Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/XHJhaOn_3pmFDsRuJPVZaSokzEM.roa
File: XHJhaOn_3pmFDsRuJPVZaSokzEM.roa (raw, json)
Hash identifier: pAQT1/IpZA8y8gUniwIgD650RR8v6+7SJQMxyxIlnBQ=
Subject key identifier: 5C:72:61:68:E9:FF:DE:99:85:0E:C4:6E:24:F5:59:69:2A:24:CC:43
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 1BCC217C
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/XHJhaOn_3pmFDsRuJPVZaSokzEM.roa
Signing time: Thu 23 Jun 2022 05:22:32 +0000
ROA not before: Thu 23 Jun 2022 05:22:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200023
IP address blocks: 45.139.164.0/22 maxlen: 24
45.139.160.0/23 maxlen: 24
45.139.172.0/22 maxlen: 24
45.92.248.0/22 maxlen: 24
45.83.206.0/24 maxlen: 24
45.95.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466362748 (0x1bcc217c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jun 23 05:22:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c726168e9ffde99850ec46e24f559692a24cc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:e9:20:a6:12:4a:c4:38:67:e1:69:25:a8:
73:fb:6b:f2:5e:29:f5:65:f2:18:65:08:4e:69:70:
40:1a:59:6a:d2:a4:de:25:90:4c:eb:20:e3:ce:11:
57:f5:e2:44:5d:d3:e7:11:7f:7d:88:ff:d0:5d:f5:
23:dd:f2:61:16:9d:c8:db:5f:f4:80:f1:b4:8a:b1:
63:0d:34:52:53:a5:1e:12:14:1f:8c:9a:9e:b9:e9:
92:0e:9b:a7:01:1c:fd:18:8a:9b:57:2b:2d:a6:48:
38:2b:72:9b:a1:b3:52:41:56:1a:aa:06:c8:a8:59:
ad:28:4a:4e:68:9a:08:fd:4a:6b:14:89:da:c8:b5:
90:21:db:af:d0:48:67:2f:c2:6f:3c:47:6b:c4:1f:
e9:19:8f:c5:12:cd:11:8f:d6:80:87:0f:d5:b8:43:
96:db:eb:77:62:90:72:a4:eb:80:cb:c0:ac:5a:e1:
4d:5e:27:a5:88:1f:a1:5b:a7:c4:5f:a8:09:4a:b1:
a7:3f:fb:a6:e5:5f:fb:4c:43:dc:e3:20:ea:e9:70:
53:58:c6:2d:b0:95:77:ce:47:61:9e:85:b3:70:1c:
d9:87:0a:ee:8f:38:5a:b1:52:86:17:16:d3:29:7e:
fd:4e:75:35:f8:01:db:56:a6:bf:dc:89:09:a2:76:
27:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:72:61:68:E9:FF:DE:99:85:0E:C4:6E:24:F5:59:69:2A:24:CC:43
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/XHJhaOn_3pmFDsRuJPVZaSokzEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.206.0/24
45.92.248.0/22
45.95.176.0/22
45.139.160.0/23
45.139.164.0/22
45.139.172.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:d3:6c:d4:ee:2c:4d:bb:47:ef:a1:ff:43:33:65:8a:bc:26:
e3:18:7e:02:23:e4:1e:65:83:e9:34:83:9b:0f:72:f2:b0:a5:
ad:b8:2c:cc:f3:f1:6d:c9:c0:65:bc:7c:8f:66:ed:e5:a8:26:
02:ca:e5:0c:59:fc:87:fa:89:92:c6:a6:52:d0:13:40:6e:f9:
4d:d0:95:e5:09:2a:ff:c3:90:fe:52:cf:7a:74:58:5a:7b:21:
98:04:a6:5c:a5:db:b5:b5:23:f6:bf:75:a9:63:84:8b:85:05:
15:71:d2:3f:39:1b:8b:64:89:d9:f5:1d:01:c6:b1:17:89:d5:
a6:c0:eb:2e:a8:a5:0b:ae:35:3b:8c:a9:5e:6e:c0:d2:e3:a7:
35:8c:5b:62:31:65:46:f9:7a:05:b3:36:72:90:70:9c:90:47:
0f:bb:e6:cd:02:61:c3:fd:8a:44:9b:81:89:ea:12:7f:8c:ed:
b4:a5:ff:3b:72:55:7b:90:3e:7c:fb:8c:0d:dd:40:7a:de:be:
ac:2c:1f:fd:39:49:2a:c5:3e:fd:6a:6e:5c:15:f2:69:6e:75:
b1:42:9f:aa:3e:3e:85:6d:3c:ae:61:ba:c7:7c:df:7d:48:d7:
88:a3:9d:87:d9:41:fb:ce:77:29:73:5a:a8:ee:cb:97:c2:ca:
0b:4c:89:72
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIEG8whfDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MTU1MDA5YzNkZTQyMWNjNGU2N2I5YTlhZTQyM2JiMzVkZTBiOTI2MB4XDTIyMDYy
MzA1MjIzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWM3MjYxNjhlOWZm
ZGU5OTg1MGVjNDZlMjRmNTU5NjkyYTI0Y2M0MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALc46SCmEkrEOGfhaSWoc/tr8l4p9WXyGGUITmlwQBpZatKk
3iWQTOsg484RV/XiRF3T5xF/fYj/0F31I93yYRadyNtf9IDxtIqxYw00UlOlHhIU
H4yanrnpkg6bpwEc/RiKm1crLaZIOCtym6GzUkFWGqoGyKhZrShKTmiaCP1KaxSJ
2si1kCHbr9BIZy/CbzxHa8Qf6RmPxRLNEY/WgIcP1bhDltvrd2KQcqTrgMvArFrh
TV4npYgfoVunxF+oCUqxpz/7puVf+0xD3OMg6ulwU1jGLbCVd85HYZ6Fs3Ac2YcK
7o84WrFShhcW0yl+/U51NfgB21amv9yJCaJ2J90CAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBRccmFo6f/emYUOxG4k9VlpKiTMQzAfBgNVHSMEGDAWgBSxVQCcPeQhzE5n
uamuQjuzXeC5JjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NWVUFuRDNrSWN4T1o3bXBya0k3czEzZ3VTWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTAvZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8x
L1hISmhhT25fM3BtRkRzUnVKUFZaYVNva3pFTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAv
ZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8xL3NWVUFuRDNrSWN4
T1o3bXBya0k3czEzZ3VTWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAC1TzgMEAi1c+AMEAi1fsAMEAS2L
oAMEAi2LpAMEAi2LrDANBgkqhkiG9w0BAQsFAAOCAQEAwdNs1O4sTbtH76H/QzNl
irwm4xh+AiPkHmWD6TSDmw9y8rClrbgszPPxbcnAZbx8j2bt5agmAsrlDFn8h/qJ
ksamUtATQG75TdCV5Qkq/8OQ/lLPenRYWnshmASmXKXbtbUj9r91qWOEi4UFFXHS
Pzkbi2SJ2fUdAcaxF4nVpsDrLqilC641O4ypXm7A0uOnNYxbYjFlRvl6BbM2cpBw
nJBHD7vmzQJhw/2KRJuBieoSf4zttKX/O3JVe5A+fPuMDd1Aet6+rCwf/TlJKsU+
/WpuXBXyaW51sUKfqj4+hW08rmG6x3zffUjXiKOdh9lB+853KXNaqO7Ll8LKC0yJ
cg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org