Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/tMYBg9DxmrQPVxjQtDnxA1BLEeM.roa
File: tMYBg9DxmrQPVxjQtDnxA1BLEeM.roa (raw, json)
Hash identifier: Ab038D6DtJ8IkYWIv3CwXbBsWVFbb6JaZlJURlqUiOo=
Subject key identifier: B4:C6:01:83:D0:F1:9A:B4:0F:57:18:D0:B4:39:F1:03:50:4B:11:E3
Certificate issuer: /CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Certificate serial: 01856F14B0E90B695E510B1C8D8A5CFE6B02
Authority key identifier: F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/tMYBg9DxmrQPVxjQtDnxA1BLEeM.roa
Signing time: Sun 01 Jan 2023 20:45:05 +0000
ROA not before: Sun 01 Jan 2023 20:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15752
IP address blocks: 149.177.176.0/22 maxlen: 22
149.177.180.0/22 maxlen: 22
149.177.192.0/22 maxlen: 22
149.177.212.0/22 maxlen: 22
149.177.216.0/22 maxlen: 22
149.177.224.0/21 maxlen: 21
149.177.128.0/23 maxlen: 23
149.177.130.0/23 maxlen: 23
149.177.148.0/23 maxlen: 23
149.177.150.0/23 maxlen: 23
149.177.152.0/23 maxlen: 23
149.177.154.0/23 maxlen: 23
149.177.164.0/23 maxlen: 23
149.177.166.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:b0:e9:0b:69:5e:51:0b:1c:8d:8a:5c:fe:6b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Validity
Not Before: Jan 1 20:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4c60183d0f19ab40f5718d0b439f103504b11e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:67:28:57:dd:54:e3:ee:bb:7e:f8:c8:54:e2:
8f:38:62:aa:fa:9d:bd:8c:ff:90:a4:32:ee:fc:9e:
cd:be:bc:af:b0:3a:3d:d7:7c:3c:00:27:41:cd:39:
8f:2c:f4:1f:be:81:e4:e1:53:8a:bc:e7:15:f1:ef:
f8:0a:b8:f6:da:d3:97:9d:19:46:3f:7a:f5:03:80:
c2:23:b3:e5:e6:5f:b9:eb:0b:25:e0:ac:fb:0d:7b:
34:b4:11:da:44:d7:23:41:db:f7:fc:ea:e9:a7:1b:
4c:82:2b:5d:5e:e2:15:bd:cf:22:5c:38:fd:e0:d0:
40:12:02:a7:7a:fc:b9:8a:11:68:2f:a4:0a:0f:b5:
f7:fa:40:b1:19:0f:e3:a8:10:31:c7:b8:17:b1:76:
35:46:4c:8d:da:ff:96:9d:77:1c:af:39:5d:31:33:
48:54:2b:3b:f8:f6:37:9a:2e:c8:ec:d7:92:37:f2:
a9:5c:60:01:6c:da:09:a4:d0:6a:f1:6a:a9:1c:f0:
2f:76:6e:f2:dc:80:4e:4b:82:d5:57:f1:41:42:7f:
01:30:05:db:a1:10:ec:a6:79:f5:ef:44:9d:eb:1f:
d4:91:39:c7:05:d5:cf:47:97:d0:e3:73:1c:6f:a0:
f6:e9:91:fd:5b:5a:1f:14:d6:8f:f8:dd:f5:c3:4f:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C6:01:83:D0:F1:9A:B4:0F:57:18:D0:B4:39:F1:03:50:4B:11:E3
X509v3 Authority Key Identifier:
keyid:F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/tMYBg9DxmrQPVxjQtDnxA1BLEeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.177.128.0/22
149.177.148.0-149.177.155.255
149.177.164.0/22
149.177.176.0/21
149.177.192.0/22
