Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/aaWtzSJ39aGC_YyVu446FHDt0yI.roa
File: aaWtzSJ39aGC_YyVu446FHDt0yI.roa (raw, json)
Hash identifier: Hg3HxHIYZnRVaVF1IaLQ0+tQ/FWNKOJL2ryyyKQlUKU=
Subject key identifier: 69:A5:AD:CD:22:77:F5:A1:82:FD:8C:95:BB:8E:3A:14:70:ED:D3:22
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 0184A39DC66E56B36F1FC0D1EA09ACCB235D
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/aaWtzSJ39aGC_YyVu446FHDt0yI.roa
Signing time: Wed 23 Nov 2022 08:32:16 +0000
ROA not before: Wed 23 Nov 2022 08:32:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42739
IP address blocks: 188.112.57.0/24 maxlen: 24
92.55.220.0/24 maxlen: 24
92.55.226.0/24 maxlen: 24
77.242.224.0/20 maxlen: 20
77.242.233.0/24 maxlen: 24
77.242.234.0/24 maxlen: 24
77.242.235.0/24 maxlen: 24
188.112.0.0/18 maxlen: 18
185.46.92.0/22 maxlen: 22
78.159.64.0/20 maxlen: 20
78.159.83.0/24 maxlen: 24
92.55.192.0/18 maxlen: 18
37.139.147.0/24 maxlen: 24
37.139.148.0/24 maxlen: 24
37.139.149.0/24 maxlen: 24
37.139.150.0/24 maxlen: 24
37.139.151.0/24 maxlen: 24
37.139.146.0/24 maxlen: 24
37.139.144.0/24 maxlen: 24
37.139.145.0/24 maxlen: 24
2a02:7f0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a3:9d:c6:6e:56:b3:6f:1f:c0:d1:ea:09:ac:cb:23:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Nov 23 08:32:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69a5adcd2277f5a182fd8c95bb8e3a1470edd322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:31:ed:fb:47:94:80:40:68:bd:85:91:a0:8d:
d8:4f:ae:ea:e6:b6:0c:09:45:c9:5e:6f:5b:9e:c4:
4c:39:d4:c6:64:94:35:b1:c3:4d:b0:9c:cf:4c:50:
bc:3d:69:d6:d8:39:61:98:c9:8b:b1:2c:f3:ac:6a:
07:f6:74:db:0b:7b:cd:2d:39:fc:2f:c4:32:1d:67:
a6:47:a3:a7:c3:ae:29:76:fc:9d:d9:25:20:10:0d:
c7:48:4b:a5:68:70:98:1d:3f:bf:da:28:9c:0e:7d:
a3:f3:63:5f:71:c5:a4:6e:68:c3:f6:f6:42:98:4e:
9f:bd:4d:6e:db:8c:dc:1f:8f:fd:8d:84:92:d7:e2:
85:2d:16:e4:57:6d:e5:b8:26:29:07:f7:24:42:e0:
3e:8b:4e:83:e3:bd:ac:d5:30:bf:c1:b3:e6:49:53:
34:48:66:f5:da:9a:9b:63:ad:78:fd:4b:b2:13:cc:
5c:b9:c6:fd:1b:0a:58:ee:51:ff:69:1f:2c:00:42:
74:ad:6f:09:78:b5:9b:b6:ec:c4:b8:e1:34:3d:4d:
0e:60:0f:b9:de:99:8e:64:1d:60:4b:67:68:93:87:
86:3e:12:d4:98:18:a0:55:54:e0:f6:c3:d7:5d:39:
4a:bd:78:02:8c:e0:d6:b4:76:2c:93:5d:3f:d9:05:
a1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A5:AD:CD:22:77:F5:A1:82:FD:8C:95:BB:8E:3A:14:70:ED:D3:22
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/aaWtzSJ39aGC_YyVu446FHDt0yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.144.0/21
