Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/V8-dSlNE7rAFLUigPVRMtJjcsZ0.roa
File: V8-dSlNE7rAFLUigPVRMtJjcsZ0.roa (raw, json)
Hash identifier: 9Bh0eD4Ooi/JQNNp7y8a7epDm0rpBM73kVgJE2255jw=
Subject key identifier: 57:CF:9D:4A:53:44:EE:B0:05:2D:48:A0:3D:54:4C:B4:98:DC:B1:9D
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0A7349B9
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/V8-dSlNE7rAFLUigPVRMtJjcsZ0.roa
Signing time: Wed 20 Apr 2022 11:22:37 +0000
ROA not before: Wed 20 Apr 2022 11:22:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 45.145.227.0/24 maxlen: 24
5.180.252.0/23 maxlen: 23
5.180.254.0/23 maxlen: 23
194.15.36.0/24 maxlen: 24
185.132.55.0/24 maxlen: 24
185.132.54.0/24 maxlen: 24
45.137.71.0/24 maxlen: 24
5.253.245.0/24 maxlen: 24
5.253.244.0/24 maxlen: 24
45.91.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175327673 (0xa7349b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Apr 20 11:22:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57cf9d4a5344eeb0052d48a03d544cb498dcb19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:22:ca:8d:a0:70:a1:78:fb:37:05:f1:c7:
88:86:7c:d8:3e:4e:ee:1f:b4:d3:16:b2:91:66:6c:
ef:11:b0:13:6c:cd:9f:4e:a6:d2:ec:62:9c:1f:27:
00:c0:f4:cd:f4:33:c8:85:58:53:c1:93:d0:7b:d9:
fd:76:55:23:f8:b1:b8:3b:0b:03:83:c5:f5:b4:1d:
f0:17:2a:8f:90:4b:cd:33:76:71:cb:ae:fa:32:cf:
7b:1e:e2:66:6f:50:5c:7d:69:c7:ac:0e:17:21:11:
bb:1e:0b:c7:43:a3:ef:73:28:37:85:53:5a:da:5b:
b7:04:34:1e:20:2b:f7:5f:16:81:b0:f0:35:6f:5c:
7e:51:8c:77:83:d3:3d:d5:b3:96:70:fb:f8:d2:62:
0c:54:48:e8:82:e8:97:3b:be:32:5f:7f:c3:b1:c4:
a7:4d:48:b9:d7:b2:94:12:13:6d:4b:15:84:63:6b:
98:5b:47:4c:21:f0:d4:01:97:76:b5:62:39:b4:9b:
06:4e:4a:e6:c5:3e:6f:87:c4:e5:e0:2f:4f:e9:2e:
3b:73:66:8a:86:f4:d8:48:26:76:62:04:6e:a3:27:
92:e4:38:bb:a8:05:06:91:25:4e:56:8f:b6:0c:27:
ea:1d:4a:6b:ec:3e:e4:c1:da:f7:a0:5c:df:d3:d3:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CF:9D:4A:53:44:EE:B0:05:2D:48:A0:3D:54:4C:B4:98:DC:B1:9D
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/V8-dSlNE7rAFLUigPVRMtJjcsZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.252.0/22
5.253.244.0/23
45.91.251.0/24
45.137.71.0/24
45.145.227.0/24
185.132.54.0/23
194.15.36.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:d2:cc:61:95:3b:7b:3b:bf:50:7c:bf:96:78:af:7b:53:15:
e9:8c:df:49:8c:30:33:c6:45:df:d2:a8:9d:be:d4:07:1f:e2:
7a:fb:13:4c:ad:82:b3:f0:c3:75:57:9f:97:48:4a:98:98:a1:
8b:66:18:c4:c1:0c:ea:ab:99:e4:59:32:82:6d:8c:70:42:46:
a2:68:38:cd:a9:8c:c7:76:cb:d5:9c:37:82:d7:10:1b:76:9e:
f1:7d:27:d6:62:39:18:d7:90:cf:e0:02:24:3a:dc:b9:07:7c:
83:7a:74:50:d7:f9:15:22:81:ce:87:45:b9:f8:2f:ba:e4:d1:
21:45:10:af:4e:47:d2:8d:b5:b7:1a:15:4a:ff:7c:bd:67:3a:
2e:ef:6e:0b:7f:d6:ba:a7:11:b5:03:9a:b7:1d:82:76:0d:96:
3d:57:62:2b:dd:66:7c:5d:8f:33:9c:48:77:4d:82:eb:d9:b0:
db:ae:75:53:0d:35:e6:35:50:5d:e4:82:48:66:08:da:72:86:
51:74:43:e3:18:d7:46:d4:1f:da:b0:c2:8d:57:4c:2b:ef:3b:
1f:68:d9:c0:9f:66:65:fb:85:06:b5:4b:dd:90:77:7f:5d:f5:
46:f6:85:ae:04:9c:3a:4e:75:d9:d2:37:f3:57:d8:b5:b0:75:
f5:51:50:99
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIECnNJuTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YjA0MTViZmM0M2IzOGU5Y2ZkMWExMjk5NTIwMmU4NzYzNzUyZmRlMB4XDTIyMDQy
MDExMjIzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTdjZjlkNGE1MzQ0
ZWViMDA1MmQ0OGEwM2Q1NDRjYjQ5OGRjYjE5ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMOdIsqNoHChePs3BfHHiIZ82D5O7h+00xaykWZs7xGwE2zN
n06m0uxinB8nAMD0zfQzyIVYU8GT0HvZ/XZVI/ixuDsLA4PF9bQd8Bcqj5BLzTN2
ccuu+jLPex7iZm9QXH1px6wOFyERux4Lx0Oj73MoN4VTWtpbtwQ0HiAr918WgbDw
NW9cflGMd4PTPdWzlnD7+NJiDFRI6ILolzu+Ml9/w7HEp01IudeylBITbUsVhGNr
mFtHTCHw1AGXdrViObSbBk5K5sU+b4fE5eAvT+kuO3Nmiob02EgmdmIEbqMnkuQ4
u6gFBpElTlaPtgwn6h1Ka+w+5MHa96Bc39PTUtECAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBRXz51KU0TusAUtSKA9VEy0mNyxnTAfBgNVHSMEGDAWgBQbBBW/xDs46c/R
oSmVIC6HY3Uv3jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0d3UVZ2OFE3T09uUDBhRXBsU0F1aDJOMUw5NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTYvMDk0MDgxLThhZWItNDJiZi1hNTc4LWEzY2EwZGI4MzI1NC8x
L1Y4LWRTbE5FN3JBRkxVaWdQVlJNdEpqY3NaMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYv
MDk0MDgxLThhZWItNDJiZi1hNTc4LWEzY2EwZGI4MzI1NC8xL0d3UVZ2OFE3T09u
UDBhRXBsU0F1aDJOMUw5NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAgW0/AMEAQX99AMEAC1b+wMEAC2J
RwMEAC2R4wMEAbmENgMEAMIPJDANBgkqhkiG9w0BAQsFAAOCAQEAOtLMYZU7ezu/
UHy/lnive1MV6YzfSYwwM8ZF39Konb7UBx/ievsTTK2Cs/DDdVefl0hKmJihi2YY
xMEM6quZ5Fkygm2McEJGomg4zamMx3bL1Zw3gtcQG3ae8X0n1mI5GNeQz+ACJDrc
uQd8g3p0UNf5FSKBzodFufgvuuTRIUUQr05H0o21txoVSv98vWc6Lu9uC3/WuqcR
tQOatx2Cdg2WPVdiK91mfF2PM5xId02C69mw2651Uw015jVQXeSCSGYI2nKGUXRD
4xjXRtQf2rDCjVdMK+87H2jZwJ9mZfuFBrVL3ZB3f131RvaFrgScOk512dI381fY
tbB19VFQmQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:30 2023 by rpki-client on console-fra.rpki-client.org