Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/HtupY6YfKI9Vmu_IRt0JKtLTavA.roa
File: HtupY6YfKI9Vmu_IRt0JKtLTavA.roa (raw, json)
Hash identifier: NP/Y0nzbtKExC36MdqpFnmo5oYfRgqPjsQe5ZR8TRbk=
Subject key identifier: 1E:DB:A9:63:A6:1F:28:8F:55:9A:EF:C8:46:DD:09:2A:D2:D3:6A:F0
Certificate issuer: /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Certificate serial: 38398BA2
Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/HtupY6YfKI9Vmu_IRt0JKtLTavA.roa
Signing time: Sat 01 Jan 2022 16:10:30 +0000
ROA not before: Sat 01 Jan 2022 16:10:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201877
IP address blocks: 83.139.194.0/24 maxlen: 24
83.139.200.0/24 maxlen: 24
83.139.209.0/24 maxlen: 24
83.139.211.0/24 maxlen: 24
83.139.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943295394 (0x38398ba2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Validity
Not Before: Jan 1 16:10:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1edba963a61f288f559aefc846dd092ad2d36af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:7b:14:e7:66:84:bc:f4:ca:92:71:56:ab:
d2:86:23:31:a6:c3:3b:ed:1f:91:64:86:73:16:e5:
3f:f8:fd:8e:b9:68:89:ce:b3:ca:c9:d5:4e:b6:84:
da:ee:5b:ce:44:cf:7c:a8:a7:b0:4f:52:71:b8:77:
f4:ca:eb:a5:d0:f3:55:e3:98:c1:de:18:0e:03:af:
62:4f:a6:46:2f:1e:5b:37:4e:24:52:c5:b2:f1:a8:
18:a9:70:26:a3:86:e9:a5:a1:31:46:64:86:a8:97:
35:70:f3:dc:d8:aa:ea:18:41:81:2c:3b:e5:3f:cc:
92:c9:8e:3f:cd:f0:55:ee:cc:7c:40:5c:9f:61:97:
a0:49:fa:33:b5:f3:37:fa:78:49:e4:1b:97:5c:6a:
b1:0c:9b:c1:67:15:e6:54:87:ad:fc:95:a9:ad:c1:
6b:2b:f3:35:af:4d:76:b7:ac:c3:e9:a8:24:dc:6c:
77:43:eb:60:83:82:f1:a0:0b:54:f7:3f:5d:07:6f:
23:9c:81:51:fc:d3:2d:99:19:0f:69:36:46:6a:69:
33:ee:95:b7:51:ac:8c:76:1d:b9:5c:32:5f:b4:cc:
3e:9e:15:d6:b3:0d:69:52:4b:77:5f:c1:03:7e:59:
13:8b:8c:81:22:d1:19:01:28:31:0b:4b:80:63:76:
34:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DB:A9:63:A6:1F:28:8F:55:9A:EF:C8:46:DD:09:2A:D2:D3:6A:F0
X509v3 Authority Key Identifier:
keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/HtupY6YfKI9Vmu_IRt0JKtLTavA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.194.0/24
83.139.200.0/24
83.139.209.0-83.139.211.255
Signature Algorithm: sha256WithRSAEncryption
df:1e:ba:55:7c:54:c6:8d:ae:32:e3:ee:ee:23:67:0f:b0:f1:
17:f7:8d:ca:7d:ad:4a:a1:5e:05:f0:35:dd:82:71:d3:37:10:
a8:22:39:e3:7c:0b:2b:b3:05:aa:b6:f5:b4:2c:48:76:b7:2a:
ab:57:e4:38:c3:af:6a:6f:75:70:5d:43:a1:f5:1b:fb:d5:be:
