Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/iAxpBKfd0Bkun--oXjz-x2SffSA.roa
File: iAxpBKfd0Bkun--oXjz-x2SffSA.roa (raw, json)
Hash identifier: 5FLudgcUOgF4dgTgp7GhQSZQ7Sysd5ZodB1rj9ZKoIc=
Subject key identifier: 88:0C:69:04:A7:DD:D0:19:2E:9F:EF:A8:5E:3C:FE:C7:64:9F:7D:20
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 018558D5C12436083296ADDE8EFDD261E5D6
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/iAxpBKfd0Bkun--oXjz-x2SffSA.roa
Signing time: Wed 28 Dec 2022 13:04:41 +0000
ROA not before: Wed 28 Dec 2022 13:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34636
IP address blocks: 94.139.176.0/21 maxlen: 21
94.139.184.0/22 maxlen: 22
94.139.190.0/23 maxlen: 23
94.139.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:d5:c1:24:36:08:32:96:ad:de:8e:fd:d2:61:e5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Dec 28 13:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=880c6904a7ddd0192e9fefa85e3cfec7649f7d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:2d:f4:82:bc:c6:ee:3d:e6:3a:b4:8d:17:
fb:63:c9:d5:f3:b5:32:33:34:57:4b:07:60:eb:a4:
49:3a:a3:f9:ae:a5:68:8e:62:8a:56:b0:39:9a:63:
3f:ad:4a:44:5e:d5:ad:e8:55:51:58:52:1c:d4:fd:
f7:b0:7d:8e:7e:1d:7d:43:11:59:bc:ce:74:0d:47:
68:1c:a1:4c:7e:5d:92:8b:c4:55:2c:70:07:9f:5c:
b7:a8:44:87:d3:6b:71:32:0d:68:76:66:26:9e:2a:
bd:38:1f:a9:d4:b7:79:28:8e:22:af:2a:7c:84:e0:
f4:11:e9:e0:68:5f:bf:8a:ee:47:0c:d6:41:c6:7a:
12:22:04:0c:1a:a7:6c:14:2a:68:91:e5:a8:79:66:
fb:20:6e:7d:4f:6b:ed:67:0d:37:bb:4b:00:6f:9e:
52:8c:6e:04:ee:3f:c0:6d:b2:40:c8:cb:c6:d4:8b:
8e:6a:72:8f:93:d6:41:49:46:47:7c:48:76:94:79:
b8:95:92:5d:8a:cd:67:bf:60:e0:dc:40:7f:a5:dd:
e9:bb:7f:87:dd:d0:36:17:26:82:01:69:bd:27:12:
3d:b0:a6:5a:88:26:33:46:f4:5e:e4:fd:d1:80:cc:
24:af:8c:5a:76:15:60:77:22:4d:68:70:4f:18:ab:
b3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0C:69:04:A7:DD:D0:19:2E:9F:EF:A8:5E:3C:FE:C7:64:9F:7D:20
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/iAxpBKfd0Bkun--oXjz-x2SffSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.176.0-94.139.188.255
94.139.190.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:85:c0:fa:62:c9:c5:cd:d4:ec:e1:ff:ac:0b:95:d1:be:ab:
a4:31:cf:14:a7:9c:c3:c1:12:dc:22:4d:25:50:80:a5:9f:73:
7f:33:8f:74:50:fb:18:bb:06:bb:85:78:48:21:58:1d:51:d5:
3e:e4:5c:eb:2c:9a:b3:82:80:ae:47:1a:8c:7a:05:e0:31:26:
22:b9:f5:56:95:8e:0f:21:b2:8b:2c:ca:16:26:c4:72:e6:be:
fe:c2:68:56:ff:98:e3:05:88:7a:59:2f:95:22:f5:99:bf:97:
9a:2e:ad:93:9b:95:7f:a2:59:9b:a6:4a:90:db:55:3c:db:6d:
67:cf:72:a9:aa:b4:19:17:9f:53:24:b8:97:e4:28:a0:eb:d3:
45:31:23:db:38:11:de:9b:24:22:0a:9e:0e:32:ef:47:cd:f0:
4e:06:18:c2:a2:1e:f4:63:ad:31:bd:b5:40:c7:82:b1:9a:9e:
de:74:3b:fd:f5:e5:93:f9:3f:b9:88:78:8a:8c:b3:da:1c:ba:
01:ad:d8:f1:05:ca:4a:f4:41:9e:0a:cb:4a:f2:09:07:f5:af:
bc:02:3c:95:0a:aa:ff:b6:dc:4c:47:15:a4:4a:3a:83:cb:9b:
b9:5e:12:d6:3c:82:65:89:da:a4:b8:48:c3:95:fc:74:6c:a4:
32:f3:10:5b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVY1cEkNggylq3ejv3SYeXWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0
NzdmN2UwHhcNMjIxMjI4MTMwNDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODBjNjkwNGE3ZGRkMDE5MmU5ZmVmYTg1ZTNjZmVjNzY0OWY3ZDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1Yt9IK8xu495jq0jRf7Y8nV87Uy
MzRXSwdg66RJOqP5rqVojmKKVrA5mmM/rUpEXtWt6FVRWFIc1P33sH2Ofh19QxFZ
vM50DUdoHKFMfl2Si8RVLHAHn1y3qESH02txMg1odmYmniq9OB+p1Ld5KI4iryp8
hOD0EengaF+/iu5HDNZBxnoSIgQMGqdsFCpokeWoeWb7IG59T2vtZw03u0sAb55S
jG4E7j/AbbJAyMvG1IuOanKPk9ZBSUZHfEh2lHm4lZJdis1nv2Dg3EB/pd3pu3+H
3dA2FyaCAWm9JxI9sKZaiCYzRvRe5P3RgMwkr4xadhVgdyJNaHBPGKuzJQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFIgMaQSn3dAZLp/vqF48/sdkn30gMB8GA1UdIwQY
MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt
OGVhYjdmNGZlNzdlLzEvaUF4cEJLZmQwQmt1bi0tb1hqei14MlNmZlNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl
LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBARei7AD
BABei7wDBAFei74wDQYJKoZIhvcNAQELBQADggEBAEqFwPpiycXN1Ozh/6wLldG+
q6QxzxSnnMPBEtwiTSVQgKWfc38zj3RQ+xi7BruFeEghWB1R1T7kXOssmrOCgK5H
Gox6BeAxJiK59VaVjg8hsossyhYmxHLmvv7CaFb/mOMFiHpZL5Ui9Zm/l5ourZOb
lX+iWZumSpDbVTzbbWfPcqmqtBkXn1MkuJfkKKDr00UxI9s4Ed6bJCIKng4y70fN
8E4GGMKiHvRjrTG9tUDHgrGant50O/315ZP5P7mIeIqMs9ocugGt2PEFykr0QZ4K
y0ryCQf1r7wCPJUKqv+23ExHFaRKOoPLm7leEtY8gmWJ2qS4SMOV/HRspDLzEFs=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:08 2023 by rpki-client on console.sobornost.net