Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/yd0Mg1oITl4ktN_MM9Y4LhQGnz8.roa
File: yd0Mg1oITl4ktN_MM9Y4LhQGnz8.roa (raw, json)
Hash identifier: 12Ye+UBuCsTvVUByNWJqgX3tlTBqPTSqAjZWLMpKj20=
Subject key identifier: C9:DD:0C:83:5A:08:4E:5E:24:B4:DF:CC:33:D6:38:2E:14:06:9F:3F
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 3662583D
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/yd0Mg1oITl4ktN_MM9Y4LhQGnz8.roa
Signing time: Sat 01 Jan 2022 13:57:23 +0000
ROA not before: Sat 01 Jan 2022 13:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48948
IP address blocks: 93.114.160.0/24 maxlen: 24
93.114.161.0/24 maxlen: 24
93.114.162.0/24 maxlen: 24
93.114.163.0/24 maxlen: 24
93.114.164.0/24 maxlen: 24
93.114.165.0/24 maxlen: 24
93.114.166.0/24 maxlen: 24
93.114.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912414781 (0x3662583d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 13:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9dd0c835a084e5e24b4dfcc33d6382e14069f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:25:f4:2e:cb:dc:95:65:d0:e6:ff:68:ef:d8:
10:db:76:17:47:52:c0:16:13:d2:a9:52:38:86:d5:
59:f8:49:de:ce:25:81:12:68:67:74:dc:c6:27:50:
0d:69:da:6f:76:95:fe:0a:e3:12:a4:1b:d5:83:47:
23:98:54:9b:0f:1e:dd:91:73:28:f9:00:20:0c:db:
8c:0f:2b:65:73:4b:d6:1d:76:95:76:33:ff:17:e9:
33:68:f8:68:33:ae:83:7a:ff:78:36:6a:18:f7:b1:
d7:20:21:a1:04:87:48:77:fa:89:c1:90:fb:9b:b1:
6a:f7:93:7d:8e:22:6b:df:3d:ea:43:97:b4:28:9e:
e4:0b:16:47:72:dc:16:d7:55:fd:13:36:14:b7:99:
9a:d5:aa:b2:2c:8f:ff:eb:a1:fd:52:86:7d:da:34:
1a:69:c9:06:64:cd:a3:31:ae:f5:df:ea:df:da:29:
83:64:44:ce:af:48:70:db:bc:2b:4d:06:0d:73:99:
90:79:1f:6b:de:15:32:e4:c3:cd:11:32:52:15:c6:
c7:15:32:03:00:2d:18:3c:25:74:e1:eb:08:85:18:
b0:72:0a:b3:39:12:83:49:d9:3c:ee:cc:ed:a6:a2:
82:21:1e:04:fc:33:c3:f7:b7:11:5b:e8:db:8a:b6:
41:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DD:0C:83:5A:08:4E:5E:24:B4:DF:CC:33:D6:38:2E:14:06:9F:3F
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/yd0Mg1oITl4ktN_MM9Y4LhQGnz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.160.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:b7:37:9b:7a:60:3e:1c:5d:25:0e:4e:13:6e:15:bd:83:40:
7b:59:6b:3d:c6:95:b3:a1:04:82:d1:5b:ad:77:01:33:05:54:
76:81:69:66:4a:f8:88:d3:1f:ca:f5:4e:97:13:3e:9c:2a:94:
32:30:40:ee:c1:fe:02:aa:45:fa:28:d6:7b:3b:a9:c1:08:52:
ae:9e:a0:e8:d4:36:87:bc:b0:60:17:68:bd:3d:88:42:ee:7f:
83:87:fa:c6:69:4c:22:f0:09:39:a1:82:ef:ba:4a:5e:a3:d1:
1d:78:b8:62:be:d7:67:be:bb:42:2e:8b:0a:9e:d2:a4:d6:09:
f5:33:d6:9a:6c:64:b5:4f:17:2b:1a:9d:b3:ad:25:57:fd:5d:
c4:aa:2f:91:7f:1d:26:25:38:d1:73:fc:3c:79:9c:64:22:e9:
b7:9b:a3:c8:09:b2:ca:81:10:7b:8a:e5:31:8a:c1:ec:dd:5d:
52:8f:3b:3b:32:18:f7:0c:de:9e:3a:c5:ba:54:a8:a2:85:54:
44:86:6e:5d:94:58:53:a5:c1:db:2b:f4:62:d0:1e:a6:79:de:
90:9b:f5:42:20:bd:36:46:d0:9f:c2:1e:6f:16:7a:5a:b3:39:
d8:2e:d1:b2:b6:7d:7b:04:3d:06:64:5a:a5:92:21:68:18:f0:
d5:6e:72:26
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENmJYPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MWQ0NmUwZTNlOGNhYWFlZDRhNTI5YmQ3ZDczMDhiZDFlZjAxYzFkMB4XDTIyMDEw
MTEzNTcyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzlkZDBjODM1YTA4
NGU1ZTI0YjRkZmNjMzNkNjM4MmUxNDA2OWYzZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKcl9C7L3JVl0Ob/aO/YENt2F0dSwBYT0qlSOIbVWfhJ3s4l
gRJoZ3TcxidQDWnab3aV/grjEqQb1YNHI5hUmw8e3ZFzKPkAIAzbjA8rZXNL1h12
lXYz/xfpM2j4aDOug3r/eDZqGPex1yAhoQSHSHf6icGQ+5uxaveTfY4ia9896kOX
tCie5AsWR3LcFtdV/RM2FLeZmtWqsiyP/+uh/VKGfdo0GmnJBmTNozGu9d/q39op
g2REzq9IcNu8K00GDXOZkHkfa94VMuTDzREyUhXGxxUyAwAtGDwldOHrCIUYsHIK
szkSg0nZPO7M7aaigiEeBPwzw/e3EVvo24q2QY8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTJ3QyDWghOXiS038wz1jguFAafPzAfBgNVHSMEGDAWgBTx1G4OPoyqrtSl
Kb19cwi9HvAcHTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhkUnVEajZNcXE3VXBTbTlmWE1JdlI3d0hCMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWIvODRlYjQ0LWJiZGYtNDZjMS1iMDQzLWI0MmYyM2Q4MjhjMy8x
L3lkME1nMW9JVGw0a3ROX01NOVk0TGhRR256OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIv
ODRlYjQ0LWJiZGYtNDZjMS1iMDQzLWI0MmYyM2Q4MjhjMy8xLzhkUnVEajZNcXE3
VXBTbTlmWE1JdlI3d0hCMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA11yoDANBgkqhkiG9w0BAQsFAAOC
AQEAL7c3m3pgPhxdJQ5OE24VvYNAe1lrPcaVs6EEgtFbrXcBMwVUdoFpZkr4iNMf
yvVOlxM+nCqUMjBA7sH+AqpF+ijWezupwQhSrp6g6NQ2h7ywYBdovT2IQu5/g4f6
xmlMIvAJOaGC77pKXqPRHXi4Yr7XZ767Qi6LCp7SpNYJ9TPWmmxktU8XKxqds60l
V/1dxKovkX8dJiU40XP8PHmcZCLpt5ujyAmyyoEQe4rlMYrB7N1dUo87OzIY9wze
njrFulSoooVURIZuXZRYU6XB2yv0YtAepnnekJv1QiC9NkbQn8IebxZ6WrM52C7R
srZ9ewQ9BmRapZIhaBjw1W5yJg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org