Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/oQOpoCj3hgNxCGC96h77W-WZXH4.roa
File: oQOpoCj3hgNxCGC96h77W-WZXH4.roa (raw, json)
Hash identifier: 4ZpmDOGu0Gi+SZgo+Aj8JQ410IfLFIVAWtDOQLS0pW4=
Subject key identifier: A1:03:A9:A0:28:F7:86:03:71:08:60:BD:EA:1E:FB:5B:E5:99:5C:7E
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 0184142F78FC1E6C75AD4F1EB2A6FD868F37
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/oQOpoCj3hgNxCGC96h77W-WZXH4.roa
Signing time: Wed 26 Oct 2022 12:06:06 +0000
ROA not before: Wed 26 Oct 2022 12:06:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39521
IP address blocks: 185.144.56.0/22 maxlen: 24
45.95.40.0/22 maxlen: 22
83.229.23.0/24 maxlen: 24
188.191.48.0/22 maxlen: 22
5.22.204.0/22 maxlen: 22
217.194.153.0/24 maxlen: 24
83.229.34.0/24 maxlen: 24
45.130.100.0/22 maxlen: 22
95.178.107.0/24 maxlen: 24
45.10.16.0/22 maxlen: 22
45.88.5.0/24 maxlen: 24
45.88.6.0/24 maxlen: 24
45.88.7.0/24 maxlen: 24
2a05:e4c0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:2f:78:fc:1e:6c:75:ad:4f:1e:b2:a6:fd:86:8f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Oct 26 12:06:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a103a9a028f78603710860bdea1efb5be5995c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:49:73:e0:60:6d:ee:d0:30:9b:7c:da:f0:
98:4c:59:6c:8e:18:eb:86:06:c2:26:06:bb:4c:67:
15:b9:8f:ad:80:41:e7:87:a6:6e:04:a8:16:63:d9:
c5:9f:34:46:ad:44:6b:51:23:48:ad:cd:e1:78:e8:
e4:4c:dd:23:d5:7a:4c:d9:25:32:41:46:bf:b5:ff:
2d:0b:6a:34:0b:74:49:b9:8f:37:af:62:db:be:07:
27:ae:97:87:ba:16:f8:5c:c3:7f:79:b7:3d:5c:3e:
41:a1:39:b7:48:66:89:25:b3:71:02:40:7a:ae:08:
9e:c1:88:0f:70:e4:dc:63:d4:11:6f:9a:60:73:79:
2e:63:a2:69:6a:59:1b:90:96:02:e9:ba:21:23:d8:
4d:d8:5e:1a:64:d8:91:ec:88:be:21:81:c0:ec:83:
0a:bb:39:2e:c3:ac:80:24:58:d6:be:22:cd:7d:d0:
06:82:08:72:1a:b4:06:a3:bd:b0:f4:87:48:0a:8d:
04:85:a5:d0:59:33:39:37:7d:5c:37:5f:27:b4:1e:
4c:7e:91:91:f4:f1:5a:f0:2c:07:77:a5:4a:b1:62:
3a:26:6e:2a:b4:69:7f:a2:ab:29:f9:40:28:dd:fe:
c8:c8:c6:cb:a9:5c:03:5a:03:89:10:f6:2b:62:e9:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:03:A9:A0:28:F7:86:03:71:08:60:BD:EA:1E:FB:5B:E5:99:5C:7E
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/oQOpoCj3hgNxCGC96h77W-WZXH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.204.0/22
45.10.16.0/22
45.88.5.0-45.88.7.255
45.95.40.0/22
45.130.100.0/22
83.229.23.0/24
83.229.34.0/24
95.178.107.0/24
185.144.56.0/22
