Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/iFzwP0e72YDYE3nj1CNABXec7ZE.roa
File: iFzwP0e72YDYE3nj1CNABXec7ZE.roa (raw, json)
Hash identifier: Q6FDpUQuusC3Kg/2rAG75QHaFe+Ra1woU4+mIr3cBhs=
Subject key identifier: 88:5C:F0:3F:47:BB:D9:80:D8:13:79:E3:D4:23:40:05:77:9C:ED:91
Certificate issuer: /CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Certificate serial: 018558442F091166AACCFCE269B188A69BB4
Authority key identifier: BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/iFzwP0e72YDYE3nj1CNABXec7ZE.roa
Signing time: Wed 28 Dec 2022 10:25:41 +0000
ROA not before: Wed 28 Dec 2022 10:25:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39668
IP address blocks: 185.132.172.0/22 maxlen: 22
89.35.128.0/24 maxlen: 24
2a09:4080::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:44:2f:09:11:66:aa:cc:fc:e2:69:b1:88:a6:9b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Validity
Not Before: Dec 28 10:25:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=885cf03f47bbd980d81379e3d4234005779ced91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:23:24:1e:ef:b0:37:5a:16:df:60:64:16:27:
4f:f7:50:3f:e3:1d:3e:4a:68:a3:76:82:e6:ff:02:
c9:cc:df:ff:e7:6c:ea:54:fd:8b:7a:e4:00:a9:79:
32:6d:d9:33:9b:ca:8b:42:61:ad:0f:c2:c5:87:8e:
a9:c1:ad:e1:47:a0:2f:54:3f:b9:02:bb:af:de:55:
34:26:02:1a:25:c3:cf:79:79:d0:97:77:dd:9e:c5:
0b:6e:15:83:94:42:e5:07:72:c8:1f:ba:fd:89:9a:
6a:37:5f:51:99:61:48:71:f2:85:f7:aa:74:ed:83:
3b:9e:bc:ed:dc:8a:6b:9e:3a:ca:ad:59:b9:4d:3b:
2b:d4:e3:06:85:88:b6:1f:8e:af:fb:4b:2e:e8:a8:
72:ff:06:9d:31:22:b1:39:8d:9f:6a:69:3e:ef:41:
78:74:6c:5b:38:80:05:76:ab:41:9f:d0:d6:1e:2f:
8b:a0:7c:fd:ef:0b:51:75:ca:da:fb:28:18:62:16:
be:a5:fa:2c:2c:8c:bf:7d:e8:c7:63:cc:04:2b:65:
10:b8:f0:8e:c0:8d:f2:8a:fe:72:50:0d:59:15:95:
5b:0f:ca:c8:26:57:93:75:a3:fb:23:cb:2b:67:6d:
05:df:79:fe:ab:8a:4d:61:3d:89:79:34:e3:65:9b:
9c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5C:F0:3F:47:BB:D9:80:D8:13:79:E3:D4:23:40:05:77:9C:ED:91
X509v3 Authority Key Identifier:
keyid:BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/iFzwP0e72YDYE3nj1CNABXec7ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.128.0/24
185.132.172.0/22
IPv6:
2a09:4080::/29
Signature Algorithm: sha256WithRSAEncryption
0e:fe:b8:0d:e1:1d:46:ec:bd:cf:cd:a7:ff:ad:e2:b4:f2:23:
c7:9a:42:4e:ef:a5:aa:79:0f:1a:73:94:6d:b2:57:34:76:ce:
28:24:95:56:ce:33:22:77:07:6c:8d:68:3f:06:32:34:86:5a:
c5:c1:5a:82:b6:c1:aa:cf:46:a7:3f:d8:bb:62:ae:e0:18:01:
de:31:36:22:52:87:5b:5d:d0:0b:0d:e5:14:a9:4e:12:d6:3c:
33:70:26:29:31:97:ea:c3:90:64:e7:a6:9f:7c:96:03:d4:52:
8f:30:c6:c3:9d:da:05:27:db:c8:32:55:4f:1d:46:ca:b6:8a:
08:94:17:20:9e:56:5a:68:9f:45:dd:6a:67:41:2f:36:d0:5e:
f0:e5:3c:90:1c:0a:49:fa:a2:26:d5:03:64:53:d7:cb:46:fe:
d6:d6:2a:9b:a9:77:88:eb:a8:73:6b:b7:22:ad:7c:b4:aa:90:
64:af:99:8e:6d:80:84:ad:c6:65:c4:fa:84:82:cb:5f:a6:a3:
9f:0e:da:df:98:de:ff:a0:29:49:7c:49:2f:be:bf:c5:b2:05:
84:78:71:05:2a:e9:05:3d:e6:89:86:8d:7c:4a:25:db:b7:83:
83:fc:d2:d9:1d:6d:8b:11:71:c9:85:be:3c:9a:66:a0:12:65:
04:6f:d7:a1
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVYRC8JEWaqzPziabGIppu0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNmQyZWQ3Nzk0ZDMyMTdjZmFhZmUxY2FkNTNmNzU1Yjgy
Y2UzYTkwHhcNMjIxMjI4MTAyNTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODVjZjAzZjQ3YmJkOTgwZDgxMzc5ZTNkNDIzNDAwNTc3OWNlZDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyMkHu+wN1oW32BkFidP91A/4x0+
SmijdoLm/wLJzN//52zqVP2LeuQAqXkybdkzm8qLQmGtD8LFh46pwa3hR6AvVD+5
Aruv3lU0JgIaJcPPeXnQl3fdnsULbhWDlELlB3LIH7r9iZpqN19RmWFIcfKF96p0
7YM7nrzt3IprnjrKrVm5TTsr1OMGhYi2H46v+0su6Khy/wadMSKxOY2famk+70F4
dGxbOIAFdqtBn9DWHi+LoHz97wtRdcra+ygYYha+pfosLIy/fejHY8wEK2UQuPCO
wI3yiv5yUA1ZFZVbD8rIJleTdaP7I8srZ20F33n+q4pNYT2JeTTjZZuc5wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFIhc8D9Hu9mA2BN549QjQAV3nO2RMB8GA1UdIwQY
MBaAFLxtLtd5TTIXz6r+HK1T91W4LOOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZDI5NDQtMWVkNi00ZmNkLThjNWMt
NzdiNGJiZTM1YTllLzEvaUZ6d1AwZTcyWURZRTNuajFDTkFCWGVjN1pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83ZDI5NDQtMWVkNi00ZmNkLThjNWMtNzdiNGJiZTM1YTll
LzEvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAWSOAAwQC
uYSsMA0EAgACMAcDBQMqCUCAMA0GCSqGSIb3DQEBCwUAA4IBAQAO/rgN4R1G7L3P
zaf/reK08iPHmkJO76WqeQ8ac5Rtslc0ds4oJJVWzjMidwdsjWg/BjI0hlrFwVqC
tsGqz0anP9i7Yq7gGAHeMTYiUodbXdALDeUUqU4S1jwzcCYpMZfqw5Bk56affJYD
1FKPMMbDndoFJ9vIMlVPHUbKtooIlBcgnlZaaJ9F3WpnQS820F7w5TyQHApJ+qIm
1QNkU9fLRv7W1iqbqXeI66hza7cirXy0qpBkr5mObYCErcZlxPqEgstfpqOfDtrf
mN7/oClJfEkvvr/FsgWEeHEFKukFPeaJho18SiXbt4OD/NLZHW2LEXHJhb48mmag
EmUEb9eh
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:55 2023 by rpki-client on console.sobornost.net