Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/49UkddcLXV9YThK_XFOYL8EM-Ig.roa
File: 49UkddcLXV9YThK_XFOYL8EM-Ig.roa (raw, json)
Hash identifier: +lhANgIAqToNTEh23DvKDnZCL/pTM8QshgWLdy/ZP1E=
Subject key identifier: E3:D5:24:75:D7:0B:5D:5F:58:4E:12:BF:5C:53:98:2F:C1:0C:F8:88
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0181FD40C8C97477D996FB1D4EF71C9E47E1
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/49UkddcLXV9YThK_XFOYL8EM-Ig.roa
Signing time: Thu 14 Jul 2022 15:08:10 +0000
ROA not before: Thu 14 Jul 2022 15:08:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210993
IP address blocks: 84.54.36.0/24 maxlen: 24
84.54.37.0/24 maxlen: 24
95.215.108.0/24 maxlen: 24
80.76.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fd:40:c8:c9:74:77:d9:96:fb:1d:4e:f7:1c:9e:47:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jul 14 15:08:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3d52475d70b5d5f584e12bf5c53982fc10cf888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ca:84:a9:7a:d1:c0:3a:3d:f1:d2:bb:1b:7c:
24:a3:b2:17:c7:e3:33:35:26:23:ae:d8:b5:ae:68:
8e:1b:08:34:8e:18:f4:6b:56:67:ad:1c:c4:c4:69:
83:4b:b9:cb:a4:22:4d:99:de:cc:17:f0:92:91:97:
de:d1:95:11:61:38:f3:f4:61:49:d5:6b:2a:e4:cb:
6d:e8:56:67:ce:a6:a8:a1:13:69:13:8e:1d:91:43:
ed:02:38:aa:9a:e4:ef:4e:35:71:f2:bb:e4:43:72:
87:c6:27:18:b2:b1:e4:4d:49:6f:b2:00:4b:bd:22:
c0:3d:43:61:ea:f9:09:73:4c:cf:21:4c:43:06:cf:
d1:c5:2a:b3:02:52:21:42:92:42:f7:76:51:94:f6:
ef:47:a0:cc:1d:df:61:88:0a:3d:e3:ee:8f:25:e7:
93:8e:d1:1b:f3:a8:5b:2c:0a:11:93:57:95:c0:17:
bb:e2:e9:84:17:b9:1b:29:da:5b:0a:2b:a1:b5:28:
0a:8d:aa:5d:fb:91:2b:64:9d:e5:a4:f6:7c:9c:a2:
12:ae:30:cf:55:d7:a1:b7:da:50:ce:cd:87:8c:30:
af:8e:ac:33:37:3b:d5:f2:32:2e:4c:7e:ba:73:a3:
b1:48:cb:dd:63:ee:49:e0:4d:49:b6:c2:fe:b4:c9:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D5:24:75:D7:0B:5D:5F:58:4E:12:BF:5C:53:98:2F:C1:0C:F8:88
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/49UkddcLXV9YThK_XFOYL8EM-Ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.43.0/24
84.54.36.0/23
95.215.108.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:5c:2f:cc:30:d2:60:ea:83:d2:6a:71:d1:2b:74:ab:ee:84:
29:af:9f:b3:74:b9:37:aa:eb:d9:97:9a:26:3e:84:de:7b:4f:
64:c3:30:53:4c:e4:9b:88:77:b6:a7:49:e2:a6:62:13:b6:95:
43:6d:4e:e4:19:e8:07:ad:e8:28:b1:a7:cb:ea:3c:82:06:a4:
a2:7d:e8:30:f7:54:c6:b2:62:93:2a:06:dc:d9:e6:d3:60:ca:
87:bc:49:eb:fb:56:51:db:cc:f3:8e:fb:94:61:d5:0b:64:da:
66:15:f4:0d:80:0b:90:9a:83:ac:5d:c3:d7:bc:4d:5e:a2:c8:
04:04:6d:13:ab:5f:80:f5:ba:2f:89:dd:35:b1:5a:43:f4:57:
06:de:b7:c6:67:68:1e:fa:35:3a:04:d3:f5:82:d4:ac:77:6e:
ca:4b:d4:30:d6:58:4f:d5:66:1f:be:70:13:b3:80:01:e2:a3:
06:04:82:8e:31:2d:02:7c:0d:6b:6c:14:cd:fb:7f:1d:5f:88:
05:bc:2a:c9:b9:e4:ec:13:92:61:fd:32:c5:97:68:88:c2:f3:
22:12:1b:1d:32:9a:f0:43:59:0c:2e:0e:e1:70:28:27:e2:b4:
87:30:2e:d1:b2:f5:f2:98:ef:7a:fa:de:4c:1e:ab:a4:41:79:
d2:0a:97:e0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYH9QMjJdHfZlvsdTvccnkfhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjIwNzE0MTUwODEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2Q1MjQ3NWQ3MGI1ZDVmNTg0ZTEyYmY1YzUzOTgyZmMxMGNmODg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8qEqXrRwDo98dK7G3wko7IXx+Mz
NSYjrti1rmiOGwg0jhj0a1ZnrRzExGmDS7nLpCJNmd7MF/CSkZfe0ZURYTjz9GFJ
1Wsq5Mtt6FZnzqaooRNpE44dkUPtAjiqmuTvTjVx8rvkQ3KHxicYsrHkTUlvsgBL
vSLAPUNh6vkJc0zPIUxDBs/RxSqzAlIhQpJC93ZRlPbvR6DMHd9hiAo94+6PJeeT
jtEb86hbLAoRk1eVwBe74umEF7kbKdpbCiuhtSgKjapd+5ErZJ3lpPZ8nKISrjDP
Vdeht9pQzs2HjDCvjqwzNzvV8jIuTH66c6OxSMvdY+5J4E1JtsL+tMmQvQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOPVJHXXC11fWE4Sv1xTmC/BDPiIMB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvNDlVa2RkY0xYVjlZVGhLX1hGT1lMOEVNLUlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUEwrAwQB
VDYkAwQAX9dsMA0GCSqGSIb3DQEBCwUAA4IBAQBfXC/MMNJg6oPSanHRK3Sr7oQp
r5+zdLk3quvZl5omPoTee09kwzBTTOSbiHe2p0nipmITtpVDbU7kGegHregosafL
6jyCBqSifegw91TGsmKTKgbc2ebTYMqHvEnr+1ZR28zzjvuUYdULZNpmFfQNgAuQ
moOsXcPXvE1eosgEBG0Tq1+A9bovid01sVpD9FcG3rfGZ2ge+jU6BNP1gtSsd27K
S9Qw1lhP1WYfvnATs4AB4qMGBIKOMS0CfA1rbBTN+38dX4gFvCrJueTsE5Jh/TLF
l2iIwvMiEhsdMprwQ1kMLg7hcCgn4rSHMC7RsvXymO96+t5MHqukQXnSCpfg
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org