Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/0FJYGDOO3BJrvrO4bHPM1Mhsat0.roa
File: 0FJYGDOO3BJrvrO4bHPM1Mhsat0.roa (raw, json)
Hash identifier: Jv1GQVljNpBVdaPFP6v5HhaYOeCdqO/b2Aj2dmQ41T8=
Subject key identifier: D0:52:58:18:33:8E:DC:12:6B:BE:B3:B8:6C:73:CC:D4:C8:6C:6A:DD
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 1565FD56
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/0FJYGDOO3BJrvrO4bHPM1Mhsat0.roa
Signing time: Wed 15 Jun 2022 18:17:46 +0000
ROA not before: Wed 15 Jun 2022 18:17:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 194.50.206.0/23 maxlen: 23
194.50.200.0/23 maxlen: 23
195.138.96.0/19 maxlen: 24
45.140.32.0/22 maxlen: 22
212.90.116.0/22 maxlen: 22
194.242.22.0/23 maxlen: 23
45.151.196.0/22 maxlen: 22
194.180.238.0/24 maxlen: 24
91.242.105.0/24 maxlen: 24
91.242.100.0/23 maxlen: 23
91.242.108.0/22 maxlen: 22
91.242.120.0/21 maxlen: 21
45.143.252.0/22 maxlen: 22
45.150.180.0/22 maxlen: 22
185.173.244.0/22 maxlen: 24
185.145.80.0/22 maxlen: 22
62.182.100.0/23 maxlen: 23
91.242.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359005526 (0x1565fd56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jun 15 18:17:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0525818338edc126bbeb3b86c73ccd4c86c6add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:33:77:cf:74:2a:ab:a1:11:af:d9:b1:2f:
81:21:cb:b3:44:5b:cb:8d:a5:fc:97:1e:cf:15:b9:
78:68:32:01:af:88:89:e2:3e:fb:61:ff:7d:98:41:
f1:0d:66:9a:31:9d:6c:ae:e3:f6:98:23:ce:98:22:
ce:e3:65:b4:00:ca:83:b7:bb:e2:18:50:34:da:f5:
c9:f0:21:27:1f:04:0f:71:ef:57:07:86:63:ae:3f:
af:0e:9b:cd:46:51:ef:89:52:9b:2d:d7:d2:f0:c2:
b7:b8:a5:e1:8f:70:d3:c3:d1:bb:ad:6c:85:9f:b1:
43:2f:47:31:99:48:50:a2:20:35:1d:4f:8d:79:43:
74:0f:1d:8f:ee:d5:d7:a1:6d:3c:80:60:97:d5:b6:
b5:b1:25:f9:b9:0f:69:98:05:31:47:72:fb:73:d7:
e4:c2:6d:2c:cb:11:8d:90:a6:53:35:c5:82:cb:e0:
a5:96:c7:2f:8f:59:bc:1e:e1:cc:8b:01:85:7f:ee:
35:2e:41:ce:04:70:d9:eb:50:49:ee:43:6c:ae:7c:
2b:8e:60:1d:22:9e:d1:74:9b:ba:30:05:34:7d:a8:
79:1a:57:46:5f:62:99:ed:68:00:bb:e6:93:ff:da:
45:c3:23:41:05:1e:0a:06:3f:05:59:1f:c2:53:b0:
9a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:52:58:18:33:8E:DC:12:6B:BE:B3:B8:6C:73:CC:D4:C8:6C:6A:DD
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/0FJYGDOO3BJrvrO4bHPM1Mhsat0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.32.0/22
45.143.252.0/22
45.150.180.0/22
45.151.196.0/22
62.182.100.0/23
91.242.64.0/22
91.242.100.0/23
91.242.105.0/24
91.242.108.0/22
91.242.120.0/21
185.145.80.0/22
185.173.244.0/22
194.50.200.0/23
194.50.206.0/23
194.180.238.0/24
194.242.22.0/23
195.138.96.0/19