188.191.48.0/22
217.194.153.0/24
IPv6:
2a05:e4c0::/29
Signature Algorithm: sha256WithRSAEncryption
2f:c8:e1:7b:2b:58:6b:be:d6:32:da:c4:9e:c9:2a:b9:62:16:
33:9c:78:3d:fb:49:d1:86:34:4c:59:84:86:5f:91:99:90:78:
94:70:5f:85:7e:05:7e:61:42:c5:a0:f7:95:43:87:da:f7:88:
27:c7:37:60:da:83:79:df:f5:4b:9a:15:68:7c:27:a1:ab:e5:
13:36:0f:35:08:03:0b:00:e1:3e:89:f3:cd:05:5d:b5:eb:d5:
eb:27:9e:e4:b2:77:70:c7:7e:7d:88:cd:d4:d9:6f:df:a5:5c:
11:68:15:42:d3:f3:ee:c1:99:b6:11:fb:99:83:e5:71:62:98:
2b:96:d7:7e:47:0c:6e:4b:7e:8a:f0:5d:50:04:92:d4:83:98:
9e:f0:9f:a8:7e:91:83:06:c6:83:80:6b:3b:e6:52:29:bb:99:
bc:f8:a7:b6:f4:25:84:d0:50:9b:39:9a:74:29:39:6f:61:01:
c9:7c:cf:13:72:3f:f9:4a:b3:ff:94:6a:a6:96:0c:9f:c9:1c:
a9:1b:a0:75:5f:62:2f:83:e2:b2:2b:23:02:42:25:bb:5d:9b:
b0:8e:84:f4:bd:79:70:3b:7b:97:19:e1:c3:b5:95:c0:f9:da:
3c:93:91:86:f1:66:00:a3:a3:77:54:db:17:b4:92:b9:e6:d0:
1b:58:27:ed
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgISAYQUL3j8Hmx1rU8esqb9ho83MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky
ZDMwYTkwHhcNMjIxMDI2MTIwNjA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTAzYTlhMDI4Zjc4NjAzNzEwODYwYmRlYTFlZmI1YmU1OTk1YzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoBJc+Bgbe7QMJt82vCYTFlsjhjr
hgbCJga7TGcVuY+tgEHnh6ZuBKgWY9nFnzRGrURrUSNIrc3heOjkTN0j1XpM2SUy
QUa/tf8tC2o0C3RJuY83r2LbvgcnrpeHuhb4XMN/ebc9XD5BoTm3SGaJJbNxAkB6
rgiewYgPcOTcY9QRb5pgc3kuY6JpalkbkJYC6bohI9hN2F4aZNiR7Ii+IYHA7IMK
uzkuw6yAJFjWviLNfdAGgghyGrQGo72w9IdICo0EhaXQWTM5N31cN18ntB5MfpGR
9PFa8CwHd6VKsWI6Jm4qtGl/oqsp+UAo3f7IyMbLqVwDWgOJEPYrYumKWwIDAQAB
o4ICXDCCAlgwHQYDVR0OBBYEFKEDqaAo94YDcQhgveoe+1vlmVx+MB8GA1UdIwQY
MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt
Yjk0NjQ3MThiYTM3LzEvb1FPcG9DajNoZ054Q0dDOTZoNzdXLVdaWEg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3
LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBQBAIAATBKAwQCBRbMAwQC
LQoQMAwDBAAtWAUDBAMtWAADBAItXygDBAItgmQDBABT5RcDBABT5SIDBABfsmsD
BAK5kDgDBAK8vzADBADZwpkwDQQCAAIwBwMFAyoF5MAwDQYJKoZIhvcNAQELBQAD
ggEBAC/I4XsrWGu+1jLaxJ7JKrliFjOceD37SdGGNExZhIZfkZmQeJRwX4V+BX5h
QsWg95VDh9r3iCfHN2Dag3nf9UuaFWh8J6Gr5RM2DzUIAwsA4T6J880FXbXr1esn
nuSyd3DHfn2IzdTZb9+lXBFoFULT8+7BmbYR+5mD5XFimCuW135HDG5LforwXVAE
ktSDmJ7wn6h+kYMGxoOAazvmUim7mbz4p7b0JYTQUJs5mnQpOW9hAcl8zxNyP/lK
s/+UaqaWDJ/JHKkboHVfYi+D4rIrIwJCJbtdm7COhPS9eXA7e5cZ4cO1lcD52jyT
kYbxZgCjo3dU2xe0krnm0BtYJ+0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:21:05 2025 by rpki-client