Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/uB4NOUgO81mKInS10Ryzy2k_Ihk.roa
File: uB4NOUgO81mKInS10Ryzy2k_Ihk.roa (raw, json)
Hash identifier: gaEwEZt7DGvVlguHNcckwzk/qgQ+v0C4sXfBcCwUg5A=
Subject key identifier: B8:1E:0D:39:48:0E:F3:59:8A:22:74:B5:D1:1C:B3:CB:69:3F:22:19
Certificate issuer: /CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Certificate serial: 142149FE
Authority key identifier: 74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/uB4NOUgO81mKInS10Ryzy2k_Ihk.roa
Signing time: Sat 01 Jan 2022 07:03:34 +0000
ROA not before: Sat 01 Jan 2022 07:03:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34740
IP address blocks: 89.38.48.0/24 maxlen: 24
89.38.49.0/24 maxlen: 24
89.38.50.0/24 maxlen: 24
89.38.51.0/24 maxlen: 24
188.215.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337725950 (0x142149fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Validity
Not Before: Jan 1 07:03:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b81e0d39480ef3598a2274b5d11cb3cb693f2219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2e:0e:0f:6c:00:db:c5:a1:76:cc:48:15:31:
2a:ab:f6:60:f1:34:cf:73:04:01:eb:b3:db:1c:c5:
2e:c2:8f:1d:a8:4d:31:74:0f:04:dd:76:09:0c:50:
ed:06:cc:15:a8:76:d2:cc:fe:ea:5f:73:e7:e6:b0:
bb:1b:f0:9e:1c:51:92:d4:1c:db:41:11:82:aa:34:
95:31:af:5e:95:e1:25:01:43:81:60:bb:cd:85:01:
15:a1:ea:7b:92:08:f6:95:ae:e5:2d:40:60:c3:d1:
8d:16:ac:2c:1e:6c:6d:54:27:a2:b8:5c:e8:27:10:
bd:81:ce:5f:30:aa:91:21:f1:cb:16:ef:55:4f:0f:
85:e5:fe:21:c5:ba:af:06:54:b2:fa:e2:84:b4:30:
4e:52:df:dc:f3:f5:05:b3:6b:f4:93:c1:f8:fe:84:
e0:41:68:ca:1d:f5:b2:09:c4:36:58:3f:7b:c0:9f:
9e:d2:c3:77:6a:8a:2c:64:ad:46:03:fb:d6:c5:22:
52:a6:5e:65:4f:33:e8:6a:03:70:66:17:58:b9:81:
83:a0:a4:1a:81:0d:60:eb:81:ee:9f:b4:53:c3:ec:
b1:59:61:93:18:29:43:f0:80:84:3c:05:26:19:63:
32:60:1d:e7:d2:99:b3:aa:ae:5c:52:cd:f8:e1:64:
37:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1E:0D:39:48:0E:F3:59:8A:22:74:B5:D1:1C:B3:CB:69:3F:22:19
X509v3 Authority Key Identifier:
keyid:74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/uB4NOUgO81mKInS10Ryzy2k_Ihk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.48.0/22
188.215.144.0/20
Signature Algorithm: sha256WithRSAEncryption
19:23:ee:99:fb:53:62:4a:f3:ab:4b:bf:fb:52:30:c8:e6:52:
45:3e:9b:c9:a6:91:f1:04:c1:dc:4c:f9:82:46:42:58:26:a3:
ac:be:2e:ab:22:5a:11:44:77:e7:0e:80:ff:8c:58:b9:49:dc:
c2:af:62:8f:d3:6d:0e:ae:dd:21:de:44:3c:8d:c4:99:e2:0e:
b0:d5:bd:27:4d:2f:64:a7:25:60:3e:f3:8f:e2:7e:f1:79:68:
a4:3c:1a:cb:a3:43:91:a3:fc:62:02:5f:3a:61:e9:fb:5f:64:
82:f7:35:a7:d6:d8:20:75:d1:2f:9d:7c:23:5a:b4:51:40:b2:
26:2c:d1:c0:31:41:70:ae:60:3c:5d:a4:81:37:02:89:c6:73:
60:bd:d4:7c:33:18:6d:41:bc:51:8b:07:1d:17:c5:9a:ef:c5:
38:da:59:1e:59:aa:d0:34:76:bd:17:34:99:9c:ca:90:e1:21:
38:e2:b9:a7:4f:12:32:45:0e:78:72:68:e8:09:10:11:d0:9d:
36:f6:aa:23:7e:c7:75:ba:39:95:ef:49:99:32:d9:e6:31:3c:
d9:0a:10:c0:9c:6e:89:e1:e7:40:2d:60:e0:15:c0:3e:8a:51:
71:85:65:e8:11:3c:a8:7f:21:6c:4f:e0:af:96:95:c0:37:c4:
86:bb:7b:09
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEFCFJ/jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDg5NmM1NDRiNDYxZDhiMDYyZWZmOWUzZDJjMjljZDNjYzk2MGVjMB4XDTIyMDEw
MTA3MDMzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjgxZTBkMzk0ODBl
ZjM1OThhMjI3NGI1ZDExY2IzY2I2OTNmMjIxOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJouDg9sANvFoXbMSBUxKqv2YPE0z3MEAeuz2xzFLsKPHahN
MXQPBN12CQxQ7QbMFah20sz+6l9z5+awuxvwnhxRktQc20ERgqo0lTGvXpXhJQFD
gWC7zYUBFaHqe5II9pWu5S1AYMPRjRasLB5sbVQnorhc6CcQvYHOXzCqkSHxyxbv
VU8PheX+IcW6rwZUsvrihLQwTlLf3PP1BbNr9JPB+P6E4EFoyh31sgnENlg/e8Cf
ntLDd2qKLGStRgP71sUiUqZeZU8z6GoDcGYXWLmBg6CkGoENYOuB7p+0U8PssVlh
kxgpQ/CAhDwFJhljMmAd59KZs6quXFLN+OFkN8MCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBS4Hg05SA7zWYoidLXRHLPLaT8iGTAfBgNVHSMEGDAWgBR0iWxUS0YdiwYu
/549LCnNPMlg7DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RJbHNWRXRHSFlzR0x2LWVQU3dwelR6SllPdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzMvYmMyMmE5LWY4NzEtNDAwYy04ZmNmLWNmMTc0MDgyMzQwMC8x
L3VCNE5PVWdPODFtS0luUzEwUnl6eTJrX0loay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMv
YmMyMmE5LWY4NzEtNDAwYy04ZmNmLWNmMTc0MDgyMzQwMC8xL2RJbHNWRXRHSFlz
R0x2LWVQU3dwelR6SllPdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlkmMAMEBLzXkDANBgkqhkiG9w0B
AQsFAAOCAQEAGSPumftTYkrzq0u/+1IwyOZSRT6byaaR8QTB3Ez5gkZCWCajrL4u
qyJaEUR35w6A/4xYuUncwq9ij9NtDq7dId5EPI3EmeIOsNW9J00vZKclYD7zj+J+
8XlopDway6NDkaP8YgJfOmHp+19kgvc1p9bYIHXRL518I1q0UUCyJizRwDFBcK5g
PF2kgTcCicZzYL3UfDMYbUG8UYsHHRfFmu/FONpZHlmq0DR2vRc0mZzKkOEhOOK5
p08SMkUOeHJo6AkQEdCdNvaqI37Hdbo5le9JmTLZ5jE82QoQwJxuieHnQC1g4BXA
PopRcYVl6BE8qH8hbE/gr5aVwDfEhrt7CQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:54 2024 by rpki-client on console-fra.rpki-client.org