212.90.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:7c:bd:5c:df:6f:43:d4:d9:61:0f:2d:20:44:48:24:36:6b:
62:d8:f6:09:2e:f0:3d:d9:c1:77:7d:ee:f1:9b:9c:2e:d5:85:
c8:2c:46:f9:b7:46:56:df:ad:9a:9e:9c:0a:87:5e:d8:4e:d9:
81:03:fc:5f:bf:1b:1b:f3:f8:ae:12:bf:02:aa:77:04:72:8f:
2c:a6:d5:12:26:1c:39:74:55:2c:f9:90:93:c3:1b:47:c1:05:
0b:a0:09:25:a8:46:32:33:b1:5a:7c:df:f3:58:24:0a:ee:05:
2a:ef:20:3e:8e:1f:14:45:8c:76:b7:58:23:fd:2b:cf:26:00:
4a:fd:15:1e:e8:a3:03:78:ba:96:e9:d2:1d:49:5d:b6:24:b7:
c1:c8:28:b7:57:6d:bc:af:f1:79:9e:5c:4c:09:8f:14:a0:43:
ad:9e:29:de:a5:b8:c3:0b:50:38:ba:38:bd:76:6b:02:09:f1:
92:c2:b1:e2:b6:3e:32:15:10:83:1f:20:dd:fe:b5:21:c9:29:
cc:3f:5c:f5:33:13:80:e4:ba:f9:86:b8:bc:15:32:51:a1:ce:
e6:70:29:5d:7e:95:6a:7c:8f:3a:3f:d1:de:d5:f4:26:7a:08:
3e:28:55:0c:2f:53:16:eb:39:fd:cc:b2:1a:41:ac:35:12:54:
dc:25:cd:1a
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIEFWX9VjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
YmFiMzA2ODM4NTllYzdlMDIwNmZlOTI2NTM2M2U4ZTM5NzFhOWE4MB4XDTIyMDYx
NTE4MTc0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDA1MjU4MTgzMzhl
ZGMxMjZiYmViM2I4NmM3M2NjZDRjODZjNmFkZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKCRM3fPdCqroRGv2bEvgSHLs0Rby42l/JcezxW5eGgyAa+I
ieI++2H/fZhB8Q1mmjGdbK7j9pgjzpgizuNltADKg7e74hhQNNr1yfAhJx8ED3Hv
VweGY64/rw6bzUZR74lSmy3X0vDCt7il4Y9w08PRu61shZ+xQy9HMZlIUKIgNR1P
jXlDdA8dj+7V16FtPIBgl9W2tbEl+bkPaZgFMUdy+3PX5MJtLMsRjZCmUzXFgsvg
pZbHL49ZvB7hzIsBhX/uNS5BzgRw2etQSe5DbK58K45gHSKe0XSbujAFNH2oeRpX
Rl9ime1oALvmk//aRcMjQQUeCgY/BVkfwlOwmi8CAwEAAaOCAnAwggJsMB0GA1Ud
DgQWBBTQUlgYM47cEmu+s7hsc8zUyGxq3TAfBgNVHSMEGDAWgBSLqzBoOFnsfgIG
/pJlNj6OOXGpqDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2k2c3dhRGhaN0g0Q0J2NlNaVFktampseHFhZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmIvODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4OS8x
LzBGSllHRE9PM0JKcnZyTzRiSFBNMU1oc2F0MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIv
ODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4OS8xL2k2c3dhRGhaN0g0
Q0J2NlNaVFktampseHFhZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
hQYIKwYBBQUHAQcBAf8EdjB0MHIEAgABMGwDBAItjCADBAItj/wDBAItlrQDBAIt
l8QDBAE+tmQDBAJb8kADBAFb8mQDBABb8mkDBAJb8mwDBANb8ngDBAK5kVADBAK5
rfQDBAHCMsgDBAHCMs4DBADCtO4DBAHC8hYDBAXDimADBALUWnQwDQYJKoZIhvcN
AQELBQADggEBAKd8vVzfb0PU2WEPLSBESCQ2a2LY9gku8D3ZwXd97vGbnC7Vhcgs
Rvm3RlbfrZqenAqHXthO2YED/F+/Gxvz+K4SvwKqdwRyjyym1RImHDl0VSz5kJPD
G0fBBQugCSWoRjIzsVp83/NYJAruBSrvID6OHxRFjHa3WCP9K88mAEr9FR7oowN4
upbp0h1JXbYkt8HIKLdXbbyv8XmeXEwJjxSgQ62eKd6luMMLUDi6OL12awIJ8ZLC
seK2PjIVEIMfIN3+tSHJKcw/XPUzE4DkuvmGuLwVMlGhzuZwKV1+lWp8jzo/0d7V
9CZ6CD4oVQwvUxbrOf3MshpBrDUSVNwlzRo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-fra.rpki-client.org