Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/vFtgJ9ugeXUwCL7rih7bAr0v4fs.roa
File: vFtgJ9ugeXUwCL7rih7bAr0v4fs.roa (raw, json)
Hash identifier: Q83fWwonJvapOuvIRVlhBLrqN4wxeu0Dig2109y25i4=
Subject key identifier: BC:5B:60:27:DB:A0:79:75:30:08:BE:EB:8A:1E:DB:02:BD:2F:E1:FB
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0183841B5BBADA7DA07DEC908A33A01D8745
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/vFtgJ9ugeXUwCL7rih7bAr0v4fs.roa
Signing time: Wed 28 Sep 2022 12:38:48 +0000
ROA not before: Wed 28 Sep 2022 12:38:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208258
IP address blocks: 185.243.112.0/24 maxlen: 24
185.243.113.0/24 maxlen: 24
185.228.83.0/24 maxlen: 24
185.227.82.0/24 maxlen: 24
185.208.208.0/24 maxlen: 24
185.208.209.0/24 maxlen: 24
185.208.210.0/24 maxlen: 24
194.146.48.0/24 maxlen: 24
45.140.10.0/24 maxlen: 24
45.151.156.0/23 maxlen: 24
45.151.158.0/24 maxlen: 24
45.144.244.0/23 maxlen: 24
195.26.7.0/24 maxlen: 24
2a0b:3c40:17::/48 maxlen: 48
2a0b:3c40:12::/48 maxlen: 48
2a0e:5540:11::/48 maxlen: 48
2a0b:3c40:fca6::/48 maxlen: 48
2a0b:3c40:21::/48 maxlen: 48
2a0b:3c40:1::/48 maxlen: 48
2a0e:5540:100::/48 maxlen: 48
2a0e:5540::/48 maxlen: 48
2a0b:3c40:20::/48 maxlen: 48
2a0b:3c40:16::/48 maxlen: 48
2a0b:3c40:11::/48 maxlen: 48
2a0e:5540:10::/48 maxlen: 48
2a0b:3c40:15::/48 maxlen: 48
2a0e:5540:12::/48 maxlen: 48
2a0b:3c40:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:84:1b:5b:ba:da:7d:a0:7d:ec:90:8a:33:a0:1d:87:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Sep 28 12:38:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc5b6027dba079753008beeb8a1edb02bd2fe1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:23:6d:1b:8b:52:1c:b3:d9:ff:56:b9:ec:
31:f9:99:bd:12:ee:e2:cb:e7:9e:d7:a4:e5:65:a6:
65:55:a4:7a:c0:91:99:c5:9b:c5:e0:f2:39:2e:78:
50:3c:80:36:17:a9:14:36:9a:99:5a:c0:b6:0a:7a:
98:57:80:e6:1d:7d:40:98:e4:96:f1:99:04:51:81:
6c:17:5e:ed:de:40:75:f2:6b:0b:df:41:8d:09:5d:
86:29:d6:53:8c:4e:df:f3:2b:1e:3c:6f:56:2d:36:
57:fa:fa:65:3c:f5:ef:08:57:b1:d5:ee:9c:d4:19:
6e:b4:de:bd:52:b2:21:3f:a1:83:2a:4d:28:e4:e0:
93:15:8d:5f:01:e4:f3:2f:8a:33:58:81:b5:26:24:
92:cb:a6:f3:23:8d:ac:c2:59:b6:a7:0d:0f:36:58:
4e:5c:fd:a0:49:43:27:ff:29:bd:04:93:b7:bd:65:
09:86:ba:64:4b:3f:99:69:88:31:89:24:c9:ea:69:
57:8e:40:ac:df:87:2b:ee:24:6b:14:a4:7e:69:70:
04:e8:46:c8:91:4e:dc:ad:91:ec:fe:92:bf:dd:d8:
ce:f3:34:be:3d:0e:37:c3:7f:d8:a8:d8:14:65:b0:
9e:4e:d6:5d:a9:92:14:ee:9b:08:39:14:c8:46:76:
6b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5B:60:27:DB:A0:79:75:30:08:BE:EB:8A:1E:DB:02:BD:2F:E1:FB
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/vFtgJ9ugeXUwCL7rih7bAr0v4fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.10.0/24
45.144.244.0/23
45.151.156.0-45.151.158.255
185.208.208.0-185.208.210.255
185.227.82.0/24
