Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/auTIIsdV1SsxOeje5JymIvGft-Y.roa
File: auTIIsdV1SsxOeje5JymIvGft-Y.roa (raw, json)
Hash identifier: dYYLb1/uNXMQCgwtFpls2Gk4GanwQuEh9V3xOr1FGyc=
Subject key identifier: 6A:E4:C8:22:C7:55:D5:2B:31:39:E8:DE:E4:9C:A6:22:F1:9F:B7:E6
Certificate issuer: /CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Certificate serial: 3831AC09
Authority key identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/auTIIsdV1SsxOeje5JymIvGft-Y.roa
Signing time: Sat 01 Jan 2022 03:02:20 +0000
ROA not before: Sat 01 Jan 2022 03:02:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50324
IP address blocks: 89.39.128.0/21 maxlen: 32
178.19.208.0/20 maxlen: 32
185.28.184.0/22 maxlen: 32
176.126.216.0/22 maxlen: 32
2a04:a40::/29 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 942779401 (0x3831ac09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Validity
Not Before: Jan 1 03:02:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ae4c822c755d52b3139e8dee49ca622f19fb7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:e8:65:a2:e1:8a:b0:c3:2c:34:56:96:bc:
d9:da:85:14:2a:47:9e:82:74:2f:74:85:93:d2:5d:
19:94:fb:15:b7:be:62:de:1c:af:29:54:9c:83:58:
13:23:94:5f:bc:fd:a3:84:35:af:81:98:ec:d6:1e:
89:59:24:34:70:68:0c:77:f6:b1:34:0a:04:d0:d5:
bc:ab:b9:e1:41:c7:e6:74:63:6f:95:4f:38:15:06:
57:48:fe:1a:e1:ff:7b:d3:9e:e8:47:89:b2:45:4c:
11:f4:a5:25:0d:49:de:79:63:20:db:52:be:67:91:
7a:76:25:90:3a:90:fe:5d:10:ae:9c:37:da:b7:16:
f0:f5:c8:a4:e1:a4:e0:c7:93:10:fc:4a:bc:38:4b:
e8:55:bf:ed:9a:1e:ce:0b:17:de:b2:08:0c:1a:f4:
16:08:f1:2a:dc:49:af:bb:a0:20:8d:4f:1b:bb:14:
3b:7b:70:06:6c:61:25:59:85:21:9f:e9:b0:d0:5f:
99:ad:76:53:2b:d8:fa:95:37:81:52:9d:b4:e3:e4:
7c:01:2d:8d:3a:2b:4f:dd:87:6d:bc:a6:14:3c:f0:
c6:7a:95:a6:fa:4d:1d:67:4d:43:87:d2:ce:8e:22:
84:16:b7:ac:c5:9a:eb:88:0d:6f:08:4e:91:fb:39:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E4:C8:22:C7:55:D5:2B:31:39:E8:DE:E4:9C:A6:22:F1:9F:B7:E6
X509v3 Authority Key Identifier:
keyid:A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/auTIIsdV1SsxOeje5JymIvGft-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.128.0/21
176.126.216.0/22
178.19.208.0/20
185.28.184.0/22
IPv6:
2a04:a40::/29
Signature Algorithm: sha256WithRSAEncryption
1e:2c:9f:c2:9a:6d:09:fb:c9:0c:0e:e0:33:27:36:68:bb:99:
9f:28:91:37:d7:d9:00:59:21:62:c0:7a:0a:6e:90:1a:4c:92:
a6:f5:1f:4b:a3:75:a6:25:3e:3b:18:12:3a:24:0a:d8:8b:47:
86:50:80:f3:7e:36:4e:9d:db:8f:a6:a3:70:42:37:c3:de:85:
5c:9d:43:fa:e7:12:29:ea:e7:7a:23:db:ea:35:b2:6d:fb:24:
4d:ec:a9:eb:23:bd:42:f1:e6:70:1b:9a:2b:a8:31:9f:fe:2e:
37:e8:7a:1b:a5:90:ad:d9:6b:36:7b:99:88:b9:e6:76:c3:0c:
6c:7d:df:22:24:a1:c2:9e:49:9b:df:58:82:45:05:c3:0b:66:
95:70:5c:17:c5:6c:9b:12:2c:ad:8c:5f:3d:13:62:7d:bb:8f:
5c:4c:9b:e2:3c:07:a4:a2:88:0d:78:aa:be:1f:6b:29:a0:f7:
52:8a:00:2b:e8:92:db:45:e3:f9:14:41:96:de:67:a1:a9:da:
9b:cc:a8:ba:1f:72:59:f0:f2:1d:4e:85:d1:f3:d4:5d:4f:55:
85:63:20:95:37:15:08:a3:05:4a:65:36:b8:34:07:08:87:3d:
88:4e:30:61:f0:fc:4d:c5:01:3d:32:b2:8e:cb:3a:e7:86:04:
cf:85:65:f7
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIEODGsCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
Njk0ZjAwNWY1OTc3YzMyM2VjZGJlYTljNWY4Y2NhMzY5ZTY1YzY3MB4XDTIyMDEw
MTAzMDIyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmFlNGM4MjJjNzU1
ZDUyYjMxMzllOGRlZTQ5Y2E2MjJmMTlmYjdlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMuk6GWi4Yqwwyw0Vpa82dqFFCpHnoJ0L3SFk9JdGZT7Fbe+
Yt4crylUnINYEyOUX7z9o4Q1r4GY7NYeiVkkNHBoDHf2sTQKBNDVvKu54UHH5nRj
b5VPOBUGV0j+GuH/e9Oe6EeJskVMEfSlJQ1J3nljINtSvmeRenYlkDqQ/l0Qrpw3
2rcW8PXIpOGk4MeTEPxKvDhL6FW/7ZoezgsX3rIIDBr0FgjxKtxJr7ugII1PG7sU
O3twBmxhJVmFIZ/psNBfma12UyvY+pU3gVKdtOPkfAEtjTorT92HbbymFDzwxnqV
pvpNHWdNQ4fSzo4ihBa3rMWa64gNbwhOkfs5Ji0CAwEAAaOCAiowggImMB0GA1Ud
DgQWBBRq5Mgix1XVKzE56N7knKYi8Z+35jAfBgNVHSMEGDAWgBSmlPAF9Zd8Mj7N
vqnF+MyjaeZcZzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BwVHdCZldYZkRJLXpiNnB4ZmpNbzJubVhHYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzIvYzc5MTg3LTBkN2EtNDkwYi05MmIwLTFiNTI3Y2UxNjUxMS8x
L2F1VElJc2RWMVNzeE9lamU1SnltSXZHZnQtWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIv
Yzc5MTg3LTBkN2EtNDkwYi05MmIwLTFiNTI3Y2UxNjUxMS8xL3BwVHdCZldYZkRJ
LXpiNnB4ZmpNbzJubVhHYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEA1kngAMEArB+2AMEBLIT0AMEArkc
uDANBAIAAjAHAwUDKgQKQDANBgkqhkiG9w0BAQsFAAOCAQEAHiyfwpptCfvJDA7g
Myc2aLuZnyiRN9fZAFkhYsB6Cm6QGkySpvUfS6N1piU+OxgSOiQK2ItHhlCA8342
Tp3bj6ajcEI3w96FXJ1D+ucSKerneiPb6jWybfskTeyp6yO9QvHmcBuaK6gxn/4u
N+h6G6WQrdlrNnuZiLnmdsMMbH3fIiShwp5Jm99YgkUFwwtmlXBcF8VsmxIsrYxf
PRNifbuPXEyb4jwHpKKIDXiqvh9rKaD3UooAK+iS20Xj+RRBlt5noanam8youh9y
WfDyHU6F0fPUXU9VhWMglTcVCKMFSmU2uDQHCIc9iE4wYfD8TcUBPTKyjss654YE
z4Vl9w==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:27 2023 by rpki-client on console.sobornost.net