Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/c0mYmAHJ8nTLL5xp9oSeBHb65-o.roa
File: c0mYmAHJ8nTLL5xp9oSeBHb65-o.roa (raw, json)
Hash identifier: Q7rKuWLHVDzvTly4j+ZCARPljmnbLpLf8cHCCEu5UKU=
Subject key identifier: 73:49:98:98:01:C9:F2:74:CB:2F:9C:69:F6:84:9E:04:76:FA:E7:EA
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0184A95C1B27356D2745BDC3BB47DB582908
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/c0mYmAHJ8nTLL5xp9oSeBHb65-o.roa
Signing time: Thu 24 Nov 2022 11:18:16 +0000
ROA not before: Thu 24 Nov 2022 11:18:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44477
IP address blocks: 185.231.205.0/24 maxlen: 24
185.231.204.0/24 maxlen: 24
185.231.207.0/24 maxlen: 24
193.57.138.0/24 maxlen: 24
93.185.166.0/24 maxlen: 24
45.87.154.0/24 maxlen: 24
45.8.145.0/24 maxlen: 24
141.98.169.0/24 maxlen: 24
45.8.144.0/24 maxlen: 24
45.84.0.0/24 maxlen: 24
45.84.1.0/24 maxlen: 24
194.4.48.0/24 maxlen: 24
194.4.51.0/24 maxlen: 24
194.4.49.0/24 maxlen: 24
45.159.250.0/24 maxlen: 24
45.159.249.0/24 maxlen: 24
45.159.248.0/24 maxlen: 24
45.67.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a9:5c:1b:27:35:6d:27:45:bd:c3:bb:47:db:58:29:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Nov 24 11:18:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7349989801c9f274cb2f9c69f6849e0476fae7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:ca:79:17:e2:a7:a1:7f:b9:f7:4a:8c:76:
98:07:8e:36:41:a0:75:38:ef:99:f2:dd:de:e1:39:
57:3c:fd:d7:e8:11:25:88:60:92:06:40:db:26:5b:
f7:c0:7a:ca:51:12:7c:36:ea:2b:44:e3:5d:9c:eb:
e0:1f:e2:cb:4d:72:49:7c:e8:68:09:c1:fb:f6:f1:
31:e9:ef:83:d1:8b:fd:14:ee:ba:06:29:f4:05:ef:
2f:0b:d7:22:4a:d8:44:d0:a7:45:d7:57:fd:30:a4:
93:6c:2e:b8:79:18:04:9c:65:42:f8:83:21:af:d6:
00:3d:3a:e2:9c:d0:fc:b6:b7:b3:66:03:f9:53:de:
d6:3a:be:91:5d:85:e4:ba:fd:fe:96:a6:ac:0a:67:
0c:70:2d:21:5d:27:8c:1e:ea:5d:12:df:84:62:f8:
11:00:b7:70:6e:94:75:1e:0f:8d:06:f0:69:0c:a1:
38:9f:f0:d6:23:1e:f6:13:f8:f4:01:fa:29:ca:19:
a3:c1:29:f9:22:bf:28:0e:1e:48:50:9f:0d:31:1f:
21:e6:c6:63:0f:6b:ae:b3:77:37:a1:d0:30:1c:7d:
a6:e7:af:a3:ce:f9:38:77:72:cd:4b:4e:da:89:a2:
f7:e2:93:5e:4d:59:a7:1c:7e:17:85:2f:73:7e:56:
fd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:49:98:98:01:C9:F2:74:CB:2F:9C:69:F6:84:9E:04:76:FA:E7:EA
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/c0mYmAHJ8nTLL5xp9oSeBHb65-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.144.0/23
45.67.35.0/24
45.84.0.0/23
