Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YD0EEE7ICfVOExCHt71Kysov2yI.roa
File: YD0EEE7ICfVOExCHt71Kysov2yI.roa (raw, json)
Hash identifier: oAkoz1TNRxgSkPMcOdbOzX9TO+s1nHZySdForRl3qK8=
Subject key identifier: 60:3D:04:10:4E:C8:09:F5:4E:13:10:87:B7:BD:4A:CA:CA:2F:DB:22
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018221052BA19FE3B9FA3B3747C210B5C705
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YD0EEE7ICfVOExCHt71Kysov2yI.roa
Signing time: Thu 21 Jul 2022 13:49:23 +0000
ROA not before: Thu 21 Jul 2022 13:49:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 88.209.230.0/24 maxlen: 24
92.52.214.0/24 maxlen: 24
88.209.232.0/22 maxlen: 22
88.209.229.0/24 maxlen: 24
88.209.244.0/23 maxlen: 23
88.209.252.0/24 maxlen: 24
83.137.152.0/24 maxlen: 24
88.209.255.0/24 maxlen: 24
83.137.154.0/23 maxlen: 24
88.209.204.0/24 maxlen: 32
88.209.204.0/22 maxlen: 32
88.209.200.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:21:05:2b:a1:9f:e3:b9:fa:3b:37:47:c2:10:b5:c7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 21 13:49:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=603d04104ec809f54e131087b7bd4acaca2fdb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:67:ab:e7:c9:20:46:bd:1e:7f:44:f2:f8:
5b:ac:1b:60:5b:40:d9:f1:eb:e4:b6:2e:7a:52:25:
34:0c:f6:4b:b9:d0:99:a7:12:28:d6:a0:81:a6:9a:
58:88:f5:8d:0a:3f:28:05:55:da:c7:ed:ea:ae:97:
23:22:34:2a:fb:76:2e:8c:bf:ba:6e:f7:42:7e:48:
ae:2b:c0:7c:1a:cd:ad:49:c8:b5:fb:23:10:df:63:
2c:44:6a:1e:2a:ae:77:f0:1d:32:e7:7a:1c:84:35:
12:20:4b:3a:9d:31:98:84:97:91:d9:ea:10:42:2d:
45:55:d7:bc:6c:a9:db:39:7e:dd:31:57:d9:d6:2d:
f4:e4:99:7f:0b:9b:94:99:67:61:e8:f6:25:89:38:
de:19:72:96:7e:e9:b1:96:7c:c9:62:52:ac:ad:23:
d5:5e:98:01:39:8a:f0:90:45:80:dc:5f:53:45:8f:
10:93:a8:2b:ed:99:f6:8d:23:21:3d:85:f7:c5:d2:
69:4a:b1:28:4f:60:6a:f3:8b:13:21:3a:40:d2:8e:
b1:b6:71:4a:48:11:6f:c9:6a:69:d8:9d:1c:bf:9a:
2a:b9:85:0f:ed:56:a3:19:c3:0e:1f:3e:7b:52:76:
c1:56:4b:8d:e3:31:f1:50:45:fb:d5:01:a9:79:d5:
f1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3D:04:10:4E:C8:09:F5:4E:13:10:87:B7:BD:4A:CA:CA:2F:DB:22
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YD0EEE7ICfVOExCHt71Kysov2yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.152.0/24
83.137.154.0/23
88.209.200.0/21
88.209.229.0-88.209.230.255
88.209.232.0/22
88.209.244.0/23
88.209.252.0/24
88.209.255.0/24
92.52.214.0/24
Signature Algorithm: sha256WithRSAEncryption
07:32:78:87:b6:d0:0c:09:21:98:c7:81:e4:53:e2:52:1c:8e:
d0:e4:ea:23:d2:38:e5:8d:b0:0b:08:84:89:49:86:09:6e:ac:
6e:d3:26:93:1c:85:9a:70:98:5f:fd:fb:37:07:0d:c2:f4:ca:
e1:50:b2:07:d0:fb:e1:a4:20:b9:79:f0:49:1e:ff:15:e0:e1:
4d:4d:50:35:0d:cf:63:65:97:19:7c:51:ff:79:07:d2:bc:d6:
1f:0d:6e:ca:71:d4:5c:45:93:92:95:ed:69:ac:d0:14:ba:94:
d2:8d:1e:38:89:02:37:44:db:c5:56:d1:51:00:53:61:0d:6e:
ea:30:8b:09:c7:16:e8:08:ab:89:d3:53:c1:79:4f:de:77:b9:
48:25:d6:96:a9:b5:af:2e:2d:23:5f:7e:2b:c7:e6:c4:49:b4:
bb:1a:19:01:8e:33:33:c1:c0:44:5d:47:76:0b:1c:9e:3e:90:
e7:99:32:4b:40:f1:0b:cd:f0:1b:8c:d7:9e:a9:56:00:d4:59:
bf:fd:7c:1a:0f:36:b6:4e:f5:ab:d2:d5:d1:e6:49:ae:75:cd:
f6:4e:fc:a2:69:16:8e:e0:f4:f3:34:bc:8f:ca:12:45:f3:96:
35:8e:0f:98:8d:fc:b8:a6:18:85:97:9f:b8:70:ed:90:05:36:
aa:3d:ce:32
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAYIhBSuhn+O5+js3R8IQtccFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjIwNzIxMTM0OTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDNkMDQxMDRlYzgwOWY1NGUxMzEwODdiN2JkNGFjYWNhMmZkYjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd1nq+fJIEa9Hn9E8vhbrBtgW0DZ
8evkti56UiU0DPZLudCZpxIo1qCBpppYiPWNCj8oBVXax+3qrpcjIjQq+3YujL+6
bvdCfkiuK8B8Gs2tSci1+yMQ32MsRGoeKq538B0y53ochDUSIEs6nTGYhJeR2eoQ
Qi1FVde8bKnbOX7dMVfZ1i305Jl/C5uUmWdh6PYliTjeGXKWfumxlnzJYlKsrSPV
XpgBOYrwkEWA3F9TRY8Qk6gr7Zn2jSMhPYX3xdJpSrEoT2Bq84sTITpA0o6xtnFK
SBFvyWpp2J0cv5oquYUP7VajGcMOHz57UnbBVkuN4zHxUEX71QGpedXxCQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFGA9BBBOyAn1ThMQh7e9SsrKL9siMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvWUQwRUVFN0lDZlZPRXhDSHQ3MUt5c292MnlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAU4mYAwQB
U4maAwQDWNHIMAwDBABY0eUDBABY0eYDBAJY0egDBAFY0fQDBABY0fwDBABY0f8D
BABcNNYwDQYJKoZIhvcNAQELBQADggEBAAcyeIe20AwJIZjHgeRT4lIcjtDk6iPS
OOWNsAsIhIlJhglurG7TJpMchZpwmF/9+zcHDcL0yuFQsgfQ++GkILl58Eke/xXg
4U1NUDUNz2Nllxl8Uf95B9K81h8Nbspx1FxFk5KV7Wms0BS6lNKNHjiJAjdE28VW
0VEAU2ENbuowiwnHFugIq4nTU8F5T953uUgl1papta8uLSNffivH5sRJtLsaGQGO
MzPBwERdR3YLHJ4+kOeZMktA8QvN8BuM156pVgDUWb/9fBoPNrZO9avS1dHmSa51
zfZO/KJpFo7g9PM0vI/KEkXzljWOD5iN/LimGIWXn7hw7ZAFNqo9zjI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org