149.177.212.0-149.177.219.255
149.177.224.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:cb:a2:68:6b:82:5d:ec:dc:9f:35:ba:4b:b1:0f:a3:e7:45:
fc:ef:f0:1d:5b:44:cc:40:9f:f0:c4:d1:6e:ab:69:bf:b3:b8:
e9:4f:dc:3f:81:78:c8:d7:93:a9:6d:9e:24:82:80:07:c6:83:
46:e2:12:6b:8e:cb:30:f8:07:8b:63:cb:78:5c:b2:53:87:2f:
fe:cc:73:cd:dd:eb:39:b0:42:de:73:89:28:57:66:31:a2:49:
38:55:24:23:8b:4d:72:5e:38:62:b3:a5:19:84:8e:de:07:28:
29:cc:bf:d3:83:63:88:84:3f:ce:32:c3:e1:95:73:f7:1f:9e:
c7:06:92:d9:f3:11:ea:04:3c:6f:21:39:99:cf:f8:de:9e:85:
a1:cf:b7:45:69:a8:59:f6:64:ba:df:1e:9b:f8:5e:ab:35:1e:
1a:6e:76:ad:40:d4:94:52:37:16:0d:77:cf:73:fb:2d:28:dd:
a3:2b:bc:e5:dd:db:70:aa:0a:4d:f6:c0:c6:3b:be:cf:e1:65:
21:4d:1c:69:ad:9f:11:e4:58:1d:cb:80:42:7b:a5:34:fd:a1:
3e:f4:72:60:12:5f:4a:64:c1:9b:8c:6c:33:48:27:51:c8:17:
95:56:f0:52:1f:b0:60:be:53:03:a2:6f:75:ee:73:07:bc:8e:
2f:be:45:5d
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAYVvFLDpC2leUQscjYpc/msCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NDYwZDY1NTRkNTgxZWJiODBlMzllNDUwMTVjZDdkMzZk
OTNmNjYwHhcNMjMwMTAxMjA0NTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGM2MDE4M2QwZjE5YWI0MGY1NzE4ZDBiNDM5ZjEwMzUwNGIxMWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmcoV91U4+67fvjIVOKPOGKq+p29
jP+QpDLu/J7NvryvsDo913w8ACdBzTmPLPQfvoHk4VOKvOcV8e/4Crj22tOXnRlG
P3r1A4DCI7Pl5l+56wsl4Kz7DXs0tBHaRNcjQdv3/OrppxtMgitdXuIVvc8iXDj9
4NBAEgKnevy5ihFoL6QKD7X3+kCxGQ/jqBAxx7gXsXY1RkyN2v+WnXccrzldMTNI
VCs7+PY3mi7I7NeSN/KpXGABbNoJpNBq8WqpHPAvdm7y3IBOS4LVV/FBQn8BMAXb
oRDspnn170Sd6x/UkTnHBdXPR5fQ43Mcb6D26ZH9W1ofFNaP+N31w0+6uQIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFLTGAYPQ8Zq0D1cY0LQ58QNQSxHjMB8GA1UdIwQY
MBaAFPRGDWVU1YHruA455FAVzX022T9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi80NTVmNTYtMWU2Zi00NjdkLWI3MTEt
ZWJkZjM4YjAwOTVjLzEvdE1ZQmc5RHhtclFQVnhqUXREbnhBMUJMRWVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi80NTVmNTYtMWU2Zi00NjdkLWI3MTEtZWJkZjM4YjAwOTVj
LzEvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQClbGAMAwD
BAKVsZQDBAKVsZgDBAKVsaQDBAOVsbADBAKVscAwDAMEApWx1AMEApWx2AMEA5Wx
4DANBgkqhkiG9w0BAQsFAAOCAQEAq8uiaGuCXezcnzW6S7EPo+dF/O/wHVtEzECf
8MTRbqtpv7O46U/cP4F4yNeTqW2eJIKAB8aDRuISa47LMPgHi2PLeFyyU4cv/sxz
zd3rObBC3nOJKFdmMaJJOFUkI4tNcl44YrOlGYSO3gcoKcy/04NjiIQ/zjLD4ZVz
9x+exwaS2fMR6gQ8byE5mc/43p6Foc+3RWmoWfZkut8em/heqzUeGm52rUDUlFI3
Fg13z3P7LSjdoyu85d3bcKoKTfbAxju+z+FlIU0caa2fEeRYHcuAQnulNP2hPvRy
YBJfSmTBm4xsM0gnUcgXlVbwUh+wYL5TA6Jvde5zB7yOL75FXQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:55 2025 by rpki-client