0a:7f:a7:15:c9:f1:ae:0d:32:40:2f:0d:26:d8:6a:c3:6f:0a:
80:d4:b7:ab:f5:0b:ca:52:a4:f4:08:0c:a9:fc:cb:a9:cf:76:
b1:63:86:f1:30:3c:c2:fb:18:bb:30:88:84:e7:9c:b0:86:9a:
83:b0:f3:e9:9a:9a:f2:ca:e1:45:7f:fd:d4:a3:3c:42:4d:30:
5e:f3:03:41:b1:bb:4d:08:a6:c2:b6:b4:c1:cf:2e:90:8e:21:
e8:c9:ce:9e:9d:f8:11:1f:2b:34:fd:28:99:ce:24:44:34:65:
75:f6:49:af:97:30:11:d7:5a:e7:b4:31:5c:a5:e5:0a:f9:54:
42:b6:d3:62:60:e3:0a:ec:31:7c:14:e7:63:37:0e:cd:95:e5:
18:f4:d0:04:4b:9c:f3:74:23:d8:e0:df:18:93:25:9c:53:c8:
eb:fa:81:b9:56:ac:2a:c0:12:cf:b1:82:3f:2e:b6:3d:51:f1:
bc:cb:0e:f1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIEODmLojANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NTAxYzg0NWYxM2RkNGFkNmU5ZGFlNDcwZDVmZjY5YzVjY2EzNzcxMB4XDTIyMDEw
MTE2MTAzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWVkYmE5NjNhNjFm
Mjg4ZjU1OWFlZmM4NDZkZDA5MmFkMmQzNmFmMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALJoexTnZoS89MqScVar0oYjMabDO+0fkWSGcxblP/j9jrlo
ic6zysnVTraE2u5bzkTPfKinsE9Scbh39MrrpdDzVeOYwd4YDgOvYk+mRi8eWzdO
JFLFsvGoGKlwJqOG6aWhMUZkhqiXNXDz3Niq6hhBgSw75T/MksmOP83wVe7MfEBc
n2GXoEn6M7XzN/p4SeQbl1xqsQybwWcV5lSHrfyVqa3BayvzNa9Ndresw+moJNxs
d0PrYIOC8aALVPc/XQdvI5yBUfzTLZkZD2k2RmppM+6Vt1GsjHYduVwyX7TMPp4V
1rMNaVJLd1/BA35ZE4uMgSLRGQEoMQtLgGN2NJ8CAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBQe26ljph8oj1Wa78hG3Qkq0tNq8DAfBgNVHSMEGDAWgBQVAchF8T3UrW6d
rkcNX/acXMo3cTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZRSElSZkU5MUsxdW5hNUhEVl8ybkZ6S04zRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWEvMDM3NmExLTQ5ZDYtNGE0ZC04YzJhLWVkNzkxNTQzNmIyNy8x
L0h0dXBZNllmS0k5Vm11X0lSdDBKS3RMVGF2QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEv
MDM3NmExLTQ5ZDYtNGE0ZC04YzJhLWVkNzkxNTQzNmIyNy8xL0ZRSElSZkU5MUsx
dW5hNUhEVl8ybkZ6S04zRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAz
BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGgMEAFOLwgMEAFOLyDAMAwQAU4vRAwQC
U4vQMA0GCSqGSIb3DQEBCwUAA4IBAQDfHrpVfFTGja4y4+7uI2cPsPEX943Kfa1K
oV4F8DXdgnHTNxCoIjnjfAsrswWqtvW0LEh2tyqrV+Q4w69qb3VwXUOh9Rv71b4K
f6cVyfGuDTJALw0m2GrDbwqA1Ler9QvKUqT0CAyp/Mupz3axY4bxMDzC+xi7MIiE
55ywhpqDsPPpmpryyuFFf/3UozxCTTBe8wNBsbtNCKbCtrTBzy6QjiHoyc6enfgR
Hys0/SiZziRENGV19kmvlzAR11rntDFcpeUK+VRCttNiYOMK7DF8FOdjNw7NleUY
9NAES5zzdCPY4N8YkyWcU8jr+oG5VqwqwBLPsYI/LrY9UfG8yw7x
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:42 2023 by rpki-client on console-ams.rpki-client.org