185.228.83.0/24
185.243.112.0/23
194.146.48.0/24
195.26.7.0/24
IPv6:
2a0b:3c40:1::/48
2a0b:3c40:9::/48
2a0b:3c40:11::-2a0b:3c40:12:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:15::-2a0b:3c40:17:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:20::/47
2a0b:3c40:fca6::/48
2a0e:5540::/48
2a0e:5540:10::-2a0e:5540:12:ffff:ffff:ffff:ffff:ffff
2a0e:5540:100::/48
Signature Algorithm: sha256WithRSAEncryption
9c:40:32:1f:52:32:a9:cf:01:e3:09:ca:8f:eb:df:7a:35:69:
14:18:40:14:63:f9:85:df:35:94:0f:ad:c0:1c:9c:7f:c0:e7:
f1:45:57:20:6a:41:e2:28:8e:c8:d4:50:ea:7e:8c:04:22:6d:
61:05:2a:ce:84:b8:e5:89:76:8f:c0:dd:1f:aa:8c:18:c8:51:
9f:d6:e8:90:c4:f8:1c:f8:a8:61:c4:ff:9d:a4:da:21:be:78:
86:b2:6b:3f:2e:1a:6f:5f:78:41:a5:05:52:f5:3a:47:3d:d4:
d1:8b:75:2d:ff:b1:da:00:f0:89:26:be:df:ba:68:19:c4:9f:
b0:3d:a9:63:a9:f9:1b:ef:c6:38:77:34:6e:61:5f:62:db:86:
3a:d8:c4:92:5f:ee:a9:05:24:e4:49:c8:37:d6:0b:25:d0:43:
10:25:c5:1d:51:22:a3:f8:b3:ba:9d:13:36:75:b5:8f:d6:4f:
dc:2d:ca:1d:34:3d:92:cc:f5:6b:91:40:4b:5f:86:35:ea:5a:
d7:d1:45:40:9e:a2:aa:e5:c3:fd:a7:84:45:91:bd:5d:be:2f:
90:89:3f:49:40:fc:2a:06:ad:80:c2:72:30:3c:39:7a:f1:f3:
91:2c:f7:a5:47:65:ae:59:29:6b:c9:97:21:b0:c4:71:24:25:
67:ac:21:a3
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgISAYOEG1u62n2gfeyQijOgHYdFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjIwOTI4MTIzODQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzViNjAyN2RiYTA3OTc1MzAwOGJlZWI4YTFlZGIwMmJkMmZlMWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7IjbRuLUhyz2f9Wuewx+Zm9Eu7i
y+ee16TlZaZlVaR6wJGZxZvF4PI5LnhQPIA2F6kUNpqZWsC2CnqYV4DmHX1AmOSW
8ZkEUYFsF17t3kB18msL30GNCV2GKdZTjE7f8ysePG9WLTZX+vplPPXvCFex1e6c
1BlutN69UrIhP6GDKk0o5OCTFY1fAeTzL4ozWIG1JiSSy6bzI42swlm2pw0PNlhO
XP2gSUMn/ym9BJO3vWUJhrpkSz+ZaYgxiSTJ6mlXjkCs34cr7iRrFKR+aXAE6EbI
kU7crZHs/pK/3djO8zS+PQ43w3/YqNgUZbCeTtZdqZIU7psIORTIRnZrJQIDAQAB
o4ICxjCCAsIwHQYDVR0OBBYEFLxbYCfboHl1MAi+64oe2wK9L+H7MB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvdkZ0Z0o5dWdlWFV3Q0w3cmloN2JBcjB2NGZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHbBggrBgEFBQcBBwEB/wSByzCByDBMBAIAATBGAwQALYwK
AwQBLZD0MAwDBAItl5wDBAAtl54wDAMEBLnQ0AMEALnQ0gMEALnjUgMEALnkUwME
AbnzcAMEAMKSMAMEAMMaBzB4BAIAAjByAwcAKgs8QAABAwcAKgs8QAAJMBIDBwAq
CzxAABEDBwAqCzxAABIwEgMHACoLPEAAFQMHAyoLPEAAEAMHASoLPEAAIAMHACoL
PED8pgMHACoOVUAAADASAwcEKg5VQAAQAwcAKg5VQAASAwcAKg5VQAEAMA0GCSqG
SIb3DQEBCwUAA4IBAQCcQDIfUjKpzwHjCcqP6996NWkUGEAUY/mF3zWUD63AHJx/
wOfxRVcgakHiKI7I1FDqfowEIm1hBSrOhLjliXaPwN0fqowYyFGf1uiQxPgc+Khh
xP+dpNohvniGsms/LhpvX3hBpQVS9TpHPdTRi3Ut/7HaAPCJJr7fumgZxJ+wPalj
qfkb78Y4dzRuYV9i24Y62MSSX+6pBSTkScg31gsl0EMQJcUdUSKj+LO6nRM2dbWP
1k/cLcodND2SzPVrkUBLX4Y16lrX0UVAnqKq5cP9p4RFkb1dvi+QiT9JQPwqBq2A
wnIwPDl68fORLPelR2WuWSlryZchsMRxJCVnrCGj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:26 2024 by rpki-client on console-fra.rpki-client.org