Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/m2GejPDBJHFw3KOoDgGWbI0gEII.roa
File: m2GejPDBJHFw3KOoDgGWbI0gEII.roa (raw, json)
Hash identifier: f2MApVtE3BTfqa024I7OHE4Uc/sk+S5twLSNzicIxSk=
Subject key identifier: 9B:61:9E:8C:F0:C1:24:71:70:DC:A3:A8:0E:01:96:6C:8D:20:10:82
Certificate issuer: /CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Certificate serial: 0182A0ED2FB2F4057AA1B6064F019EB001C1
Authority key identifier: 7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/m2GejPDBJHFw3KOoDgGWbI0gEII.roa
Signing time: Mon 15 Aug 2022 09:54:34 +0000
ROA not before: Mon 15 Aug 2022 09:54:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203067
IP address blocks: 185.145.49.0/24 maxlen: 24
185.145.50.0/24 maxlen: 24
185.145.51.0/24 maxlen: 24
185.145.48.0/24 maxlen: 24
46.175.48.0/22 maxlen: 22
46.175.54.0/24 maxlen: 24
46.175.52.0/24 maxlen: 24
46.175.55.0/24 maxlen: 24
46.175.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a0:ed:2f:b2:f4:05:7a:a1:b6:06:4f:01:9e:b0:01:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Validity
Not Before: Aug 15 09:54:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b619e8cf0c1247170dca3a80e01966c8d201082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:05:e3:0f:2c:d4:ed:c8:40:6b:ae:4c:6a:5a:
b5:22:8d:01:64:b8:f2:f4:7a:d4:a3:e5:72:81:91:
6c:d2:4b:d7:74:d0:93:f7:70:7b:2e:3c:8e:60:9d:
73:10:3b:78:6e:bd:48:87:3c:b0:28:54:f5:1c:da:
76:94:93:40:6f:90:c2:cc:5b:37:e8:e5:67:4d:6f:
f5:88:45:4c:1e:3d:b5:3a:bd:b8:49:df:38:87:a4:
fc:e2:52:c3:c7:b7:19:5e:bc:a8:b6:17:d0:00:46:
c6:c4:11:67:90:77:0f:d7:00:96:50:96:93:dd:a0:
37:fa:0a:ee:6b:11:9b:de:0a:1e:0c:10:51:91:a3:
d6:71:e2:ce:14:f2:4b:e1:74:e9:b2:77:1d:3e:ec:
75:b6:a2:75:e0:a5:05:e7:ee:53:5d:4e:32:32:d3:
31:85:5c:59:5f:5a:b6:63:9d:04:de:64:04:ef:b2:
74:a5:24:58:b7:37:09:29:9d:54:43:1f:5f:a9:a8:
f3:e4:ae:ad:36:f7:74:e1:b7:9f:ab:8e:23:69:bc:
ff:33:4b:23:ea:67:58:e0:e8:8f:18:61:4a:87:f2:
cd:36:b8:bb:eb:9f:bd:24:10:9b:eb:44:22:f2:bc:
8c:52:fb:cf:b8:b5:c4:4a:c4:8c:17:0e:76:df:49:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:61:9E:8C:F0:C1:24:71:70:DC:A3:A8:0E:01:96:6C:8D:20:10:82
X509v3 Authority Key Identifier:
keyid:7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/m2GejPDBJHFw3KOoDgGWbI0gEII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.48.0/21
185.145.48.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:17:d5:ce:80:d7:aa:ee:b4:03:11:9d:f4:d4:dd:25:08:c9:
ff:0d:6f:c1:a4:9b:d5:3c:48:5e:68:12:cb:01:50:2a:10:51:
9e:ad:16:58:20:ba:a9:17:e0:88:05:fc:69:37:27:a1:63:10:
3c:ad:f1:9d:21:be:93:e7:8f:e6:a0:f5:8a:a2:9a:bc:97:b6:
90:2c:73:8f:a3:7a:6c:2e:1f:0f:6a:75:b0:a8:ea:94:f2:6c:
89:fe:e4:08:4e:d2:40:d6:4d:1b:ca:e3:ab:81:c3:36:8c:a3:
00:88:85:5b:bb:ec:99:36:fd:2e:7b:e9:04:13:7e:f3:95:b2:
d6:92:c0:c3:8b:d8:9a:b5:b8:a6:0e:dd:45:8a:89:3f:57:a5:
0e:f2:75:99:6c:ea:c0:d0:6d:47:d6:ee:3b:28:a2:80:20:05:
4c:d4:86:8e:40:00:aa:c2:85:56:c6:fc:62:b7:d5:c2:48:2f:
a0:4e:7a:28:84:a2:f5:4b:fb:1e:30:8a:05:2e:0c:ce:31:9a:
b4:14:09:eb:ca:4a:62:f4:40:86:a5:fa:0d:ba:67:16:3f:ef:
a2:46:90:9c:ff:06:f3:ce:ec:f7:9a:3d:bd:ac:eb:12:d6:f2:
bc:6e:54:e6:77:3f:97:72:7e:65:d7:1d:a2:75:19:f6:ba:06:
d2:f1:e5:6c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYKg7S+y9AV6obYGTwGesAHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMzYyZDc4MzI4NDY1OWRjMDRlZWRhZjhiOGE2ZmU2ZTkz
MGJkMjcwHhcNMjIwODE1MDk1NDM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjYxOWU4Y2YwYzEyNDcxNzBkY2EzYTgwZTAxOTY2YzhkMjAxMDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQXjDyzU7chAa65Malq1Io0BZLjy
9HrUo+VygZFs0kvXdNCT93B7LjyOYJ1zEDt4br1IhzywKFT1HNp2lJNAb5DCzFs3
6OVnTW/1iEVMHj21Or24Sd84h6T84lLDx7cZXryothfQAEbGxBFnkHcP1wCWUJaT
3aA3+gruaxGb3goeDBBRkaPWceLOFPJL4XTpsncdPux1tqJ14KUF5+5TXU4yMtMx
hVxZX1q2Y50E3mQE77J0pSRYtzcJKZ1UQx9fqajz5K6tNvd04befq44jabz/M0sj
6mdY4OiPGGFKh/LNNri765+9JBCb60Qi8ryMUvvPuLXESsSMFw5230ncoQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJthnozwwSRxcNyjqA4BlmyNIBCCMB8GA1UdIwQY
MBaAFHo2LXgyhGWdwE7tr4uKb+bpML0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWpZdGVES0VaWjNBVHUydmk0cHY1dWt3dlNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iZTY4YjktOWI2Mi00YjNlLWE2YTQt
ODY1MDMxZmEwYmY3LzEvbTJHZWpQREJKSEZ3M0tPb0RnR1diSTBnRUlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9iZTY4YjktOWI2Mi00YjNlLWE2YTQtODY1MDMxZmEwYmY3
LzEvZWpZdGVES0VaWjNBVHUydmk0cHY1dWt3dlNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLq8wAwQC
uZEwMA0GCSqGSIb3DQEBCwUAA4IBAQBdF9XOgNeq7rQDEZ301N0lCMn/DW/BpJvV
PEheaBLLAVAqEFGerRZYILqpF+CIBfxpNyehYxA8rfGdIb6T54/moPWKopq8l7aQ
LHOPo3psLh8PanWwqOqU8myJ/uQITtJA1k0byuOrgcM2jKMAiIVbu+yZNv0ue+kE
E37zlbLWksDDi9iatbimDt1Fiok/V6UO8nWZbOrA0G1H1u47KKKAIAVM1IaOQACq
woVWxvxit9XCSC+gTnoohKL1S/seMIoFLgzOMZq0FAnrykpi9ECGpfoNumcWP++i
RpCc/wbzzuz3mj29rOsS1vK8blTmdz+Xcn5l1x2idRn2ugbS8eVs
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:52 2024 by rpki-client on console-fra.rpki-client.org