Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/j6LP8Mnx1dL1CWqDPoGMz9gdHDM.roa
File: j6LP8Mnx1dL1CWqDPoGMz9gdHDM.roa (raw, json)
Hash identifier: XYv4bM31QlMV5ddajtLJGvZrCt3NH8NzbH9NB+Zl8Fg=
Subject key identifier: 8F:A2:CF:F0:C9:F1:D5:D2:F5:09:6A:83:3E:81:8C:CF:D8:1D:1C:33
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 05EF272F
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/j6LP8Mnx1dL1CWqDPoGMz9gdHDM.roa
Signing time: Wed 16 Feb 2022 17:19:27 +0000
ROA not before: Wed 16 Feb 2022 17:19:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204197
IP address blocks: 91.92.35.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99559215 (0x5ef272f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Feb 16 17:19:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fa2cff0c9f1d5d2f5096a833e818ccfd81d1c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:9b:ba:42:1e:f8:68:1c:4c:ba:05:63:6d:
e8:3d:4a:36:2b:1c:13:05:b4:e4:6e:98:20:05:39:
c9:94:a3:34:e5:57:8b:a0:48:3f:ad:b3:50:7e:82:
40:85:b5:56:71:4c:93:61:f7:5f:61:89:e0:7e:91:
c7:bc:6a:48:b0:f7:6e:bd:ec:24:be:4f:30:3b:3f:
6f:59:22:5d:44:8a:5a:bc:6a:32:35:af:4c:87:44:
d0:19:e4:f9:ed:6e:f8:4b:51:3e:f4:10:4a:f1:7e:
0a:8e:f8:fc:36:6e:7e:78:9a:7a:98:57:dd:f4:7b:
3e:81:c1:65:e5:72:4e:1a:43:7d:88:a3:63:ec:be:
e4:66:3f:ac:f7:2c:70:87:00:7d:a1:a7:83:d8:ae:
3f:24:72:be:3e:06:3b:41:3d:38:9a:bb:44:14:be:
d5:71:6b:12:c1:02:76:79:55:a4:f8:7e:19:18:06:
f9:72:1a:8a:34:43:a6:ef:a4:92:51:1c:93:f0:79:
41:f6:49:fa:84:2b:ea:d8:f8:f9:ea:c0:28:7d:a9:
b3:3a:46:e6:92:f9:e8:fa:0c:7f:9b:6e:45:e1:b1:
30:fb:f0:ca:bf:59:0a:35:04:bb:a4:f3:32:ad:7d:
3c:06:a3:a1:3c:7b:d5:e3:7f:8c:ec:50:eb:5c:cf:
4f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A2:CF:F0:C9:F1:D5:D2:F5:09:6A:83:3E:81:8C:CF:D8:1D:1C:33
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/j6LP8Mnx1dL1CWqDPoGMz9gdHDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.131.0/24
78.159.156.0/24
91.92.33.0/24
91.92.35.0/24
91.92.49.0-91.92.53.255
93.152.209.0/24
93.152.212.0/24
93.152.215.0/24
93.152.221.0/24
93.152.224.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:22:f1:3a:11:3d:62:2b:7a:e3:70:11:69:a2:ca:ab:e5:90:
0c:6c:41:ce:a0:c4:6e:d7:af:ee:59:29:eb:b0:ce:98:eb:39:
17:17:55:9e:5d:cd:2d:18:dd:54:96:df:a0:d2:41:c5:8c:fd:
fd:58:3b:b6:6e:36:ac:a3:d8:46:a3:b5:6c:82:4c:ba:10:7e:
