Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/Fi_IqoptZtIm4wxuNs_ofUudC2o.roa
File: Fi_IqoptZtIm4wxuNs_ofUudC2o.roa (raw, json)
Hash identifier: dWHl3PGogmSvXHtDyWNUhv1Pb/r4vWZPuOK7YjEUtLY=
Subject key identifier: 16:2F:C8:AA:8A:6D:66:D2:26:E3:0C:6E:36:CF:E8:7D:4B:9D:0B:6A
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 011BDC57
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/Fi_IqoptZtIm4wxuNs_ofUudC2o.roa
Signing time: Sun 29 May 2022 08:20:13 +0000
ROA not before: Sun 29 May 2022 08:20:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57391
IP address blocks: 94.139.176.0/20 maxlen: 20
94.139.191.0/24 maxlen: 24
109.162.240.0/22 maxlen: 22
109.162.246.0/24 maxlen: 24
109.162.244.0/23 maxlen: 23
109.162.240.0/20 maxlen: 20
109.162.254.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18603095 (0x11bdc57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: May 29 08:20:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=162fc8aa8a6d66d226e30c6e36cfe87d4b9d0b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:4d:47:e8:f0:be:69:52:8a:0f:a5:24:4a:
b0:7c:0f:b1:fd:31:dd:89:0c:12:9d:1b:bd:f5:a1:
64:39:07:85:fb:81:24:c9:77:4f:52:db:3c:f9:ae:
26:75:a0:cf:59:6c:ef:0f:52:27:f4:51:86:4d:00:
4e:9f:4a:cb:bf:37:e8:23:da:e2:8e:ad:5a:6d:ba:
c9:97:36:b4:db:ee:73:ba:d0:9d:8d:33:fd:95:4f:
0a:74:e3:c3:93:39:eb:12:ec:5f:8c:0d:c5:51:c4:
85:37:60:c1:d4:8e:49:6d:7d:7a:f8:1e:a0:51:e1:
a2:82:19:c3:05:b4:37:0d:e5:a5:fd:df:16:3a:9d:
94:46:c2:d2:2c:e3:05:7e:e5:34:4c:5d:67:29:14:
ce:ea:2a:20:29:56:2e:77:19:42:48:ea:c0:71:a4:
d9:23:a0:60:ed:6b:e0:f3:50:c5:3e:e8:cf:93:9a:
f2:ea:b6:35:4d:77:98:0b:0d:c3:6c:c4:e1:d9:7b:
fe:ea:80:9a:14:9c:be:73:00:21:fd:2f:d2:e4:8a:
9c:44:d0:7a:ec:82:bd:6a:8e:0f:b3:c4:18:c7:da:
f3:5c:3a:4f:77:df:89:56:fe:62:cd:65:55:f0:50:
b3:d2:2a:cc:6a:14:33:7c:21:54:46:6f:d2:77:47:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2F:C8:AA:8A:6D:66:D2:26:E3:0C:6E:36:CF:E8:7D:4B:9D:0B:6A
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/Fi_IqoptZtIm4wxuNs_ofUudC2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.176.0/20
109.162.240.0/20
Signature Algorithm: sha256WithRSAEncryption
13:9e:f4:e4:c8:69:11:3e:6d:fa:20:f6:12:42:ec:5b:59:08:
89:07:17:89:37:1d:b5:18:a9:e1:a0:ee:50:60:e0:f9:2e:c1:
e1:0c:ae:aa:d3:a5:b7:96:4d:4d:91:a2:f6:53:d7:d4:cb:75:
5c:a0:59:96:bc:32:75:5c:e3:2a:40:ba:47:3c:7b:04:fb:f4:
c4:39:9c:09:1a:45:da:fa:a1:2f:11:af:b4:61:69:79:64:96:
2c:64:f3:46:c2:3a:b8:ab:ea:3d:2e:1a:76:f6:29:1d:30:8b:
b9:f2:82:68:a9:17:59:1b:ae:5f:e6:fd:86:97:8e:ef:5c:e9:
23:b1:69:ee:c2:4f:df:ed:eb:25:dc:a4:79:61:0a:a1:b0:fa:
9a:ba:aa:f8:83:4a:32:12:75:63:a4:06:a0:89:92:1f:07:02:
39:cb:a8:14:70:b1:08:55:31:68:b1:43:de:32:fa:c3:fc:4b:
aa:5e:44:75:fe:cb:69:c7:c8:e2:9e:e1:0a:50:b5:dd:3e:d4:
e6:4d:0d:ac:0c:e6:c6:2e:df:24:53:8e:40:55:58:5f:36:e3:
9a:ba:db:37:e0:39:eb:f8:c4:e9:74:c1:3d:8a:e8:27:0a:4d:
40:1e:5f:5e:5a:61:62:f3:2d:8d:1a:aa:0c:1c:49:8a:48:86:
e3:25:1f:b7
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEARvcVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZGQ3NGZiYmJhZTU4ZGQwODc2ZDk5ZTgwZWM4MmExMWE0NDc3ZjdlMB4XDTIyMDUy
OTA4MjAxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTYyZmM4YWE4YTZk
NjZkMjI2ZTMwYzZlMzZjZmU4N2Q0YjlkMGI2YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKvUTUfo8L5pUooPpSRKsHwPsf0x3YkMEp0bvfWhZDkHhfuB
JMl3T1LbPPmuJnWgz1ls7w9SJ/RRhk0ATp9Ky7836CPa4o6tWm26yZc2tNvuc7rQ
nY0z/ZVPCnTjw5M56xLsX4wNxVHEhTdgwdSOSW19evgeoFHhooIZwwW0Nw3lpf3f
FjqdlEbC0izjBX7lNExdZykUzuoqIClWLncZQkjqwHGk2SOgYO1r4PNQxT7oz5Oa
8uq2NU13mAsNw2zE4dl7/uqAmhScvnMAIf0v0uSKnETQeuyCvWqOD7PEGMfa81w6
T3ffiVb+Ys1lVfBQs9IqzGoUM3whVEZv0ndHpX8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQWL8iqim1m0ibjDG42z+h9S50LajAfBgNVHSMEGDAWgBRN10+7uuWN0Idt
megOyCoRpEd/fjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RkZFB1N3JsamRDSGJabm9Ec2dxRWFSSGYzNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWIvOWY1ZjU3LWU4MjgtNGJjZi04ZDJiLThlYWI3ZjRmZTc3ZS8x
L0ZpX0lxb3B0WnRJbTR3eHVOc19vZlV1ZEMyby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIv
OWY1ZjU3LWU4MjgtNGJjZi04ZDJiLThlYWI3ZjRmZTc3ZS8xL1RkZFB1N3JsamRD
SGJabm9Ec2dxRWFSSGYzNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBF6LsAMEBG2i8DANBgkqhkiG9w0B
AQsFAAOCAQEAE5705MhpET5t+iD2EkLsW1kIiQcXiTcdtRip4aDuUGDg+S7B4Qyu
qtOlt5ZNTZGi9lPX1Mt1XKBZlrwydVzjKkC6Rzx7BPv0xDmcCRpF2vqhLxGvtGFp
eWSWLGTzRsI6uKvqPS4advYpHTCLufKCaKkXWRuuX+b9hpeO71zpI7Fp7sJP3+3r
JdykeWEKobD6mrqq+INKMhJ1Y6QGoImSHwcCOcuoFHCxCFUxaLFD3jL6w/xLql5E
df7LacfI4p7hClC13T7U5k0NrAzmxi7fJFOOQFVYXzbjmrrbN+A56/jE6XTBPYro
JwpNQB5fXlphYvMtjRqqDBxJikiG4yUftw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:21 2024 by rpki-client on console-fra.rpki-client.org