Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/ltffvJ_Q79hLGDb705ESFpVGdaQ.roa
File: ltffvJ_Q79hLGDb705ESFpVGdaQ.roa (raw, json)
Hash identifier: xMIDUs3jwXOAl4bPQ/63QLPv31qAFP9n0vsGJpqzlxI=
Subject key identifier: 96:D7:DF:BC:9F:D0:EF:D8:4B:18:36:FB:D3:91:12:16:95:46:75:A4
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 018342C2F4E02F2F79DEA15F3A961264D9FC
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/ltffvJ_Q79hLGDb705ESFpVGdaQ.roa
Signing time: Thu 15 Sep 2022 20:06:56 +0000
ROA not before: Thu 15 Sep 2022 20:06:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44092
IP address blocks: 185.191.105.0/24 maxlen: 24
185.191.104.0/24 maxlen: 24
185.191.106.0/24 maxlen: 24
185.191.107.0/24 maxlen: 24
188.191.58.0/24 maxlen: 24
188.191.56.0/22 maxlen: 24
188.191.56.0/24 maxlen: 24
188.191.57.0/24 maxlen: 24
188.191.59.0/24 maxlen: 24
45.145.201.0/24 maxlen: 24
45.145.202.0/24 maxlen: 24
45.145.200.0/24 maxlen: 24
45.145.203.0/24 maxlen: 24
185.56.156.0/22 maxlen: 24
185.215.145.0/24 maxlen: 24
77.242.131.0/24 maxlen: 24
77.242.132.0/24 maxlen: 24
185.215.144.0/24 maxlen: 24
77.242.130.0/24 maxlen: 24
77.242.128.0/24 maxlen: 24
77.242.129.0/24 maxlen: 24
77.242.128.0/20 maxlen: 24
185.248.227.0/24 maxlen: 24
89.37.71.0/24 maxlen: 24
89.37.70.0/23 maxlen: 24
89.37.70.0/24 maxlen: 24
77.242.134.0/24 maxlen: 24
77.242.133.0/24 maxlen: 24
185.215.147.0/24 maxlen: 24
185.215.146.0/24 maxlen: 24
77.242.137.0/24 maxlen: 24
77.242.135.0/24 maxlen: 24
77.242.136.0/24 maxlen: 24
77.242.138.0/24 maxlen: 24
77.242.139.0/24 maxlen: 24
77.242.140.0/24 maxlen: 24
77.242.141.0/24 maxlen: 24
77.242.143.0/24 maxlen: 24
77.242.142.0/24 maxlen: 24
185.171.232.0/24 maxlen: 24
185.171.233.0/24 maxlen: 24
185.171.235.0/24 maxlen: 24
185.171.234.0/24 maxlen: 24
185.219.117.0/24 maxlen: 24
185.219.118.0/24 maxlen: 24
185.219.116.0/24 maxlen: 24
185.219.119.0/24 maxlen: 24
2a02:53e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:42:c2:f4:e0:2f:2f:79:de:a1:5f:3a:96:12:64:d9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Sep 15 20:06:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96d7dfbc9fd0efd84b1836fbd3911216954675a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1f:6c:f8:8b:ac:04:7d:4d:fb:de:5e:34:47:
a6:08:ec:93:f2:b2:09:12:41:04:4d:81:ae:e6:f7:
a5:ce:4d:20:5c:69:58:18:6f:0f:b2:80:c3:2c:68:
ec:27:cf:79:88:06:ee:b9:d7:a3:64:71:10:25:25:
06:35:41:2f:d2:e2:33:ee:a1:a9:c6:e7:3d:84:71:
0e:4e:fa:63:61:86:71:67:61:47:08:ba:af:5f:be:
43:c0:29:45:1b:39:f5:b8:02:a8:4f:38:b9:82:cb:
88:d7:0a:c7:62:2d:03:33:54:75:05:c9:3b:c7:68:
c3:97:19:6a:d1:94:16:97:ff:84:83:d3:bc:2d:d6:
f2:08:38:96:d8:d5:da:1a:cb:59:3c:2e:0b:84:1a:
e1:10:fa:cc:22:f2:d9:28:64:d2:29:63:11:8f:a9:
76:38:14:ea:38:02:7b:95:97:a2:30:4f:f2:59:ed:
6f:88:8c:dc:48:42:4e:f1:14:e4:7e:4c:07:d6:84:
bc:3e:09:e9:91:d5:7f:c6:49:68:97:fe:be:6b:e6:
e3:8c:c2:98:e4:90:4f:8c:3b:89:bf:0a:c7:bf:a8:
f6:c4:94:ad:b3:e9:60:01:1b:9f:c9:73:7a:8c:80:
