Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/4wxo0OLDJ2iV-C4e0-3QZECsfMg.roa
File: 4wxo0OLDJ2iV-C4e0-3QZECsfMg.roa (raw, json)
Hash identifier: N8MNOcQH9RrGJ8jPVuR8qdLC9nfJhHkE1pWTvyOSVAU=
Subject key identifier: E3:0C:68:D0:E2:C3:27:68:95:F8:2E:1E:D3:ED:D0:64:40:AC:7C:C8
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 0185587C088D141C6E86ECDC74F9D2AAE9A5
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/4wxo0OLDJ2iV-C4e0-3QZECsfMg.roa
Signing time: Wed 28 Dec 2022 11:26:41 +0000
ROA not before: Wed 28 Dec 2022 11:26:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34636
IP address blocks: 94.139.176.0/21 maxlen: 21
94.139.184.0/22 maxlen: 22
94.139.190.0/23 maxlen: 23
94.139.188.0/24 maxlen: 24
109.162.254.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:7c:08:8d:14:1c:6e:86:ec:dc:74:f9:d2:aa:e9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Dec 28 11:26:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e30c68d0e2c3276895f82e1ed3edd06440ac7cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:94:ab:f7:9d:60:f6:15:53:5e:13:a8:f4:
6c:06:5d:0c:c9:be:cc:c0:fc:0c:99:a9:ca:1b:40:
61:0c:10:96:5a:c1:71:fb:15:c1:53:d9:5e:4c:e7:
56:21:0b:16:a3:a3:25:0d:0c:82:96:91:47:5e:f0:
cb:38:97:78:22:39:40:b0:69:b9:b2:74:86:45:b3:
1f:af:96:24:8a:41:f7:56:3f:28:63:47:f8:68:26:
e1:12:55:2d:60:73:92:1d:46:88:a1:fb:0d:95:7b:
46:a6:66:73:54:97:e4:c8:6d:cd:b2:ff:db:0f:96:
f2:ee:f8:c3:26:78:06:1b:e1:21:fb:a6:89:2c:6b:
b4:94:b5:4e:f1:01:a7:8e:ed:a6:89:e5:7d:ba:8a:
fb:9b:be:fa:54:f2:54:95:b5:1b:7e:89:f7:a1:cf:
02:88:e5:fe:44:18:6d:ee:0a:07:03:5e:73:cd:4e:
4d:8f:9b:8d:7a:e0:75:71:48:b9:03:d6:99:65:66:
b6:36:b3:58:17:1d:39:83:62:67:b4:bb:3e:8f:77:
27:b8:43:37:dc:08:e8:e7:22:1d:32:05:30:23:41:
08:88:7e:70:1d:1d:d8:cd:d8:83:1b:5a:4d:9d:aa:
f2:f3:70:53:a5:b7:c7:7c:ad:7f:79:03:79:5f:b3:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0C:68:D0:E2:C3:27:68:95:F8:2E:1E:D3:ED:D0:64:40:AC:7C:C8
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/4wxo0OLDJ2iV-C4e0-3QZECsfMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.176.0-94.139.188.255
94.139.190.0/23
109.162.254.0/23
Signature Algorithm: sha256WithRSAEncryption
24:f9:9e:7f:b8:e6:86:bd:b1:cd:39:19:b2:bd:e5:2f:8a:34:
73:c6:82:49:e1:42:0a:5d:52:32:f3:f8:d8:7e:3a:12:20:76:
7a:e6:51:fe:51:73:b4:12:1b:60:5b:41:02:d9:8d:a2:43:cb:
c2:55:94:38:00:a7:90:f8:41:eb:dc:aa:e1:42:a8:55:ce:7f:
36:7d:7c:c1:ac:e2:cf:db:bc:f5:3b:86:9f:1c:bb:e9:7d:ce:
d5:5a:d5:c3:84:22:66:21:a6:8b:95:7e:d5:8f:2b:2e:9c:29:
e2:cc:e1:27:c0:d3:6b:c7:f9:e2:42:39:e4:36:39:4c:6e:06:
c6:61:b8:4e:2c:1e:af:f2:15:86:7e:8a:4c:be:cd:9e:40:f0:
a4:23:18:f0:43:06:ae:72:e6:26:a7:bc:fb:9a:5e:d1:ce:0a:
81:2a:b0:16:94:cd:e6:f3:06:32:11:02:5b:2d:5e:24:6b:1b:
fd:e7:46:8b:37:29:cf:2c:2a:0e:e4:46:2e:e9:3e:dc:33:0c:
0a:6c:df:04:da:61:90:ac:de:40:9d:ee:e5:c0:ac:a2:c9:db:
cc:ee:70:96:53:f7:62:a4:0b:49:8d:3b:34:36:7b:ea:bd:82:
aa:be:36:0a:55:1c:4f:1e:83:62:83:eb:cf:57:7e:fe:85:db:
bd:3a:d9:3e
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYVYfAiNFBxuhuzcdPnSqumlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0
NzdmN2UwHhcNMjIxMjI4MTEyNjQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzBjNjhkMGUyYzMyNzY4OTVmODJlMWVkM2VkZDA2NDQwYWM3Y2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4iUq/edYPYVU14TqPRsBl0Myb7M
wPwMmanKG0BhDBCWWsFx+xXBU9leTOdWIQsWo6MlDQyClpFHXvDLOJd4IjlAsGm5
snSGRbMfr5YkikH3Vj8oY0f4aCbhElUtYHOSHUaIofsNlXtGpmZzVJfkyG3Nsv/b
D5by7vjDJngGG+Eh+6aJLGu0lLVO8QGnju2mieV9uor7m776VPJUlbUbfon3oc8C
iOX+RBht7goHA15zzU5Nj5uNeuB1cUi5A9aZZWa2NrNYFx05g2JntLs+j3cnuEM3
3Ajo5yIdMgUwI0EIiH5wHR3YzdiDG1pNnary83BTpbfHfK1/eQN5X7MFiQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFOMMaNDiwydolfguHtPt0GRArHzIMB8GA1UdIwQY
MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt
OGVhYjdmNGZlNzdlLzEvNHd4bzBPTERKMmlWLUM0ZTAtM1FaRUNzZk1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl
LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBARei7AD
BABei7wDBAFei74DBAFtov4wDQYJKoZIhvcNAQELBQADggEBACT5nn+45oa9sc05
GbK95S+KNHPGgknhQgpdUjLz+Nh+OhIgdnrmUf5Rc7QSG2BbQQLZjaJDy8JVlDgA
p5D4QevcquFCqFXOfzZ9fMGs4s/bvPU7hp8cu+l9ztVa1cOEImYhpouVftWPKy6c
KeLM4SfA02vH+eJCOeQ2OUxuBsZhuE4sHq/yFYZ+iky+zZ5A8KQjGPBDBq5y5ian
vPuaXtHOCoEqsBaUzebzBjIRAlstXiRrG/3nRos3Kc8sKg7kRi7pPtwzDAps3wTa
YZCs3kCd7uXArKLJ28zucJZT92KkC0mNOzQ2e+q9gqq+NgpVHE8eg2KD689Xfv6F
27062T4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:21 2024 by rpki-client on console-fra.rpki-client.org