Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/dsY2Q8f-Je-wSvPAbEsIxErY7SE.roa
File: dsY2Q8f-Je-wSvPAbEsIxErY7SE.roa (raw, json)
Hash identifier: G8WRv4aisBbDD6/AmXuqLk5twPZEtag4K8GIETfGRpY=
Subject key identifier: 76:C6:36:43:C7:FE:25:EF:B0:4A:F3:C0:6C:4B:08:C4:4A:D8:ED:21
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 17CA565D
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/dsY2Q8f-Je-wSvPAbEsIxErY7SE.roa
Signing time: Tue 05 Apr 2022 13:20:04 +0000
ROA not before: Tue 05 Apr 2022 13:20:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3343
IP address blocks: 80.250.191.0/24 maxlen: 24
86.110.118.0/24 maxlen: 24
86.110.117.0/24 maxlen: 24
86.110.116.0/24 maxlen: 24
80.250.176.0/23 maxlen: 23
86.110.119.0/24 maxlen: 24
85.143.191.0/24 maxlen: 24
80.250.184.0/24 maxlen: 24
80.250.183.0/24 maxlen: 24
80.250.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399136349 (0x17ca565d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Apr 5 13:20:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76c63643c7fe25efb04af3c06c4b08c44ad8ed21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:34:4c:d9:41:23:46:03:69:65:cf:07:c7:
a1:af:5b:c0:e1:97:ce:33:97:bb:da:d4:76:d2:b4:
97:3a:22:45:78:1e:aa:0c:7b:e3:90:de:dc:26:fc:
11:31:a6:ca:c4:9d:dd:46:e3:26:5e:dd:5d:32:a9:
77:ba:50:64:eb:71:c8:7b:44:8a:08:ab:14:88:d2:
96:52:ed:f8:cc:22:41:a2:f3:d8:42:60:fe:0b:24:
e4:05:10:2a:98:59:3a:51:59:d6:0d:a1:04:29:7c:
db:1e:22:04:04:77:7c:42:de:39:1c:aa:56:14:af:
00:98:24:b0:74:bb:f4:89:14:f3:e0:a4:f3:ce:3f:
67:5c:93:45:82:27:07:35:4b:53:fd:cf:16:d6:1f:
37:03:10:d2:81:41:c8:aa:67:bb:2f:40:25:cf:f2:
28:52:7a:c0:f0:b9:c8:a7:af:d4:23:64:06:04:30:
b5:72:bf:0c:ea:e3:b6:ea:30:e4:7f:34:09:1e:17:
28:73:67:eb:55:0c:4c:29:17:51:4e:97:10:5f:36:
74:69:21:37:bd:8d:b3:e0:02:14:10:b0:d6:a4:9e:
9b:00:c7:b7:50:ba:81:2c:1e:b1:87:bb:91:43:5e:
6c:87:4c:2a:80:3b:e6:ad:9b:5c:b9:a6:ef:bd:e2:
4e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C6:36:43:C7:FE:25:EF:B0:4A:F3:C0:6C:4B:08:C4:4A:D8:ED:21
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/dsY2Q8f-Je-wSvPAbEsIxErY7SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.176.0/23
80.250.182.0-80.250.184.255
80.250.191.0/24
85.143.191.0/24
86.110.116.0/22
Signature Algorithm: sha256WithRSAEncryption
55:3c:80:f5:7f:15:0d:43:1a:e7:f4:d4:6c:65:46:3a:17:38:
fe:09:e3:aa:c6:3f:e3:15:ef:db:0c:ca:bf:1f:d9:de:a3:ed:
