Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/m5_gBM9j7naDUUzfbWlidO03J-Y.roa
File: m5_gBM9j7naDUUzfbWlidO03J-Y.roa (raw, json)
Hash identifier: Ns7idWUxx63XEYateo51PHS+PnyezvHwJz5Png3qOt0=
Subject key identifier: 9B:9F:E0:04:CF:63:EE:76:83:51:4C:DF:6D:69:62:74:ED:37:27:E6
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018437DAB38D1607D11C68159220335E566D
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/m5_gBM9j7naDUUzfbWlidO03J-Y.roa
Signing time: Wed 02 Nov 2022 10:19:50 +0000
ROA not before: Wed 02 Nov 2022 10:19:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202973
IP address blocks: 185.106.92.0/24 maxlen: 24
194.36.177.0/24 maxlen: 24
82.115.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:da:b3:8d:16:07:d1:1c:68:15:92:20:33:5e:56:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Nov 2 10:19:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b9fe004cf63ee7683514cdf6d696274ed3727e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b3:e5:c7:8b:0e:f6:ea:3c:9a:af:d0:a0:6b:
0a:dd:3f:79:9f:ef:6c:05:cb:78:ae:b1:f7:e3:e3:
31:8e:41:45:34:9c:44:ca:7e:9e:d7:34:a9:a0:92:
54:80:7b:d9:9e:a6:9e:0b:d7:3c:7b:23:44:8a:3b:
89:40:a6:4a:fa:68:b6:d0:38:02:6f:f9:6b:0e:88:
65:25:e0:ec:d8:20:fb:f5:f7:d1:00:0b:61:97:7f:
39:3c:e0:41:85:b4:88:f5:3b:74:33:ac:45:00:81:
0f:8f:f7:41:23:c0:d5:d9:b4:31:5f:ac:50:7b:5b:
72:77:30:66:55:67:ee:10:dd:79:3b:d9:33:92:9a:
94:c7:c3:1d:5c:d7:5e:be:73:09:74:be:27:22:5f:
81:96:b6:fb:7a:6e:5f:4d:2c:7f:d0:d4:0a:a9:aa:
0b:e6:d7:f0:70:01:4a:6f:d1:b3:ef:14:20:e9:49:
d1:7e:c7:b7:0f:d0:50:84:86:ff:a6:30:ff:2b:8a:
1e:21:82:5d:15:da:12:d6:81:17:77:1e:38:12:b0:
86:ec:e9:f9:3a:ec:cb:aa:4b:4f:47:9d:6b:18:37:
e4:9f:97:74:55:59:fd:1d:ba:68:2a:d8:82:e8:96:
10:18:67:8d:da:a6:ae:8d:ed:51:7d:60:be:cc:86:
cd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9F:E0:04:CF:63:EE:76:83:51:4C:DF:6D:69:62:74:ED:37:27:E6
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/m5_gBM9j7naDUUzfbWlidO03J-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.223.0/24
185.106.92.0/24
194.36.177.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e0:00:fe:66:70:f9:30:2f:08:38:8f:ed:cc:24:64:cd:98:
d6:40:df:fd:de:04:ab:54:15:0f:12:d0:ef:05:02:6a:a3:04:
e5:37:cb:8c:b4:98:ac:7a:30:bd:f8:a7:98:d7:7d:e8:59:c8:
4d:0f:eb:90:1e:4e:72:cc:41:c9:73:2e:d3:00:7d:ef:1d:e7:
02:04:07:a2:30:46:c9:f2:ac:a4:5b:86:e9:67:3a:7f:0a:80:
7b:76:c8:18:81:64:87:bc:16:f2:2f:f5:6d:f4:00:cb:9a:68:
f3:2d:08:ed:05:72:cc:f6:7e:89:34:78:80:c5:49:0a:a6:25:
63:ce:5f:ba:04:86:dc:22:b1:9f:ef:23:aa:2f:27:03:3a:ed:
a9:eb:d3:af:44:7d:fa:2d:42:bc:b1:53:d3:63:2e:46:1e:9b:
70:7f:9d:b9:e8:89:04:81:6a:f7:cb:73:21:09:62:22:a9:21:
79:c6:cf:c8:f1:2c:15:ad:dd:b2:ab:61:d0:66:1a:aa:b6:2d:
66:e4:78:57:64:88:8c:21:3b:73:e2:17:53:38:fe:4e:c1:84:
96:60:d2:e4:21:09:ef:d0:94:69:33:87:56:70:b5:24:cd:69:
fe:be:49:08:21:8a:a5:1c:d6:e7:10:1f:d9:b1:bd:3c:70:e0:
da:73:ae:d4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYQ32rONFgfRHGgVkiAzXlZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjIxMTAyMTAxOTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjlmZTAwNGNmNjNlZTc2ODM1MTRjZGY2ZDY5NjI3NGVkMzcyN2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLPlx4sO9uo8mq/QoGsK3T95n+9s
Bct4rrH34+MxjkFFNJxEyn6e1zSpoJJUgHvZnqaeC9c8eyNEijuJQKZK+mi20DgC
b/lrDohlJeDs2CD79ffRAAthl385POBBhbSI9Tt0M6xFAIEPj/dBI8DV2bQxX6xQ
e1tydzBmVWfuEN15O9kzkpqUx8MdXNdevnMJdL4nIl+Blrb7em5fTSx/0NQKqaoL
5tfwcAFKb9Gz7xQg6UnRfse3D9BQhIb/pjD/K4oeIYJdFdoS1oEXdx44ErCG7On5
OuzLqktPR51rGDfkn5d0VVn9HbpoKtiC6JYQGGeN2qauje1RfWC+zIbN6wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJuf4ATPY+52g1FM321pYnTtNyfmMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvbTVfZ0JNOWo3bmFEVVV6ZmJXbGlkTzAzSi1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUnPfAwQA
uWpcAwQAwiSxMA0GCSqGSIb3DQEBCwUAA4IBAQCK4AD+ZnD5MC8IOI/tzCRkzZjW
QN/93gSrVBUPEtDvBQJqowTlN8uMtJisejC9+KeY133oWchND+uQHk5yzEHJcy7T
AH3vHecCBAeiMEbJ8qykW4bpZzp/CoB7dsgYgWSHvBbyL/Vt9ADLmmjzLQjtBXLM
9n6JNHiAxUkKpiVjzl+6BIbcIrGf7yOqLycDOu2p69OvRH36LUK8sVPTYy5GHptw
f5256IkEgWr3y3MhCWIiqSF5xs/I8SwVrd2yq2HQZhqqti1m5HhXZIiMITtz4hdT
OP5OwYSWYNLkIQnv0JRpM4dWcLUkzWn+vkkIIYqlHNbnEB/Zsb08cODac67U
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org