ba:64:87:35:af:2e:72:e0:a9:55:a1:f3:61:a7:98:
22:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D7:DF:BC:9F:D0:EF:D8:4B:18:36:FB:D3:91:12:16:95:46:75:A4
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/ltffvJ_Q79hLGDb705ESFpVGdaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.200.0/22
77.242.128.0/20
89.37.70.0/23
185.56.156.0/22
185.171.232.0/22
185.191.104.0/22
185.215.144.0/22
185.219.116.0/22
185.248.227.0/24
188.191.56.0/22
IPv6:
2a02:53e0::/32
Signature Algorithm: sha256WithRSAEncryption
ca:11:d6:c0:57:5b:95:2d:b8:48:c1:a2:1e:47:0d:5a:ba:61:
ed:ad:5a:5e:02:f8:56:b3:af:0e:b2:b9:b5:4e:a8:24:9c:f2:
29:c8:2e:e4:99:24:aa:61:05:af:ea:55:59:35:dc:8a:a0:58:
55:a4:7e:55:de:08:c0:87:9e:cd:a5:f4:b9:35:95:c8:c9:96:
58:42:1b:2d:63:fc:48:ae:a6:3d:8e:3b:fe:ed:f7:51:d3:4b:
c5:11:64:12:52:61:0c:26:c3:a7:86:aa:ef:d1:a8:bf:3f:bc:
32:78:5f:85:9d:50:d1:30:80:c8:ac:ca:03:93:31:b5:3e:8b:
cd:1a:94:a7:2c:27:55:5d:f8:c7:57:58:95:e1:e8:75:b2:df:
42:37:a7:66:81:57:65:7d:f8:66:ef:c3:c6:f7:82:22:f0:78:
1c:87:7b:9c:11:05:21:d4:c7:0c:00:61:09:bf:72:f1:47:0b:
80:ad:d2:5b:39:42:91:8a:f0:d2:ab:a2:c8:4e:23:7d:96:53:
46:e6:3d:ec:e9:54:33:cd:02:95:9e:ab:24:02:97:bf:1f:a0:
ca:3e:7b:cc:da:cd:7d:c4:76:f8:0c:b8:36:bc:44:af:cf:d5:
cb:03:50:ed:3e:f4:26:75:1f:dc:30:39:7f:34:a9:6f:a8:0d:
bd:9d:3c:5a
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAYNCwvTgLy953qFfOpYSZNn8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWFhZGM1NjhmNmM5MjhmZDc2NGQ0MjFkNDJjNzFjZjU3
OTE5NTQwHhcNMjIwOTE1MjAwNjU2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmQ3ZGZiYzlmZDBlZmQ4NGIxODM2ZmJkMzkxMTIxNjk1NDY3NWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB9s+IusBH1N+95eNEemCOyT8rIJ
EkEETYGu5velzk0gXGlYGG8PsoDDLGjsJ895iAbuudejZHEQJSUGNUEv0uIz7qGp
xuc9hHEOTvpjYYZxZ2FHCLqvX75DwClFGzn1uAKoTzi5gsuI1wrHYi0DM1R1Bck7
x2jDlxlq0ZQWl/+Eg9O8LdbyCDiW2NXaGstZPC4LhBrhEPrMIvLZKGTSKWMRj6l2
OBTqOAJ7lZeiME/yWe1viIzcSEJO8RTkfkwH1oS8PgnpkdV/xklol/6+a+bjjMKY
5JBPjDuJvwrHv6j2xJSts+lgARufyXN6jIC6ZIc1ry5y4KlVofNhp5giZQIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFJbX37yf0O/YSxg2+9OREhaVRnWkMB8GA1UdIwQY
MBaAFIWqrcVo9sko/XZNQh1Cxxz1eRlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMt
NDVlYTM4ZGEyMjE4LzEvbHRmZnZKX1E3OWhMR0RiNzA1RVNGcFZHZGFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMtNDVlYTM4ZGEyMjE4
LzEvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQCLZHIAwQE
TfKAAwQBWSVGAwQCuTicAwQCuavoAwQCub9oAwQCudeQAwQCudt0AwQAufjjAwQC
vL84MA0EAgACMAcDBQAqAlPgMA0GCSqGSIb3DQEBCwUAA4IBAQDKEdbAV1uVLbhI
waIeRw1aumHtrVpeAvhWs68Osrm1TqgknPIpyC7kmSSqYQWv6lVZNdyKoFhVpH5V
3gjAh57NpfS5NZXIyZZYQhstY/xIrqY9jjv+7fdR00vFEWQSUmEMJsOnhqrv0ai/
P7wyeF+FnVDRMIDIrMoDkzG1PovNGpSnLCdVXfjHV1iV4eh1st9CN6dmgVdlffhm
78PG94Ii8Hgch3ucEQUh1McMAGEJv3LxRwuArdJbOUKRivDSq6LITiN9llNG5j3s
6VQzzQKVnqskApe/H6DKPnvM2s19xHb4DLg2vESvz9XLA1DtPvQmdR/cMDl/NKlv
qA29nTxa
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:29 2024 by rpki-client on console-ams.rpki-client.org