45.87.154.0/24
45.159.248.0-45.159.250.255
93.185.166.0/24
141.98.169.0/24
185.231.204.0/23
185.231.207.0/24
193.57.138.0/24
194.4.48.0/23
194.4.51.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:44:eb:c3:48:d0:82:b9:34:74:8f:a2:38:28:a4:09:c3:2a:
b2:30:26:c5:40:77:4f:e8:6e:f5:b3:b7:7e:95:79:f8:df:89:
e1:ef:84:5e:a6:96:16:7b:25:63:d2:3b:88:50:92:63:97:71:
7f:52:3b:1a:c3:b7:25:d8:7d:2d:f2:64:64:f4:18:b3:e1:10:
c0:8f:13:78:63:12:33:4a:8f:88:92:be:86:60:f5:04:89:48:
24:1b:29:54:d8:af:c4:58:39:25:30:57:7f:44:56:c1:1a:b4:
04:aa:dc:7f:2c:ba:0d:65:e3:16:e5:ed:15:ef:30:d6:c9:0f:
dd:63:88:e1:f3:aa:16:0c:f8:12:cb:2b:49:cb:12:d9:e1:5a:
50:e0:33:79:85:a8:eb:70:55:21:83:b9:9f:4d:06:c8:c3:19:
c7:38:f4:c0:73:39:cb:cf:b1:58:28:86:b3:bb:8a:e8:b2:c4:
6c:e2:12:46:3b:e2:5c:54:d3:0c:e8:5e:39:95:b1:70:51:ea:
c7:02:6c:0b:3f:13:c7:32:1e:51:4a:63:24:8a:dc:a5:2a:39:
89:d4:86:77:34:91:3d:92:8b:3c:58:40:1c:a6:90:e8:b7:cd:
2c:a9:b6:70:03:43:2d:a3:de:84:43:0a:1c:ad:7c:29:cb:21:
14:b4:26:e4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAYSpXBsnNW0nRb3Du0fbWCkIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjIxMTI0MTExODE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzQ5OTg5ODAxYzlmMjc0Y2IyZjljNjlmNjg0OWUwNDc2ZmFlN2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCPKeRfip6F/ufdKjHaYB442QaB1
OO+Z8t3e4TlXPP3X6BEliGCSBkDbJlv3wHrKURJ8NuorRONdnOvgH+LLTXJJfOho
CcH79vEx6e+D0Yv9FO66Bin0Be8vC9ciSthE0KdF11f9MKSTbC64eRgEnGVC+IMh
r9YAPTrinND8trezZgP5U97WOr6RXYXkuv3+lqasCmcMcC0hXSeMHupdEt+EYvgR
ALdwbpR1Hg+NBvBpDKE4n/DWIx72E/j0AfopyhmjwSn5Ir8oDh5IUJ8NMR8h5sZj
D2uus3c3odAwHH2m56+jzvk4d3LNS07aiaL34pNeTVmnHH4XhS9zflb9OQIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFHNJmJgByfJ0yy+cafaEngR2+ufqMB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvYzBtWW1BSEo4blRMTDV4cDlvU2VCSGI2NS1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQBLQiQAwQA
LUMjAwQBLVQAAwQALVeaMAwDBAMtn/gDBAAtn/oDBABduaYDBACNYqkDBAG558wD
BAC5588DBADBOYoDBAHCBDADBADCBDMwDQYJKoZIhvcNAQELBQADggEBANZE68NI
0IK5NHSPojgopAnDKrIwJsVAd0/obvWzt36VefjfieHvhF6mlhZ7JWPSO4hQkmOX
cX9SOxrDtyXYfS3yZGT0GLPhEMCPE3hjEjNKj4iSvoZg9QSJSCQbKVTYr8RYOSUw
V39EVsEatASq3H8sug1l4xbl7RXvMNbJD91jiOHzqhYM+BLLK0nLEtnhWlDgM3mF
qOtwVSGDuZ9NBsjDGcc49MBzOcvPsVgohrO7iuiyxGziEkY74lxU0wzoXjmVsXBR
6scCbAs/E8cyHlFKYySK3KUqOYnUhnc0kT2SizxYQBymkOi3zSyptnADQy2j3oRD
ChytfCnLIRS0JuQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:24 2023 by rpki-client on console-ams.rpki-client.org