Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/RXsl3zW0Txd0nSCyzBzCRUQfNIg.roa
File: RXsl3zW0Txd0nSCyzBzCRUQfNIg.roa (raw, json)
Hash identifier: z4iQSZHhiwlFV8GHzOmg5UvH4nUkx0X8METqyoE3QGs=
Subject key identifier: 45:7B:25:DF:35:B4:4F:17:74:9D:20:B2:CC:1C:C2:45:44:1F:34:88
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0183FE7F7F98394DB26D1FFAA8BDDF801D0F
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/RXsl3zW0Txd0nSCyzBzCRUQfNIg.roa
Signing time: Sat 22 Oct 2022 07:01:52 +0000
ROA not before: Sat 22 Oct 2022 07:01:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 45.151.2.0/24 maxlen: 24
45.151.0.0/23 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.108.0/22 maxlen: 24
45.88.139.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.13.191.0/24 maxlen: 24
45.94.168.0/22 maxlen: 24
45.144.215.0/24 maxlen: 24
45.144.214.0/23 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
77.83.38.0/23 maxlen: 23
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
85.209.121.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.38.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
45.138.180.0/22 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fe:7f:7f:98:39:4d:b2:6d:1f:fa:a8:bd:df:80:1d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 22 07:01:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=457b25df35b44f17749d20b2cc1cc245441f3488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:07:c9:6c:cf:bb:2c:09:08:c1:96:f2:3e:
f8:b5:fa:05:ad:30:df:ae:db:47:9f:c8:22:dc:77:
1d:bf:ae:0f:11:9c:e2:37:32:24:e9:b3:56:b2:25:
2d:2c:e2:f0:ce:1b:63:3f:dd:0e:7a:df:3e:6f:c5:
54:bd:9d:05:fa:3f:d0:91:f1:82:bb:5f:f4:69:53:
62:0f:ca:45:12:78:8c:5e:38:ce:eb:93:19:db:f9:
42:ca:c2:5c:ae:06:7d:f3:86:9f:2e:5d:fa:d9:42:
a5:4e:74:44:ef:24:88:81:4f:31:6f:1a:43:82:e5:
7e:0c:5c:e7:1f:17:6d:e0:bc:fa:e3:05:28:c2:30:
c4:60:b6:e7:01:bc:16:31:b7:48:7d:6f:09:b9:5d:
b0:71:c3:46:ce:83:1f:fc:6e:08:1a:c8:c0:9c:f8:
b2:9c:2f:0d:f1:fb:b3:93:be:7f:a0:f6:72:40:20:
01:dd:25:97:a1:8a:1a:0d:8c:27:a3:d9:8b:39:73:
e1:8d:d3:7e:8c:5f:fd:c7:2c:27:a0:7c:7a:b5:6a:
8b:5c:ac:19:07:c3:5f:48:15:ed:c7:26:fb:1b:15:
3e:d6:11:ab:31:3c:5d:2f:67:28:09:2c:fe:bc:67:
cc:20:59:d3:89:98:9d:7f:95:08:e8:b6:05:8f:94:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7B:25:DF:35:B4:4F:17:74:9D:20:B2:CC:1C:C2:45:44:1F:34:88
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/RXsl3zW0Txd0nSCyzBzCRUQfNIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
5.181.87.0/24
45.9.29.0/24
45.13.191.0/24
45.81.112.0/22
45.88.139.0/24
