Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/9epTdB7phrnMe4Y_3rY2pShcE6c.roa
File: 9epTdB7phrnMe4Y_3rY2pShcE6c.roa (raw, json)
Hash identifier: mCmW6SCxI/42716JyBlz1inQ+CuOZn/hWL8OC6u0ky0=
Subject key identifier: F5:EA:53:74:1E:E9:86:B9:CC:7B:86:3F:DE:B6:36:A5:28:5C:13:A7
Certificate issuer: /CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Certificate serial: 1BDEE9EA
Authority key identifier: 49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/9epTdB7phrnMe4Y_3rY2pShcE6c.roa
Signing time: Sat 01 Jan 2022 16:06:13 +0000
ROA not before: Sat 01 Jan 2022 16:06:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15930
IP address blocks: 185.24.180.0/22 maxlen: 22
185.24.180.0/24 maxlen: 24
89.18.128.0/21 maxlen: 21
89.18.128.0/19 maxlen: 19
89.18.136.0/21 maxlen: 21
89.18.143.0/24 maxlen: 24
89.18.144.0/21 maxlen: 21
89.18.152.0/21 maxlen: 21
89.18.159.0/24 maxlen: 24
89.18.156.0/24 maxlen: 24
2a00:65a0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467593706 (0x1bdee9ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Validity
Not Before: Jan 1 16:06:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5ea53741ee986b9cc7b863fdeb636a5285c13a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fd:81:28:e6:2d:45:5c:ff:69:d1:9e:12:ba:
09:ff:7f:99:6c:9e:45:fc:c0:99:91:17:6f:19:a9:
b9:42:c0:7f:98:df:f4:85:00:ed:f4:ec:a0:b1:9f:
f1:8c:db:5f:b2:1e:4f:44:d2:da:9d:da:16:25:c8:
71:58:ae:2d:fc:32:57:1e:ec:1b:e7:a2:cf:72:d4:
48:5a:aa:de:19:d7:2a:a7:88:14:c2:c8:94:42:60:
f7:a7:1f:4a:97:5e:1b:a3:1e:f4:00:07:0e:2b:15:
f4:e7:d0:23:65:24:33:0b:f4:23:5c:bf:91:ee:80:
c5:7f:19:e5:e6:e2:8a:88:53:e6:90:aa:3f:4e:20:
50:a4:3f:ea:9c:b1:35:e8:19:80:b6:b0:62:8e:17:
f6:ed:7a:f5:5f:0e:63:a1:b8:57:10:ad:a4:e0:33:
cd:9c:e2:24:e4:8f:5d:7d:8e:fa:7a:01:75:87:7f:
c8:49:6a:12:d4:6c:1b:1f:1e:2f:4a:c2:82:24:b5:
98:50:89:4b:bc:9b:25:03:cd:e7:53:d9:76:50:3e:
55:05:37:02:7c:d3:62:bd:f6:64:65:7c:b5:15:0d:
e9:3b:2c:75:60:8f:f4:51:b4:0a:4f:bb:06:0a:3e:
17:37:16:ee:2e:37:76:68:e8:c1:2b:08:ab:4c:54:
27:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EA:53:74:1E:E9:86:B9:CC:7B:86:3F:DE:B6:36:A5:28:5C:13:A7
X509v3 Authority Key Identifier:
keyid:49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/9epTdB7phrnMe4Y_3rY2pShcE6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.128.0/19
185.24.180.0/22
IPv6:
2a00:65a0::/32
Signature Algorithm: sha256WithRSAEncryption
b4:5f:a8:08:d8:eb:15:e2:3d:dc:36:05:24:22:1b:36:11:36:
a9:e4:e1:66:5a:58:92:e6:2f:d8:8a:a0:70:83:94:c3:9a:61:
32:fd:90:69:ca:39:70:c2:d8:1a:f1:ee:23:2d:02:2c:78:a3:
3a:18:01:0c:7a:2e:55:95:38:7d:93:5b:fe:e7:23:7d:88:62:
e4:ec:df:61:5d:b1:4e:98:65:e4:c0:f8:50:bc:a7:99:df:f0:
5d:e8:be:ab:07:ed:e2:14:1a:7c:0f:c1:e9:25:91:7b:a7:7c:
db:20:f8:7b:4f:3c:b1:dd:ab:12:2a:45:75:7f:18:d0:17:76:
b7:b6:3c:36:73:6d:ed:05:7f:64:7e:3a:34:eb:22:51:45:05:
a7:88:7f:f9:ca:2d:7e:ee:d8:2d:99:3e:29:6c:c6:58:92:25:
61:53:5c:7c:5c:f1:d1:0c:27:cc:e7:0a:7c:5c:b6:2e:7f:77:
b9:6a:8e:e9:d9:95:72:0c:3d:62:84:76:0c:9a:ea:4c:bf:54:
a0:04:6f:1d:40:8e:d5:0d:93:03:d7:2d:5f:3b:e7:f1:4c:b6:
02:48:ee:e1:11:d0:fd:16:15:73:03:67:1a:fd:8c:2d:36:fa:
f3:e3:85:e9:74:31:72:d5:67:65:bd:6c:9c:23:ee:14:45:a6:
77:a0:ca:ae
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEG97p6jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
OTlmMDNlNDhlZDYyYTk2ODQwZWIyZjJkNzljM2VjMjFhMjdmMWNlMB4XDTIyMDEw
MTE2MDYxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjVlYTUzNzQxZWU5
ODZiOWNjN2I4NjNmZGViNjM2YTUyODVjMTNhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANX9gSjmLUVc/2nRnhK6Cf9/mWyeRfzAmZEXbxmpuULAf5jf
9IUA7fTsoLGf8YzbX7IeT0TS2p3aFiXIcViuLfwyVx7sG+eiz3LUSFqq3hnXKqeI
FMLIlEJg96cfSpdeG6Me9AAHDisV9OfQI2UkMwv0I1y/ke6AxX8Z5ebiiohT5pCq
P04gUKQ/6pyxNegZgLawYo4X9u169V8OY6G4VxCtpOAzzZziJOSPXX2O+noBdYd/
yElqEtRsGx8eL0rCgiS1mFCJS7ybJQPN51PZdlA+VQU3AnzTYr32ZGV8tRUN6Tss
dWCP9FG0Ck+7Bgo+FzcW7i43dmjowSsIq0xUJx8CAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBT16lN0HumGucx7hj/etjalKFwTpzAfBgNVHSMEGDAWgBRJnwPkjtYqloQO
svLXnD7CGifxzjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NaOEQ1STdXS3BhRURyTHkxNXctd2hvbjhjNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDIvYWMwOTUwLTIyNzMtNGVlMS1hODMwLTQyMmU2ZDNmZTkzZS8x
LzllcFRkQjdwaHJuTWU0WV8zclkycFNoY0U2Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIv
YWMwOTUwLTIyNzMtNGVlMS1hODMwLTQyMmU2ZDNmZTkzZS8xL1NaOEQ1STdXS3Bh
RURyTHkxNXctd2hvbjhjNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBVkSgAMEArkYtDANBAIAAjAHAwUA
KgBloDANBgkqhkiG9w0BAQsFAAOCAQEAtF+oCNjrFeI93DYFJCIbNhE2qeThZlpY
kuYv2IqgcIOUw5phMv2Qaco5cMLYGvHuIy0CLHijOhgBDHouVZU4fZNb/ucjfYhi
5OzfYV2xTphl5MD4ULynmd/wXei+qwft4hQafA/B6SWRe6d82yD4e088sd2rEipF
dX8Y0Bd2t7Y8NnNt7QV/ZH46NOsiUUUFp4h/+cotfu7YLZk+KWzGWJIlYVNcfFzx
0QwnzOcKfFy2Ln93uWqO6dmVcgw9YoR2DJrqTL9UoARvHUCO1Q2TA9ctXzvn8Uy2
Akju4RHQ/RYVcwNnGv2MLTb68+OF6XQxctVnZb1snCPuFEWmd6DKrg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:03 2024 by rpki-client on console-fra.rpki-client.org