Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/I3v5YI9xPnhIzFeqTGaHbqk0FJs.roa
File: I3v5YI9xPnhIzFeqTGaHbqk0FJs.roa (raw, json)
Hash identifier: wtru7+X9hEeF9D+AFniDsgLb1o1bwdluRDpa6XKUaJ4=
Subject key identifier: 23:7B:F9:60:8F:71:3E:78:48:CC:57:AA:4C:66:87:6E:A9:34:14:9B
Certificate issuer: /CN=41e42d830eca98a533f4372da169c9c792c393b2
Certificate serial: 01857246A9B2A9482F4F1B913E22CEF3D772
Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/I3v5YI9xPnhIzFeqTGaHbqk0FJs.roa
Signing time: Mon 02 Jan 2023 11:38:31 +0000
ROA not before: Mon 02 Jan 2023 11:38:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200548
IP address blocks: 185.159.120.0/22 maxlen: 24
185.159.122.0/24 maxlen: 24
185.159.123.0/24 maxlen: 24
130.0.92.0/22 maxlen: 22
185.189.221.0/24 maxlen: 24
185.189.222.0/24 maxlen: 24
185.189.223.0/24 maxlen: 24
185.189.220.0/24 maxlen: 24
185.189.220.0/22 maxlen: 22
45.87.188.0/22 maxlen: 22
45.87.189.0/24 maxlen: 24
45.87.190.0/24 maxlen: 24
45.87.191.0/24 maxlen: 24
91.230.22.0/24 maxlen: 24
192.76.138.0/24 maxlen: 24
185.174.72.0/22 maxlen: 24
2a0b:f880::/32 maxlen: 32
2a0b:f880::/29 maxlen: 29
2a0b:fb00::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:a9:b2:a9:48:2f:4f:1b:91:3e:22:ce:f3:d7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2
Validity
Not Before: Jan 2 11:38:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=237bf9608f713e7848cc57aa4c66876ea934149b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:4f:74:96:97:9d:62:78:e6:20:78:ac:66:
17:07:f5:1e:82:78:d9:f6:04:d2:05:63:82:4d:1e:
c7:ac:55:1e:b7:ce:aa:3d:49:f4:fc:32:40:1a:29:
56:4d:e2:3f:c0:b9:ff:d5:a6:9b:e3:a5:be:4b:d6:
00:01:7c:2a:e6:f5:fb:91:19:0c:75:dd:e6:95:84:
0a:d2:a0:4f:60:2f:90:1f:06:ef:b1:6b:c4:1d:e1:
78:b8:b3:b6:51:0c:19:2a:08:ee:a0:fa:35:23:16:
fa:9f:87:7f:2d:cd:d4:4b:6c:42:1c:9b:2d:88:7f:
27:f2:52:17:17:6b:21:26:b5:ea:94:55:7d:db:99:
4b:c6:66:0f:75:a2:20:a0:c6:f3:d5:c7:76:e6:29:
7a:c2:c4:29:cb:c0:21:4d:2d:9b:01:0d:da:c6:2e:
e9:bf:e8:f7:b5:75:11:17:74:17:cc:9e:d5:da:f7:
3e:bc:11:21:8e:1f:25:e5:dc:e6:19:f0:32:fc:64:
b7:f7:c5:b8:b2:b4:60:9c:af:07:2f:c6:29:a7:6e:
53:9a:39:29:55:b5:4e:cf:2b:d5:b7:e6:21:e4:2e:
0c:a7:46:5e:28:da:61:05:0e:18:87:c3:74:42:91:
a3:a5:ce:ae:ac:25:16:56:49:26:d0:e5:9f:2a:83:
9a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7B:F9:60:8F:71:3E:78:48:CC:57:AA:4C:66:87:6E:A9:34:14:9B
X509v3 Authority Key Identifier:
keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/I3v5YI9xPnhIzFeqTGaHbqk0FJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.188.0/22
91.230.22.0/24
