Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/YaIJEaAvGJ3OOUzHW2oTB7W7lzA.roa
File: YaIJEaAvGJ3OOUzHW2oTB7W7lzA.roa (raw, json)
Hash identifier: Ui9LCO4lZW0GLjqeApUbawYHBcO2DIGdWbA0ljKUqG4=
Subject key identifier: 61:A2:09:11:A0:2F:18:9D:CE:39:4C:C7:5B:6A:13:07:B5:BB:97:30
Certificate issuer: /CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Certificate serial: 03E276FE
Authority key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/YaIJEaAvGJ3OOUzHW2oTB7W7lzA.roa
Signing time: Sat 01 Jan 2022 08:56:44 +0000
ROA not before: Sat 01 Jan 2022 08:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48431
IP address blocks: 185.57.132.0/22 maxlen: 22
95.80.190.0/24 maxlen: 24
95.80.128.0/20 maxlen: 20
95.80.128.0/18 maxlen: 18
95.80.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65173246 (0x3e276fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Validity
Not Before: Jan 1 08:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61a20911a02f189dce394cc75b6a1307b5bb9730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:37:cb:6c:6d:d9:27:76:62:e3:e5:dc:ff:7a:
01:38:e5:c8:4c:66:e3:e4:09:2d:e4:4c:a1:66:e3:
22:39:42:d1:0e:e6:fd:91:e0:32:ce:31:0c:bb:22:
1a:c2:54:7a:8e:7c:dc:06:bb:a5:5f:08:89:2d:b3:
08:9d:f1:77:8c:73:0a:cd:d7:d5:e8:66:bd:c1:62:
54:65:62:0b:c3:7f:58:70:6d:bd:bb:06:fd:37:31:
70:6a:d1:ed:03:6d:8e:db:03:29:09:5d:f9:22:6e:
71:a6:03:99:72:91:a7:20:80:04:96:0a:fd:1d:a0:
f8:c9:51:75:c7:90:f6:49:a3:aa:06:15:17:62:59:
6a:76:98:13:c2:4a:57:ff:d0:19:47:74:68:66:bb:
32:1e:99:ce:17:51:22:35:15:2b:55:94:a6:a6:b9:
97:8c:27:48:17:f8:e6:ce:64:99:69:5f:62:54:db:
1d:29:df:0d:fe:6d:05:dc:d4:9b:a2:cf:fa:99:0b:
93:2f:4f:7e:85:eb:e9:8d:c7:34:22:8e:aa:f3:ee:
12:36:78:a2:c7:c4:54:3d:ea:57:79:30:a6:06:ff:
c9:fe:b5:95:62:a3:ab:f9:c5:f8:c8:e2:22:88:34:
b1:27:63:02:b9:91:93:8a:de:60:dd:38:6f:c5:74:
78:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A2:09:11:A0:2F:18:9D:CE:39:4C:C7:5B:6A:13:07:B5:BB:97:30
X509v3 Authority Key Identifier:
keyid:4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/YaIJEaAvGJ3OOUzHW2oTB7W7lzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.80.128.0/18
185.57.132.0/22
Signature Algorithm: sha256WithRSAEncryption
79:d8:41:f7:b5:7d:d4:a6:c7:15:67:d1:1d:a9:e2:3f:3f:c5:
c8:50:4d:39:a6:73:25:bf:5b:95:74:23:59:a8:e9:4a:32:b1:
e1:da:25:6d:55:29:77:80:c0:3f:ee:50:69:59:b6:86:ce:82:
15:88:74:e4:6f:90:d6:4e:10:8d:52:b3:a2:bc:b2:ef:81:18:
2d:71:f9:9b:a9:d5:56:4e:4f:fd:70:29:01:85:9d:43:7d:b9:
f6:df:19:3a:42:7a:c1:8e:35:13:d6:4c:e3:2a:e1:90:64:3e:
3e:da:9b:44:a4:7b:fb:bd:b7:ac:49:9c:5e:4b:ec:be:d0:f9:
97:64:0f:5d:f5:d2:67:6d:6e:7f:05:c2:2b:0a:a6:76:74:2d:
c1:49:4f:24:8a:5a:67:d4:e5:6c:68:57:03:33:84:92:df:23:
07:9c:5e:ca:60:14:e3:5b:1c:41:02:a2:42:8d:19:7e:f5:9f:
cf:e9:0b:e5:73:51:31:56:86:40:bb:65:b5:ec:48:21:dc:f0:
fb:9c:26:4e:24:9d:f5:be:d8:da:46:3d:10:94:2d:cf:eb:8a:
e9:a3:df:cc:31:06:d3:e9:55:e3:40:91:a1:bf:71:fe:d3:55:
36:d0:0d:24:04:fc:5f:68:cb:6e:c7:f8:34:58:ae:d3:49:b9:
5d:fb:8b:c1
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA+J2/jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZTcyYWM3MWViNDUwN2FjMGE2NTJhNTQ1OThkYWU0NTFmZTMzZjQ3MB4XDTIyMDEw
MTA4NTY0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjFhMjA5MTFhMDJm
MTg5ZGNlMzk0Y2M3NWI2YTEzMDdiNWJiOTczMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKM3y2xt2Sd2YuPl3P96ATjlyExm4+QJLeRMoWbjIjlC0Q7m
/ZHgMs4xDLsiGsJUeo583Aa7pV8IiS2zCJ3xd4xzCs3X1ehmvcFiVGViC8N/WHBt
vbsG/TcxcGrR7QNtjtsDKQld+SJucaYDmXKRpyCABJYK/R2g+MlRdceQ9kmjqgYV
F2JZanaYE8JKV//QGUd0aGa7Mh6ZzhdRIjUVK1WUpqa5l4wnSBf45s5kmWlfYlTb
HSnfDf5tBdzUm6LP+pkLky9PfoXr6Y3HNCKOqvPuEjZ4osfEVD3qV3kwpgb/yf61
lWKjq/nF+MjiIog0sSdjArmRk4reYN04b8V0eE0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRhogkRoC8Ync45TMdbahMHtbuXMDAfBgNVHSMEGDAWgBROcqxx60UHrApl
KlRZja5FH+M/RzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RuS3NjZXRGQjZ3S1pTcFVXWTJ1UlJfalAwYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmUvYTA3NTIzLTgzOTItNDdmNS04MmIzLTMwYzQzMGEzOThlNi8x
L1lhSUpFYUF2R0ozT09VekhXMm9UQjdXN2x6QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUv
YTA3NTIzLTgzOTItNDdmNS04MmIzLTMwYzQzMGEzOThlNi8xL1RuS3NjZXRGQjZ3
S1pTcFVXWTJ1UlJfalAwYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBl9QgAMEArk5hDANBgkqhkiG9w0B
AQsFAAOCAQEAedhB97V91KbHFWfRHaniPz/FyFBNOaZzJb9blXQjWajpSjKx4dol
bVUpd4DAP+5QaVm2hs6CFYh05G+Q1k4QjVKzoryy74EYLXH5m6nVVk5P/XApAYWd
Q3259t8ZOkJ6wY41E9ZM4yrhkGQ+PtqbRKR7+723rEmcXkvsvtD5l2QPXfXSZ21u
fwXCKwqmdnQtwUlPJIpaZ9TlbGhXAzOEkt8jB5xeymAU41scQQKiQo0ZfvWfz+kL
5XNRMVaGQLtltexIIdzw+5wmTiSd9b7Y2kY9EJQtz+uK6aPfzDEG0+lV40CRob9x
/tNVNtANJAT8X2jLbsf4NFiu00m5XfuLwQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:39 2024 by rpki-client on console-ams.rpki-client.org