Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1a-YvQmQ_do67BdrQZfLnYvSWXg.roa
File: 1a-YvQmQ_do67BdrQZfLnYvSWXg.roa (raw, json)
Hash identifier: QXlG6yK/S1hlgj/OnHLaZMrQsJh7O2GslsBpyKqSSbI=
Subject key identifier: D5:AF:98:BD:09:90:FD:DA:3A:EC:17:6B:41:97:CB:9D:8B:D2:59:78
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018438B75633FB24AE9898FFA712ED3CEF41
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1a-YvQmQ_do67BdrQZfLnYvSWXg.roa
Signing time: Wed 02 Nov 2022 14:20:50 +0000
ROA not before: Wed 02 Nov 2022 14:20:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.30.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.13.188.0/24 maxlen: 24
194.15.53.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:38:b7:56:33:fb:24:ae:98:98:ff:a7:12:ed:3c:ef:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 2 14:20:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5af98bd0990fdda3aec176b4197cb9d8bd25978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f1:8e:9b:09:6c:d4:81:70:79:5f:1e:bd:aa:
5b:e6:7f:e4:81:47:c7:ef:30:4a:30:61:1f:19:e2:
c7:46:9b:4f:31:78:e4:2d:64:cf:f5:b3:a2:9d:df:
02:8a:21:72:bd:e2:42:3d:e6:01:9a:55:0e:fa:a3:
d9:48:73:5a:a9:00:3b:07:7e:54:0a:f8:f2:b2:ec:
92:97:91:4b:b6:67:cf:14:71:bd:c1:6e:ef:26:3d:
8d:eb:97:25:66:b4:e4:96:fe:21:4d:70:4c:4f:b7:
66:48:8b:77:d3:a1:a7:dd:e6:8c:84:38:d7:95:14:
2f:33:dc:b3:e5:4a:83:60:18:56:44:59:f8:34:cc:
a1:38:71:76:3c:8d:51:dc:4c:c4:d5:9c:a2:2d:37:
ac:0e:43:a8:f0:f8:af:e2:45:15:53:e9:42:62:56:
99:7b:51:7a:2c:11:2d:90:b4:66:aa:3b:d4:19:f3:
d3:5f:0e:78:28:66:a2:25:de:29:14:df:bc:88:f7:
52:df:d1:90:0e:8e:6e:94:db:39:9a:45:d8:b4:eb:
0f:09:01:e0:00:c1:3e:7f:f3:ed:9f:20:9d:5b:cc:
d5:1a:e8:70:a1:1f:e8:46:ef:77:df:cc:e5:bc:a2:
8b:35:ef:2e:25:3f:0a:c4:ee:5b:29:38:b5:e2:c8:
32:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AF:98:BD:09:90:FD:DA:3A:EC:17:6B:41:97:CB:9D:8B:D2:59:78
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1a-YvQmQ_do67BdrQZfLnYvSWXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.13.188.0/23
45.88.137.0/24
45.132.180.0/24
85.209.122.0/23
194.15.52.0/23
Signature Algorithm: sha256WithRSAEncryption
11:89:94:41:e5:f6:e2:9a:4b:c0:23:d8:70:96:54:58:50:15:
bf:54:d2:e3:a7:f8:31:83:65:70:27:77:aa:63:6c:b1:eb:76:
e7:2c:b5:b4:db:69:df:cf:9c:54:95:32:70:60:e6:6d:fe:5b:
1a:0d:a0:95:f5:83:7b:2c:c3:51:af:01:96:7a:42:47:11:66:
6c:ea:71:85:61:91:42:93:74:b1:fe:a6:c7:e0:b7:b1:c1:f5:
c4:49:6d:88:3c:e5:b3:24:44:d9:56:67:43:79:fd:b3:8e:16:
45:24:d0:36:c1:8a:f9:6f:84:a7:64:c3:9d:5b:04:6e:5d:e0:
4d:48:5b:64:0e:62:18:1d:9d:b2:45:73:fa:57:e0:50:2b:8e:
77:22:35:2f:db:d0:c2:52:29:57:54:38:f2:50:66:ca:59:50:
29:d7:8f:4c:e7:05:23:25:40:ff:24:fa:30:23:85:a3:c2:e1:
c5:23:1c:0a:c5:f6:b9:27:34:f1:b0:61:94:a1:a1:b2:b9:bc:
99:e2:86:4f:fc:b0:4b:d2:e4:41:54:1a:f5:c5:54:f1:79:cf:
31:31:c7:e8:4a:b3:d7:7c:34:1a:62:42:3c:59:d6:12:b8:89:
b1:84:60:b7:ad:77:c6:cd:1f:3e:eb:00:75:53:c5:c9:ea:44:
32:2d:f1:3d
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYQ4t1Yz+ySumJj/pxLtPO9BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjIxMTAyMTQyMDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWFmOThiZDA5OTBmZGRhM2FlYzE3NmI0MTk3Y2I5ZDhiZDI1OTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPGOmwls1IFweV8evapb5n/kgUfH
7zBKMGEfGeLHRptPMXjkLWTP9bOind8CiiFyveJCPeYBmlUO+qPZSHNaqQA7B35U
CvjysuySl5FLtmfPFHG9wW7vJj2N65clZrTklv4hTXBMT7dmSIt306Gn3eaMhDjX
lRQvM9yz5UqDYBhWRFn4NMyhOHF2PI1R3EzE1ZyiLTesDkOo8Piv4kUVU+lCYlaZ
e1F6LBEtkLRmqjvUGfPTXw54KGaiJd4pFN+8iPdS39GQDo5ulNs5mkXYtOsPCQHg
AME+f/PtnyCdW8zVGuhwoR/oRu9338zlvKKLNe8uJT8KxO5bKTi14sgynQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFNWvmL0JkP3aOuwXa0GXy52L0ll4MB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvMWEtWXZRbVFfZG82N0JkclFaZkxuWXZTV1hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALQkeAwQB
LQ28AwQALViJAwQALYS0AwQBVdF6AwQBwg80MA0GCSqGSIb3DQEBCwUAA4IBAQAR
iZRB5fbimkvAI9hwllRYUBW/VNLjp/gxg2VwJ3eqY2yx63bnLLW022nfz5xUlTJw
YOZt/lsaDaCV9YN7LMNRrwGWekJHEWZs6nGFYZFCk3Sx/qbH4LexwfXESW2IPOWz
JETZVmdDef2zjhZFJNA2wYr5b4SnZMOdWwRuXeBNSFtkDmIYHZ2yRXP6V+BQK453
IjUv29DCUilXVDjyUGbKWVAp149M5wUjJUD/JPowI4WjwuHFIxwKxfa5JzTxsGGU
oaGyubyZ4oZP/LBL0uRBVBr1xVTxec8xMcfoSrPXfDQaYkI8WdYSuImxhGC3rXfG
zR8+6wB1U8XJ6kQyLfE9
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org