45.94.168.0/22
45.132.181.0/24
45.138.180.0/22
45.144.212.0/22
45.151.0.0-45.151.2.255
77.83.37.0-77.83.39.255
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
22:26:34:ee:a8:43:86:16:27:10:01:12:7f:7c:ef:5e:a2:54:
0e:59:60:d6:c0:39:9c:74:c8:99:61:2f:01:d3:6a:61:67:b6:
42:e7:f4:3a:10:d6:20:f6:20:2b:5f:1d:d5:0f:db:8b:69:72:
d5:b8:78:4f:fc:a3:8d:f1:a5:df:d9:69:e8:8e:60:3c:cf:9f:
29:83:96:6e:cc:43:02:b2:e6:8c:32:e1:33:f2:72:70:bb:b3:
f8:18:03:19:73:ce:63:ea:65:d7:74:8d:6d:92:88:25:12:1d:
92:64:f0:5f:f2:fe:1c:1b:31:95:05:08:29:67:f6:b6:bc:56:
4b:64:8d:46:f5:bd:e5:b4:09:fe:ed:97:e6:1d:09:c0:ab:fd:
18:3f:3e:8b:eb:96:d5:56:5b:52:c5:56:0b:b2:00:7b:b0:33:
06:54:eb:cf:2d:1f:54:db:80:a0:a2:0e:00:49:fd:c4:a9:f9:
5a:3a:d4:f6:9b:93:86:f2:b4:79:f7:ea:73:4e:b2:07:dd:af:
7c:e9:61:98:3e:f6:fb:7b:de:16:3a:ca:f1:57:fe:b6:e6:d9:
06:ed:eb:5c:8c:61:5c:51:13:81:58:d9:11:72:38:a5:3f:28:
4c:ea:1c:d3:e5:8b:bc:a1:02:01:b5:7f:9a:46:9d:8f:79:b4:
cd:19:24:0c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgISAYP+f3+YOU2ybR/6qL3fgB0PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjIxMDIyMDcwMTUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTdiMjVkZjM1YjQ0ZjE3NzQ5ZDIwYjJjYzFjYzI0NTQ0MWYzNDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6QHyWzPuywJCMGW8j74tfoFrTDf
rttHn8gi3Hcdv64PEZziNzIk6bNWsiUtLOLwzhtjP90Oet8+b8VUvZ0F+j/QkfGC
u1/0aVNiD8pFEniMXjjO65MZ2/lCysJcrgZ984afLl362UKlTnRE7ySIgU8xbxpD
guV+DFznHxdt4Lz64wUowjDEYLbnAbwWMbdIfW8JuV2wccNGzoMf/G4IGsjAnPiy
nC8N8fuzk75/oPZyQCAB3SWXoYoaDYwno9mLOXPhjdN+jF/9xywnoHx6tWqLXKwZ
B8NfSBXtxyb7GxU+1hGrMTxdL2coCSz+vGfMIFnTiZidf5UI6LYFj5QqswIDAQAB
o4ICzDCCAsgwHQYDVR0OBBYEFEV7Jd81tE8XdJ0gsswcwkVEHzSIMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvUlhzbDN6VzBUeGQwblNDeXpCekNSVVFmTklnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHhBggrBgEFBQcBBwEB/wSB0TCBzjCBoAQCAAEwgZkDBAIC
OGwDBAAFtVcDBAAtCR0DBAAtDb8DBAItUXADBAAtWIsDBAItXqgDBAAthLUDBAIt
irQDBAItkNQwCwMDAC2XAwQALZcCMAwDBABNUyUDBANNUyADBAJV0XgDBAG5K/gD
BAC5K/sDBAG5yD4DBALBHvADBADBOSkDBADBOSsDBALC8mADBADDPhgDBALDsVwD
BALD07wwKQQCAAIwIwMFACoBcSADBQMqB5IAAwUDKgylgAMFAyoQ38ADBQMqEQWA
MA0GCSqGSIb3DQEBCwUAA4IBAQAiJjTuqEOGFicQARJ/fO9eolQOWWDWwDmcdMiZ
YS8B02phZ7ZC5/Q6ENYg9iArXx3VD9uLaXLVuHhP/KON8aXf2WnojmA8z58pg5Zu
zEMCsuaMMuEz8nJwu7P4GAMZc85j6mXXdI1tkoglEh2SZPBf8v4cGzGVBQgpZ/a2
vFZLZI1G9b3ltAn+7ZfmHQnAq/0YPz6L65bVVltSxVYLsgB7sDMGVOvPLR9U24Cg
og4ASf3EqflaOtT2m5OG8rR59+pzTrIH3a986WGYPvb7e94WOsrxV/625tkG7etc
jGFcUROBWNkRcjilPyhM6hzT5Yu8oQIBtX+aRp2PebTNGSQM
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org