Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/y-3XaSEUvyHiBsqa12czTyDurio.roa
File: y-3XaSEUvyHiBsqa12czTyDurio.roa (raw, json)
Hash identifier: FtRE8wo9CpmsUvqgaJDAawvePgBRQ8b/1pyp/bBlGm0=
Subject key identifier: CB:ED:D7:69:21:14:BF:21:E2:06:CA:9A:D7:67:33:4F:20:EE:AE:2A
Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial: 34B18FE2
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/y-3XaSEUvyHiBsqa12czTyDurio.roa
Signing time: Sat 01 Jan 2022 14:57:40 +0000
ROA not before: Sat 01 Jan 2022 14:57:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 153.112.216.0/24 maxlen: 24
153.112.217.0/24 maxlen: 24
153.112.223.0/24 maxlen: 24
153.112.224.0/24 maxlen: 24
153.112.225.0/24 maxlen: 24
153.112.226.0/24 maxlen: 24
153.112.230.0/24 maxlen: 24
153.112.231.0/24 maxlen: 24
193.53.29.0/24 maxlen: 24
153.112.227.0/24 maxlen: 24
153.112.228.0/24 maxlen: 24
153.112.229.0/24 maxlen: 24
153.112.205.0/24 maxlen: 24
192.157.14.0/24 maxlen: 24
192.157.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884051938 (0x34b18fe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Validity
Not Before: Jan 1 14:57:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbedd7692114bf21e206ca9ad767334f20eeae2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a8:4a:f3:23:6d:f9:d6:f6:92:53:c8:7b:67:
85:df:a9:70:a3:42:5b:32:13:03:e6:30:95:b9:0d:
0c:02:86:db:93:f1:7b:c2:39:c3:cb:00:94:56:e9:
47:f3:f7:cb:c3:1b:29:e6:fd:f8:7e:46:b9:bd:6b:
51:41:18:51:28:db:bd:4b:28:14:32:10:8b:6e:21:
19:42:90:9e:9d:68:bd:63:37:39:90:2b:a0:36:6b:
aa:60:1a:04:26:0f:f8:f7:fb:a4:51:43:13:d6:d9:
19:56:54:ba:29:4b:b5:f9:79:65:5b:61:d3:b1:03:
7a:86:98:50:f5:f9:b9:0b:ea:e6:2d:37:0e:ab:b8:
78:cc:a3:f3:f9:b5:92:e0:aa:da:fe:b5:b9:d9:3a:
94:bc:5d:29:e7:5c:55:14:42:78:64:2e:d5:08:be:
a8:b4:d3:28:39:db:c3:c1:fc:5d:4c:d6:0a:a7:eb:
f0:56:60:29:ca:4d:42:ef:9b:52:ec:3e:4f:b7:37:
bd:c1:51:8b:e1:78:38:f7:9b:cb:8d:c3:42:fc:38:
e9:1c:c9:4e:c8:f0:ac:32:a7:99:07:9f:96:68:6d:
94:e2:36:5e:70:0b:e5:89:d8:e8:df:ae:3f:f4:8b:
ec:65:a1:c2:70:95:5c:da:0a:4c:82:e6:12:eb:0c:
18:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:ED:D7:69:21:14:BF:21:E2:06:CA:9A:D7:67:33:4F:20:EE:AE:2A
X509v3 Authority Key Identifier:
keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/y-3XaSEUvyHiBsqa12czTyDurio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.112.205.0/24
153.112.216.0/23
153.112.223.0-153.112.231.255
192.157.14.0/23
193.53.29.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:5a:79:52:91:99:1a:80:fc:05:8e:25:3c:14:4c:e2:9f:c9:
82:27:58:58:33:10:45:bd:4f:2a:22:80:8a:26:26:69:4f:8b:
19:15:00:59:f9:c4:4c:84:70:f1:22:b5:50:2a:70:b5:75:35:
16:d9:e2:5c:fb:a8:76:44:ac:3a:f3:18:9d:42:d4:30:f6:f4:
29:c2:d3:98:83:66:fa:e6:79:89:ab:3c:f2:d2:c7:76:8b:84:
7c:d7:0b:61:d0:74:f1:20:be:f0:2d:9d:a7:16:f5:a2:66:23:
27:65:f5:61:28:8a:8f:c4:2f:e6:c1:6e:a7:98:db:91:2f:19:
39:9e:71:a9:f8:a4:d7:b6:3a:c9:f8:9f:b8:2f:d6:25:a7:17:
2a:17:89:68:e9:63:44:07:d7:41:3a:e3:4b:20:f6:3f:53:3b:
5d:f9:d0:23:82:3f:d3:36:e7:b2:9a:73:53:18:c0:a0:9f:ee:
d2:e2:92:67:7a:0b:62:68:75:f4:db:a3:90:3e:a3:d0:13:1b:
fc:b3:44:0e:10:71:27:a9:4d:d6:4c:80:18:ae:1b:94:4e:7f:
1f:b4:4c:79:b3:44:93:29:7c:92:5e:86:85:1d:4d:2e:d0:69:
94:db:b0:af:c0:42:22:b2:12:78:06:f0:ac:8f:66:77:49:d9:
5d:82:22:dd
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIENLGP4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NDg1MmZmYmE3ZDU3YzVhOGFmYmI2ZWE1YmVhZjdkZmVjMGMxNDVhMB4XDTIyMDEw
MTE0NTc0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2JlZGQ3NjkyMTE0
YmYyMWUyMDZjYTlhZDc2NzMzNGYyMGVlYWUyYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI6oSvMjbfnW9pJTyHtnhd+pcKNCWzITA+YwlbkNDAKG25Px
e8I5w8sAlFbpR/P3y8MbKeb9+H5Gub1rUUEYUSjbvUsoFDIQi24hGUKQnp1ovWM3
OZAroDZrqmAaBCYP+Pf7pFFDE9bZGVZUuilLtfl5ZVth07EDeoaYUPX5uQvq5i03
Dqu4eMyj8/m1kuCq2v61udk6lLxdKedcVRRCeGQu1Qi+qLTTKDnbw8H8XUzWCqfr
8FZgKcpNQu+bUuw+T7c3vcFRi+F4OPeby43DQvw46RzJTsjwrDKnmQeflmhtlOI2
XnAL5YnY6N+uP/SL7GWhwnCVXNoKTILmEusMGFsCAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBTL7ddpIRS/IeIGyprXZzNPIO6uKjAfBgNVHSMEGDAWgBS0hS/7p9V8Wor7
tupb6vff7AwUWjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RJVXYtNmZWZkZxSy03YnFXLXIzMy13TUZGby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvZTQ1ZTMwLWU3ZDgtNGZiOC05MGFkLWY3MTAzOGU5NjdhNC8x
L3ktM1hhU0VVdnlIaUJzcWExMmN6VHlEdXJpby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
ZTQ1ZTMwLWU3ZDgtNGZiOC05MGFkLWY3MTAzOGU5NjdhNC8xL3RJVXYtNmZWZkZx
Sy03YnFXLXIzMy13TUZGby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wLAQCAAEwJgMEAJlwzQMEAZlw2DAMAwQAmXDfAwQD
mXDgAwQBwJ0OAwQAwTUdMA0GCSqGSIb3DQEBCwUAA4IBAQB+WnlSkZkagPwFjiU8
FEzin8mCJ1hYMxBFvU8qIoCKJiZpT4sZFQBZ+cRMhHDxIrVQKnC1dTUW2eJc+6h2
RKw68xidQtQw9vQpwtOYg2b65nmJqzzy0sd2i4R81wth0HTxIL7wLZ2nFvWiZiMn
ZfVhKIqPxC/mwW6nmNuRLxk5nnGp+KTXtjrJ+J+4L9YlpxcqF4lo6WNEB9dBOuNL
IPY/Uztd+dAjgj/TNueymnNTGMCgn+7S4pJnegtiaHX026OQPqPQExv8s0QOEHEn
qU3WTIAYrhuUTn8ftEx5s0STKXySXoaFHU0u0GmU27CvwEIishJ4BvCsj2Z3Sdld
giLd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:31 2024 by rpki-client on console-fra.rpki-client.org