Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/2becaPs0OO4kbBcOe2v3oN41Ta0.roa
File: 2becaPs0OO4kbBcOe2v3oN41Ta0.roa (raw, json)
Hash identifier: tKKOwFvfu4g9eTgGp4NGOrtXzUmGzgGdHYnkkCEbYfM=
Subject key identifier: D9:B7:9C:68:FB:34:38:EE:24:6C:17:0E:7B:6B:F7:A0:DE:35:4D:AD
Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Certificate serial: 0183D5C0EF456E744950AEE99D0EF8B6F4EC
Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/2becaPs0OO4kbBcOe2v3oN41Ta0.roa
Signing time: Fri 14 Oct 2022 09:08:54 +0000
ROA not before: Fri 14 Oct 2022 09:08:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205199
IP address blocks: 194.35.182.0/24 maxlen: 24
194.35.95.0/24 maxlen: 24
194.35.92.0/24 maxlen: 24
193.43.14.0/24 maxlen: 24
193.43.28.0/24 maxlen: 24
193.43.37.0/24 maxlen: 24
45.136.156.0/22 maxlen: 22
185.157.168.0/22 maxlen: 22
45.150.160.0/22 maxlen: 22
193.42.219.0/24 maxlen: 24
194.35.78.0/24 maxlen: 24
185.241.172.0/22 maxlen: 22
45.138.140.0/22 maxlen: 22
45.144.116.0/22 maxlen: 22
194.147.242.0/23 maxlen: 23
45.134.120.0/22 maxlen: 22
194.147.250.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d5:c0:ef:45:6e:74:49:50:ae:e9:9d:0e:f8:b6:f4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Validity
Not Before: Oct 14 09:08:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9b79c68fb3438ee246c170e7b6bf7a0de354dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7a:3f:5b:bb:2e:df:9a:7b:7a:2d:02:ce:5e:
6e:90:d0:72:e9:ff:29:99:bf:1d:dc:e3:ef:80:ed:
eb:1a:d2:1a:77:6a:e9:de:a2:7e:ff:3c:35:de:e1:
0c:a2:86:b0:ad:fd:fd:93:59:b5:b6:ed:a0:78:bc:
37:6a:80:f8:e9:ba:f3:e8:7c:06:2d:a1:f3:b4:1b:
32:82:f9:13:37:cd:eb:bc:59:53:17:28:93:e1:b9:
e8:f8:98:8c:19:12:be:d6:dd:3b:76:8a:c2:5f:ff:
f4:03:ee:14:0a:c1:f3:90:f3:26:0d:98:18:b2:ee:
82:a0:62:80:56:bc:44:b3:d1:8a:c0:10:25:a5:ab:
12:2a:7a:15:f5:fb:fd:fb:80:e5:59:19:34:71:db:
1b:38:56:60:fb:8c:fa:3c:3e:b3:6c:4a:a2:71:bc:
f3:c3:1b:78:b3:7c:37:50:cb:7f:ea:f3:2e:4e:8c:
08:bb:b5:37:60:2a:b8:63:70:36:26:40:c0:60:91:
f4:34:f5:4a:19:82:16:da:03:2d:ee:db:17:d2:c0:
eb:86:3f:f8:28:11:c3:39:dd:c3:b2:24:4b:f0:15:
b8:2d:fe:cf:b6:d4:0a:d0:11:a9:c0:75:1a:d4:2c:
57:e0:67:b0:af:ba:02:38:07:35:f8:2c:b5:e7:3a:
f6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B7:9C:68:FB:34:38:EE:24:6C:17:0E:7B:6B:F7:A0:DE:35:4D:AD
X509v3 Authority Key Identifier:
keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/2becaPs0OO4kbBcOe2v3oN41Ta0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.120.0/22
45.136.156.0/22
45.138.140.0/22
45.144.116.0/22
45.150.160.0/22
185.157.168.0/22
185.241.172.0/22
193.42.219.0/24
193.43.14.0/24
193.43.28.0/24
193.43.37.0/24
194.35.78.0/24
