Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/e39QDVG-lP_IJxPRoMdffvQqxqc.roa
File: e39QDVG-lP_IJxPRoMdffvQqxqc.roa (raw, json)
Hash identifier: 8lud2JPtBqzqUzQkqdzDz2D9jwWxgbETwaZ4A2LiMKs=
Subject key identifier: 7B:7F:50:0D:51:BE:94:FF:C8:27:13:D1:A0:C7:5F:7E:F4:2A:C6:A7
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 018557DAE72F1B4D49ECA005BD81D6C8D1E7
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/e39QDVG-lP_IJxPRoMdffvQqxqc.roa
Signing time: Wed 28 Dec 2022 08:30:41 +0000
ROA not before: Wed 28 Dec 2022 08:30:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34636
IP address blocks: 94.139.176.0/21 maxlen: 21
94.139.184.0/22 maxlen: 22
94.139.190.0/23 maxlen: 23
94.139.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:57:da:e7:2f:1b:4d:49:ec:a0:05:bd:81:d6:c8:d1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Dec 28 08:30:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b7f500d51be94ffc82713d1a0c75f7ef42ac6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:10:bc:c5:38:20:fc:de:ea:72:56:99:7a:
b4:df:a4:eb:98:4e:e0:5c:83:48:96:43:48:ef:a0:
27:20:19:76:dc:bf:32:dc:55:e8:73:6f:09:00:b8:
74:35:f9:c3:94:6d:e5:31:4d:54:dd:79:81:35:45:
aa:9d:6f:9f:87:5f:ed:32:93:ad:60:ee:77:61:3e:
54:64:c4:f2:b6:47:0e:66:e0:c5:35:49:13:72:62:
c0:ba:fa:8d:88:09:fb:aa:41:c1:5e:3a:60:6b:0a:
9d:7f:70:ad:d3:9b:22:0f:59:48:57:96:5a:ae:01:
46:c9:15:dc:7e:92:dd:eb:21:f1:91:48:6d:96:67:
f5:5b:7f:7d:86:07:90:f6:4b:6c:fa:d0:1d:2e:cf:
22:8c:98:fe:ae:67:b4:c6:ae:13:b0:da:61:0c:7b:
a6:48:98:98:e7:c6:28:43:59:1f:00:3f:04:a1:44:
d1:1f:cb:f6:13:ca:3b:51:5e:92:28:a8:45:da:25:
93:65:33:a7:c6:61:11:0f:30:25:6e:0c:9a:35:35:
94:6d:7b:7a:d0:72:44:e1:01:a8:e2:4f:44:f5:25:
38:2f:b8:9d:58:95:ff:56:24:cb:48:f0:4f:7a:b1:
2d:c4:a3:6d:9b:74:9a:80:ff:23:43:cf:5f:5a:0b:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7F:50:0D:51:BE:94:FF:C8:27:13:D1:A0:C7:5F:7E:F4:2A:C6:A7
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/e39QDVG-lP_IJxPRoMdffvQqxqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.176.0-94.139.188.255
94.139.190.0/23
Signature Algorithm: sha256WithRSAEncryption
17:7b:87:b9:51:29:0b:10:1e:33:9f:4f:5a:dd:c7:e3:37:49:
f9:7b:ac:c7:d7:dc:ba:68:8d:c7:42:e5:76:00:63:a2:a3:f0:
d0:7a:3a:fe:35:2e:b8:99:df:8b:2c:ed:58:98:bd:4f:6b:db:
21:8b:1d:b2:97:b6:af:e9:14:a9:9b:a8:b8:4d:16:3d:b8:75:
20:6d:13:d1:c1:3f:12:51:a4:15:1b:9a:27:ca:74:38:fd:4d:
22:98:e3:87:71:3f:ee:60:11:a9:19:79:26:0e:6f:5c:7b:74:
7d:a7:24:b4:b6:c3:05:7b:0d:8a:8c:ef:10:2c:5f:ce:cb:59:
17:22:eb:58:2f:23:79:4a:35:2d:9e:01:71:76:1c:cb:08:d7:
fc:06:e8:e4:e3:be:58:bb:15:9c:6c:bb:6d:a0:45:b0:8f:c6:
4b:5e:93:f8:db:3f:a8:a4:e7:89:15:ae:7e:49:96:fc:99:b3:
f5:1b:64:96:0e:e1:15:ed:3a:05:14:cf:02:b7:fd:63:f7:08:
67:58:cc:54:8a:52:6a:30:5d:9f:9b:c5:57:54:b9:10:4d:ec:
57:d2:5b:1f:27:d5:0e:ad:e3:06:23:4e:dd:25:e5:1f:c9:53:
e4:61:43:b6:54:d5:97:68:8b:c6:14:83:32:48:c9:dd:25:e0:
1d:d2:f4:11
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVX2ucvG01J7KAFvYHWyNHnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0
NzdmN2UwHhcNMjIxMjI4MDgzMDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjdmNTAwZDUxYmU5NGZmYzgyNzEzZDFhMGM3NWY3ZWY0MmFjNmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt54QvMU4IPze6nJWmXq036TrmE7g
XINIlkNI76AnIBl23L8y3FXoc28JALh0NfnDlG3lMU1U3XmBNUWqnW+fh1/tMpOt
YO53YT5UZMTytkcOZuDFNUkTcmLAuvqNiAn7qkHBXjpgawqdf3Ct05siD1lIV5Za
rgFGyRXcfpLd6yHxkUhtlmf1W399hgeQ9kts+tAdLs8ijJj+rme0xq4TsNphDHum
SJiY58YoQ1kfAD8EoUTRH8v2E8o7UV6SKKhF2iWTZTOnxmERDzAlbgyaNTWUbXt6
0HJE4QGo4k9E9SU4L7idWJX/ViTLSPBPerEtxKNtm3SagP8jQ89fWgvgfwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFHt/UA1RvpT/yCcT0aDHX370KsanMB8GA1UdIwQY
MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt
OGVhYjdmNGZlNzdlLzEvZTM5UURWRy1sUF9JSnhQUm9NZGZmdlFxeHFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl
LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBARei7AD
BABei7wDBAFei74wDQYJKoZIhvcNAQELBQADggEBABd7h7lRKQsQHjOfT1rdx+M3
Sfl7rMfX3LpojcdC5XYAY6Kj8NB6Ov41LriZ34ss7ViYvU9r2yGLHbKXtq/pFKmb
qLhNFj24dSBtE9HBPxJRpBUbmifKdDj9TSKY44dxP+5gEakZeSYOb1x7dH2nJLS2
wwV7DYqM7xAsX87LWRci61gvI3lKNS2eAXF2HMsI1/wG6OTjvli7FZxsu22gRbCP
xktek/jbP6ik54kVrn5JlvyZs/UbZJYO4RXtOgUUzwK3/WP3CGdYzFSKUmowXZ+b
xVdUuRBN7FfSWx8n1Q6t4wYjTt0l5R/JU+RhQ7ZU1Zdoi8YUgzJIyd0l4B3S9BE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:52 2024 by rpki-client on console-ams.rpki-client.org