Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/HRdpHRzUOwX6Kk7L6Oxqq3BSf3Q.roa
File: HRdpHRzUOwX6Kk7L6Oxqq3BSf3Q.roa (raw, json)
Hash identifier: HI5TeKShG1u1Ti617wOVZlPKwPjB81yVr/T6sJP6eZ8=
Subject key identifier: 1D:17:69:1D:1C:D4:3B:05:FA:2A:4E:CB:E8:EC:6A:AB:70:52:7F:74
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0183793DFC572EFBCD5772266C8DEA15C6D4
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/HRdpHRzUOwX6Kk7L6Oxqq3BSf3Q.roa
Signing time: Mon 26 Sep 2022 10:00:48 +0000
ROA not before: Mon 26 Sep 2022 10:00:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208258
IP address blocks: 185.243.112.0/24 maxlen: 24
185.243.113.0/24 maxlen: 24
185.228.83.0/24 maxlen: 24
185.227.82.0/24 maxlen: 24
185.208.208.0/24 maxlen: 24
185.208.209.0/24 maxlen: 24
185.208.210.0/24 maxlen: 24
194.146.48.0/24 maxlen: 24
45.140.10.0/24 maxlen: 24
45.151.156.0/23 maxlen: 24
45.151.158.0/24 maxlen: 24
193.109.137.0/24 maxlen: 24
45.144.244.0/23 maxlen: 24
195.26.7.0/24 maxlen: 24
2a0b:3c40:17::/48 maxlen: 48
2a0b:3c40:12::/48 maxlen: 48
2a0e:5540:11::/48 maxlen: 48
2a0b:3c40:fca6::/48 maxlen: 48
2a0b:3c40:21::/48 maxlen: 48
2a0b:3c40:1::/48 maxlen: 48
2a0e:5540::/48 maxlen: 48
2a0e:5540:100::/48 maxlen: 48
2a0b:3c40:20::/48 maxlen: 48
2a0b:3c40:16::/48 maxlen: 48
2a0b:3c40:11::/48 maxlen: 48
2a0e:5540:10::/48 maxlen: 48
2a0b:3c40:15::/48 maxlen: 48
2a0e:5540:12::/48 maxlen: 48
2a0b:3c40:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:79:3d:fc:57:2e:fb:cd:57:72:26:6c:8d:ea:15:c6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Sep 26 10:00:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d17691d1cd43b05fa2a4ecbe8ec6aab70527f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f9:9f:8f:8c:e6:1d:df:17:3e:01:02:13:75:
c1:97:d6:d5:42:5f:37:c7:c8:a9:90:66:d4:d2:86:
c5:2f:41:28:28:e0:ee:76:55:bf:c8:47:39:d7:36:
a0:4f:5f:8f:50:56:38:0e:50:e2:3d:c5:73:7a:43:
3f:24:e6:fa:75:7b:f9:9d:cc:82:fb:b6:3c:46:db:
c2:4f:2a:c9:cf:c2:bd:28:25:e6:aa:9b:ff:2b:8c:
2f:b2:78:02:2a:42:b7:4a:20:81:1e:55:dd:65:f4:
39:3e:c6:2f:f5:7f:41:06:d9:4c:71:36:11:ec:13:
3a:f8:94:ed:d1:df:5b:9f:3a:3c:db:98:a7:49:39:
c5:87:08:a7:8f:12:c8:9b:53:be:42:e2:1d:a0:c3:
7a:5b:94:9d:82:cb:67:da:bc:80:f1:2a:fc:c4:91:
e6:c2:ba:43:b5:48:de:29:d1:3d:af:b2:36:6e:b9:
a0:e3:64:35:32:c3:95:ff:7a:54:e9:84:ad:03:ad:
38:5b:a9:d0:94:33:20:c6:78:72:0f:8b:fc:59:6c:
91:8e:db:5c:c5:ba:9f:00:2c:60:7a:88:7c:25:c7:
ff:2b:03:e7:ad:24:97:1f:03:c3:7f:5a:ae:7a:2a:
4b:22:0a:a5:1e:e3:1a:1e:4f:f1:ec:ee:d4:49:17:
d5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:17:69:1D:1C:D4:3B:05:FA:2A:4E:CB:E8:EC:6A:AB:70:52:7F:74
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/HRdpHRzUOwX6Kk7L6Oxqq3BSf3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.10.0/24
45.144.244.0/23
45.151.156.0-45.151.158.255
185.208.208.0-185.208.210.255