b0:34:72:47:b8:78:fa:e2:a6:d3:57:b6:dc:82:ab:30:62:74:
dd:d4:f0:dd:4d:f8:a2:b0:53:00:1d:41:23:ec:a9:12:52:33:
24:ab:ea:04:57:8e:d1:14:43:6b:24:4c:30:fa:ca:f4:27:4d:
57:e0:fe:4a:30:53:9b:84:79:07:08:06:26:92:b0:99:cf:19:
f2:ec:60:d8:d4:5a:95:dd:c7:dc:7d:0f:2d:92:d2:7c:70:06:
61:89:f1:dd:b0:e5:04:e5:8c:74:c7:73:b3:48:bb:44:74:37:
3d:b1:48:4c:39:8c:e3:82:90:fe:36:94:84:8d:2a:02:7c:59:
23:6f:bd:32:9e:7a:3a:dd:ad:0d:69:df:3c:9f:45:a8:fd:c7:
46:8f:74:60:34:4d:2e:8d:b6:3c:44:57:ab:42:cc:6d:1b:a7:
ad:e2:c9:c3:11:13:16:9f:80:f7:cd:92:e3:07:8c:c3:bb:01:
24:fe:79:78:75:d9:d5:77:98:43:4d:4f:f5:ec:68:0a:2c:d7:
02:9d:5c:a8:2e:59:9c:75:a4:01:ca:fd:04:5d:9c:04:de:d2:
d7:69:3d:9e
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIEF8pWXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
OGIyMjAyM2I2ZWFkNGMyOTY4M2E5ZmVkNDQ5M2QwM2RlZTJjNjg1MB4XDTIyMDQw
NTEzMjAwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzZjNjM2NDNjN2Zl
MjVlZmIwNGFmM2MwNmM0YjA4YzQ0YWQ4ZWQyMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALj7NEzZQSNGA2llzwfHoa9bwOGXzjOXu9rUdtK0lzoiRXge
qgx745De3Cb8ETGmysSd3UbjJl7dXTKpd7pQZOtxyHtEigirFIjSllLt+MwiQaLz
2EJg/gsk5AUQKphZOlFZ1g2hBCl82x4iBAR3fELeORyqVhSvAJgksHS79IkU8+Ck
884/Z1yTRYInBzVLU/3PFtYfNwMQ0oFByKpnuy9AJc/yKFJ6wPC5yKev1CNkBgQw
tXK/DOrjtuow5H80CR4XKHNn61UMTCkXUU6XEF82dGkhN72Ns+ACFBCw1qSemwDH
t1C6gSwesYe7kUNebIdMKoA75q2bXLmm773iTqsCAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBR2xjZDx/4l77BK88BsSwjEStjtITAfBgNVHSMEGDAWgBQ4siAjturUwpaD
qf7UST0D3uLGhTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09MSWdJN2JxMU1LV2c2bi0xRWs5QTk3aXhvVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTcvODgxM2Y1LTRlN2ItNGQ1MS1iNWYzLTQwZDk1YmQzM2ZjYi8x
L2RzWTJROGYtSmUtd1N2UEFiRXNJeEVyWTdTRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcv
ODgxM2Y1LTRlN2ItNGQ1MS1iNWYzLTQwZDk1YmQzM2ZjYi8xL09MSWdJN2JxMU1L
V2c2bi0xRWs5QTk3aXhvVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wLAQCAAEwJgMEAVD6sDAMAwQBUPq2AwQAUPq4AwQA
UPq/AwQAVY+/AwQCVm50MA0GCSqGSIb3DQEBCwUAA4IBAQBVPID1fxUNQxrn9NRs
ZUY6Fzj+CeOqxj/jFe/bDMq/H9neo+2wNHJHuHj64qbTV7bcgqswYnTd1PDdTfii
sFMAHUEj7KkSUjMkq+oEV47RFENrJEww+sr0J01X4P5KMFObhHkHCAYmkrCZzxny
7GDY1FqV3cfcfQ8tktJ8cAZhifHdsOUE5Yx0x3OzSLtEdDc9sUhMOYzjgpD+NpSE
jSoCfFkjb70ynno63a0Nad88n0Wo/cdGj3RgNE0ujbY8RFerQsxtG6et4snDERMW
n4D3zZLjB4zDuwEk/nl4ddnVd5hDTU/17GgKLNcCnVyoLlmcdaQByv0EXZwE3tLX
aT2e
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org