Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/Ly92DpI1Cd0msgoFoeQTVFZ1YWY.roa
File: Ly92DpI1Cd0msgoFoeQTVFZ1YWY.roa (raw, json)
Hash identifier: Ys0d5F1qTj/sHuPkfmwhixIb9Z/q4d2cbBNzx36IS1Q=
Subject key identifier: 2F:2F:76:0E:92:35:09:DD:26:B2:0A:05:A1:E4:13:54:56:75:61:66
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 06413FE6
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/Ly92DpI1Cd0msgoFoeQTVFZ1YWY.roa
Signing time: Sat 05 Mar 2022 07:59:55 +0000
ROA not before: Sat 05 Mar 2022 07:59:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200651
IP address blocks: 89.42.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104939494 (0x6413fe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Mar 5 07:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f2f760e923509dd26b20a05a1e4135456756166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:c7:ad:0f:a0:22:38:ab:e7:23:90:d8:32:
58:68:04:bb:c6:ba:d3:6d:70:b4:7d:7c:09:4f:c4:
1d:14:04:fb:35:3b:32:d7:af:50:36:f7:62:e7:96:
8f:14:bc:af:7a:88:42:a9:5d:3b:50:11:d7:88:a0:
48:50:a0:ab:0d:f1:b3:4e:d9:8a:77:75:2d:21:fe:
ee:40:33:73:b1:97:34:d6:65:65:a3:de:58:22:51:
3b:45:40:7d:de:9d:3b:10:e3:cb:fd:1d:26:c9:dc:
27:3c:17:f0:ca:a8:d0:3a:47:7e:40:fa:fb:9b:18:
07:65:d6:2d:62:49:f7:08:d0:a6:7b:3a:35:b1:e9:
68:c3:3a:c4:4d:e3:70:f1:31:26:77:0e:91:3e:b7:
5c:60:d4:fb:d0:c2:35:ef:7b:15:b9:e6:85:dd:10:
af:21:25:73:53:10:69:1d:56:1b:f9:0d:1d:13:e5:
65:fd:11:35:03:bd:9c:74:c8:27:c1:13:3b:8a:4a:
a6:8c:7c:ef:0e:28:cf:34:24:51:8a:3d:8f:1e:99:
1d:55:b5:4c:41:b5:08:c2:29:88:48:63:bd:38:d6:
55:d1:6e:8f:d6:81:a4:be:b7:59:22:f1:d4:4c:47:
30:ce:ec:ea:50:a8:15:55:8a:0f:65:47:5a:7d:e4:
be:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2F:76:0E:92:35:09:DD:26:B2:0A:05:A1:E4:13:54:56:75:61:66
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/Ly92DpI1Cd0msgoFoeQTVFZ1YWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.135.0/24
Signature Algorithm: sha256WithRSAEncryption
09:d5:90:43:a8:63:87:a5:5d:4d:6e:42:13:89:5a:98:1f:97:
17:94:21:a7:4e:57:89:a4:bf:8b:18:c1:a7:46:9d:5c:70:22:
7b:f0:e7:40:eb:c7:6e:e5:f9:67:dc:7e:31:51:c8:2b:f8:dd:
c3:79:b5:80:be:6e:f9:df:c3:f3:45:0c:58:3a:3a:37:7c:0a:
bf:53:da:ff:74:c9:0b:7e:c8:c5:c3:61:ae:92:eb:66:7b:fe:
3d:a6:6b:d0:f1:00:af:93:18:74:40:b4:96:0e:82:b8:d0:0f:
71:25:e3:eb:c9:e9:d7:01:f6:59:e9:f9:de:76:c3:41:41:f1:
1e:af:d7:bd:1d:ca:6b:51:3e:65:74:4e:d2:a4:a1:12:c1:e8:
05:bd:91:e6:c9:3e:00:f5:6d:c2:48:60:c7:cb:fb:78:ac:e2:
3b:56:70:f3:8e:8f:db:3c:f9:77:b4:65:0d:b4:fd:d7:72:c5:
db:44:3b:62:a0:c9:02:3f:b8:71:1b:e8:fb:10:4f:60:6b:5c:
de:fb:b3:ef:d4:53:90:fe:12:fe:2d:6e:a7:a1:b2:fb:29:1f:
26:0c:2e:ef:43:c4:b8:fa:99:51:d9:aa:59:33:66:0a:e7:3c:
67:6f:15:3c:fe:f1:2e:83:5c:a4:45:52:9b:fc:4e:77:dd:cb:
91:51:a7:6f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBkE/5jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
Y2VmNThkNGNmYTM1NTQzZjg0ODhhMjc1NmU2OTI0ZTY0N2I0NTg5MB4XDTIyMDMw
NTA3NTk1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmYyZjc2MGU5MjM1
MDlkZDI2YjIwYTA1YTFlNDEzNTQ1Njc1NjE2NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL1Lx60PoCI4q+cjkNgyWGgEu8a6021wtH18CU/EHRQE+zU7
MtevUDb3YueWjxS8r3qIQqldO1AR14igSFCgqw3xs07Zind1LSH+7kAzc7GXNNZl
ZaPeWCJRO0VAfd6dOxDjy/0dJsncJzwX8Mqo0DpHfkD6+5sYB2XWLWJJ9wjQpns6
NbHpaMM6xE3jcPExJncOkT63XGDU+9DCNe97Fbnmhd0QryElc1MQaR1WG/kNHRPl
Zf0RNQO9nHTIJ8ETO4pKpox87w4ozzQkUYo9jx6ZHVW1TEG1CMIpiEhjvTjWVdFu
j9aBpL63WSLx1ExHMM7s6lCoFVWKD2VHWn3kvu0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQvL3YOkjUJ3SayCgWh5BNUVnVhZjAfBgNVHSMEGDAWgBTc71jUz6NVQ/hI
iidW5pJOZHtFiTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNPOVkxTS1qVlVQNFNJb25WdWFTVG1SN1JZay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWEvZWE0NDU1LTc4MzYtNDRjNC1iMmEzLTJlY2UwNGUxODVjMi8x
L0x5OTJEcEkxQ2QwbXNnb0ZvZVFUVkZaMVlXWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEv
ZWE0NDU1LTc4MzYtNDRjNC1iMmEzLTJlY2UwNGUxODVjMi8xLzNPOVkxTS1qVlVQ
NFNJb25WdWFTVG1SN1JZay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFkqhzANBgkqhkiG9w0BAQsFAAOC
AQEACdWQQ6hjh6VdTW5CE4lamB+XF5Qhp05XiaS/ixjBp0adXHAie/DnQOvHbuX5
Z9x+MVHIK/jdw3m1gL5u+d/D80UMWDo6N3wKv1Pa/3TJC37IxcNhrpLrZnv+PaZr
0PEAr5MYdEC0lg6CuNAPcSXj68np1wH2Wen53nbDQUHxHq/XvR3Ka1E+ZXRO0qSh
EsHoBb2R5sk+APVtwkhgx8v7eKziO1Zw846P2zz5d7RlDbT913LF20Q7YqDJAj+4
cRvo+xBPYGtc3vuz79RTkP4S/i1up6Gy+ykfJgwu70PEuPqZUdmqWTNmCuc8Z28V
PP7xLoNcpEVSm/xOd93LkVGnbw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:01 2023 by rpki-client on console-fra.rpki-client.org