77.242.224.0/20
78.159.64.0/20
78.159.83.0/24
92.55.192.0/18
185.46.92.0/22
188.112.0.0/18
IPv6:
2a02:7f0::/32
Signature Algorithm: sha256WithRSAEncryption
36:41:57:62:ba:ac:de:4c:a6:c0:37:d1:bf:86:f1:63:e6:3b:
e8:78:6d:57:8a:28:c6:3c:09:bd:96:e5:da:b5:12:ca:7f:08:
e1:57:a9:37:af:73:8b:aa:f4:fe:55:62:e1:c6:ed:35:1d:57:
64:79:77:23:32:2f:95:af:82:a4:4f:5e:12:f9:b1:f5:b2:f8:
4f:77:0e:81:8a:11:ae:d7:a6:ff:99:24:90:10:67:70:ef:ae:
86:2c:50:5c:ec:44:e2:48:5a:dd:61:fd:69:4d:cd:9b:f4:ef:
79:64:ce:57:64:71:d1:15:62:78:0f:23:6f:72:29:de:9d:93:
f0:aa:4c:9c:4c:fe:3f:00:a7:fd:77:39:64:00:64:57:8a:20:
52:69:2b:5b:88:60:55:25:26:4e:2d:58:ec:d0:c3:d4:9c:d6:
7c:57:0e:fd:06:14:1f:0b:23:b4:b9:c9:f6:c9:38:ac:8f:2b:
7e:ed:94:ba:2a:28:97:1e:b6:4c:e6:93:b8:a9:44:9c:ca:0b:
7e:2c:c7:13:4b:b4:b2:0d:16:fc:49:2c:41:6a:1c:2a:5a:5b:
0e:38:13:00:5d:f5:d2:0b:5e:f3:f4:a6:00:e4:a6:d1:a7:e1:
62:3d:b3:5d:f5:2a:14:6b:33:68:d2:92:bc:9b:fd:e6:7e:6b:
89:e6:b2:53
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAYSjncZuVrNvH8DR6gmsyyNdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx
YjUwMjEwHhcNMjIxMTIzMDgzMjE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWE1YWRjZDIyNzdmNWExODJmZDhjOTViYjhlM2ExNDcwZWRkMzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjHt+0eUgEBovYWRoI3YT67q5rYM
CUXJXm9bnsRMOdTGZJQ1scNNsJzPTFC8PWnW2DlhmMmLsSzzrGoH9nTbC3vNLTn8
L8QyHWemR6Onw64pdvyd2SUgEA3HSEulaHCYHT+/2iicDn2j82NfccWkbmjD9vZC
mE6fvU1u24zcH4/9jYSS1+KFLRbkV23luCYpB/ckQuA+i06D472s1TC/wbPmSVM0
SGb12pqbY614/UuyE8xcucb9GwpY7lH/aR8sAEJ0rW8JeLWbtuzEuOE0PU0OYA+5
3pmOZB1gS2dok4eGPhLUmBigVVTg9sPXXTlKvXgCjODWtHYsk10/2QWhXQIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFGmlrc0id/Whgv2MlbuOOhRw7dMiMB8GA1UdIwQY
MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt
MTc2OTNlN2VhNjdhLzEvYWFXdHpTSjM5YUdDX1l5VnU0NDZGSER0MHlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh
LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQDJYuQAwQE
TfLgAwQETp9AAwQATp9TAwQGXDfAAwQCuS5cAwQGvHAAMA0EAgACMAcDBQAqAgfw
MA0GCSqGSIb3DQEBCwUAA4IBAQA2QVdiuqzeTKbAN9G/hvFj5jvoeG1XiijGPAm9
luXatRLKfwjhV6k3r3OLqvT+VWLhxu01HVdkeXcjMi+Vr4KkT14S+bH1svhPdw6B
ihGu16b/mSSQEGdw766GLFBc7ETiSFrdYf1pTc2b9O95ZM5XZHHRFWJ4DyNvcine
nZPwqkycTP4/AKf9dzlkAGRXiiBSaStbiGBVJSZOLVjs0MPUnNZ8Vw79BhQfCyO0
ucn2yTisjyt+7ZS6KiiXHrZM5pO4qUScygt+LMcTS7SyDRb8SSxBahwqWlsOOBMA
XfXSC17z9KYA5KbRp+FiPbNd9SoUazNo0pK8m/3mfmuJ5rJT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:18 2024 by rpki-client on console-fra.rpki-client.org