Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/hV8GpObN8GpXPDrJx75J9kR3zVk.roa
File: hV8GpObN8GpXPDrJx75J9kR3zVk.roa (raw, json)
Hash identifier: ENAdTrSmXqaYb3E2BWwWNPrsco7t9jdogd06dxK+gT8=
Subject key identifier: 85:5F:06:A4:E6:CD:F0:6A:57:3C:3A:C9:C7:BE:49:F6:44:77:CD:59
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 01845221FCB3C711E3382ECAC54DAA86D34B
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/hV8GpObN8GpXPDrJx75J9kR3zVk.roa
Signing time: Mon 07 Nov 2022 12:47:49 +0000
ROA not before: Mon 07 Nov 2022 12:47:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30938
IP address blocks: 45.12.216.0/24 maxlen: 24
45.12.217.0/24 maxlen: 24
45.12.219.0/24 maxlen: 24
45.12.218.0/24 maxlen: 24
5.39.251.0/24 maxlen: 24
5.39.252.0/24 maxlen: 24
5.39.249.0/24 maxlen: 24
5.39.250.0/24 maxlen: 24
5.39.248.0/24 maxlen: 24
5.39.253.0/24 maxlen: 24
185.5.36.0/22 maxlen: 22
31.192.240.0/21 maxlen: 21
5.178.96.0/21 maxlen: 21
5.144.176.0/21 maxlen: 21
5.178.104.0/21 maxlen: 21
5.144.182.0/24 maxlen: 24
5.39.254.0/24 maxlen: 24
5.39.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:52:21:fc:b3:c7:11:e3:38:2e:ca:c5:4d:aa:86:d3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Nov 7 12:47:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=855f06a4e6cdf06a573c3ac9c7be49f64477cd59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2c:88:69:44:be:6b:32:4a:40:d6:f6:e2:45:
fb:60:58:c5:ea:83:8c:5b:68:a7:fc:29:23:50:c8:
fe:65:a5:73:86:ae:3e:0f:c2:43:fd:6a:e0:d0:82:
d5:d9:ac:36:72:13:d7:68:10:2e:00:21:c3:14:0b:
c5:0c:cb:5b:07:bc:2a:6c:9c:71:d5:3d:10:95:55:
83:0c:df:f7:c8:80:6d:65:f6:36:91:25:05:c9:62:
30:d0:4d:9b:08:f5:dd:e5:53:e4:c0:c6:05:ca:c8:
40:e9:0b:9a:49:8c:65:b7:2d:4e:90:4d:41:f4:4e:
97:68:1a:40:74:cb:c8:1a:a1:dc:a5:ae:f7:40:db:
d1:eb:14:93:09:e7:15:21:a3:59:14:8f:41:9b:b1:
0a:ce:39:96:2b:29:e4:c0:fd:1a:88:14:08:6d:52:
03:f2:e2:04:a9:32:8c:81:e8:9c:9b:2b:50:8b:aa:
c1:e9:3b:bb:45:43:06:ca:a0:92:36:8d:3c:11:01:
67:98:de:76:2e:ee:c5:de:26:65:1e:e8:bc:0a:71:
1b:da:23:59:51:96:09:2e:0d:0b:c7:a3:b6:f0:b6:
ad:8e:22:ab:a7:46:3d:03:ec:45:66:f2:f5:4d:c3:
fc:fb:5b:57:b5:a6:c4:74:d3:0e:a7:22:32:20:fe:
f5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5F:06:A4:E6:CD:F0:6A:57:3C:3A:C9:C7:BE:49:F6:44:77:CD:59
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/hV8GpObN8GpXPDrJx75J9kR3zVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.248.0/21
