Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/scrPBiIogkpLNUzwpQyRBUV2IGg.roa
File: scrPBiIogkpLNUzwpQyRBUV2IGg.roa (raw, json)
Hash identifier: jB4ebj6X04s7JI3mnMKY1NrWLQczoP7OOmK6FqDQsMs=
Subject key identifier: B1:CA:CF:06:22:28:82:4A:4B:35:4C:F0:A5:0C:91:05:45:76:20:68
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0182D58FD538727741083D6E8778D5211D67
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/scrPBiIogkpLNUzwpQyRBUV2IGg.roa
Signing time: Thu 25 Aug 2022 15:12:29 +0000
ROA not before: Thu 25 Aug 2022 15:12:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58305
IP address blocks: 198.105.124.0/23 maxlen: 24
45.43.64.0/19 maxlen: 24
45.43.74.0/23 maxlen: 24
45.43.80.0/22 maxlen: 24
198.105.96.0/19 maxlen: 24
198.105.116.0/23 maxlen: 24
155.254.32.0/22 maxlen: 24
155.254.32.0/19 maxlen: 24
155.254.48.0/23 maxlen: 23
155.254.63.0/24 maxlen: 24
155.254.61.0/24 maxlen: 24
107.161.160.0/24 maxlen: 24
107.161.165.0/24 maxlen: 24
107.161.166.0/24 maxlen: 24
107.161.161.0/24 maxlen: 24
107.161.162.0/24 maxlen: 24
107.161.164.0/24 maxlen: 24
107.161.172.0/24 maxlen: 24
107.161.168.0/24 maxlen: 24
107.161.169.0/24 maxlen: 24
107.161.170.0/24 maxlen: 24
107.161.171.0/24 maxlen: 24
107.181.128.0/19 maxlen: 24
162.220.240.0/24 maxlen: 24
162.220.242.0/24 maxlen: 24
162.220.240.0/21 maxlen: 24
162.220.241.0/24 maxlen: 24
113.20.156.0/22 maxlen: 24
107.161.173.0/24 maxlen: 24
162.217.248.0/24 maxlen: 24
162.217.249.0/24 maxlen: 24
162.217.250.0/24 maxlen: 24
2a05:9f40::/29 maxlen: 48
2a07:9944:20::/48 maxlen: 48
2a07:9944:40::/48 maxlen: 48
2a07:9942:39d7::/48 maxlen: 48
2a07:9944:1111::/48 maxlen: 48
2a07:9944:2222::/48 maxlen: 48
2a07:9940::/29 maxlen: 48
2a07:9944:10::/48 maxlen: 48
2a07:9944:30::/48 maxlen: 48
2a02:2ca7:2e::/48 maxlen: 48
2a07:9942:39d6::/48 maxlen: 48
2a02:2ca0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d5:8f:d5:38:72:77:41:08:3d:6e:87:78:d5:21:1d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Aug 25 15:12:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1cacf062228824a4b354cf0a50c910545762068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:14:06:55:ab:cc:be:2d:ae:19:dd:2e:d7:
96:fd:2a:3f:8e:61:f7:b7:1d:dd:f2:dc:71:72:44:
7d:58:c3:77:63:2b:3a:46:30:09:0a:91:32:fa:b5:
14:05:e1:b5:c3:60:96:e4:f0:99:05:7e:cb:68:e7:
10:83:6d:32:8f:17:c9:9c:d8:61:a2:5f:ec:4c:19:
7f:82:22:98:86:f3:70:56:51:cd:f4:c4:ff:65:09:
c1:49:f9:0e:82:d7:11:ca:d1:0d:76:7a:13:e3:41:
5e:8d:81:22:19:ee:03:e2:3f:26:1d:b6:fe:fd:b3:
8e:2b:a3:8c:5b:b7:e3:6d:ab:0d:79:1a:5a:cc:ad:
63:87:e3:d5:b4:83:87:d0:28:29:d8:1f:9d:8e:a2:
ff:f5:f0:da:26:cd:be:5f:5e:4a:d0:63:6f:40:68:
9d:37:1f:8e:8a:42:b1:25:a0:f1:83:a2:0c:69:9a:
ba:1e:89:2f:8b:c9:c7:0c:44:12:fe:d2:a6:22:2e:
ef:61:55:e6:8d:61:89:89:b7:86:b3:ba:82:3f:dc:
a5:18:95:b6:d4:8b:d4:4e:8b:8b:ec:14:51:e0:52:
0b:2e:b2:30:02:08:cf:25:89:7d:46:6c:e4:4e:49:
c8:17:8a:e7:32:a5:7a:d5:8d:b4:8d:8e:a4:1b:9d:
