Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8QBXLGSCoyqQwVy8qISbZjNPIJg.roa
File: 8QBXLGSCoyqQwVy8qISbZjNPIJg.roa (raw, json)
Hash identifier: Ads008gcrrBOIdHHeJj/l6st8PneN1X9a9NOxOJPTR8=
Subject key identifier: F1:00:57:2C:64:82:A3:2A:90:C1:5C:BC:A8:84:9B:66:33:4F:20:98
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 080D4AC8
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8QBXLGSCoyqQwVy8qISbZjNPIJg.roa
Signing time: Tue 29 Mar 2022 18:44:17 +0000
ROA not before: Tue 29 Mar 2022 18:44:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 45.151.0.0/23 maxlen: 24
45.151.2.0/24 maxlen: 24
45.13.191.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
45.144.215.0/24 maxlen: 24
2.56.108.0/22 maxlen: 24
194.15.52.0/23 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
85.209.121.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
195.177.95.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135088840 (0x80d4ac8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 29 18:44:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f100572c6482a32a90c15cbca8849b66334f2098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:e6:ac:56:41:84:43:da:20:89:79:72:6a:
50:1f:9a:c4:15:e8:69:a0:8a:85:a1:d8:07:fb:15:
9f:40:77:0a:e2:c0:b2:82:0f:9f:65:78:e5:ba:74:
66:e3:49:7f:e0:2c:8a:4a:39:e8:ec:d0:17:6b:16:
99:41:f1:f1:53:05:0a:e0:5d:8a:f6:06:7b:fd:ac:
1b:8c:ec:80:aa:ef:d6:15:84:dc:b6:f6:b6:5b:bc:
c8:2b:9c:2e:bf:e9:2b:69:f5:24:5d:92:5c:b6:eb:
23:ec:74:ae:d2:cb:99:12:c7:e4:20:69:99:ab:03:
82:06:26:34:54:e4:7e:03:c2:4c:5b:e9:ab:77:5f:
9b:6f:62:3b:61:43:df:e2:91:38:bd:67:4a:4a:50:
27:34:6f:52:1b:43:be:21:b1:94:8b:b2:30:3f:d5:
f0:d1:4f:50:29:54:10:40:b8:bf:db:fb:59:95:42:
ac:18:cc:36:f5:3e:aa:43:a6:37:38:a2:fc:e1:66:
a8:ff:1c:ea:b7:db:99:f9:fc:7f:2c:d6:48:91:19:
84:ba:43:a1:ef:dd:0d:a6:60:a8:c7:9d:73:a2:91:
53:10:23:72:c8:8c:0b:59:d9:c9:0e:fd:32:e8:78:
01:85:f3:55:43:89:b4:b3:df:aa:be:62:84:86:f3:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:00:57:2C:64:82:A3:2A:90:C1:5C:BC:A8:84:9B:66:33:4F:20:98
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8QBXLGSCoyqQwVy8qISbZjNPIJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
45.13.191.0/24
45.88.137.0-45.88.139.255
45.132.182.0/23
45.144.213.0/24
45.144.215.0/24
45.151.0.0-45.151.2.255
77.83.38.0/24
85.209.120.0/22
194.15.52.0/23
195.62.24.0/24
195.177.95.0/24
195.211.188.0/22
Signature Algorithm: sha256WithRSAEncryption
86:ce:39:62:7d:cb:a8:12:2f:50:85:98:92:34:e7:77:a6:4f:
3e:23:6e:19:f4:b2:cf:a8:d6:eb:f2:2f:e3:1d:fa:91:f9:ad:
08:a4:42:eb:c7:42:8b:90:de:20:93:85:23:ae:a5:50:39:35:
a0:44:7f:43:ff:33:7c:fd:f7:68:63:16:d9:1e:fc:7b:78:c3:
5c:68:1e:da:2f:07:c0:70:11:27:bc:06:cf:6f:e9:86:4a:d5:
b2:7a:cc:04:38:31:34:37:2b:77:9c:d4:14:b0:5f:ce:88:02:
dd:d2:1a:03:6d:8a:ab:f2:95:0f:6b:5a:ad:bc:57:ba:74:d9:
fa:8b:fd:b4:94:ef:d5:90:37:cf:63:99:ad:33:9a:e7:e7:3d:
82:b2:f5:02:c3:e9:8b:69:a5:46:ea:5c:73:68:7e:6a:ee:4f:
59:22:36:2a:0b:7f:99:82:66:f1:c3:81:9c:e7:03:e6:0a:e6:
6b:72:b3:ed:4d:bb:d0:3f:1b:7d:c1:49:7b:bf:5f:5b:a3:b6:
fe:c0:e2:7c:79:99:6a:63:71:c5:5b:42:ff:0b:cf:bb:2e:61:
91:b9:a1:1c:b5:41:c1:2f:2b:8a:ad:6c:17:6e:7c:42:20:86:
1f:0e:9d:98:83:06:f8:7d:db:df:0e:65:b7:25:5b:1f:e7:a8:
92:9a:0c:97
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIECA1KyDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZDJhNDc4YmIwYjA4ZTY2MWIwYjJmOWZiZTg5MzViYzljMmEyOGExMB4XDTIyMDMy
OTE4NDQxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjEwMDU3MmM2NDgy
YTMyYTkwYzE1Y2JjYTg4NDliNjYzMzRmMjA5ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALHm5qxWQYRD2iCJeXJqUB+axBXoaaCKhaHYB/sVn0B3CuLA
soIPn2V45bp0ZuNJf+Asiko56OzQF2sWmUHx8VMFCuBdivYGe/2sG4zsgKrv1hWE
3Lb2tlu8yCucLr/pK2n1JF2SXLbrI+x0rtLLmRLH5CBpmasDggYmNFTkfgPCTFvp
q3dfm29iO2FD3+KROL1nSkpQJzRvUhtDviGxlIuyMD/V8NFPUClUEEC4v9v7WZVC
rBjMNvU+qkOmNzii/OFmqP8c6rfbmfn8fyzWSJEZhLpDoe/dDaZgqMedc6KRUxAj
csiMC1nZyQ79Muh4AYXzVUOJtLPfqr5ihIbzKxUCAwEAAaOCAmAwggJcMB0GA1Ud
DgQWBBTxAFcsZIKjKpDBXLyohJtmM08gmDAfBgNVHSMEGDAWgBSdKkeLsLCOZhsL
L5++iTW8nCoooTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25TcEhpN0N3am1ZYkN5LWZ2b2sxdkp3cUtLRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTYvNjYzZGY1LTU4MGMtNGYyYy1hNjZjLWVlZjM1MTFmNmM2MC8x
LzhRQlhMR1NDb3lxUXdWeThxSVNiWmpOUElKZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYv
NjYzZGY1LTU4MGMtNGYyYy1hNjZjLWVlZjM1MTFmNmM2MC8xL25TcEhpN0N3am1Z
YkN5LWZ2b2sxdkp3cUtLRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB2
BggrBgEFBQcBBwEB/wRnMGUwYwQCAAEwXQMEAgI4bAMEAC0NvzAMAwQALViJAwQC
LViIAwQBLYS2AwQALZDVAwQALZDXMAsDAwAtlwMEAC2XAgMEAE1TJgMEAlXReAME
AcIPNAMEAMM+GAMEAMOxXwMEAsPTvDANBgkqhkiG9w0BAQsFAAOCAQEAhs45Yn3L
qBIvUIWYkjTnd6ZPPiNuGfSyz6jW6/Iv4x36kfmtCKRC68dCi5DeIJOFI66lUDk1
oER/Q/8zfP33aGMW2R78e3jDXGge2i8HwHARJ7wGz2/phkrVsnrMBDgxNDcrd5zU
FLBfzogC3dIaA22Kq/KVD2tarbxXunTZ+ov9tJTv1ZA3z2OZrTOa5+c9grL1AsPp
i2mlRupcc2h+au5PWSI2Kgt/mYJm8cOBnOcD5grma3Kz7U270D8bfcFJe79fW6O2
/sDifHmZamNxxVtC/wvPuy5hkbmhHLVBwS8riq1sF258QiCGHw6dmIMG+H3b3w5l
tyVbH+eokpoMlw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org