5.144.176.0/21
5.178.96.0/20
31.192.240.0/21
45.12.216.0/22
185.5.36.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:e1:51:61:c7:ab:56:3c:9f:bc:a0:c9:a7:9c:6c:09:8b:5d:
d6:cc:2c:1f:55:2e:0d:c2:bb:db:4c:d2:70:5c:70:40:cc:21:
ae:71:90:05:2c:4d:f4:82:64:d8:fc:19:2c:55:5b:4f:76:41:
33:97:d0:9e:1d:4d:5a:a6:d1:64:6c:0d:d1:08:33:b6:3a:a0:
14:46:14:10:f5:c7:37:45:18:9e:12:c4:64:86:d9:bc:10:41:
0b:bb:6c:32:48:c4:a5:9d:2c:e2:cb:76:a1:03:20:a4:60:47:
3e:17:fc:20:41:04:87:c4:54:a0:57:d5:b5:53:f1:2d:f0:d1:
59:22:7f:e2:af:7b:09:54:6c:ee:f3:c5:60:97:c5:ee:7c:fb:
2f:c2:51:92:e0:46:86:fb:09:07:18:60:b1:ce:3c:09:cf:f5:
2c:22:df:2d:7d:57:e2:01:f4:6c:e8:66:6a:e4:b6:33:67:50:
01:40:80:7a:1a:fa:dc:70:3c:0b:96:5f:90:33:c9:ba:28:62:
e6:95:4a:2c:41:58:b5:ab:31:3a:af:6b:32:f4:48:ab:3e:1f:
d3:35:b5:0f:0b:e0:bd:90:8b:01:74:2f:89:0d:0e:68:0c:72:
ef:ab:b4:04:59:99:d6:06:0e:c0:ba:0d:70:73:d5:10:b2:fc:
0a:a6:7b:4d
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYRSIfyzxxHjOC7KxU2qhtNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5
M2U0NmIwHhcNMjIxMTA3MTI0NzQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTVmMDZhNGU2Y2RmMDZhNTczYzNhYzljN2JlNDlmNjQ0NzdjZDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yyIaUS+azJKQNb24kX7YFjF6oOM
W2in/CkjUMj+ZaVzhq4+D8JD/Wrg0ILV2aw2chPXaBAuACHDFAvFDMtbB7wqbJxx
1T0QlVWDDN/3yIBtZfY2kSUFyWIw0E2bCPXd5VPkwMYFyshA6QuaSYxlty1OkE1B
9E6XaBpAdMvIGqHcpa73QNvR6xSTCecVIaNZFI9Bm7EKzjmWKynkwP0aiBQIbVID
8uIEqTKMgeicmytQi6rB6Tu7RUMGyqCSNo08EQFnmN52Lu7F3iZlHui8CnEb2iNZ
UZYJLg0Lx6O28LatjiKrp0Y9A+xFZvL1TcP8+1tXtabEdNMOpyIyIP71zQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFIVfBqTmzfBqVzw6yce+SfZEd81ZMB8GA1UdIwQY
MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt
Y2Q2MTUyMjYxYzZmLzEvaFY4R3BPYk44R3BYUERySng3NUo5a1IzelZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm
LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDBSf4AwQD
BZCwAwQEBbJgAwQDH8DwAwQCLQzYAwQCuQUkMA0GCSqGSIb3DQEBCwUAA4IBAQAP
4VFhx6tWPJ+8oMmnnGwJi13WzCwfVS4NwrvbTNJwXHBAzCGucZAFLE30gmTY/Bks
VVtPdkEzl9CeHU1aptFkbA3RCDO2OqAURhQQ9cc3RRieEsRkhtm8EEELu2wySMSl
nSziy3ahAyCkYEc+F/wgQQSHxFSgV9W1U/Et8NFZIn/ir3sJVGzu88Vgl8XufPsv
wlGS4EaG+wkHGGCxzjwJz/UsIt8tfVfiAfRs6GZq5LYzZ1ABQIB6GvrccDwLll+Q
M8m6KGLmlUosQVi1qzE6r2sy9EirPh/TNbUPC+C9kIsBdC+JDQ5oDHLvq7QEWZnW
Bg7Aug1wc9UQsvwKpntN
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:33 2023 by rpki-client on console-ams.rpki-client.org