7d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CA:CF:06:22:28:82:4A:4B:35:4C:F0:A5:0C:91:05:45:76:20:68
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/scrPBiIogkpLNUzwpQyRBUV2IGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.64.0/19
107.161.160.0-107.161.162.255
107.161.164.0-107.161.166.255
107.161.168.0-107.161.173.255
107.181.128.0/19
113.20.156.0/22
155.254.32.0/19
162.217.248.0-162.217.250.255
162.220.240.0/21
198.105.96.0/19
IPv6:
2a02:2ca0::/29
2a05:9f40::/29
2a07:9940::/29
Signature Algorithm: sha256WithRSAEncryption
26:dc:64:17:c3:16:49:03:5f:2a:2d:50:38:eb:99:9d:2e:8c:
c7:6f:0b:2b:6a:5a:cd:77:13:86:a2:c0:c9:26:80:5f:79:b4:
d5:64:2e:0c:fe:3d:9e:0c:a7:b4:8b:ac:40:a6:d7:a2:00:f8:
aa:ae:c9:f2:96:e8:3b:94:70:71:e5:84:17:21:67:62:84:2f:
91:f8:01:23:66:cd:ed:c1:34:99:65:e3:d8:2d:07:8b:6b:16:
1d:f2:ae:d7:aa:a0:a4:e4:29:76:23:12:4b:52:5a:85:a0:95:
ac:9e:83:08:c0:8f:2d:63:19:0a:21:e2:89:58:4a:95:4a:e0:
02:87:3c:62:96:6d:5b:43:a0:6f:fc:5e:6b:33:d1:ff:4c:50:
be:2f:95:67:5c:cc:0a:db:fa:c4:ed:3d:7c:f5:02:be:0c:43:
cc:c1:89:42:79:62:9a:45:6a:ca:9d:64:ec:c9:52:e3:73:1e:
38:02:4c:e7:be:06:22:96:c1:79:ce:4f:1b:11:57:5f:ca:32:
d3:30:c1:9f:0f:86:fe:a3:dd:07:c7:2c:f9:c9:54:e1:bf:48:
d2:c3:9a:7f:42:bb:b8:41:29:af:d6:59:d9:07:9e:d4:46:a0:
a8:02:24:61:99:4b:91:ba:ca:54:f7:de:70:b2:d9:09:df:ee:
c7:48:d5:5f
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYLVj9U4cndBCD1uh3jVIR1nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz
NGQ2MDMwHhcNMjIwODI1MTUxMjI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWNhY2YwNjIyMjg4MjRhNGIzNTRjZjBhNTBjOTEwNTQ1NzYyMDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmgUBlWrzL4trhndLteW/So/jmH3
tx3d8txxckR9WMN3Yys6RjAJCpEy+rUUBeG1w2CW5PCZBX7LaOcQg20yjxfJnNhh
ol/sTBl/giKYhvNwVlHN9MT/ZQnBSfkOgtcRytENdnoT40FejYEiGe4D4j8mHbb+
/bOOK6OMW7fjbasNeRpazK1jh+PVtIOH0Cgp2B+djqL/9fDaJs2+X15K0GNvQGid
Nx+OikKxJaDxg6IMaZq6Hokvi8nHDEQS/tKmIi7vYVXmjWGJibeGs7qCP9ylGJW2
1IvUTouL7BRR4FILLrIwAgjPJYl9RmzkTknIF4rnMqV61Y20jY6kG519EwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFLHKzwYiKIJKSzVM8KUMkQVFdiBoMB8GA1UdIwQY
MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It
MzdiNjJkMjIzOTI0LzEvc2NyUEJpSW9na3BMTlV6d3BReVJCVVYySUdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0
LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGUBggrBgEFBQcBBwEB/wSBhDCBgTBiBAIAATBcAwQFLStA
MAwDBAVroaADBABroaIwDAMEAmuhpAMEAGuhpjAMAwQDa6GoAwQBa6GsAwQFa7WA
AwQCcRScAwQFm/4gMAwDBAOi2fgDBACi2foDBAOi3PADBAXGaWAwGwQCAAIwFQMF
AyoCLKADBQMqBZ9AAwUDKgeZQDANBgkqhkiG9w0BAQsFAAOCAQEAJtxkF8MWSQNf
Ki1QOOuZnS6Mx28LK2pazXcThqLAySaAX3m01WQuDP49ngyntIusQKbXogD4qq7J
8pboO5RwceWEFyFnYoQvkfgBI2bN7cE0mWXj2C0Hi2sWHfKu16qgpOQpdiMSS1Ja
haCVrJ6DCMCPLWMZCiHiiVhKlUrgAoc8YpZtW0Ogb/xeazPR/0xQvi+VZ1zMCtv6
xO09fPUCvgxDzMGJQnlimkVqyp1k7MlS43MeOAJM574GIpbBec5PGxFXX8oy0zDB
nw+G/qPdB8cs+clU4b9I0sOaf0K7uEEpr9ZZ2Qee1EagqAIkYZlLkbrKVPfecLLZ
Cd/ux0jVXw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:20 2023 by rpki-client on console-fra.rpki-client.org