Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/a9iYOCggAo6VfMt86C7i9MgtfJg.roa
File: a9iYOCggAo6VfMt86C7i9MgtfJg.roa (raw, json)
Hash identifier: NtIuRvzhC5LzP+MgYNE+leIR7ORw/e+KfwglU2xmt/E=
Subject key identifier: 6B:D8:98:38:28:20:02:8E:95:7C:CB:7C:E8:2E:E2:F4:C8:2D:7C:98
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 088E2612
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/a9iYOCggAo6VfMt86C7i9MgtfJg.roa
Signing time: Fri 24 Jun 2022 15:29:40 +0000
ROA not before: Fri 24 Jun 2022 15:29:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203120
IP address blocks: 89.37.96.0/24 maxlen: 24
89.33.254.0/24 maxlen: 24
89.36.141.0/24 maxlen: 24
188.172.176.0/20 maxlen: 20
188.209.120.0/23 maxlen: 23
89.34.102.0/24 maxlen: 24
93.115.59.0/24 maxlen: 24
93.119.120.0/23 maxlen: 23
86.106.10.0/24 maxlen: 24
46.102.180.0/24 maxlen: 24
86.105.176.0/24 maxlen: 24
89.37.130.0/23 maxlen: 23
89.41.190.0/23 maxlen: 23
89.37.134.0/24 maxlen: 24
77.81.90.0/23 maxlen: 23
86.105.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143533586 (0x88e2612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jun 24 15:29:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bd898382820028e957ccb7ce82ee2f4c82d7c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5c:8b:60:94:26:d7:63:dd:b7:f1:9f:74:64:
3f:20:b8:6b:22:c5:1f:09:9c:6f:fb:63:04:cc:f6:
a9:5c:7f:71:43:a0:a0:5c:23:a8:59:64:65:4f:46:
63:6b:50:21:e4:d7:fc:2f:99:de:07:d5:9a:ce:cc:
40:27:78:f8:81:4d:af:f7:cd:25:dd:6c:57:e2:c0:
13:f7:77:2a:f0:fa:35:c1:66:52:fe:fa:18:14:08:
e2:48:e0:c8:62:01:12:ea:ef:f0:c5:91:7a:f7:9c:
96:bc:0e:11:64:db:72:85:5a:44:9e:17:85:ce:a5:
5c:9a:3e:3a:60:e9:a3:66:5c:08:ce:64:79:21:91:
5e:14:87:16:15:43:07:73:3d:38:f8:08:e7:fe:dd:
4d:83:c9:0d:a5:05:e5:69:d7:ea:8f:dc:d3:5a:c0:
01:c0:c3:5f:fb:60:6b:e7:87:6d:76:00:6f:28:18:
e9:e9:ba:8b:50:fb:04:2e:84:9d:40:86:7a:94:96:
81:cb:f5:a5:c2:8a:5e:60:0d:ca:06:de:9a:b9:c5:
42:26:0a:eb:a4:d6:de:68:68:e8:ac:f3:0b:67:d4:
6b:8e:59:f3:2b:9b:42:f9:85:53:49:18:1a:a9:f8:
a3:04:00:9a:f6:e3:21:98:8b:2e:91:e5:33:3e:8f:
67:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D8:98:38:28:20:02:8E:95:7C:CB:7C:E8:2E:E2:F4:C8:2D:7C:98
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/a9iYOCggAo6VfMt86C7i9MgtfJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.180.0/24
77.81.90.0/23
86.105.6.0/24
86.105.176.0/24
86.106.10.0/24
89.33.254.0/24
89.34.102.0/24
89.36.141.0/24
89.37.96.0/24
89.37.130.0/23
89.37.134.0/24
89.41.190.0/23
93.115.59.0/24
93.119.120.0/23
188.172.176.0/20
188.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:46:59:97:a2:15:a5:84:a0:cd:0d:37:ad:32:43:7f:2d:b8:
24:a2:f7:c1:af:54:bd:c8:64:19:27:e0:c3:4a:72:7f:9f:e4:
11:b2:69:48:85:a5:e4:2a:67:a2:7c:2b:84:bf:0a:df:45:4a:
8a:ca:c6:f4:71:ec:6c:23:10:2a:25:ea:e1:42:6a:3b:38:8e:
64:e6:b5:dd:39:58:4d:c7:ed:86:8c:c1:a3:b0:2b:56:27:51:
38:1b:f0:ff:b6:bb:2c:6c:2a:bc:0f:9e:89:62:ed:0b:68:20:
9c:36:14:a0:fc:5b:b3:f6:f7:83:f5:12:69:98:9d:be:58:18:
33:f5:0d:7c:a1:aa:01:ac:ff:dd:b4:19:ec:3b:5a:eb:47:c8:
86:f6:1e:98:51:72:e3:56:42:9e:ec:2a:84:57:34:eb:26:39:
77:5e:4e:dc:4b:17:ea:62:92:93:de:3f:94:48:f7:c2:52:e1:
d1:76:be:b7:ac:11:9f:bc:ef:5e:43:fd:84:e9:1b:6b:19:d8:
b0:60:cd:73:ae:34:a5:8c:b8:4a:86:10:dc:a3:10:f3:bf:54:
c4:ea:ba:a3:6c:7b:e1:7b:b9:75:12:68:bd:4f:36:5e:d3:23:
fc:31:28:13:97:50:23:87:31:b4:94:33:d7:f9:c6:59:1b:aa:
21:78:db:62
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIECI4mEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NGY4MjRkMzJkZjFhNTExM2Q4MjEwMTM0NWQ3ODVhMzhhZGRiZGU1MB4XDTIyMDYy
NDE1Mjk0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmJkODk4MzgyODIw
MDI4ZTk1N2NjYjdjZTgyZWUyZjRjODJkN2M5ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIJci2CUJtdj3bfxn3RkPyC4ayLFHwmcb/tjBMz2qVx/cUOg
oFwjqFlkZU9GY2tQIeTX/C+Z3gfVms7MQCd4+IFNr/fNJd1sV+LAE/d3KvD6NcFm
Uv76GBQI4kjgyGIBEurv8MWReveclrwOEWTbcoVaRJ4Xhc6lXJo+OmDpo2ZcCM5k
eSGRXhSHFhVDB3M9OPgI5/7dTYPJDaUF5WnX6o/c01rAAcDDX/tga+eHbXYAbygY
6em6i1D7BC6EnUCGepSWgcv1pcKKXmANygbemrnFQiYK66TW3mho6KzzC2fUa45Z
8yubQvmFU0kYGqn4owQAmvbjIZiLLpHlMz6PZ6UCAwEAAaOCAmMwggJfMB0GA1Ud
DgQWBBRr2Jg4KCACjpV8y3zoLuL0yC18mDAfBgNVHSMEGDAWgBSE+CTTLfGlET2C
EBNF14Wjit295TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hQZ2sweTN4cFJFOWdoQVRSZGVGbzRyZHZlVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTEvOWQ2NWJiLWFiNGYtNDNhYS1iYmE4LTQzNzM5NDkzOGM1Mi8x
L2E5aVlPQ2dnQW82VmZNdDg2QzdpOU1ndGZKZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEv
OWQ2NWJiLWFiNGYtNDNhYS1iYmE4LTQzNzM5NDkzOGM1Mi8xL2hQZ2sweTN4cFJF
OWdoQVRSZGVGbzRyZHZlVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB5
BggrBgEFBQcBBwEB/wRqMGgwZgQCAAEwYAMEAC5mtAMEAU1RWgMEAFZpBgMEAFZp
sAMEAFZqCgMEAFkh/gMEAFkiZgMEAFkkjQMEAFklYAMEAVklggMEAFklhgMEAVkp
vgMEAF1zOwMEAV13eAMEBLyssAMEAbzReDANBgkqhkiG9w0BAQsFAAOCAQEArEZZ
l6IVpYSgzQ03rTJDfy24JKL3wa9UvchkGSfgw0pyf5/kEbJpSIWl5CpnonwrhL8K
30VKisrG9HHsbCMQKiXq4UJqOziOZOa13TlYTcfthozBo7ArVidROBvw/7a7LGwq
vA+eiWLtC2ggnDYUoPxbs/b3g/USaZidvlgYM/UNfKGqAaz/3bQZ7Dta60fIhvYe
mFFy41ZCnuwqhFc06yY5d15O3EsX6mKSk94/lEj3wlLh0Xa+t6wRn7zvXkP9hOkb
axnYsGDNc640pYy4SoYQ3KMQ879UxOq6o2x74Xu5dRJovU82XtMj/DEoE5dQI4cx
tJQz1/nGWRuqIXjbYg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:34 2023 by rpki-client on console-fra.rpki-client.org