Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/Fdm9AYIAZg-e7C3JzjAjpuCtjmc.roa
File: Fdm9AYIAZg-e7C3JzjAjpuCtjmc.roa (raw, json)
Hash identifier: VRyf3jbdhCieolkV2jBEwRPsh/8+JOsAx/hSfXSaID8=
Subject key identifier: 15:D9:BD:01:82:00:66:0F:9E:EC:2D:C9:CE:30:23:A6:E0:AD:8E:67
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 05835179
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/Fdm9AYIAZg-e7C3JzjAjpuCtjmc.roa
Signing time: Sat 01 Jan 2022 06:04:25 +0000
ROA not before: Sat 01 Jan 2022 06:04:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 10557
IP address blocks: 185.191.230.0/24 maxlen: 24
185.215.149.0/24 maxlen: 24
85.209.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92492153 (0x5835179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 1 06:04:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15d9bd018200660f9eec2dc9ce3023a6e0ad8e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:97:49:79:c6:0e:eb:7b:36:21:f8:fa:ee:ea:
57:6e:9b:5a:4a:2d:16:c4:1b:32:43:47:96:b5:cb:
d4:eb:ac:f5:b6:80:5a:7e:dc:b9:37:01:ef:0f:95:
52:1b:d4:9a:37:5f:73:c5:4b:6b:78:fc:b3:12:a2:
40:b7:90:7e:c1:04:20:5e:90:39:1c:68:d9:79:b8:
e5:0e:a4:6d:05:4e:e9:58:bb:39:75:ee:e7:d4:85:
aa:9c:af:bd:e2:f4:e5:e9:6b:99:b3:13:6c:2c:07:
a3:d8:cb:55:52:87:fb:91:06:02:57:3a:9b:37:76:
60:9c:56:71:97:04:9e:98:13:80:30:c9:4b:25:da:
31:ef:6b:23:53:f7:94:7c:30:e1:6c:28:e0:a5:bd:
8a:29:43:aa:ec:b1:49:1f:d6:c8:1c:91:bc:0f:17:
3f:f4:ab:7d:41:55:3e:a1:bc:86:8f:39:7a:d1:7b:
26:03:8f:51:65:b5:f8:1d:28:9a:ff:ff:91:05:c5:
39:32:33:eb:59:d0:27:c3:b4:c7:78:cc:85:19:7b:
46:81:10:7b:06:f3:4f:43:5a:f3:b8:61:9b:46:4d:
22:50:fa:01:22:4d:c4:52:47:22:44:5c:33:73:11:
44:8e:31:63:fd:47:0b:dc:91:43:5c:7f:35:aa:c9:
22:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D9:BD:01:82:00:66:0F:9E:EC:2D:C9:CE:30:23:A6:E0:AD:8E:67
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/Fdm9AYIAZg-e7C3JzjAjpuCtjmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.86.0/24
185.191.230.0/24
185.215.149.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ec:d7:f1:f6:c6:c9:a2:8e:be:42:b6:e8:45:69:37:02:cf:
5c:a1:ee:53:92:29:d7:3f:d8:de:83:de:4c:6b:57:a4:33:cd:
d6:2e:74:5e:67:44:17:88:93:ec:4d:5f:24:34:b2:a6:4a:7d:
b9:7a:77:5e:ef:f7:a7:b7:b2:1e:6a:cf:49:ba:1c:c5:37:ab:
80:75:35:a9:82:92:b3:39:36:28:33:f0:39:57:f7:12:35:18:
a5:c9:85:6a:4a:7d:34:75:5c:60:b2:61:c7:7b:6e:1d:8e:02:
25:6f:73:83:d4:76:64:1a:29:c3:36:30:66:fc:1c:1b:fa:65:
1a:d4:9d:ee:2f:df:dd:93:c4:f4:5a:4c:7b:c5:77:3e:0d:42:
56:2c:38:e6:c4:96:f6:2c:fb:80:f4:00:d8:08:2c:76:9a:40:
33:77:14:0c:cd:d2:96:20:9c:3a:a9:a3:76:25:51:55:af:5b:
87:41:b4:d3:2e:d8:55:21:1c:31:30:55:93:59:02:ba:70:30:
6f:c6:35:fd:bf:03:bb:ed:7f:9c:5d:e5:17:d9:d1:e2:74:cc:
63:6c:6b:56:4c:55:3b:ff:37:5c:5e:1b:fd:cc:01:6b:13:77:
d9:79:cd:b8:22:d5:3e:aa:5e:cf:a6:42:a0:5d:2e:29:1a:b0:
33:e3:a3:e0
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBYNReTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MWM4YjczYWI3YmRlYjc2ZmY0OGIyY2EwOTk2MTZlZGJlNzFjNDI2MB4XDTIyMDEw
MTA2MDQyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTVkOWJkMDE4MjAw
NjYwZjllZWMyZGM5Y2UzMDIzYTZlMGFkOGU2NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKCXSXnGDut7NiH4+u7qV26bWkotFsQbMkNHlrXL1Ous9baA
Wn7cuTcB7w+VUhvUmjdfc8VLa3j8sxKiQLeQfsEEIF6QORxo2Xm45Q6kbQVO6Vi7
OXXu59SFqpyvveL05elrmbMTbCwHo9jLVVKH+5EGAlc6mzd2YJxWcZcEnpgTgDDJ
SyXaMe9rI1P3lHww4Wwo4KW9iilDquyxSR/WyByRvA8XP/SrfUFVPqG8ho85etF7
JgOPUWW1+B0omv//kQXFOTIz61nQJ8O0x3jMhRl7RoEQewbzT0Na87hhm0ZNIlD6
ASJNxFJHIkRcM3MRRI4xY/1HC9yRQ1x/NarJIksCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQV2b0BggBmD57sLcnOMCOm4K2OZzAfBgNVHSMEGDAWgBSByLc6t73rdv9I
ssoJlhbtvnHEJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2djaTNPcmU5NjNiX1NMTEtDWllXN2I1eHhDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTgvMjA3OTM0LTllZGMtNGE4OS04MjBlLWQ4NDg4YjNhYjQyZi8x
L0ZkbTlBWUlBWmctZTdDM0p6akFqcHVDdGptYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgv
MjA3OTM0LTllZGMtNGE4OS04MjBlLWQ4NDg4YjNhYjQyZi8xL2djaTNPcmU5NjNi
X1NMTEtDWllXN2I1eHhDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFXRVgMEALm/5gMEALnXlTANBgkq
hkiG9w0BAQsFAAOCAQEAWuzX8fbGyaKOvkK26EVpNwLPXKHuU5Ip1z/Y3oPeTGtX
pDPN1i50XmdEF4iT7E1fJDSypkp9uXp3Xu/3p7eyHmrPSbocxTergHU1qYKSszk2
KDPwOVf3EjUYpcmFakp9NHVcYLJhx3tuHY4CJW9zg9R2ZBopwzYwZvwcG/plGtSd
7i/f3ZPE9FpMe8V3Pg1CViw45sSW9iz7gPQA2AgsdppAM3cUDM3SliCcOqmjdiVR
Va9bh0G00y7YVSEcMTBVk1kCunAwb8Y1/b8Du+1/nF3lF9nR4nTMY2xrVkxVO/83
XF4b/cwBaxN32XnNuCLVPqpez6ZCoF0uKRqwM+Oj4A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:02 2024 by rpki-client on console-ams.rpki-client.org