0e:88:ab:15:a2:36:1e:cf:9b:b6:3e:43:ea:8b:cb:94:be:ba:
da:5c:0d:46:41:bd:f8:13:b9:65:04:6a:fb:ae:42:da:54:3f:
60:fe:d9:6a:86:ca:80:fa:a9:9e:22:4b:68:c4:ab:cb:fc:10:
e8:12:90:f7:85:17:3b:60:7a:3d:fb:22:68:ab:a0:be:20:48:
9f:8c:62:14:4d:3f:a4:8d:15:75:1c:eb:84:81:14:f2:b7:98:
7d:2b:e5:db:74:87:3f:b0:d8:c7:b4:12:5a:73:41:96:b9:15:
8b:6e:aa:8e:f8:81:a2:29:4b:52:73:e9:f7:10:3a:1d:7f:23:
6f:60:51:fd:58:ef:5f:f0:5f:d5:20:69:65:19:bb:da:53:85:
53:59:1d:19:e8:11:83:89:f5:f8:a0:cc:36:ae:a8:ef:a0:71:
e3:36:ec:79:64:0f:47:dc:ab:c7:59:f6:a4:98:11:0b:17:4c:
e0:22:a5:86
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIEBe8nLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZDFjYWE2OTM1OGY4Yzk4ZjdhNzE5ZjI1OTdkNWRhZGRiZDAwMThjMB4XDTIyMDIx
NjE3MTkyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGZhMmNmZjBjOWYx
ZDVkMmY1MDk2YTgzM2U4MThjY2ZkODFkMWMzMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL8Bm7pCHvhoHEy6BWNt6D1KNiscEwW05G6YIAU5yZSjNOVX
i6BIP62zUH6CQIW1VnFMk2H3X2GJ4H6Rx7xqSLD3br3sJL5PMDs/b1kiXUSKWrxq
MjWvTIdE0Bnk+e1u+EtRPvQQSvF+Co74/DZufniaephX3fR7PoHBZeVyThpDfYij
Y+y+5GY/rPcscIcAfaGng9iuPyRyvj4GO0E9OJq7RBS+1XFrEsECdnlVpPh+GRgG
+XIaijRDpu+kklEck/B5QfZJ+oQr6tj4+erAKH2pszpG5pL56PoMf5tuReGxMPvw
yr9ZCjUEu6TzMq19PAajoTx71eN/jOxQ61zPT68CAwEAAaOCAkcwggJDMB0GA1Ud
DgQWBBSPos/wyfHV0vUJaoM+gYzP2B0cMzAfBgNVHSMEGDAWgBQtHKppNY+MmPen
GfJZfV2t29ABjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xSeXFhVFdQakpqM3B4bnlXWDFkcmR2UUFZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGYvYTkzNjk5LTE4OGItNDcwYS05NmI3LTI5YjA4NWRkMjNhZC8x
L2o2TFA4TW54MWRMMUNXcURQb0dNejlnZEhETS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYv
YTkzNjk5LTE4OGItNDcwYS05NmI3LTI5YjA4NWRkMjNhZC8xL0xSeXFhVFdQakpq
M3B4bnlXWDFkcmR2UUFZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBd
BggrBgEFBQcBBwEB/wROMEwwSgQCAAEwRAMEAE6fgwMEAE6fnAMEAFtcIQMEAFtc
IzAMAwQAW1wxAwQBW1w0AwQAXZjRAwQAXZjUAwQAXZjXAwQAXZjdAwQAXZjgMA0G
CSqGSIb3DQEBCwUAA4IBAQA6IvE6ET1iK3rjcBFposqr5ZAMbEHOoMRu16/uWSnr
sM6Y6zkXF1WeXc0tGN1Ult+g0kHFjP39WDu2bjaso9hGo7Vsgky6EH4OiKsVojYe
z5u2PkPqi8uUvrraXA1GQb34E7llBGr7rkLaVD9g/tlqhsqA+qmeIktoxKvL/BDo
EpD3hRc7YHo9+yJoq6C+IEifjGIUTT+kjRV1HOuEgRTyt5h9K+XbdIc/sNjHtBJa
c0GWuRWLbqqO+IGiKUtSc+n3EDodfyNvYFH9WO9f8F/VIGllGbvaU4VTWR0Z6BGD
ifX4oMw2rqjvoHHjNux5ZA9H3KvHWfakmBELF0zgIqWG
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org