Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/pfZHKTXYEDYNgt6uWtTx5MfQm1w.roa
File: pfZHKTXYEDYNgt6uWtTx5MfQm1w.roa (raw, json)
Hash identifier: 1Oe2hrLVeOTw62qz8LvcnzBKwGyrGb9PsCEHGCWFk/g=
Subject key identifier: A5:F6:47:29:35:D8:10:36:0D:82:DE:AE:5A:D4:F1:E4:C7:D0:9B:5C
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 02D59DD6
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/pfZHKTXYEDYNgt6uWtTx5MfQm1w.roa
Signing time: Fri 08 Apr 2022 17:24:03 +0000
ROA not before: Fri 08 Apr 2022 17:24:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204384
IP address blocks: 217.67.64.0/20 maxlen: 20
91.200.212.0/22 maxlen: 22
5.180.176.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
85.255.176.0/21 maxlen: 21
5.105.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47554006 (0x2d59dd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 8 17:24:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5f6472935d810360d82deae5ad4f1e4c7d09b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:0e:18:d2:fd:bb:3b:fa:3f:c8:ad:0b:b4:
60:2a:d5:cb:16:0b:9a:ee:07:d9:4e:4c:77:4f:83:
03:59:31:11:2b:60:07:40:f4:46:eb:4c:91:bc:8f:
17:7c:57:41:ac:2d:97:9f:5a:33:53:d3:a7:05:41:
b9:d4:de:e5:72:b0:42:51:a6:2b:e3:33:01:bc:d7:
c8:f0:0e:2a:fc:da:0d:a3:e8:f3:05:e4:67:d1:a5:
ad:66:12:dd:f5:52:d9:35:61:47:26:4f:51:20:05:
5e:d5:43:00:87:c2:c2:d1:1b:ca:e9:69:f2:65:58:
63:1e:36:09:f8:4b:59:01:5d:df:ac:bf:87:d6:8e:
fa:9d:9e:34:d5:c4:4a:9e:fc:1a:09:1d:5a:8d:d1:
a8:63:b0:e8:3b:05:07:d0:92:97:ee:0b:1b:32:0e:
7d:c5:5b:10:d2:5a:67:22:8c:ed:36:b7:a6:2c:9a:
00:a3:e5:58:02:94:ef:a8:ec:da:8c:83:6d:0e:4a:
d2:6c:32:ab:36:18:37:ed:2f:8f:5e:06:b2:ab:c3:
ec:e3:bc:8e:b7:1e:de:5b:66:9d:5b:ee:63:4e:7f:
e0:22:97:ac:e0:68:24:99:b2:7f:16:bb:76:21:a8:
c8:83:ee:d2:81:9a:72:d9:62:b9:51:80:38:4e:c9:
e8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F6:47:29:35:D8:10:36:0D:82:DE:AE:5A:D4:F1:E4:C7:D0:9B:5C
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/pfZHKTXYEDYNgt6uWtTx5MfQm1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.0.0/16
5.180.176.0/24
85.255.176.0/21
91.200.212.0/22
193.46.210.0/24
217.67.64.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:b7:d8:92:be:4f:f3:53:d2:b8:22:d2:b3:df:b6:35:b2:e2:
78:02:48:1b:ca:e3:07:85:79:64:03:d6:1b:94:0a:aa:a7:51:
5f:09:56:aa:78:12:0a:99:02:55:f2:ef:32:0e:e2:df:ee:37:
5b:93:05:29:9e:76:b7:bd:b5:b6:bf:94:5b:32:51:cc:d2:fa:
c3:b2:a5:32:e8:40:ce:c5:02:69:8c:a6:fb:f1:93:14:91:67:
bd:31:0d:57:a9:1d:3f:7e:01:1d:15:b0:06:ad:af:94:84:66:
59:1d:34:9b:4b:89:87:a9:be:ab:18:33:71:3b:41:aa:d5:a6:
9c:69:e2:6f:74:3d:0a:04:92:38:b5:a0:38:97:15:fe:48:aa:
ba:da:11:de:12:76:e6:20:84:57:9c:4f:b2:5e:be:21:32:d6:
ba:ea:c1:ce:3b:d6:af:37:43:6e:cb:00:3f:bc:b0:1d:8c:18:
44:f3:c5:f1:64:7c:d8:20:8a:00:f5:64:ef:9f:4d:88:c1:3d:
2e:de:10:37:b1:01:4f:5a:6f:6c:06:0e:56:74:fc:f8:3c:c8:
eb:9b:a9:03:a9:4f:fa:ce:5c:3a:45:a7:3a:ef:49:64:bd:05:
11:13:69:4d:76:80:4c:d0:a7:3c:f1:e3:56:97:ef:b1:66:49:
66:23:08:25
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIEAtWd1jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ZGY4YjQ1MjU0ZTU0NzBkMWQ0Y2NlNmZiN2RmZDRkMGQ4M2I1ZDU5MB4XDTIyMDQw
ODE3MjQwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTVmNjQ3MjkzNWQ4
MTAzNjBkODJkZWFlNWFkNGYxZTRjN2QwOWI1YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKnNDhjS/bs7+j/IrQu0YCrVyxYLmu4H2U5Md0+DA1kxEStg
B0D0RutMkbyPF3xXQawtl59aM1PTpwVBudTe5XKwQlGmK+MzAbzXyPAOKvzaDaPo
8wXkZ9GlrWYS3fVS2TVhRyZPUSAFXtVDAIfCwtEbyulp8mVYYx42CfhLWQFd36y/
h9aO+p2eNNXESp78GgkdWo3RqGOw6DsFB9CSl+4LGzIOfcVbENJaZyKM7Ta3piya
AKPlWAKU76js2oyDbQ5K0mwyqzYYN+0vj14GsqvD7OO8jrce3ltmnVvuY05/4CKX
rOBoJJmyfxa7diGoyIPu0oGactliuVGAOE7J6HMCAwEAAaOCAiYwggIiMB0GA1Ud
DgQWBBSl9kcpNdgQNg2C3q5a1PHkx9CbXDAfBgNVHSMEGDAWgBTd+LRSVOVHDR1M
zm+339TQ2DtdWTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNmaTBVbFRsUncwZFRNNXZ0OV9VME5nN1hWay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDUvOGZjNzQ2LWZjMDgtNDIxMS1iYTNiLTg5MzkwNmZiNzg1OC8x
L3BmWkhLVFhZRURZTmd0NnVXdFR4NU1mUW0xdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUv
OGZjNzQ2LWZjMDgtNDIxMS1iYTNiLTg5MzkwNmZiNzg1OC8xLzNmaTBVbFRsUncw
ZFRNNXZ0OV9VME5nN1hWay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8
BggrBgEFBQcBBwEB/wQtMCswKQQCAAEwIwMDAAVpAwQABbSwAwQDVf+wAwQCW8jU
AwQAwS7SAwQE2UNAMA0GCSqGSIb3DQEBCwUAA4IBAQA9t9iSvk/zU9K4ItKz37Y1
suJ4AkgbyuMHhXlkA9YblAqqp1FfCVaqeBIKmQJV8u8yDuLf7jdbkwUpnna3vbW2
v5RbMlHM0vrDsqUy6EDOxQJpjKb78ZMUkWe9MQ1XqR0/fgEdFbAGra+UhGZZHTSb
S4mHqb6rGDNxO0Gq1aacaeJvdD0KBJI4taA4lxX+SKq62hHeEnbmIIRXnE+yXr4h
Mta66sHOO9avN0NuywA/vLAdjBhE88XxZHzYIIoA9WTvn02IwT0u3hA3sQFPWm9s
Bg5WdPz4PMjrm6kDqU/6zlw6Rac670lkvQURE2lNdoBM0Kc88eNWl++xZklmIwgl
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org