Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/mLfDpA0aimr1sgC-Jv-Txpr4Cp4.roa
File: mLfDpA0aimr1sgC-Jv-Txpr4Cp4.roa (raw, json)
Hash identifier: SE8W/2Q7WABOBnnX/6EG31HlPDB6ynTfyO1uzk6J0is=
Subject key identifier: 98:B7:C3:A4:0D:1A:8A:6A:F5:B2:00:BE:26:FF:93:C6:9A:F8:0A:9E
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 095A5E02
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/mLfDpA0aimr1sgC-Jv-Txpr4Cp4.roa
Signing time: Tue 17 May 2022 08:10:29 +0000
ROA not before: Tue 17 May 2022 08:10:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209420
IP address blocks: 192.145.17.0/24 maxlen: 24
192.145.16.0/23 maxlen: 23
192.145.16.0/24 maxlen: 24
192.145.18.0/24 maxlen: 24
152.89.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156917250 (0x95a5e02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: May 17 08:10:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98b7c3a40d1a8a6af5b200be26ff93c69af80a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0c:96:cb:a4:f4:21:07:af:5f:ce:8a:7b:01:
b4:cf:82:3b:ed:df:2e:40:75:e1:b4:15:15:61:40:
2a:4b:f0:20:d0:01:9a:f5:7b:41:ad:64:c2:e8:b0:
00:00:64:7c:cd:07:fd:d6:34:2b:a1:21:27:8c:be:
76:c1:bd:90:c9:cd:92:71:dd:df:8a:11:94:6f:29:
e5:0f:92:ef:2b:cd:50:54:86:37:8d:97:fc:6a:f2:
ae:a6:2d:1b:09:44:a5:bb:96:d0:36:bc:68:98:07:
32:01:43:fa:a2:4c:0d:36:ab:83:69:fd:38:44:c3:
b6:31:be:8d:ee:14:5f:b0:e9:cc:fc:38:b8:1a:fb:
3b:d1:76:f3:67:55:59:a2:56:38:5c:9d:54:a2:12:
38:c3:26:96:dc:d6:12:e7:c9:bb:51:2e:21:24:4b:
b8:c4:8f:c4:54:f8:b5:a2:ef:9f:53:db:1d:12:34:
b8:6b:5b:1e:ec:b6:25:2e:9a:12:5f:0d:ea:7d:80:
30:5e:82:b9:33:43:29:23:a0:ae:55:76:42:ea:8d:
af:d3:31:4d:07:c5:97:75:8f:54:f3:06:21:72:d8:
b7:19:dc:8f:08:e5:a6:f5:3d:d5:6d:36:2b:64:03:
f6:9b:09:a4:78:4e:b7:12:17:22:a3:d4:c3:45:89:
b0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B7:C3:A4:0D:1A:8A:6A:F5:B2:00:BE:26:FF:93:C6:9A:F8:0A:9E
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/mLfDpA0aimr1sgC-Jv-Txpr4Cp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.133.0/24
192.145.16.0-192.145.18.255
Signature Algorithm: sha256WithRSAEncryption
50:d7:cf:0e:0f:e3:b8:9b:37:7e:c8:39:a8:23:3c:60:90:4c:
0a:f2:3b:43:8d:f9:2f:ae:bc:99:fe:0c:25:b5:e0:9a:df:f9:
73:cc:e8:6c:36:05:ca:bd:91:2c:0b:5a:27:a4:c6:12:34:33:
e7:a7:62:d1:e4:da:47:7e:1e:e1:01:af:3d:47:68:eb:43:cc:
47:eb:ff:6d:01:ca:ea:ee:ec:b2:7c:45:df:f6:f4:35:d6:7b:
6c:45:f0:bc:12:de:d3:e1:7d:02:35:88:f8:59:3c:a1:b6:b0:
92:9f:13:1f:df:85:6f:3f:10:68:41:b4:70:32:58:29:95:ae:
1c:85:c7:8c:07:98:be:a8:36:2f:5e:ba:93:93:6f:f5:45:6a:
ef:e6:f3:48:1d:3c:d0:df:eb:41:94:d4:b3:24:c1:14:08:63:
33:9b:6d:f6:ba:b2:f0:c9:31:ea:6e:08:84:e1:83:15:f1:d4:
b3:5b:08:a0:dd:13:8f:b1:83:32:3c:7d:2e:5c:dc:c3:4c:3e:
a2:af:dc:57:b2:db:e1:cd:5c:ee:c8:00:01:3b:b9:e0:72:cf:
f8:6a:7d:af:da:3c:a2:2c:52:aa:42:35:57:82:89:d5:e0:05:
fb:50:29:69:e3:d4:ae:be:da:72:60:1b:2c:4e:02:4a:d9:ab:
da:fd:9c:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIECVpeAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NzI1ODhjMDBlZWY3MTU4MDllYjVmZGQ2ZDY3MTdjYzI4YzBkZmFjMB4XDTIyMDUx
NzA4MTAyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOThiN2MzYTQwZDFh
OGE2YWY1YjIwMGJlMjZmZjkzYzY5YWY4MGE5ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANkMlsuk9CEHr1/OinsBtM+CO+3fLkB14bQVFWFAKkvwINAB
mvV7Qa1kwuiwAABkfM0H/dY0K6EhJ4y+dsG9kMnNknHd34oRlG8p5Q+S7yvNUFSG
N42X/GryrqYtGwlEpbuW0Da8aJgHMgFD+qJMDTarg2n9OETDtjG+je4UX7DpzPw4
uBr7O9F282dVWaJWOFydVKISOMMmltzWEufJu1EuISRLuMSPxFT4taLvn1PbHRI0
uGtbHuy2JS6aEl8N6n2AMF6CuTNDKSOgrlV2QuqNr9MxTQfFl3WPVPMGIXLYtxnc
jwjlpvU91W02K2QD9psJpHhOtxIXIqPUw0WJsBsCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBSYt8OkDRqKavWyAL4m/5PGmvgKnjAfBgNVHSMEGDAWgBS3JYjADu9xWAnr
X91tZxfMKMDfrDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3R5V0l3QTd2Y1ZnSjYxX2RiV2NYekNqQTM2dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjgvZWJiYWM5LWZlZTctNGYzYi04Y2Q1LTdhNDEyNTRlYWFjYS8x
L21MZkRwQTBhaW1yMXNnQy1Kdi1UeHByNENwNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgv
ZWJiYWM5LWZlZTctNGYzYi04Y2Q1LTdhNDEyNTRlYWFjYS8xL3R5V0l3QTd2Y1Zn
SjYxX2RiV2NYekNqQTM2dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAJhZhTAMAwQEwJEQAwQAwJESMA0G
CSqGSIb3DQEBCwUAA4IBAQBQ188OD+O4mzd+yDmoIzxgkEwK8jtDjfkvrryZ/gwl
teCa3/lzzOhsNgXKvZEsC1onpMYSNDPnp2LR5NpHfh7hAa89R2jrQ8xH6/9tAcrq
7uyyfEXf9vQ11ntsRfC8Et7T4X0CNYj4WTyhtrCSnxMf34VvPxBoQbRwMlgpla4c
hceMB5i+qDYvXrqTk2/1RWrv5vNIHTzQ3+tBlNSzJMEUCGMzm232urLwyTHqbgiE
4YMV8dSzWwig3ROPsYMyPH0uXNzDTD6ir9xXstvhzVzuyAABO7ngcs/4an2v2jyi
LFKqQjVXgonV4AX7UClp49SuvtpyYBssTgJK2ava/Zw+
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:24 2023 by rpki-client on console-ams.rpki-client.org