Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/09TJP1ZN1_q-VzzHkB6YPLeeI38.roa
File: 09TJP1ZN1_q-VzzHkB6YPLeeI38.roa (raw, json)
Hash identifier: aTpY17V/bN85kh9BXUo2KFCy1eMdsycmsKQboYpHoiQ=
Subject key identifier: D3:D4:C9:3F:56:4D:D7:FA:BE:57:3C:C7:90:1E:98:3C:B7:9E:23:7F
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 0BA5E16D
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/09TJP1ZN1_q-VzzHkB6YPLeeI38.roa
Signing time: Thu 26 May 2022 09:48:14 +0000
ROA not before: Thu 26 May 2022 09:48:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206119
IP address blocks: 185.237.80.0/24 maxlen: 24
194.145.136.0/24 maxlen: 24
194.145.137.0/24 maxlen: 24
185.205.16.0/24 maxlen: 24
185.86.82.0/24 maxlen: 24
185.205.18.0/24 maxlen: 24
193.36.62.0/24 maxlen: 24
185.254.93.0/24 maxlen: 24
185.254.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195420525 (0xba5e16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: May 26 09:48:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3d4c93f564dd7fabe573cc7901e983cb79e237f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8c:ab:90:2f:4c:4f:c6:13:bf:1d:74:52:59:
85:b0:40:80:3a:f4:1e:ee:ad:7e:79:c0:24:38:f2:
e0:21:a8:46:c5:09:23:ce:a6:6f:08:f0:04:6c:a0:
5e:0f:e9:04:26:86:0f:ae:87:2b:38:6c:35:d8:f2:
4b:1d:2f:51:86:19:29:7d:b6:0b:04:34:e2:f1:37:
30:b1:e3:19:05:08:44:01:d8:87:60:8f:21:fe:2f:
3a:b6:95:28:9d:f7:84:04:47:d9:ba:3f:10:2d:7b:
84:4f:ca:24:49:f0:7e:70:93:5d:c4:5f:56:95:8f:
73:74:df:81:90:f6:97:e5:c9:a3:6e:c8:60:f5:df:
c8:d4:1b:51:84:ea:aa:ba:d0:d6:e4:0b:49:0a:de:
5a:ff:8b:0a:06:e1:bc:bf:e3:3d:9e:f4:e3:26:00:
7f:1a:27:a3:9c:7a:45:84:6e:bf:32:09:27:48:e0:
79:c9:da:f3:07:7d:36:1a:80:b8:58:8a:a6:1f:5d:
c0:5a:3e:ae:5a:42:62:20:92:c6:05:06:36:29:b0:
ca:4c:2e:2f:0c:ad:5e:f4:ef:2c:fd:ea:aa:06:cb:
9e:44:32:6f:3a:ac:a4:b8:53:ae:e5:b2:83:65:1e:
99:a8:c2:a6:2b:8b:66:8a:ab:46:f1:b8:ad:04:ae:
d1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D4:C9:3F:56:4D:D7:FA:BE:57:3C:C7:90:1E:98:3C:B7:9E:23:7F
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/09TJP1ZN1_q-VzzHkB6YPLeeI38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.82.0/24
185.205.16.0/24
185.205.18.0/24
185.237.80.0/24
185.254.93.0/24
185.254.95.0/24
193.36.62.0/24
194.145.136.0/23
Signature Algorithm: sha256WithRSAEncryption
33:f2:cd:20:76:6a:11:3b:cc:34:7d:0f:3e:22:33:d8:b3:de:
9e:f6:43:a4:42:3b:30:3d:73:d6:4a:73:09:74:1a:09:c4:02:
46:30:36:34:cd:e1:96:00:99:7f:79:73:bd:ca:61:de:5e:88:
c5:30:fd:2e:69:7e:27:f5:6f:fb:ea:6d:af:07:ec:21:f6:da:
a8:ee:54:27:5c:84:04:0e:fd:c0:0e:67:75:e4:a7:cf:69:c9:
49:f7:00:0f:92:04:52:ee:4d:e1:e0:bf:52:43:ac:49:1e:11:
db:9d:dc:38:1b:76:1d:c0:cb:ab:2a:98:13:97:d0:09:08:f6:
3b:47:f9:35:83:86:3e:2b:57:e3:20:c1:b6:1d:98:f6:a7:04:
c0:5d:42:e0:e3:1d:50:00:93:3e:7c:be:b2:44:a1:7b:00:cb:
1d:1b:66:30:af:a3:d7:6b:82:c8:fc:a8:ab:f4:11:c9:9a:9b:
5e:85:71:17:6f:e8:4a:28:85:c2:a9:98:41:3c:9e:b0:bc:1a:
6b:d7:2f:b4:cf:67:7d:ab:41:70:b0:23:5b:62:21:d4:03:88:
4f:7e:62:f4:b6:d9:70:3e:d5:ad:a5:37:5a:22:65:ef:ff:16:
5f:9f:67:09:09:7c:43:89:e3:46:f5:cd:04:a1:a6:a8:33:cc:
f2:ee:16:c5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgIEC6XhbTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MDU5MmU2ODg5NWM3MDY4YjQ2NTU1MDg5MTdhZDViYmRkYmQwYTVmMB4XDTIyMDUy
NjA5NDgxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDNkNGM5M2Y1NjRk
ZDdmYWJlNTczY2M3OTAxZTk4M2NiNzllMjM3ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANyMq5AvTE/GE78ddFJZhbBAgDr0Hu6tfnnAJDjy4CGoRsUJ
I86mbwjwBGygXg/pBCaGD66HKzhsNdjySx0vUYYZKX22CwQ04vE3MLHjGQUIRAHY
h2CPIf4vOraVKJ33hARH2bo/EC17hE/KJEnwfnCTXcRfVpWPc3TfgZD2l+XJo27I
YPXfyNQbUYTqqrrQ1uQLSQreWv+LCgbhvL/jPZ704yYAfxono5x6RYRuvzIJJ0jg
ecna8wd9NhqAuFiKph9dwFo+rlpCYiCSxgUGNimwykwuLwytXvTvLP3qqgbLnkQy
bzqspLhTruWyg2UemajCpiuLZoqrRvG4rQSu0YUCAwEAAaOCAjMwggIvMB0GA1Ud
DgQWBBTT1Mk/Vk3X+r5XPMeQHpg8t54jfzAfBgNVHSMEGDAWgBRQWS5oiVxwaLRl
VQiRetW73b0KXzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VGa3VhSWxjY0dpMFpWVUlrWHJWdTkyOUNsOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDIvMmE4MTAwLTE3MmItNDhlMy1hMzJhLTdiYmQyOGNlNGE3NS8x
LzA5VEpQMVpOMV9xLVZ6ekhrQjZZUExlZUkzOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIv
MmE4MTAwLTE3MmItNDhlMy1hMzJhLTdiYmQyOGNlNGE3NS8xL1VGa3VhSWxjY0dp
MFpWVUlrWHJWdTkyOUNsOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJ
BggrBgEFBQcBBwEB/wQ6MDgwNgQCAAEwMAMEALlWUgMEALnNEAMEALnNEgMEALnt
UAMEALn+XQMEALn+XwMEAMEkPgMEAcKRiDANBgkqhkiG9w0BAQsFAAOCAQEAM/LN
IHZqETvMNH0PPiIz2LPenvZDpEI7MD1z1kpzCXQaCcQCRjA2NM3hlgCZf3lzvcph
3l6IxTD9Lml+J/Vv++ptrwfsIfbaqO5UJ1yEBA79wA5ndeSnz2nJSfcAD5IEUu5N
4eC/UkOsSR4R253cOBt2HcDLqyqYE5fQCQj2O0f5NYOGPitX4yDBth2Y9qcEwF1C
4OMdUACTPny+skShewDLHRtmMK+j12uCyPyoq/QRyZqbXoVxF2/oSiiFwqmYQTye
sLwaa9cvtM9nfatBcLAjW2Ih1AOIT35i9LbZcD7VraU3WiJl7/8WX59nCQl8Q4nj
RvXNBKGmqDPM8u4WxQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org