Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/jj3In8wjUorHJU8oidIVPWx1iD0.roa
File: jj3In8wjUorHJU8oidIVPWx1iD0.roa (raw, json)
Hash identifier: WC8R/V4VxuYrjLi7u0A+wSlt1J8xbh8UAeilzTrqAaY=
Subject key identifier: 8E:3D:C8:9F:CC:23:52:8A:C7:25:4F:28:89:D2:15:3D:6C:75:88:3D
Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial: 04D51633
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/jj3In8wjUorHJU8oidIVPWx1iD0.roa
Signing time: Thu 23 Jun 2022 12:14:17 +0000
ROA not before: Thu 23 Jun 2022 12:14:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 83.229.66.0/24 maxlen: 32
80.240.98.0/23 maxlen: 32
217.194.136.0/23 maxlen: 32
217.194.136.0/24 maxlen: 32
80.240.116.0/22 maxlen: 32
212.103.56.0/22 maxlen: 32
80.240.120.0/22 maxlen: 32
193.47.56.0/22 maxlen: 32
195.216.128.0/22 maxlen: 32
103.14.104.0/22 maxlen: 32
46.149.160.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81073715 (0x4d51633)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Validity
Not Before: Jun 23 12:14:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e3dc89fcc23528ac7254f2889d2153d6c75883d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:33:ce:09:2c:50:3b:1b:e9:ce:84:d5:34:
3d:c6:40:20:8b:cb:a0:68:61:94:49:61:63:17:52:
a1:40:54:3e:18:f2:5e:a1:cf:5c:a3:4c:32:80:7e:
04:f8:5e:7e:24:19:44:9b:5c:20:c5:e2:94:80:7c:
01:ff:ba:3e:36:4b:16:4d:39:1e:c1:6f:5e:5c:21:
8b:96:a9:49:73:e8:8a:27:7a:f2:21:0e:f8:07:2d:
7c:d0:ac:b9:cf:a7:c4:22:45:11:b0:3c:43:3c:f0:
fa:68:5f:1b:12:74:8f:72:2f:fe:66:47:e7:bc:b1:
38:59:ac:97:19:51:7c:b4:3d:f1:f7:0b:dc:69:42:
dd:31:b9:22:68:be:64:5f:a6:19:72:a5:61:49:e1:
44:50:db:36:f7:0d:2c:27:11:1d:23:be:2e:6e:8b:
11:9e:c4:f6:24:49:15:c3:94:1a:8f:22:82:26:32:
79:be:a6:37:d4:00:4b:9b:03:34:70:60:4e:be:76:
7f:6d:9e:50:10:7e:9a:42:7d:db:0c:01:26:5c:25:
1d:44:d6:d0:e1:4a:12:06:1a:a1:24:87:e4:ad:c0:
c5:c2:3a:69:71:21:8a:69:e8:02:a8:d0:4a:7f:5f:
2d:02:67:cc:a7:81:a5:ba:13:67:59:aa:d6:84:bd:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3D:C8:9F:CC:23:52:8A:C7:25:4F:28:89:D2:15:3D:6C:75:88:3D
X509v3 Authority Key Identifier:
keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/jj3In8wjUorHJU8oidIVPWx1iD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.160.0/22
80.240.98.0/23
80.240.116.0-80.240.123.255
83.229.66.0/24
103.14.104.0/22
193.47.56.0/22
195.216.128.0/22
212.103.56.0/22
217.194.136.0/23
Signature Algorithm: sha256WithRSAEncryption
92:b6:1c:5e:21:6c:95:21:da:ee:c5:65:c9:60:a4:3d:78:54:
b3:66:46:88:14:8d:d2:86:0f:d3:ea:99:ba:76:d0:5f:b7:f9:
98:af:d3:1d:a3:00:0d:94:8a:2c:fc:d8:0c:bd:6b:51:92:d6:
a8:08:16:7c:e6:2f:cc:b1:50:38:11:f9:e9:cf:fd:0a:38:6b:
e9:08:3b:7b:73:b3:f1:21:83:fd:d3:4d:dd:8c:fb:9f:87:88:
66:8b:be:31:0d:b0:d6:31:be:f8:66:ac:53:90:3a:b0:d6:79:
b6:6f:0a:71:15:b0:55:35:4f:11:cf:0b:28:2e:23:82:3e:ff:
b0:a1:74:ae:af:0a:26:cd:a8:41:c7:3d:6e:eb:4d:fd:ce:d9:
d6:49:f8:a0:a5:8b:77:1b:9f:8b:ad:e0:30:68:8f:d3:ae:2f:
a6:b8:5c:ff:81:4d:09:74:38:b8:82:89:9c:65:9e:61:e0:12:
a0:8f:b9:46:f8:72:3a:a6:66:c8:3b:a7:c2:7d:c2:57:fd:ce:
29:6d:03:d7:5c:44:2e:3a:b9:1b:dd:5a:28:0f:48:0e:c1:61:
60:eb:88:6f:64:69:c6:08:0e:50:6f:24:98:8c:ef:06:fb:45:
e7:2c:41:9a:02:09:6f:d5:8d:51:3a:eb:7e:12:44:9c:9d:63:
d5:88:2d:39
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIEBNUWMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OWQ2MzE1NmMxODM2ZjE2YzNiNDMwZWZmYmI3MmFjNjk5MzJlYTliMB4XDTIyMDYy
MzEyMTQxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGUzZGM4OWZjYzIz
NTI4YWM3MjU0ZjI4ODlkMjE1M2Q2Yzc1ODgzZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKdfM84JLFA7G+nOhNU0PcZAIIvLoGhhlElhYxdSoUBUPhjy
XqHPXKNMMoB+BPhefiQZRJtcIMXilIB8Af+6PjZLFk05HsFvXlwhi5apSXPoiid6
8iEO+ActfNCsuc+nxCJFEbA8Qzzw+mhfGxJ0j3Iv/mZH57yxOFmslxlRfLQ98fcL
3GlC3TG5Imi+ZF+mGXKlYUnhRFDbNvcNLCcRHSO+Lm6LEZ7E9iRJFcOUGo8igiYy
eb6mN9QAS5sDNHBgTr52f22eUBB+mkJ92wwBJlwlHUTW0OFKEgYaoSSH5K3AxcI6
aXEhimnoAqjQSn9fLQJnzKeBpboTZ1mq1oS9SZcCAwEAAaOCAkEwggI9MB0GA1Ud
DgQWBBSOPcifzCNSisclTyiJ0hU9bHWIPTAfBgNVHSMEGDAWgBTZ1jFWwYNvFsO0
MO/7tyrGmTLqmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJkWXhWc0dEYnhiRHRERHYtN2NxeHBreTZwcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDcvOGY0NmJlLTAyOGItNGQwMy1hOTczLWZkYTAxMWU1Yzk3Mi8x
L2pqM0luOHdqVW9ySEpVOG9pZElWUFd4MWlEMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcv
OGY0NmJlLTAyOGItNGQwMy1hOTczLWZkYTAxMWU1Yzk3Mi8xLzJkWXhWc0dEYnhi
RHRERHYtN2NxeHBreTZwcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBX
BggrBgEFBQcBBwEB/wRIMEYwRAQCAAEwPgMEAi6VoAMEAVDwYjAMAwQCUPB0AwQC
UPB4AwQAU+VCAwQCZw5oAwQCwS84AwQCw9iAAwQC1Gc4AwQB2cKIMA0GCSqGSIb3
DQEBCwUAA4IBAQCSthxeIWyVIdruxWXJYKQ9eFSzZkaIFI3Shg/T6pm6dtBft/mY
r9MdowANlIos/NgMvWtRktaoCBZ85i/MsVA4Efnpz/0KOGvpCDt7c7PxIYP9003d
jPufh4hmi74xDbDWMb74ZqxTkDqw1nm2bwpxFbBVNU8RzwsoLiOCPv+woXSurwom
zahBxz1u6039ztnWSfigpYt3G5+LreAwaI/Tri+muFz/gU0JdDi4gomcZZ5h4BKg
j7lG+HI6pmbIO6fCfcJX/c4pbQPXXEQuOrkb3VooD0gOwWFg64hvZGnGCA5QbySY
jO8G+0XnLEGaAglv1Y1ROut+EkScnWPViC05
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:33 2023 by rpki-client on console-ams.rpki-client.org