Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/mj8ILqbccCziR5gkRZ21QQDqiTk.roa
File: mj8ILqbccCziR5gkRZ21QQDqiTk.roa (raw, json)
Hash identifier: gkJa/Pz5300tht16j+4tcOFXgFBRbgEAHv/s1QV/wLY=
Subject key identifier: 9A:3F:08:2E:A6:DC:70:2C:E2:47:98:24:45:9D:B5:41:00:EA:89:39
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 09EF1FC5
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/mj8ILqbccCziR5gkRZ21QQDqiTk.roa
Signing time: Tue 28 Jun 2022 13:49:02 +0000
ROA not before: Tue 28 Jun 2022 13:49:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208258
IP address blocks: 185.243.112.0/24 maxlen: 24
185.243.113.0/24 maxlen: 24
185.228.83.0/24 maxlen: 24
185.227.82.0/24 maxlen: 24
185.208.208.0/24 maxlen: 24
185.208.209.0/24 maxlen: 24
185.208.210.0/24 maxlen: 24
194.146.48.0/24 maxlen: 24
45.140.10.0/24 maxlen: 24
45.151.156.0/23 maxlen: 24
45.151.158.0/24 maxlen: 24
45.144.244.0/23 maxlen: 24
195.26.7.0/24 maxlen: 24
2a0b:3c40:17::/48 maxlen: 48
2a0b:3c40:12::/48 maxlen: 48
2a0e:5540:11::/48 maxlen: 48
2a0b:3c40:fca6::/48 maxlen: 48
2a0b:3c40:21::/48 maxlen: 48
2a0b:3c40:1::/48 maxlen: 48
2a0e:5540:100::/48 maxlen: 48
2a0e:5540::/48 maxlen: 48
2a0b:3c40:20::/48 maxlen: 48
2a0b:3c40:16::/48 maxlen: 48
2a0b:3c40:11::/48 maxlen: 48
2a0e:5540:10::/48 maxlen: 48
2a0b:3c40:15::/48 maxlen: 48
2a0e:5540:12::/48 maxlen: 48
2a0b:3c40:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166666181 (0x9ef1fc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jun 28 13:49:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a3f082ea6dc702ce2479824459db54100ea8939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:05:ca:61:9d:fd:7e:01:13:9f:3f:7a:0b:c8:
30:12:57:5b:69:94:53:0d:86:d1:4d:2e:e5:3e:ce:
03:a1:9c:1e:a0:84:39:26:fe:d6:7e:07:d0:1e:38:
ca:c4:4f:96:52:45:5b:fe:3e:c3:b2:aa:41:e1:e8:
60:ad:83:0a:d2:1f:e4:81:e3:4a:5b:35:ff:63:cc:
4c:d2:8b:e2:69:0a:97:b3:88:98:7d:5d:c3:46:11:
ee:3d:71:e3:4c:6f:39:90:3f:47:ad:a9:4f:63:41:
86:21:6e:f4:94:b6:09:e2:bf:9d:84:c4:00:53:d2:
a6:33:35:d6:82:78:e4:bb:87:01:df:31:e4:ee:2d:
88:dc:bc:87:3a:6b:3e:08:5d:b0:9e:51:a8:98:bb:
75:25:d2:5d:c2:ef:07:50:0c:44:5c:a4:97:ac:c0:
7c:5d:f0:22:5b:8b:08:56:cb:86:1e:3d:ed:99:41:
7a:57:79:c6:e2:47:00:e5:08:b6:d0:35:f9:29:4a:
99:48:c9:63:cd:c3:4f:84:49:b3:15:36:10:c8:ae:
58:09:97:6f:70:73:09:a8:56:d3:48:a4:15:2b:b0:
78:e7:95:36:7b:c2:ce:3e:54:08:c2:fa:fc:3f:f5:
d8:65:6d:99:26:b4:b7:14:3b:11:35:d2:42:34:69:
cd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3F:08:2E:A6:DC:70:2C:E2:47:98:24:45:9D:B5:41:00:EA:89:39
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/mj8ILqbccCziR5gkRZ21QQDqiTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.10.0/24
45.144.244.0/23
45.151.156.0-45.151.158.255
185.208.208.0-185.208.210.255
185.227.82.0/24
185.228.83.0/24
185.243.112.0/23
194.146.48.0/24
195.26.7.0/24
IPv6:
2a0b:3c40:1::/48
2a0b:3c40:9::/48
2a0b:3c40:11::-2a0b:3c40:12:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:15::-2a0b:3c40:17:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:20::/47
