Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/xVA1YWJBL-HouGBybIMb6p2thQ8.roa
File: xVA1YWJBL-HouGBybIMb6p2thQ8.roa (raw, json)
Hash identifier: nGFQnBmAzKT0wlM41552A53KHs2iwub47dx1QxJ9Xcw=
Subject key identifier: C5:50:35:61:62:41:2F:E1:E8:B8:60:72:6C:83:1B:EA:9D:AD:85:0F
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 3BCBF8
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/xVA1YWJBL-HouGBybIMb6p2thQ8.roa
Signing time: Sat 01 Jan 2022 00:56:05 +0000
ROA not before: Sat 01 Jan 2022 00:56:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.150.175.0/24 maxlen: 24
45.139.196.0/22 maxlen: 24
95.214.180.0/22 maxlen: 24
193.239.196.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3918840 (0x3bcbf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 1 00:56:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c550356162412fe1e8b860726c831bea9dad850f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4e:32:d9:c9:7e:c8:c0:f0:c1:70:98:94:88:
b9:e3:9a:09:6f:eb:ba:ac:57:72:42:30:7c:73:cd:
a7:6f:61:c9:f9:7f:0a:c6:25:e0:79:96:9f:8f:c8:
9a:7d:6e:22:a6:da:d1:68:3c:98:d1:d6:d1:24:50:
d5:d4:e8:e2:f3:08:f6:0e:eb:9f:ba:ec:98:7c:0f:
eb:93:7c:b4:f0:b9:fd:4e:41:87:18:f7:d0:63:14:
95:f4:85:30:d4:13:0e:21:97:b0:1e:02:d4:3d:c7:
86:be:0d:55:c8:e6:ba:25:11:c3:d1:a6:e6:74:70:
6c:51:d1:1e:30:88:1b:95:da:98:f3:9f:f5:92:fa:
99:e0:1a:4e:c1:82:04:5b:0c:ba:d8:58:34:4d:5f:
16:37:6d:ea:e8:9d:ea:e0:48:63:c7:5f:97:2e:72:
45:5e:41:66:3e:83:d0:ac:f3:48:a4:e2:58:76:da:
60:10:cc:b1:55:f1:35:b5:d9:9b:85:99:49:de:9d:
63:94:06:e1:d1:05:14:45:b0:a5:11:50:da:2e:95:
c2:43:99:14:4a:55:a3:e1:7b:0d:47:86:75:f9:4a:
a3:99:ec:8e:28:64:34:79:f9:e4:22:a1:a4:a1:43:
b0:e9:2f:c1:cd:0e:89:d4:6e:8a:dc:d8:aa:6b:61:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:50:35:61:62:41:2F:E1:E8:B8:60:72:6C:83:1B:EA:9D:AD:85:0F
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/xVA1YWJBL-HouGBybIMb6p2thQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.196.0/22
45.150.175.0/24
95.214.180.0/22
193.239.196.0/23
Signature Algorithm: sha256WithRSAEncryption
99:f8:ae:4c:05:fc:4c:10:88:f0:9e:1a:e0:91:88:6e:fa:4e:
42:b6:c3:f5:8e:d5:1e:e1:d1:c2:a6:b3:cf:3d:bf:86:a9:68:
5d:50:e8:17:a6:ff:92:ca:10:61:bb:1e:c6:5b:77:95:68:34:
e2:95:ea:58:ce:5e:d2:a4:9a:d0:8c:72:1d:b9:3d:70:af:32:
34:19:fc:13:ab:a1:02:f6:d3:f2:98:15:16:2e:92:2e:92:d2:
7c:b5:93:c6:88:05:0a:97:1d:a0:1b:e4:d7:59:34:f9:b7:b9:
37:e3:79:03:d7:4c:fe:ff:72:4e:e3:41:b4:5c:b6:be:b1:6e:
ce:a3:a0:5b:2b:dc:12:0e:b9:27:95:44:84:e3:0f:c1:86:93:
3d:0a:ab:55:20:f2:0f:cf:9e:73:5f:5c:1a:6d:2f:0b:ff:51:
25:fa:8a:21:cc:07:46:69:bc:ca:07:fc:31:49:11:74:bb:e2:
f4:a4:2b:e3:de:15:22:45:d2:0e:54:77:2a:a8:8a:66:b5:97:
f7:66:55:88:68:50:b8:4e:6d:1b:04:d6:62:16:41:b4:6b:fc:
37:28:46:aa:ed:07:0a:2a:40:c5:65:e7:a4:70:26:a0:cc:5c:
60:7d:42:ab:49:94:70:ed:0d:c5:4c:a5:1e:52:ac:19:0d:80:
27:a7:ae:dd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIDO8v4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI4
MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNlNWZjNmQwHhcNMjIwMTAx
MDA1NjA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjNTUwMzU2MTYyNDEy
ZmUxZThiODYwNzI2YzgzMWJlYTlkYWQ4NTBmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2U4y2cl+yMDwwXCYlIi545oJb+u6rFdyQjB8c82nb2HJ+X8K
xiXgeZafj8iafW4iptrRaDyY0dbRJFDV1Oji8wj2DuufuuyYfA/rk3y08Ln9TkGH
GPfQYxSV9IUw1BMOIZewHgLUPceGvg1VyOa6JRHD0abmdHBsUdEeMIgbldqY85/1
kvqZ4BpOwYIEWwy62Fg0TV8WN23q6J3q4Ehjx1+XLnJFXkFmPoPQrPNIpOJYdtpg
EMyxVfE1tdmbhZlJ3p1jlAbh0QUURbClEVDaLpXCQ5kUSlWj4XsNR4Z1+UqjmeyO
KGQ0efnkIqGkoUOw6S/BzQ6J1G6K3Niqa2GKiQIDAQABo4ICGzCCAhcwHQYDVR0O
BBYEFMVQNWFiQS/h6LhgcmyDG+qdrYUPMB8GA1UdIwQYMBaAFCgQeraSHvjLLeyj
63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
S0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBlLzEv
eFZBMVlXSkJMLUhvdUdCeWJJTWI2cDJ0aFE4LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8w
ODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBlLzEvS0JCNnRwSWUtTXN0
N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG
CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLYvEAwQALZavAwQCX9a0AwQBwe/E
MA0GCSqGSIb3DQEBCwUAA4IBAQCZ+K5MBfxMEIjwnhrgkYhu+k5CtsP1jtUe4dHC
prPPPb+GqWhdUOgXpv+SyhBhux7GW3eVaDTilepYzl7SpJrQjHIduT1wrzI0GfwT
q6EC9tPymBUWLpIuktJ8tZPGiAUKlx2gG+TXWTT5t7k343kD10z+/3JO40G0XLa+
sW7Oo6BbK9wSDrknlUSE4w/BhpM9CqtVIPIPz55zX1wabS8L/1El+oohzAdGabzK
B/wxSRF0u+L0pCvj3hUiRdIOVHcqqIpmtZf3ZlWIaFC4Tm0bBNZiFkG0a/w3KEaq
7QcKKkDFZeekcCagzFxgfUKrSZRw7Q3FTKUeUqwZDYAnp67d
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:15 2023 by rpki-client on console-ams.rpki-client.org