Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ik_m2eSBu3RJH3BIs_BCR12gCMg.roa
File: Ik_m2eSBu3RJH3BIs_BCR12gCMg.roa (raw, json)
Hash identifier: fzU/imsK7oi+ksoRBVxEZD9/0n4cRmk8OWILKoZYAF4=
Subject key identifier: 22:4F:E6:D9:E4:81:BB:74:49:1F:70:48:B3:F0:42:47:5D:A0:08:C8
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0183EC2502D1E7E6A4A6518FEFCFA83E67C9
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ik_m2eSBu3RJH3BIs_BCR12gCMg.roa
Signing time: Tue 18 Oct 2022 17:29:52 +0000
ROA not before: Tue 18 Oct 2022 17:29:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62390
IP address blocks: 89.47.232.0/24 maxlen: 24
89.45.12.0/24 maxlen: 24
89.45.12.0/23 maxlen: 23
89.45.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ec:25:02:d1:e7:e6:a4:a6:51:8f:ef:cf:a8:3e:67:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 18 17:29:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=224fe6d9e481bb74491f7048b3f042475da008c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0b:bb:8a:80:ac:18:73:38:27:ee:ce:92:59:
aa:e1:77:c8:01:65:b5:62:8a:9b:11:44:65:94:a9:
29:26:c6:fe:b7:63:b8:07:57:0f:a9:94:1c:63:69:
6c:bc:12:82:89:06:9f:aa:99:d6:6c:b7:ae:19:d0:
f7:60:b1:22:6f:e9:fe:64:26:7a:98:32:dc:d5:6a:
7a:50:47:8e:88:61:a0:f4:68:c2:7a:a6:82:da:c0:
81:ad:5f:12:13:97:e2:0c:03:15:22:8b:e3:43:4c:
34:c7:03:be:4a:37:3f:50:bf:d8:f8:4e:03:b9:da:
a3:66:73:5c:55:8a:4e:33:f6:9e:6b:91:9c:e1:a8:
1e:dd:9c:99:a0:29:98:c7:f9:33:35:65:5b:85:56:
13:44:58:6a:e4:3a:e8:23:fe:25:16:95:9c:3a:1e:
b5:0c:7f:8d:7c:63:cc:1a:0a:8a:aa:1e:63:be:9c:
e7:50:93:8e:ae:f1:0e:6a:95:ce:e8:18:13:5f:1c:
94:aa:fa:fb:bb:db:71:b6:0f:2e:64:0c:90:a3:f3:
07:07:b8:66:c8:7f:69:b6:60:ba:b6:55:ba:f0:63:
22:0e:87:53:86:f2:37:35:a4:9d:5d:fc:67:15:66:
5b:b6:cc:2f:8b:05:e5:14:0b:16:75:3f:52:06:20:
36:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4F:E6:D9:E4:81:BB:74:49:1F:70:48:B3:F0:42:47:5D:A0:08:C8
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ik_m2eSBu3RJH3BIs_BCR12gCMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.12.0/23
89.47.232.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:7f:49:8e:78:85:5d:8f:74:2e:39:29:cb:c3:90:e8:4b:a6:
11:47:94:43:3a:d0:89:2b:59:af:43:3c:ca:6b:6b:36:8b:4a:
43:13:63:fa:57:49:29:60:c5:79:19:94:26:35:5f:2f:c6:21:
25:f6:10:42:5d:e3:78:fa:ee:3d:b1:2c:76:22:cb:2a:5a:11:
75:04:ce:6f:96:3c:94:ce:22:2c:fe:3a:dc:98:19:c6:34:22:
70:60:9c:fb:9c:86:66:48:3f:60:76:5d:cc:55:8d:59:84:67:
2d:32:45:43:aa:93:21:c2:3c:c7:b2:11:9d:ec:ee:23:10:61:
4d:43:29:57:cb:42:33:68:a8:8a:1c:21:e1:8b:00:0f:7a:bc:
41:04:b0:e8:e6:2f:91:47:15:c8:59:fd:46:2d:75:05:44:dd:
94:88:bc:4e:f4:28:01:96:c5:f9:57:aa:86:44:05:0a:21:4f:
c5:b3:4e:e4:60:7f:0d:82:85:ca:1f:d0:cb:93:29:54:b8:26:
27:70:42:51:6a:68:7a:2b:2f:78:4a:5f:96:f4:ea:a9:1f:80:
69:aa:2d:92:c9:56:32:77:85:eb:c0:2f:15:09:8c:57:ea:eb:
92:9c:8d:d0:6d:0d:ea:81:e2:89:0a:0e:da:6f:23:3e:16:75:
3d:93:6e:36
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYPsJQLR5+akplGP78+oPmfJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjIxMDE4MTcyOTUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjRmZTZkOWU0ODFiYjc0NDkxZjcwNDhiM2YwNDI0NzVkYTAwOGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAu7ioCsGHM4J+7Oklmq4XfIAWW1
YoqbEURllKkpJsb+t2O4B1cPqZQcY2lsvBKCiQafqpnWbLeuGdD3YLEib+n+ZCZ6
mDLc1Wp6UEeOiGGg9GjCeqaC2sCBrV8SE5fiDAMVIovjQ0w0xwO+Sjc/UL/Y+E4D
udqjZnNcVYpOM/aea5Gc4age3ZyZoCmYx/kzNWVbhVYTRFhq5DroI/4lFpWcOh61
DH+NfGPMGgqKqh5jvpznUJOOrvEOapXO6BgTXxyUqvr7u9txtg8uZAyQo/MHB7hm
yH9ptmC6tlW68GMiDodThvI3NaSdXfxnFWZbtswviwXlFAsWdT9SBiA2xwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCJP5tnkgbt0SR9wSLPwQkddoAjIMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvSWtfbTJlU0J1M1JKSDNCSXNfQkNSMTJnQ01nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBWS0MAwQA
WS/oMA0GCSqGSIb3DQEBCwUAA4IBAQAPf0mOeIVdj3QuOSnLw5DoS6YRR5RDOtCJ
K1mvQzzKa2s2i0pDE2P6V0kpYMV5GZQmNV8vxiEl9hBCXeN4+u49sSx2IssqWhF1
BM5vljyUziIs/jrcmBnGNCJwYJz7nIZmSD9gdl3MVY1ZhGctMkVDqpMhwjzHshGd
7O4jEGFNQylXy0IzaKiKHCHhiwAPerxBBLDo5i+RRxXIWf1GLXUFRN2UiLxO9CgB
lsX5V6qGRAUKIU/Fs07kYH8NgoXKH9DLkylUuCYncEJRamh6Ky94Sl+W9OqpH4Bp
qi2SyVYyd4XrwC8VCYxX6uuSnI3QbQ3qgeKJCg7abyM+FnU9k242
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org