2a0b:3c40:fca6::/48
2a0e:5540::/48
2a0e:5540:10::-2a0e:5540:12:ffff:ffff:ffff:ffff:ffff
2a0e:5540:100::/48
Signature Algorithm: sha256WithRSAEncryption
b2:01:aa:b3:ad:36:94:5c:3c:96:80:62:6c:52:7f:7a:c4:10:
1f:e4:4e:52:ec:8e:57:5d:75:b8:13:43:f5:43:1f:1d:98:f2:
1e:37:35:fe:a0:8a:76:32:6c:ee:4c:47:3d:a4:95:5f:06:cb:
c3:b4:00:81:87:ca:28:d7:36:db:b4:9a:bb:7d:7a:55:08:b9:
f5:c1:39:62:e8:b5:0d:5a:9d:d3:52:7c:3f:cd:99:a5:2b:39:
9b:15:41:03:c8:c8:5c:9d:fb:95:3c:75:b2:c3:d5:f7:11:bf:
6e:d1:89:7a:38:66:9c:55:1a:30:17:c2:c7:09:17:49:ef:7c:
ba:33:38:91:5d:74:d7:ef:f0:eb:34:79:03:fe:bc:a9:06:95:
22:96:d3:15:29:43:13:aa:99:bd:f5:98:f5:ad:21:d6:78:80:
d3:61:dd:8e:a2:b8:63:2f:5c:35:95:b0:b4:11:fe:b6:af:53:
e5:be:24:e0:46:92:6d:dc:81:6e:6d:d4:70:c6:5d:00:e2:5f:
32:9b:55:3b:d5:d5:25:bf:36:3c:ee:ca:3c:b9:c1:50:67:e3:
60:aa:a4:f0:59:3c:02:71:f1:72:f5:7a:40:82:83:d7:f3:e0:
cb:33:52:ca:f6:eb:4d:64:81:bc:c4:10:88:f5:2f:ab:46:d5:
84:e4:70:2c
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgIECe8fxTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NTU3Y2NkNDNhZmU4MTZlNDk1MzIyOGJmMTRhNzVkYzI5MDE0YjhkMB4XDTIyMDYy
ODEzNDkwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWEzZjA4MmVhNmRj
NzAyY2UyNDc5ODI0NDU5ZGI1NDEwMGVhODkzOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIQFymGd/X4BE58/egvIMBJXW2mUUw2G0U0u5T7OA6GcHqCE
OSb+1n4H0B44ysRPllJFW/4+w7KqQeHoYK2DCtIf5IHjSls1/2PMTNKL4mkKl7OI
mH1dw0YR7j1x40xvOZA/R62pT2NBhiFu9JS2CeK/nYTEAFPSpjM11oJ45LuHAd8x
5O4tiNy8hzprPghdsJ5RqJi7dSXSXcLvB1AMRFykl6zAfF3wIluLCFbLhh497ZlB
eld5xuJHAOUIttA1+SlKmUjJY83DT4RJsxU2EMiuWAmXb3BzCahW00ikFSuweOeV
NnvCzj5UCML6/D/12GVtmSa0txQ7ETXSQjRpzeUCAwEAAaOCAsYwggLCMB0GA1Ud
DgQWBBSaPwguptxwLOJHmCRFnbVBAOqJOTAfBgNVHSMEGDAWgBS1V8zUOv6BbklT
IovxSnXcKQFLjTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RWZk0xRHItZ1c1SlV5S0w4VXAxM0NrQlM0MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGIvMTkwODQzLTE4MDMtNDQ2Mi1hNzk1LTZiYzc1NTc4YjRjMy8x
L21qOElMcWJjY0N6aVI1Z2tSWjIxUVFEcWlUay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIv
MTkwODQzLTE4MDMtNDQ2Mi1hNzk1LTZiYzc1NTc4YjRjMy8xL3RWZk0xRHItZ1c1
SlV5S0w4VXAxM0NrQlM0MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
2wYIKwYBBQUHAQcBAf8EgcswgcgwTAQCAAEwRgMEAC2MCgMEAS2Q9DAMAwQCLZec
AwQALZeeMAwDBAS50NADBAC50NIDBAC541IDBAC55FMDBAG583ADBADCkjADBADD
GgcweAQCAAIwcgMHACoLPEAAAQMHACoLPEAACTASAwcAKgs8QAARAwcAKgs8QAAS
MBIDBwAqCzxAABUDBwMqCzxAABADBwEqCzxAACADBwAqCzxA/KYDBwAqDlVAAAAw
EgMHBCoOVUAAEAMHACoOVUAAEgMHACoOVUABADANBgkqhkiG9w0BAQsFAAOCAQEA
sgGqs602lFw8loBibFJ/esQQH+ROUuyOV111uBND9UMfHZjyHjc1/qCKdjJs7kxH
PaSVXwbLw7QAgYfKKNc227Sau316VQi59cE5Yui1DVqd01J8P82ZpSs5mxVBA8jI
XJ37lTx1ssPV9xG/btGJejhmnFUaMBfCxwkXSe98ujM4kV101+/w6zR5A/68qQaV
IpbTFSlDE6qZvfWY9a0h1niA02HdjqK4Yy9cNZWwtBH+tq9T5b4k4EaSbdyBbm3U
cMZdAOJfMptVO9XVJb82PO7KPLnBUGfjYKqk8Fk8AnHxcvV6QIKD1/PgyzNSyvbr
TWSBvMQQiPUvq0bVhORwLA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org