Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/KQaid8VWB_ghJ8DEryxbi2LTOJ8.roa
File: KQaid8VWB_ghJ8DEryxbi2LTOJ8.roa (raw, json)
Hash identifier: Tk/rCm3qbYeU3JKL9X4r7FCGxP9vxOU5lSLhch9yeNo=
Subject key identifier: 29:06:A2:77:C5:56:07:F8:21:27:C0:C4:AF:2C:5B:8B:62:D3:38:9F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0184D34F6E1A71705DAD6EEFA5E5A64A13B4
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/KQaid8VWB_ghJ8DEryxbi2LTOJ8.roa
Signing time: Fri 02 Dec 2022 14:48:28 +0000
ROA not before: Fri 02 Dec 2022 14:48:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 5.182.28.0/22 maxlen: 22
45.140.32.0/22 maxlen: 22
80.94.80.0/23 maxlen: 23
45.88.124.0/22 maxlen: 22
45.67.117.0/24 maxlen: 24
45.15.64.0/22 maxlen: 22
194.56.152.0/23 maxlen: 24
91.242.81.0/24 maxlen: 24
185.212.11.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
91.242.107.0/24 maxlen: 24
45.150.180.0/22 maxlen: 22
194.242.28.0/23 maxlen: 24
185.173.247.0/24 maxlen: 24
193.46.211.0/24 maxlen: 24
91.242.70.0/23 maxlen: 24
91.242.74.0/24 maxlen: 24
91.242.75.0/24 maxlen: 24
91.242.72.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:4f:6e:1a:71:70:5d:ad:6e:ef:a5:e5:a6:4a:13:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Dec 2 14:48:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2906a277c55607f82127c0c4af2c5b8b62d3389f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:55:6c:dc:9a:0b:1c:9c:ae:8b:cc:5a:0e:b3:
5e:93:f4:34:16:a0:6f:9f:ef:75:a7:bd:a0:f7:dd:
9a:f5:33:53:04:6b:7b:bd:b5:07:df:ee:40:8b:10:
40:6f:c8:11:1f:63:61:b0:ba:06:35:c4:c4:04:b3:
0c:af:93:7a:e6:00:89:0d:a8:fd:90:1f:cb:d5:e5:
a8:90:7e:6f:3b:12:53:80:61:47:53:4f:2d:c2:e9:
01:cf:64:66:a9:08:c1:b5:66:84:69:30:c2:07:e2:
15:ce:36:94:16:13:92:f0:d0:76:d4:78:e3:a2:94:
ad:88:4a:42:94:4f:94:12:d1:0b:c2:90:5d:99:20:
66:4f:0f:8a:18:1c:56:c5:74:a0:40:20:cd:e4:06:
42:aa:72:d7:eb:55:81:e0:f6:16:ca:41:73:3d:41:
f5:c5:26:ec:ce:89:67:b0:d8:0b:71:b7:b2:2b:da:
cb:af:b1:db:6e:1f:2d:de:e5:0a:f2:8b:80:51:d7:
a0:fe:a2:8b:ab:7f:f6:c1:dd:3c:74:d4:65:80:69:
cc:85:16:07:e0:89:ab:6b:9e:b4:af:d8:8e:52:c7:
b0:b0:77:be:0d:e4:6f:55:ca:8b:ba:df:32:dd:bb:
8f:58:1f:1f:a2:42:33:7c:64:4f:08:93:53:f5:db:
7a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:06:A2:77:C5:56:07:F8:21:27:C0:C4:AF:2C:5B:8B:62:D3:38:9F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/KQaid8VWB_ghJ8DEryxbi2LTOJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.28.0/22
45.15.64.0/22
45.67.117.0/24
