUbUNlTmhrVDQ4T3dwNDEwaHFwRnRXSkFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEWSDgAwQC
uSFoAwQCuWy0MA0EAgACMAcDBQAqAMWgMA0GCSqGSIb3DQEBCwUAA4IBAQA5h2s2
dCOUYKJNCa8RQNglb2ktUbMAnIU/zmGI+fuj+P9eNK0YMDu7Y7bH0+m76SccW/bS
9YKS+qmlYRUgEIyxNQGYt+aA8uBOFI2XTApppP3kNZ5ZokKB18nKnL/1PY2tZlPw
g1HfcxYt08U/1GWusftWvv1TgZVzjHCO5VDVgggeZDDahsho/i71ARyOqvyn8FXy
5sXl72YlyrD25SJal3o2GUPk72ELpd/qLOXML9/ZikrQl9+m9aTVZ5UeWSYkPe7F
I3oXfBLIoaJ2hQo9OAj+y3rb1jCyn1WkTVWGGDQDg7bvkgmtY0Vw69CvB58ww4Mf
G/JWOPiWf0Ofdb/D
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:08 2023 by rpki-client on console-ams.rpki-client.org