Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/pZ-G8Meh-psq1sYAk09qW_YTHMM.roa
File: pZ-G8Meh-psq1sYAk09qW_YTHMM.roa (raw, json)
Hash identifier: hJ1mMQn06HSrGX6RhhbSNprOKBjeaAxmBx/XWzcruag=
Subject key identifier: A5:9F:86:F0:C7:A1:FA:9B:2A:D6:C6:00:93:4F:6A:5B:F6:13:1C:C3
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 04798167
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/pZ-G8Meh-psq1sYAk09qW_YTHMM.roa
Signing time: Sat 07 May 2022 20:06:15 +0000
ROA not before: Sat 07 May 2022 20:06:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 188.132.150.0/24 maxlen: 24
77.92.154.0/24 maxlen: 24
78.135.80.0/24 maxlen: 24
188.132.209.0/24 maxlen: 32
78.135.87.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75071847 (0x4798167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: May 7 20:06:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a59f86f0c7a1fa9b2ad6c600934f6a5bf6131cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:25:02:44:5b:a3:4e:85:f9:e5:c4:2a:11:4c:
db:89:17:ac:f6:8f:97:d2:01:c0:91:5f:e3:05:10:
fb:f2:a8:cd:a4:b2:b5:97:63:bb:7b:56:24:0d:a6:
ef:2c:29:fe:a1:39:2a:6d:6b:3a:10:5b:8a:08:ca:
62:77:ff:77:a7:7a:e4:1e:b6:a5:f2:16:7e:86:fa:
21:b2:98:5e:6f:e1:38:be:70:89:f6:d2:21:73:01:
27:ee:8a:e2:13:47:99:1f:9d:d5:20:57:af:db:52:
c9:f7:c0:e5:74:e3:f4:05:e3:b9:b6:56:45:7f:72:
0d:f0:0c:06:63:3d:0b:fd:af:75:3f:e6:aa:c8:11:
e8:77:65:c8:ce:f4:aa:c8:80:15:dd:ac:ad:a1:f4:
eb:f7:a4:8d:48:9a:d3:c1:e3:9a:0e:dc:9b:ca:cc:
68:e1:89:b1:92:02:bb:db:c0:7d:99:13:79:9f:b3:
e1:b8:8f:24:62:f6:a5:fc:b1:16:e9:55:18:7b:09:
47:9d:5c:1e:47:89:a6:1d:da:33:0a:2a:e2:0c:64:
5d:ff:45:19:09:a8:fb:3f:92:c7:e8:b8:b5:cb:8b:
37:3a:0d:7f:54:5e:42:49:e1:1f:07:9a:11:cb:34:
6b:c1:1c:52:60:e2:7b:b3:9a:05:35:42:b8:a6:fd:
38:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9F:86:F0:C7:A1:FA:9B:2A:D6:C6:00:93:4F:6A:5B:F6:13:1C:C3
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/pZ-G8Meh-psq1sYAk09qW_YTHMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.154.0/24
78.135.80.0/24
78.135.87.0/24
188.132.150.0/24
188.132.209.0/24
Signature Algorithm: sha256WithRSAEncryption
46:61:ac:15:c0:04:63:41:6a:5c:14:27:17:31:61:80:b7:36:
98:f1:44:c1:0d:72:76:0b:2c:bd:e8:34:92:8b:51:7d:c5:58:
2b:8e:7d:38:bb:eb:e5:60:34:0a:a4:d9:92:c2:58:5f:40:1a:
70:59:4e:cc:b9:4a:0d:e6:aa:21:78:5a:5f:bb:15:68:44:a2:
2a:28:9a:1c:23:ce:17:ae:1b:28:90:90:75:5b:db:65:3f:2f:
6d:61:d8:e5:44:0c:b6:bf:dd:f5:22:26:8c:58:19:eb:c1:20:
e9:19:82:83:6a:cc:bc:72:7f:3a:41:d7:f2:69:21:4b:61:ea:
ba:66:18:0e:6f:26:53:e7:69:e3:55:8e:2c:38:2b:a0:6a:c8:
e8:64:82:95:8d:be:8d:2b:38:5e:eb:0e:cd:6b:16:9a:7d:16:
3f:bd:e2:36:e9:15:ef:98:b4:ae:64:f1:c1:58:71:99:35:20:
0e:c3:52:36:64:62:dd:50:ae:3e:e9:d2:65:d1:88:29:d2:72:
ca:bd:4e:45:9a:57:94:33:fc:07:eb:c8:3a:0a:82:d2:36:38:
bf:0a:6b:38:48:2d:1a:6d:ea:e9:94:68:9c:75:05:3c:5a:ae:
ba:ad:36:dc:32:ae:02:71:8a:f1:71:07:8d:af:5c:ce:fd:fe:
9e:32:00:62
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEBHmBZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
OWQ1NzQ0N2UzNDIwYjg1Mzg3NWI2ZmE0MDM3MmFhZGUzMTkyY2EyMB4XDTIyMDUw
NzIwMDYxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTU5Zjg2ZjBjN2Ex
ZmE5YjJhZDZjNjAwOTM0ZjZhNWJmNjEzMWNjMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOAlAkRbo06F+eXEKhFM24kXrPaPl9IBwJFf4wUQ+/KozaSy
tZdju3tWJA2m7ywp/qE5Km1rOhBbigjKYnf/d6d65B62pfIWfob6IbKYXm/hOL5w
ifbSIXMBJ+6K4hNHmR+d1SBXr9tSyffA5XTj9AXjubZWRX9yDfAMBmM9C/2vdT/m
qsgR6HdlyM70qsiAFd2sraH06/ekjUia08Hjmg7cm8rMaOGJsZICu9vAfZkTeZ+z
4biPJGL2pfyxFulVGHsJR51cHkeJph3aMwoq4gxkXf9FGQmo+z+Sx+i4tcuLNzoN
f1ReQknhHweaEcs0a8EcUmDie7OaBTVCuKb9OGUCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBSln4bwx6H6myrWxgCTT2pb9hMcwzAfBgNVHSMEGDAWgBTJ1XRH40ILhTh1
tvpANyqt4xksojAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lkVjBSLU5DQzRVNGRiYjZRRGNxcmVNWkxLSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGQvMTU4NmZkLWZkMmMtNDFmOC04ZmU5LTRlMTk4ZjBhNjAxMy8x
L3BaLUc4TWVoLXBzcTFzWUFrMDlxV19ZVEhNTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQv
MTU4NmZkLWZkMmMtNDFmOC04ZmU5LTRlMTk4ZjBhNjAxMy8xL3lkVjBSLU5DQzRV
NGRiYjZRRGNxcmVNWkxLSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAE1cmgMEAE6HUAMEAE6HVwMEALyE
lgMEALyE0TANBgkqhkiG9w0BAQsFAAOCAQEARmGsFcAEY0FqXBQnFzFhgLc2mPFE
wQ1ydgssveg0kotRfcVYK459OLvr5WA0CqTZksJYX0AacFlOzLlKDeaqIXhaX7sV
aESiKiiaHCPOF64bKJCQdVvbZT8vbWHY5UQMtr/d9SImjFgZ68Eg6RmCg2rMvHJ/
OkHX8mkhS2HqumYYDm8mU+dp41WOLDgroGrI6GSClY2+jSs4XusOzWsWmn0WP73i
NukV75i0rmTxwVhxmTUgDsNSNmRi3VCuPunSZdGIKdJyyr1ORZpXlDP8B+vIOgqC
0jY4vwprOEgtGm3q6ZRonHUFPFquuq023DKuAnGK8XEHja9czv3+njIAYg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org