45.88.124.0/22
45.140.32.0/22
45.150.180.0/22
80.94.80.0/23
91.242.70.0-91.242.75.255
91.242.81.0/24
91.242.103.0/24
91.242.107.0/24
185.173.247.0/24
185.212.11.0/24
193.46.211.0/24
194.56.152.0/23
194.242.28.0/23
Signature Algorithm: sha256WithRSAEncryption
96:73:dc:08:9a:9c:f2:ba:2f:b9:be:15:db:67:d2:5c:17:be:
ae:17:84:44:80:46:90:d3:36:ff:d0:96:3d:fa:45:ff:be:0f:
6d:7b:32:e1:18:0b:f1:b5:4d:c2:b2:72:4e:ae:9e:c1:44:5a:
c1:02:9b:36:6a:e1:81:28:e5:49:60:5e:9b:08:43:9d:5a:98:
bd:cd:d8:d7:68:20:f6:fb:09:29:7b:9f:9d:4b:e5:0d:ce:43:
46:ba:ef:45:7f:1a:c2:be:f2:16:15:af:e9:66:04:10:f3:19:
80:1e:30:89:1d:2b:3f:7b:ff:06:fc:0e:1e:78:23:08:fd:87:
91:38:3c:c8:d5:ac:c8:e3:f0:6b:bf:64:df:2a:c0:21:ed:16:
9c:26:4e:e8:16:3b:c0:0f:d1:c8:10:5d:08:2b:c1:93:8e:62:
39:0b:ec:dc:1a:6c:dd:90:1a:85:bf:8b:6e:9c:c7:bc:26:75:
76:b9:6d:49:0d:db:19:70:30:d6:60:35:f7:b7:85:99:c0:e2:
13:0d:f6:f5:af:de:82:13:e1:50:d9:88:b5:dd:83:b6:e9:e2:
9f:4b:cd:8d:ec:9b:58:14:a4:2f:ab:ff:23:4a:e8:53:49:52:
40:7c:44:9d:35:82:21:9d:e0:28:ab:f2:ef:f4:a0:b2:62:da:
fc:54:07:a8
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgISAYTTT24acXBdrW7vpeWmShO0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjIxMjAyMTQ0ODI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTA2YTI3N2M1NTYwN2Y4MjEyN2MwYzRhZjJjNWI4YjYyZDMzODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVVs3JoLHJyui8xaDrNek/Q0FqBv
n+91p72g992a9TNTBGt7vbUH3+5AixBAb8gRH2NhsLoGNcTEBLMMr5N65gCJDaj9
kB/L1eWokH5vOxJTgGFHU08twukBz2RmqQjBtWaEaTDCB+IVzjaUFhOS8NB21Hjj
opStiEpClE+UEtELwpBdmSBmTw+KGBxWxXSgQCDN5AZCqnLX61WB4PYWykFzPUH1
xSbszolnsNgLcbeyK9rLr7Hbbh8t3uUK8ouAUdeg/qKLq3/2wd08dNRlgGnMhRYH
4Imra560r9iOUsewsHe+DeRvVcqLut8y3buPWB8fokIzfGRPCJNT9dt6/QIDAQAB
o4ICbDCCAmgwHQYDVR0OBBYEFCkGonfFVgf4ISfAxK8sW4ti0zifMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvS1FhaWQ4VldCX2doSjhERXJ5eGJpMkxUT0o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEAgW2HAME
Ai0PQAMEAC1DdQMEAi1YfAMEAi2MIAMEAi2WtAMEAVBeUDAMAwQBW/JGAwQCW/JI
AwQAW/JRAwQAW/JnAwQAW/JrAwQAua33AwQAudQLAwQAwS7TAwQBwjiYAwQBwvIc
MA0GCSqGSIb3DQEBCwUAA4IBAQCWc9wImpzyui+5vhXbZ9JcF76uF4REgEaQ0zb/
0JY9+kX/vg9tezLhGAvxtU3CsnJOrp7BRFrBAps2auGBKOVJYF6bCEOdWpi9zdjX
aCD2+wkpe5+dS+UNzkNGuu9FfxrCvvIWFa/pZgQQ8xmAHjCJHSs/e/8G/A4eeCMI
/YeRODzI1azI4/Brv2TfKsAh7RacJk7oFjvAD9HIEF0IK8GTjmI5C+zcGmzdkBqF
v4tunMe8JnV2uW1JDdsZcDDWYDX3t4WZwOITDfb1r96CE+FQ2Yi13YO26eKfS82N
7JtYFKQvq/8jSuhTSVJAfESdNYIhneAoq/Lv9KCyYtr8VAeo
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org