194.35.92.0/24
194.35.95.0/24
194.35.182.0/24
194.147.242.0/23
194.147.250.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:e0:c0:3e:51:47:42:39:de:7e:a3:bd:8e:b4:e4:12:5a:34:
eb:b2:4f:c7:7a:77:8d:ee:67:ff:16:aa:f8:b9:a5:4e:6a:b1:
f3:84:d9:92:04:b3:73:29:96:a6:6f:37:1b:11:d5:fb:a0:09:
bf:ef:e6:f5:41:80:a4:d8:a3:63:56:9c:02:15:07:d8:f0:d6:
22:3b:34:a5:3e:39:0e:cd:af:98:55:b0:91:bb:73:03:e0:7d:
9e:ed:b3:64:74:47:5a:83:d0:76:74:e5:57:2b:9e:07:01:d9:
e0:42:95:17:da:0a:ae:d3:24:f5:c5:d6:42:43:36:4c:c1:db:
24:c4:51:13:4b:9d:93:c7:18:ec:86:1e:16:e6:a8:fb:13:7b:
b8:2e:a9:be:c4:ca:cf:a0:92:cc:d7:c2:de:1e:9c:91:76:75:
9d:fb:77:75:e5:b8:fd:9d:76:da:6d:31:50:cd:dc:40:b8:74:
d7:93:f9:8d:58:d0:50:22:01:3d:f7:57:55:97:09:3d:d6:2f:
48:32:e7:5d:ce:0c:86:77:60:bb:32:3d:5e:50:13:46:a8:4d:
06:a7:6b:3c:08:2a:5b:61:34:a1:83:b2:3b:55:a8:01:1a:5a:
7a:87:c8:c8:1b:ae:4a:fe:86:8c:93:dc:9e:60:d0:55:95:25:
83:4a:42:85
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAYPVwO9FbnRJUK7pnQ74tvTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzcyMGU5NzBmYWEwZTA3ZjUwYTYzODllN2FlNTNhZmE0
MzlkYWIwHhcNMjIxMDE0MDkwODU0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWI3OWM2OGZiMzQzOGVlMjQ2YzE3MGU3YjZiZjdhMGRlMzU0ZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3o/W7su35p7ei0Czl5ukNBy6f8p
mb8d3OPvgO3rGtIad2rp3qJ+/zw13uEMooawrf39k1m1tu2geLw3aoD46brz6HwG
LaHztBsygvkTN83rvFlTFyiT4bno+JiMGRK+1t07dorCX//0A+4UCsHzkPMmDZgY
su6CoGKAVrxEs9GKwBAlpasSKnoV9fv9+4DlWRk0cdsbOFZg+4z6PD6zbEqicbzz
wxt4s3w3UMt/6vMuTowIu7U3YCq4Y3A2JkDAYJH0NPVKGYIW2gMt7tsX0sDrhj/4
KBHDOd3DsiRL8BW4Lf7PttQK0BGpwHUa1CxX4Gewr7oCOAc1+Cy15zr27wIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFNm3nGj7NDjuJGwXDntr96DeNU2tMB8GA1UdIwQY
MBaAFJ83IOlw+qDgf1CmOJ565Tr6Q52rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iYjdjMGUtZWU2OC00YmY4LWJiMzQt
MTJlNmEwZDQzMThhLzEvMmJlY2FQczBPTzRrYkJjT2UydjNvTjQxVGEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9iYjdjMGUtZWU2OC00YmY4LWJiMzQtMTJlNmEwZDQzMThh
LzEvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQCLYZ4AwQC
LYicAwQCLYqMAwQCLZB0AwQCLZagAwQCuZ2oAwQCufGsAwQAwSrbAwQAwSsOAwQA
wSscAwQAwSslAwQAwiNOAwQAwiNcAwQAwiNfAwQAwiO2AwQBwpPyAwQBwpP6MA0G
CSqGSIb3DQEBCwUAA4IBAQBO4MA+UUdCOd5+o72OtOQSWjTrsk/HeneN7mf/Fqr4
uaVOarHzhNmSBLNzKZambzcbEdX7oAm/7+b1QYCk2KNjVpwCFQfY8NYiOzSlPjkO
za+YVbCRu3MD4H2e7bNkdEdag9B2dOVXK54HAdngQpUX2gqu0yT1xdZCQzZMwdsk
xFETS52Txxjshh4W5qj7E3u4Lqm+xMrPoJLM18LeHpyRdnWd+3d15bj9nXbabTFQ
zdxAuHTXk/mNWNBQIgE991dVlwk91i9IMuddzgyGd2C7Mj1eUBNGqE0Gp2s8CCpb
YTShg7I7VagBGlp6h8jIG65K/oaMk9yeYNBVlSWDSkKF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:49 2024 by rpki-client on console-fra.rpki-client.org