Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nBuL68kkIyf6dyZBTRNPhmt7Tcc.roa
File: nBuL68kkIyf6dyZBTRNPhmt7Tcc.roa (raw, json)
Hash identifier: AkqdRPOPayo/WgW2U3UG841OxWYSuX0BGoCm4CVbH9c=
Subject key identifier: 9C:1B:8B:EB:C9:24:23:27:FA:77:26:41:4D:13:4F:86:6B:7B:4D:C7
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0184235E9315FDFFE0D71ADEF1F3978BAD47
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nBuL68kkIyf6dyZBTRNPhmt7Tcc.roa
Signing time: Sat 29 Oct 2022 10:51:51 +0000
ROA not before: Sat 29 Oct 2022 10:51:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.30.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.13.188.0/24 maxlen: 24
194.15.53.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:23:5e:93:15:fd:ff:e0:d7:1a:de:f1:f3:97:8b:ad:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 29 10:51:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c1b8bebc9242327fa7726414d134f866b7b4dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:cb:3e:c6:1f:54:fc:54:f1:62:5a:4e:1b:
b9:b3:55:7d:2e:aa:25:66:d6:6a:c6:97:2d:86:97:
27:0c:51:d1:c0:4e:89:2e:84:26:46:0f:97:5a:9d:
1f:72:ce:22:54:d4:e5:f9:5e:6f:8d:c8:1b:25:e2:
c3:d7:fc:b1:75:58:b3:d5:c5:19:8f:d7:e2:dc:6e:
5d:74:d6:b8:24:84:d0:76:e6:63:f4:28:b0:07:ac:
d3:f5:63:c0:7e:0c:f2:8a:33:b6:27:3f:89:5c:1c:
f6:80:18:40:ad:9b:0a:c0:49:6e:a9:1c:02:92:22:
fe:07:e6:da:45:7a:82:20:0b:ab:2f:7f:d6:1e:6d:
d6:ad:8b:24:83:f6:e0:f7:54:0f:df:fa:c0:18:42:
54:e9:2d:11:09:88:53:8f:cf:21:92:4c:95:b3:7b:
66:2b:e2:91:87:fd:c9:91:ec:c6:9e:f3:bb:b8:41:
f0:af:12:73:6e:03:30:cc:85:3c:62:5b:47:f7:d9:
b8:e5:b0:66:6a:6a:bb:1e:a0:a6:b8:ba:b3:22:d5:
a1:f0:ec:74:7f:f4:c1:bd:ca:4c:1a:9e:d7:94:9c:
fb:db:a3:9b:a0:12:25:f5:79:37:f4:8d:8e:54:00:
68:46:47:65:72:76:f9:6a:e0:8c:ab:48:49:31:74:
e2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1B:8B:EB:C9:24:23:27:FA:77:26:41:4D:13:4F:86:6B:7B:4D:C7
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nBuL68kkIyf6dyZBTRNPhmt7Tcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.13.188.0/23
45.88.137.0/24
45.132.180.0/24
85.209.122.0/23
193.30.241.0/24
194.15.52.0/23
195.177.94.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d6:39:54:ce:3d:62:95:d8:a7:56:cb:d0:df:1b:50:5f:81:
a1:0d:64:1f:ae:b8:16:51:f5:34:b9:e8:47:c1:7f:76:be:58:
83:88:9e:f9:9e:35:91:30:0b:58:93:ac:33:17:db:bc:9f:3e:
c8:99:5d:d9:de:41:a1:ad:e6:9f:b0:db:71:b5:c8:82:cd:89:
de:20:59:4c:cf:9c:8e:f3:ad:f5:d0:53:16:05:6d:e8:3f:6c:
70:15:ae:ca:ed:20:ad:8c:78:bc:70:26:db:cb:f7:40:c5:26:
37:db:d5:b1:fb:f3:74:27:0c:20:0c:da:af:18:e4:2b:6a:95:
80:50:21:04:7d:ae:ae:76:3c:ba:07:1c:b5:a9:c8:f9:57:76:
97:46:39:7a:bd:5b:d5:9d:81:de:3e:ae:ef:a1:c5:36:03:7a:
8a:c0:22:db:2b:ac:dc:8e:69:2d:1c:f8:a3:c6:4e:c1:3e:a2:
9f:6b:21:6d:80:46:fc:3f:0a:b0:91:4c:d2:7d:17:2c:b6:be:
11:be:80:92:76:7f:77:98:7d:78:8e:e0:55:ee:3b:24:9a:64:
91:da:f6:3c:66:d7:2f:da:6c:ac:8b:98:c3:ca:fe:0e:b0:52:
00:21:ce:72:ec:9e:9e:75:16:1d:23:71:a7:a1:4e:7f:43:ef:
1a:24:b2:a1
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYQjXpMV/f/g1xre8fOXi61HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjIxMDI5MTA1MTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzFiOGJlYmM5MjQyMzI3ZmE3NzI2NDE0ZDEzNGY4NjZiN2I0ZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn07LPsYfVPxU8WJaThu5s1V9Lqol
ZtZqxpcthpcnDFHRwE6JLoQmRg+XWp0fcs4iVNTl+V5vjcgbJeLD1/yxdViz1cUZ
j9fi3G5ddNa4JITQduZj9CiwB6zT9WPAfgzyijO2Jz+JXBz2gBhArZsKwEluqRwC
kiL+B+baRXqCIAurL3/WHm3WrYskg/bg91QP3/rAGEJU6S0RCYhTj88hkkyVs3tm
K+KRh/3JkezGnvO7uEHwrxJzbgMwzIU8YltH99m45bBmamq7HqCmuLqzItWh8Ox0
f/TBvcpMGp7XlJz726OboBIl9Xk39I2OVABoRkdlcnb5auCMq0hJMXTiBwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFJwbi+vJJCMn+ncmQU0TT4Zre03HMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvbkJ1TDY4a2tJeWY2ZHlaQlRSTlBobXQ3VGNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQALQkeAwQB
LQ28AwQALViJAwQALYS0AwQBVdF6AwQAwR7xAwQBwg80AwQAw7FeMA0GCSqGSIb3
DQEBCwUAA4IBAQBr1jlUzj1ildinVsvQ3xtQX4GhDWQfrrgWUfU0uehHwX92vliD
iJ75njWRMAtYk6wzF9u8nz7ImV3Z3kGhreafsNtxtciCzYneIFlMz5yO86310FMW
BW3oP2xwFa7K7SCtjHi8cCbby/dAxSY329Wx+/N0JwwgDNqvGOQrapWAUCEEfa6u
djy6Bxy1qcj5V3aXRjl6vVvVnYHePq7vocU2A3qKwCLbK6zcjmktHPijxk7BPqKf
ayFtgEb8PwqwkUzSfRcstr4RvoCSdn93mH14juBV7jskmmSR2vY8Ztcv2mysi5jD
yv4OsFIAIc5y7J6edRYdI3GnoU5/Q+8aJLKh
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org