Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/JkI-AaIBa0Kuy1GI6e6DR57ZxN8.roa
File: JkI-AaIBa0Kuy1GI6e6DR57ZxN8.roa (raw, json)
Hash identifier: TvgL3BNc3+1EvRoPhxmoGCrYPMJV8t9UJ2wZ3ASpYa4=
Subject key identifier: 26:42:3E:01:A2:01:6B:42:AE:CB:51:88:E9:EE:83:47:9E:D9:C4:DF
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0183CBE1F105F532E07C57DDB3F91D4E22B8
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/JkI-AaIBa0Kuy1GI6e6DR57ZxN8.roa
Signing time: Wed 12 Oct 2022 11:08:45 +0000
ROA not before: Wed 12 Oct 2022 11:08:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 94.241.176.0/21 maxlen: 24
91.186.196.0/22 maxlen: 24
94.241.136.0/21 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.212.0/22 maxlen: 24
91.186.214.0/23 maxlen: 24
94.241.168.0/21 maxlen: 24
83.147.216.0/23 maxlen: 24
178.253.31.0/24 maxlen: 24
83.147.222.0/23 maxlen: 24
178.253.32.0/23 maxlen: 24
178.253.44.0/23 maxlen: 24
83.147.232.0/22 maxlen: 24
178.253.52.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cb:e1:f1:05:f5:32:e0:7c:57:dd:b3:f9:1d:4e:22:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 12 11:08:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26423e01a2016b42aecb5188e9ee83479ed9c4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:26:60:b1:00:ed:c0:c3:1f:cb:97:75:0d:e1:
e2:04:64:2e:02:59:ae:05:52:cd:ce:cb:14:05:16:
89:bf:ea:07:29:88:fb:d2:cf:d7:43:88:17:a8:76:
de:85:b6:8d:e4:87:05:ef:f9:f4:7f:16:be:99:8e:
2e:dc:6a:a7:7f:05:f4:aa:4e:96:5d:88:ff:e7:cf:
b7:62:be:dc:f4:d3:9f:6b:8e:2c:5a:38:27:86:cd:
84:a6:1a:fb:37:97:77:78:a3:34:29:7a:a5:53:02:
46:d0:72:5c:98:ba:9e:d3:60:36:1e:72:41:5f:66:
23:29:ad:de:7a:72:b6:00:91:97:1a:58:10:20:2c:
a6:77:aa:46:ad:1a:63:27:a5:eb:f7:d8:ec:ba:9f:
0b:31:cf:c5:9f:c0:83:61:fe:df:30:d7:86:bf:cb:
2b:0a:45:98:0e:62:92:02:1c:3c:b7:85:7e:42:68:
bf:c8:84:76:14:f2:f9:ae:b6:84:c3:a1:09:16:1b:
4a:a1:98:3b:5e:ef:81:f2:8a:1f:a0:5b:95:f7:f2:
db:2d:eb:9c:19:f9:38:73:cc:20:8f:e3:0c:6f:a6:
bd:ae:2a:9a:f0:72:34:16:24:e8:c4:46:71:71:ad:
80:cb:04:71:04:c8:f1:15:58:6c:fa:8f:43:07:42:
50:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:42:3E:01:A2:01:6B:42:AE:CB:51:88:E9:EE:83:47:9E:D9:C4:DF
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/JkI-AaIBa0Kuy1GI6e6DR57ZxN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.216.0/23
83.147.222.0/23
83.147.232.0/22
91.186.196.0-91.186.203.255
