Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/g-MMrk2lSjULtwNay9qBkaBA6Ak.roa
File: g-MMrk2lSjULtwNay9qBkaBA6Ak.roa (raw, json)
Hash identifier: aiT897eDa9YhhWPj5kUBerN4xz6G/Dw829hj1BBX6ac=
Subject key identifier: 83:E3:0C:AE:4D:A5:4A:35:0B:B7:03:5A:CB:DA:81:91:A0:40:E8:09
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 0181DD24BA53D9DBC22402252DDCF24DCF68
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/g-MMrk2lSjULtwNay9qBkaBA6Ak.roa
Signing time: Fri 08 Jul 2022 09:29:40 +0000
ROA not before: Fri 08 Jul 2022 09:29:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200094
IP address blocks: 81.21.206.0/24 maxlen: 24
185.73.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dd:24:ba:53:d9:db:c2:24:02:25:2d:dc:f2:4d:cf:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Jul 8 09:29:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83e30cae4da54a350bb7035acbda8191a040e809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:14:88:4c:21:fd:d7:5c:e9:c9:ed:4f:59:7b:
53:cc:d2:90:b8:6e:d2:c4:9c:67:8e:8a:0e:9b:0a:
cd:ec:bb:67:06:df:d5:eb:7b:43:4d:6e:dc:87:df:
4e:54:29:61:3e:fd:a8:79:c4:d7:9d:9e:2b:22:7d:
19:4c:10:f8:35:51:14:7c:1a:a9:fa:20:fa:e5:2e:
aa:b7:06:9a:af:6c:da:75:fa:f8:91:2a:e8:0d:50:
bc:57:27:44:f8:42:e9:bc:62:bd:41:93:0b:7b:5d:
bf:ca:a4:3e:c4:08:86:e8:c9:d4:91:09:f9:16:a9:
35:34:fd:db:e0:13:82:2c:57:0e:2b:99:97:09:d0:
03:51:c0:9b:e2:0b:af:8a:9b:39:cb:da:86:74:6d:
7c:d5:c4:09:47:e7:2e:cf:3d:af:98:70:18:ea:f2:
66:03:f9:38:56:07:33:a3:f5:af:7b:95:46:cf:66:
ea:50:d0:5a:7f:f3:99:53:59:63:81:a9:b3:7c:a9:
0e:c0:65:73:c3:79:99:26:9d:86:9b:e4:07:6d:d3:
f4:a9:fc:f1:8c:9c:f6:fa:ac:54:cc:53:4b:23:26:
de:2a:c6:d5:b5:21:0d:34:67:c8:9e:b2:4b:76:58:
e0:13:f7:a2:41:79:03:ee:da:63:de:a6:87:3f:b5:
70:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E3:0C:AE:4D:A5:4A:35:0B:B7:03:5A:CB:DA:81:91:A0:40:E8:09
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/g-MMrk2lSjULtwNay9qBkaBA6Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.206.0/24
185.73.60.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:82:41:0d:58:f0:64:4a:cb:d0:5a:61:8f:8f:96:d0:6a:54:
3e:51:8c:b8:1a:4f:39:4b:13:ed:bf:50:b5:48:9f:57:bb:22:
da:ca:cb:ae:ae:74:9a:fa:77:f3:f1:dd:10:28:dc:18:d6:e7:
62:05:b7:1d:d1:19:1b:4e:81:4e:7b:f4:24:c1:15:60:46:d4:
f5:ab:7a:ad:8c:52:a1:75:50:eb:92:fa:db:82:ee:d8:e0:81:
78:b8:e9:3c:f5:95:58:cd:24:4d:83:cb:49:65:99:0c:3e:06:
05:4c:ba:58:de:b2:e3:f7:0f:7e:e1:27:7d:c0:3d:da:61:c2:
1e:90:92:1e:92:41:08:8c:db:71:01:c6:b2:78:7b:91:f7:bc:
e4:a5:92:91:e8:99:44:bc:b0:b2:0d:45:0f:75:39:3f:c4:e4:
c1:3e:15:da:b0:53:7d:9b:f2:65:b0:7e:1f:ef:8b:f6:90:89:
0f:ee:dc:fb:d9:d6:15:b8:d0:10:88:2c:b8:01:cc:55:08:79:
30:55:f0:98:4b:84:61:44:ac:6d:89:85:31:08:55:8e:e2:62:
49:30:28:ce:c0:e5:e1:b0:49:74:32:e5:e2:91:8b:da:48:30:
10:43:13:ff:bc:88:5b:90:ff:c6:5d:09:79:84:a8:5a:5b:8c:
af:67:86:f0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYHdJLpT2dvCJAIlLdzyTc9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MWU0YjE3OWUwOTUzYjllY2M1ODVhZDk4NTlhMDBiZTM1
NjgwMDEwHhcNMjIwNzA4MDkyOTQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2UzMGNhZTRkYTU0YTM1MGJiNzAzNWFjYmRhODE5MWEwNDBlODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxSITCH911zpye1PWXtTzNKQuG7S
xJxnjooOmwrN7LtnBt/V63tDTW7ch99OVClhPv2oecTXnZ4rIn0ZTBD4NVEUfBqp
+iD65S6qtwaar2zadfr4kSroDVC8VydE+ELpvGK9QZMLe12/yqQ+xAiG6MnUkQn5
Fqk1NP3b4BOCLFcOK5mXCdADUcCb4guvips5y9qGdG181cQJR+cuzz2vmHAY6vJm
A/k4Vgczo/Wve5VGz2bqUNBaf/OZU1ljgamzfKkOwGVzw3mZJp2Gm+QHbdP0qfzx
jJz2+qxUzFNLIybeKsbVtSENNGfInrJLdljgE/eiQXkD7tpj3qaHP7VwoQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIPjDK5NpUo1C7cDWsvagZGgQOgJMB8GA1UdIwQY
MBaAFJkeSxeeCVO57MWFrZhZoAvjVoABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYt
ZWY5Yzk1Mjc2OTMyLzEvZy1NTXJrMmxTalVMdHdOYXk5cUJrYUJBNkFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYtZWY5Yzk1Mjc2OTMy
LzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAURXOAwQC
uUk8MA0GCSqGSIb3DQEBCwUAA4IBAQBrgkENWPBkSsvQWmGPj5bQalQ+UYy4Gk85
SxPtv1C1SJ9XuyLaysuurnSa+nfz8d0QKNwY1udiBbcd0RkbToFOe/QkwRVgRtT1
q3qtjFKhdVDrkvrbgu7Y4IF4uOk89ZVYzSRNg8tJZZkMPgYFTLpY3rLj9w9+4Sd9
wD3aYcIekJIekkEIjNtxAcayeHuR97zkpZKR6JlEvLCyDUUPdTk/xOTBPhXasFN9
m/JlsH4f74v2kIkP7tz72dYVuNAQiCy4AcxVCHkwVfCYS4RhRKxtiYUxCFWO4mJJ
MCjOwOXhsEl0MuXikYvaSDAQQxP/vIhbkP/GXQl5hKhaW4yvZ4bw
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:32 2024 by rpki-client on console-ams.rpki-client.org