130.0.92.0/22
185.159.120.0/22
185.174.72.0/22
185.189.220.0/22
192.76.138.0/24
IPv6:
2a0b:f880::/29
2a0b:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
14:ec:25:bd:fe:c1:a0:64:55:b8:62:95:db:13:52:d6:83:50:
11:ff:b1:2b:4a:0d:83:2f:16:28:05:eb:6d:7a:6c:2e:4f:ce:
d1:73:af:6e:a1:55:a6:a3:bd:06:2f:5c:0e:33:ae:30:a3:c5:
3a:57:d2:22:18:30:47:7c:89:a0:66:d7:5c:96:41:12:45:b7:
5f:bb:43:10:e2:3d:7d:eb:04:31:c8:3d:28:72:75:0f:5a:ea:
98:74:ac:18:b8:ab:32:8d:b9:9f:58:03:14:b4:96:73:81:d9:
60:95:0f:3d:2f:b7:70:e6:50:f1:c8:da:a8:37:f5:d6:40:6d:
84:82:38:b0:70:50:c8:6f:96:fc:ea:d4:58:ba:c8:ed:79:c8:
c9:d5:e8:97:7e:d4:60:0b:22:39:2a:e5:c7:da:44:7e:05:89:
4e:1c:83:16:c2:6d:6f:d1:65:a0:b2:38:fa:ec:db:fc:63:c7:
fd:4e:0e:51:f6:2d:23:24:48:d9:04:e8:6e:8e:15:7a:49:ac:
d6:04:0a:1e:9f:1e:4f:a7:eb:45:1f:27:64:56:04:e5:5d:c6:
53:5a:dd:04:67:2d:30:41:97:a6:ce:27:56:ab:ab:ae:76:b1:
ff:6e:1a:18:eb:29:8f:f1:96:6a:3a:ba:62:4a:d6:1c:9b:69:
fa:c1:fb:4e
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAYVyRqmyqUgvTxuRPiLO89dyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZTQyZDgzMGVjYTk4YTUzM2Y0MzcyZGExNjljOWM3OTJj
MzkzYjIwHhcNMjMwMTAyMTEzODMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzdiZjk2MDhmNzEzZTc4NDhjYzU3YWE0YzY2ODc2ZWE5MzQxNDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+VPdJaXnWJ45iB4rGYXB/UegnjZ
9gTSBWOCTR7HrFUet86qPUn0/DJAGilWTeI/wLn/1aab46W+S9YAAXwq5vX7kRkM
dd3mlYQK0qBPYC+QHwbvsWvEHeF4uLO2UQwZKgjuoPo1Ixb6n4d/Lc3US2xCHJst
iH8n8lIXF2shJrXqlFV925lLxmYPdaIgoMbz1cd25il6wsQpy8AhTS2bAQ3axi7p
v+j3tXURF3QXzJ7V2vc+vBEhjh8l5dzmGfAy/GS398W4srRgnK8HL8Ypp25Tmjkp
VbVOzyvVt+Yh5C4Mp0ZeKNphBQ4Yh8N0QpGjpc6urCUWVkkm0OWfKoOaVwIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFCN7+WCPcT54SMxXqkxmh26pNBSbMB8GA1UdIwQY
MBaAFEHkLYMOypilM/Q3LaFpyceSw5OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMt
MWFkNjFlZGUwYTRhLzEvSTN2NVlJOXhQbmhJekZlcVRHYUhicWswRkpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMtMWFkNjFlZGUwYTRh
LzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQCLVe8AwQA
W+YWAwQCggBcAwQCuZ94AwQCua5IAwQCub3cAwQAwEyKMBQEAgACMA4DBQMqC/iA
AwUDKgv7ADANBgkqhkiG9w0BAQsFAAOCAQEAFOwlvf7BoGRVuGKV2xNS1oNQEf+x
K0oNgy8WKAXrbXpsLk/O0XOvbqFVpqO9Bi9cDjOuMKPFOlfSIhgwR3yJoGbXXJZB
EkW3X7tDEOI9fesEMcg9KHJ1D1rqmHSsGLirMo25n1gDFLSWc4HZYJUPPS+3cOZQ
8cjaqDf11kBthII4sHBQyG+W/OrUWLrI7XnIydXol37UYAsiOSrlx9pEfgWJThyD
FsJtb9FloLI4+uzb/GPH/U4OUfYtIyRI2QTobo4Vekms1gQKHp8eT6frRR8nZFYE
5V3GU1rdBGctMEGXps4nVqurrnax/24aGOspj/GWajq6YkrWHJtp+sH7Tg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:25 2025 by rpki-client