Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/IsjEPeBK3MC40D4mMvK4lKPqkfY.roa
File: IsjEPeBK3MC40D4mMvK4lKPqkfY.roa (raw, json)
Hash identifier: LiZgL/bwQzTFdSql4lTySdezGC/5dumu8++wpkBfOR0=
Subject key identifier: 22:C8:C4:3D:E0:4A:DC:C0:B8:D0:3E:26:32:F2:B8:94:A3:EA:91:F6
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 02DF0FC6
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/IsjEPeBK3MC40D4mMvK4lKPqkfY.roa
Signing time: Thu 27 Jan 2022 19:54:52 +0000
ROA not before: Thu 27 Jan 2022 19:54:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 89.36.231.0/24 maxlen: 24
94.177.27.0/24 maxlen: 24
89.42.213.0/24 maxlen: 24
89.37.106.0/24 maxlen: 24
46.102.174.0/24 maxlen: 24
94.177.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48172998 (0x2df0fc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 27 19:54:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22c8c43de04adcc0b8d03e2632f2b894a3ea91f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:3b:bd:49:03:eb:9b:8f:09:ea:c0:fe:cc:
ca:75:2c:0a:60:53:4a:b9:78:8c:d1:a3:bc:88:32:
c8:e7:84:f9:9e:b5:08:39:fb:90:63:37:61:33:60:
f3:4d:4a:f0:7d:8d:44:8f:7e:90:c9:86:ff:15:ea:
8e:79:88:87:cb:b6:de:b2:35:0a:b2:73:09:62:2e:
0e:00:8b:18:7f:fb:10:8e:13:e9:25:54:d0:8d:a9:
89:7c:6a:01:72:46:72:2b:e0:d1:9b:6a:8d:65:72:
bc:b1:49:da:b2:94:9f:04:59:a6:d8:d1:dd:aa:99:
a9:f7:6c:ec:64:1b:a6:df:95:35:61:1b:bd:61:f3:
9d:3b:a9:fd:03:7c:bb:e7:24:fd:18:62:b2:98:26:
ac:55:f9:b2:5c:f8:b4:f1:be:df:1f:32:5d:29:e7:
7a:06:da:b1:d8:4b:ff:33:3e:52:a9:66:7e:d0:8c:
18:0c:95:54:6d:67:4a:cf:48:93:24:d5:da:68:b9:
85:e6:0e:68:34:bf:62:38:1a:f1:e6:2c:e0:f4:c7:
5d:f8:69:eb:41:a3:24:18:57:e1:b6:b0:6f:4e:54:
2c:1a:e1:5b:2a:ad:3e:ab:2e:b6:d0:09:f4:a0:2a:
91:6e:64:6a:6d:d9:3a:ad:ac:10:60:b8:3f:a8:e1:
0b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C8:C4:3D:E0:4A:DC:C0:B8:D0:3E:26:32:F2:B8:94:A3:EA:91:F6
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/IsjEPeBK3MC40D4mMvK4lKPqkfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.174.0/24
89.36.231.0/24
89.37.106.0/24
89.42.213.0/24
94.177.27.0/24
94.177.65.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ae:a2:ca:da:9f:d6:e7:ce:eb:44:ea:4d:e9:b3:e5:12:59:
7d:99:f6:94:b2:63:6f:5f:5f:88:8e:1b:d7:b6:d8:19:c3:67:
5e:b4:e9:ff:a6:eb:44:b5:be:c8:93:eb:07:90:db:1c:a8:0c:
02:82:97:3c:f7:1a:58:48:37:0c:75:61:82:47:a1:27:e9:d5:
62:d5:dc:d6:a3:ac:9b:9e:9b:ed:e9:93:bf:23:47:f7:3a:be:
8d:47:b1:7b:23:49:7c:0c:96:91:94:66:d4:bf:a8:98:0b:ad:
d5:6f:96:49:ad:a0:9f:b6:aa:b3:f2:ba:2e:53:26:ec:c4:f5:
b5:1d:81:05:34:e3:92:74:09:c7:0f:9f:f3:18:5a:70:60:06:
d7:a8:a1:9c:65:2f:30:ef:4b:46:f7:ee:3b:a7:d5:7c:12:e7:
05:ec:7b:42:a0:bf:f6:b1:28:e0:ac:09:87:65:74:61:b9:d0:
36:54:87:1d:99:c7:6d:d2:fa:f6:9f:bf:a6:ca:86:4b:51:7c:
53:26:ac:09:dc:e4:a7:04:3b:dd:ac:b5:e2:78:35:84:3d:d9:
e2:ca:ce:f6:fc:28:68:f5:6d:e7:66:82:a5:45:d7:6e:f1:a3:
e5:6f:f8:15:ea:5e:41:bc:ba:1e:78:69:d9:fc:01:66:86:46:
20:09:5d:8c
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIEAt8PxjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YTAwZTk4MTk1MzA2MTk3MmM4OTZiZDZkMjc3MzhkMDgzYWFkYjBlMB4XDTIyMDEy
NzE5NTQ1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjJjOGM0M2RlMDRh
ZGNjMGI4ZDAzZTI2MzJmMmI4OTRhM2VhOTFmNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMdnO71JA+ubjwnqwP7MynUsCmBTSrl4jNGjvIgyyOeE+Z61
CDn7kGM3YTNg801K8H2NRI9+kMmG/xXqjnmIh8u23rI1CrJzCWIuDgCLGH/7EI4T
6SVU0I2piXxqAXJGcivg0ZtqjWVyvLFJ2rKUnwRZptjR3aqZqfds7GQbpt+VNWEb
vWHznTup/QN8u+ck/RhispgmrFX5slz4tPG+3x8yXSnnegbasdhL/zM+UqlmftCM
GAyVVG1nSs9IkyTV2mi5heYOaDS/Yjga8eYs4PTHXfhp60GjJBhX4bawb05ULBrh
WyqtPqsuttAJ9KAqkW5kam3ZOq2sEGC4P6jhC2cCAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBQiyMQ94ErcwLjQPiYy8riUo+qR9jAfBgNVHSMEGDAWgBTaAOmBlTBhlyyJ
a9bSdzjQg6rbDjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJnRHBnWlV3WVpjc2lXdlcwbmM0MElPcTJ3NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmYvODJhN2Q2LTkyYTktNDIwNC05YWUwLTlhNDhlY2Y5ZTE1ZS8x
L0lzakVQZUJLM01DNDBENG1Ndks0bEtQcWtmWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYv
ODJhN2Q2LTkyYTktNDIwNC05YWUwLTlhNDhlY2Y5ZTE1ZS8xLzJnRHBnWlV3WVpj
c2lXdlcwbmM0MElPcTJ3NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAC5mrgMEAFkk5wMEAFklagMEAFkq
1QMEAF6xGwMEAF6xQTANBgkqhkiG9w0BAQsFAAOCAQEAW66iytqf1ufO60TqTemz
5RJZfZn2lLJjb19fiI4b17bYGcNnXrTp/6brRLW+yJPrB5DbHKgMAoKXPPcaWEg3
DHVhgkehJ+nVYtXc1qOsm56b7emTvyNH9zq+jUexeyNJfAyWkZRm1L+omAut1W+W
Sa2gn7aqs/K6LlMm7MT1tR2BBTTjknQJxw+f8xhacGAG16ihnGUvMO9LRvfuO6fV
fBLnBex7QqC/9rEo4KwJh2V0YbnQNlSHHZnHbdL69p+/psqGS1F8UyasCdzkpwQ7
3ay14ng1hD3Z4srO9vwoaPVt52aCpUXXbvGj5W/4FepeQby6Hnhp2fwBZoZGIAld
jA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org