185.227.82.0/24
185.228.83.0/24
185.243.112.0/23
193.109.137.0/24
194.146.48.0/24
195.26.7.0/24
IPv6:
2a0b:3c40:1::/48
2a0b:3c40:9::/48
2a0b:3c40:11::-2a0b:3c40:12:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:15::-2a0b:3c40:17:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:20::/47
2a0b:3c40:fca6::/48
2a0e:5540::/48
2a0e:5540:10::-2a0e:5540:12:ffff:ffff:ffff:ffff:ffff
2a0e:5540:100::/48
Signature Algorithm: sha256WithRSAEncryption
14:06:39:15:81:5c:a5:3d:5d:d7:b4:60:2b:74:c5:5c:64:16:
7a:e0:ae:ca:66:54:85:d3:f2:8a:08:2b:e9:3d:0a:1e:64:8a:
be:c4:36:3f:a8:a0:0f:b9:66:a7:0d:a6:9e:0c:62:89:c9:30:
6d:2d:e7:54:69:95:49:ea:2d:c7:5e:39:f7:f2:87:38:f4:9e:
8a:63:35:6e:4e:bb:cf:23:40:97:e9:b4:8a:71:01:4e:da:33:
3f:87:16:04:c7:ca:0b:37:9c:4a:c5:78:6e:fb:2f:dc:ed:d4:
26:11:20:ff:bf:cb:3b:0b:5e:ef:d3:00:9c:58:f9:6a:38:7b:
2b:90:49:e9:09:df:74:52:68:34:af:e1:36:10:fc:6f:f1:99:
39:3c:6c:ba:9a:32:a2:d5:0f:95:9c:cc:75:01:6f:51:e4:c6:
a5:c7:67:ca:4f:07:b1:33:ea:85:c4:e0:25:fd:db:18:25:32:
dd:5c:3e:8b:08:2c:60:ec:b5:0b:cd:ab:4c:bf:10:18:1b:38:
e3:48:54:25:5e:e5:16:9d:ee:55:fc:bb:84:0f:a1:6c:63:b1:
f6:a6:06:c8:26:34:e7:8c:be:0e:b0:cc:b0:2e:ff:9b:97:2b:
26:4c:87:e0:a7:ad:d5:d3:c5:bf:b9:83:05:a2:f7:96:ac:80:
35:86:61:00
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgISAYN5PfxXLvvNV3ImbI3qFcbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjIwOTI2MTAwMDQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDE3NjkxZDFjZDQzYjA1ZmEyYTRlY2JlOGVjNmFhYjcwNTI3Zjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvmfj4zmHd8XPgECE3XBl9bVQl83
x8ipkGbU0obFL0EoKODudlW/yEc51zagT1+PUFY4DlDiPcVzekM/JOb6dXv5ncyC
+7Y8RtvCTyrJz8K9KCXmqpv/K4wvsngCKkK3SiCBHlXdZfQ5PsYv9X9BBtlMcTYR
7BM6+JTt0d9bnzo825inSTnFhwinjxLIm1O+QuIdoMN6W5Sdgstn2ryA8Sr8xJHm
wrpDtUjeKdE9r7I2brmg42Q1MsOV/3pU6YStA604W6nQlDMgxnhyD4v8WWyRjttc
xbqfACxgeoh8Jcf/KwPnrSSXHwPDf1queipLIgqlHuMaHk/x7O7USRfVwwIDAQAB
o4ICzDCCAsgwHQYDVR0OBBYEFB0XaR0c1DsF+ipOy+jsaqtwUn90MB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvSFJkcEhSelVPd1g2S2s3TDZPeHFxM0JTZjNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHhBggrBgEFBQcBBwEB/wSB0TCBzjBSBAIAATBMAwQALYwK
AwQBLZD0MAwDBAItl5wDBAAtl54wDAMEBLnQ0AMEALnQ0gMEALnjUgMEALnkUwME
AbnzcAMEAMFtiQMEAMKSMAMEAMMaBzB4BAIAAjByAwcAKgs8QAABAwcAKgs8QAAJ
MBIDBwAqCzxAABEDBwAqCzxAABIwEgMHACoLPEAAFQMHAyoLPEAAEAMHASoLPEAA
IAMHACoLPED8pgMHACoOVUAAADASAwcEKg5VQAAQAwcAKg5VQAASAwcAKg5VQAEA
MA0GCSqGSIb3DQEBCwUAA4IBAQAUBjkVgVylPV3XtGArdMVcZBZ64K7KZlSF0/KK
CCvpPQoeZIq+xDY/qKAPuWanDaaeDGKJyTBtLedUaZVJ6i3HXjn38oc49J6KYzVu
TrvPI0CX6bSKcQFO2jM/hxYEx8oLN5xKxXhu+y/c7dQmESD/v8s7C17v0wCcWPlq
OHsrkEnpCd90Umg0r+E2EPxv8Zk5PGy6mjKi1Q+VnMx1AW9R5Malx2fKTwexM+qF
xOAl/dsYJTLdXD6LCCxg7LULzatMvxAYGzjjSFQlXuUWne5V/LuED6FsY7H2pgbI
JjTnjL4OsMywLv+blysmTIfgp63V08W/uYMFoveWrIA1hmEA
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org