91.186.212.0/22
94.241.136.0/21
94.241.168.0-94.241.183.255
178.253.31.0-178.253.33.255
178.253.44.0/23
178.253.52.0/23
Signature Algorithm: sha256WithRSAEncryption
20:0b:8c:90:fa:89:6d:fb:96:93:e2:eb:71:09:86:01:97:a6:
85:ee:af:a5:2a:a8:01:f7:17:48:93:fe:3e:1f:f8:2f:42:93:
ce:f9:31:84:52:10:8b:13:7e:2d:d1:aa:f9:32:a3:fc:49:e0:
72:17:9a:49:8c:9e:45:37:18:52:93:12:7f:02:91:39:43:57:
32:f8:56:da:57:90:8b:d2:30:44:e0:85:9b:30:4b:2f:29:cc:
dc:9c:af:6e:cb:17:6b:67:3d:40:7f:df:54:5b:49:54:04:3b:
39:c7:ad:78:32:57:b8:09:8c:ef:bb:97:0e:18:28:f7:29:53:
e3:72:0c:14:c1:7e:54:82:e0:a8:53:47:74:25:91:91:b0:02:
a5:5e:d9:96:a4:23:f5:ff:73:6d:b0:6d:e1:a1:e5:08:e3:75:
10:04:c3:e5:38:e2:8a:a6:10:bb:74:70:0e:8e:0e:d5:c3:6f:
61:c0:35:78:bf:d4:4d:53:0c:bf:a4:69:d5:f4:b4:f6:60:91:
ac:e3:c3:59:ca:80:4b:ee:cd:b4:c4:7c:72:ba:80:04:04:c8:
e5:d3:76:3f:dd:2b:39:a9:a9:d2:3f:9a:43:49:67:81:64:58:
e4:20:e9:37:91:7a:d2:3c:91:a3:2d:b7:87:1d:78:b0:46:35:
88:db:ea:52
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAYPL4fEF9TLgfFfds/kdTiK4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjIxMDEyMTEwODQ1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjQyM2UwMWEyMDE2YjQyYWVjYjUxODhlOWVlODM0NzllZDljNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCZgsQDtwMMfy5d1DeHiBGQuAlmu
BVLNzssUBRaJv+oHKYj70s/XQ4gXqHbehbaN5IcF7/n0fxa+mY4u3GqnfwX0qk6W
XYj/58+3Yr7c9NOfa44sWjgnhs2Ephr7N5d3eKM0KXqlUwJG0HJcmLqe02A2HnJB
X2YjKa3eenK2AJGXGlgQICymd6pGrRpjJ6Xr99jsup8LMc/Fn8CDYf7fMNeGv8sr
CkWYDmKSAhw8t4V+Qmi/yIR2FPL5rraEw6EJFhtKoZg7Xu+B8oofoFuV9/LbLeuc
Gfk4c8wgj+MMb6a9riqa8HI0FiToxEZxca2AywRxBMjxFVhs+o9DB0JQfwIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFCZCPgGiAWtCrstRiOnug0ee2cTfMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvSmtJLUFhSUJhMEt1eTFHSTZlNkRSNTdaeE44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQBU5PYAwQB
U5PeAwQCU5PoMAwDBAJbusQDBAJbusgDBAJbutQDBANe8YgwDAMEA17xqAMEA17x
sDAMAwQAsv0fAwQBsv0gAwQBsv0sAwQBsv00MA0GCSqGSIb3DQEBCwUAA4IBAQAg
C4yQ+olt+5aT4utxCYYBl6aF7q+lKqgB9xdIk/4+H/gvQpPO+TGEUhCLE34t0ar5
MqP8SeByF5pJjJ5FNxhSkxJ/ApE5Q1cy+FbaV5CL0jBE4IWbMEsvKczcnK9uyxdr
Zz1Af99UW0lUBDs5x614Mle4CYzvu5cOGCj3KVPjcgwUwX5UguCoU0d0JZGRsAKl
XtmWpCP1/3NtsG3hoeUI43UQBMPlOOKKphC7dHAOjg7Vw29hwDV4v9RNUwy/pGnV
9LT2YJGs48NZyoBL7s20xHxyuoAEBMjl03Y/3Ss5qanSP5pDSWeBZFjkIOk3kXrS
PJGjLbeHHXiwRjWI2+pS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org