Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/jbD13sKqIUWeD5lNC60aMLNAvjA.roa
File: jbD13sKqIUWeD5lNC60aMLNAvjA.roa (raw, json)
Hash identifier: J2CNCBoIYX8dZ+TWf/EpFvGH31EIRxrqaNwYKNcYOtw=
Subject key identifier: 8D:B0:F5:DE:C2:AA:21:45:9E:0F:99:4D:0B:AD:1A:30:B3:40:BE:30
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 12876E67
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/jbD13sKqIUWeD5lNC60aMLNAvjA.roa
Signing time: Sat 01 Jan 2022 10:05:45 +0000
ROA not before: Sat 01 Jan 2022 10:05:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49596
IP address blocks: 188.253.84.0/22 maxlen: 22
185.103.128.0/22 maxlen: 22
5.202.36.0/23 maxlen: 23
5.202.34.0/23 maxlen: 23
5.202.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310865511 (0x12876e67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 10:05:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8db0f5dec2aa21459e0f994d0bad1a30b340be30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:59:c9:5f:94:8c:9d:c4:55:12:42:96:4e:4c:
8c:1d:47:f2:79:92:1e:02:d1:23:40:88:ba:0f:06:
e6:59:3d:8c:13:a3:a6:1c:b3:aa:64:7a:79:0e:a9:
0b:7b:1a:97:6a:71:d1:70:78:bd:23:97:c5:2f:72:
ff:29:19:e8:39:61:42:5a:f2:96:c7:10:4b:e1:fc:
b5:74:f5:d1:ce:e2:fa:72:b6:a0:9f:d7:85:1d:55:
3e:14:84:92:67:4f:85:52:4e:bd:fd:ae:8e:e1:c2:
d3:ec:74:87:5f:97:ec:97:ad:dc:fd:70:3b:60:eb:
74:9a:d0:d9:4d:64:77:8f:e7:00:2b:a6:99:2e:dd:
ef:b8:1a:91:b0:20:8d:56:85:73:7e:ac:8a:9b:1d:
77:27:53:63:99:b3:7f:9f:5f:df:a8:b7:ec:98:fd:
ca:c4:04:e2:ab:a8:08:38:39:3e:c5:8e:ed:1c:ae:
07:42:d2:94:7e:d4:9e:ff:9a:93:3d:5b:ef:69:93:
46:c7:27:1a:0c:0a:94:73:7b:75:1a:2b:89:be:b1:
1c:ed:66:e7:00:63:6a:b6:01:96:3f:e6:d2:f5:6e:
72:46:33:01:74:43:38:b2:80:24:dd:69:9e:e1:17:
7d:d0:2b:47:88:a1:8f:93:97:2e:eb:27:d8:e2:b2:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B0:F5:DE:C2:AA:21:45:9E:0F:99:4D:0B:AD:1A:30:B3:40:BE:30
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/jbD13sKqIUWeD5lNC60aMLNAvjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.34.0-5.202.38.255
185.103.128.0/22
188.253.84.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:fa:49:eb:d4:1d:8e:25:45:6f:3b:25:af:7b:46:5a:2c:35:
83:c0:0a:c2:f7:88:55:a4:f3:6c:97:c9:4c:aa:5a:4b:e8:ce:
6b:dd:a4:95:bf:6b:b2:75:32:b9:91:84:60:b1:77:23:0f:01:
56:49:7b:5a:45:e7:2d:98:76:ef:d6:a3:50:e2:dd:30:bd:8a:
2a:cb:1c:e6:7c:17:32:0b:82:86:24:8f:d5:7f:d0:6e:fd:fd:
f2:43:7d:40:02:4f:bc:ce:82:8a:97:7e:4a:cf:b4:e3:e4:f8:
1c:67:ca:9c:78:97:38:e7:d4:a2:c7:fe:4f:af:90:66:35:57:
ff:63:4e:e7:c5:d5:d9:f1:4a:ba:2e:60:43:f1:27:06:4a:ca:
d4:4b:20:87:2e:f5:a7:33:7c:9b:88:ac:ba:46:28:20:16:8b:
d7:ae:11:38:b1:8d:46:d1:0d:a5:26:e3:09:0e:9c:e0:c0:27:
00:84:2d:9f:d8:7d:b3:14:85:63:fa:2b:b4:99:b3:5a:0c:a8:
7c:8f:23:c8:41:d0:e1:ff:f6:70:a9:b4:3f:6f:f0:a2:97:11:
63:33:ce:34:27:d3:5d:ad:55:5f:d0:d3:2c:b1:af:28:0a:e0:
e5:70:83:ab:d1:60:54:69:59:10:45:a8:36:7b:7d:4b:0e:e7:
a2:ec:8b:85
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIEEoduZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YTFlNjkzNjhhYmQzNDUzOGZlNzdkZGFhYmNkYzgzNWFmNTk1ZWJhMB4XDTIyMDEw
MTEwMDU0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGRiMGY1ZGVjMmFh
MjE0NTllMGY5OTRkMGJhZDFhMzBiMzQwYmUzMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANlZyV+UjJ3EVRJClk5MjB1H8nmSHgLRI0CIug8G5lk9jBOj
phyzqmR6eQ6pC3sal2px0XB4vSOXxS9y/ykZ6DlhQlrylscQS+H8tXT10c7i+nK2
oJ/XhR1VPhSEkmdPhVJOvf2ujuHC0+x0h1+X7Jet3P1wO2DrdJrQ2U1kd4/nACum
mS7d77gakbAgjVaFc36sipsddydTY5mzf59f36i37Jj9ysQE4quoCDg5PsWO7Ryu
B0LSlH7Unv+akz1b72mTRscnGgwKlHN7dRorib6xHO1m5wBjarYBlj/m0vVuckYz
AXRDOLKAJN1pnuEXfdArR4ihj5OXLusn2OKyebcCAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBSNsPXewqohRZ4PmU0LrRows0C+MDAfBgNVHSMEGDAWgBSaHmk2ir00U4/n
fdqrzcg1r1leujAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21oNXBOb3E5TkZPUDUzM2FxODNJTmE5Wlhyby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGIvNzg4NmY0LTVmY2MtNGQ0NC1iZDYyLTEwOTgyZTA0MGQ1My8x
L2piRDEzc0txSVVXZUQ1bE5DNjBhTUxOQXZqQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIv
Nzg4NmY0LTVmY2MtNGQ0NC1iZDYyLTEwOTgyZTA0MGQ1My8xL21oNXBOb3E5TkZP
UDUzM2FxODNJTmE5Wlhyby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAz
BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGjAMAwQBBcoiAwQABcomAwQCuWeAAwQC
vP1UMA0GCSqGSIb3DQEBCwUAA4IBAQCa+knr1B2OJUVvOyWve0ZaLDWDwArC94hV
pPNsl8lMqlpL6M5r3aSVv2uydTK5kYRgsXcjDwFWSXtaRectmHbv1qNQ4t0wvYoq
yxzmfBcyC4KGJI/Vf9Bu/f3yQ31AAk+8zoKKl35Kz7Tj5PgcZ8qceJc459Six/5P
r5BmNVf/Y07nxdXZ8Uq6LmBD8ScGSsrUSyCHLvWnM3ybiKy6RiggFovXrhE4sY1G
0Q2lJuMJDpzgwCcAhC2f2H2zFIVj+iu0mbNaDKh8jyPIQdDh//ZwqbQ/b/CilxFj
M840J9NdrVVf0NMssa8oCuDlcIOr0WBUaVkQRag2e31LDuei7IuF
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:44 2023 by rpki-client on console-ams.rpki-client.org