Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/15EsnNHp9l6Sk0lVsQP4tEMA00U.roa
File: 15EsnNHp9l6Sk0lVsQP4tEMA00U.roa (raw, json)
Hash identifier: xjhwR7mqICUQTq77CEn4v4htLEsQvXk5P894Svdf4eg=
Subject key identifier: D7:91:2C:9C:D1:E9:F6:5E:92:93:49:55:B1:03:F8:B4:43:00:D3:45
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 018286A4BAAABCADE39BF2293BA82186D342
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/15EsnNHp9l6Sk0lVsQP4tEMA00U.roa
Signing time: Wed 10 Aug 2022 07:25:18 +0000
ROA not before: Wed 10 Aug 2022 07:25:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26548
IP address blocks: 193.202.84.0/22 maxlen: 22
45.145.128.0/23 maxlen: 23
193.202.8.0/22 maxlen: 22
193.202.12.0/22 maxlen: 22
193.187.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:86:a4:ba:aa:bc:ad:e3:9b:f2:29:3b:a8:21:86:d3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Aug 10 07:25:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7912c9cd1e9f65e92934955b103f8b44300d345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:59:c6:94:89:fc:59:5d:9b:0d:5d:88:50:
6c:6c:40:a6:90:87:56:94:5a:da:f0:de:00:ab:a0:
c7:f2:89:09:77:0d:4a:63:26:ce:c7:4f:a0:29:db:
7e:62:ed:74:80:93:cf:10:a9:44:36:fd:74:62:5d:
84:7d:e7:1d:f7:a7:cf:8f:84:14:6a:27:fb:82:a7:
48:7c:ce:de:4c:ca:62:f9:21:9c:2f:53:5c:f1:89:
f9:e7:8a:41:ef:8f:cc:29:38:93:5f:d7:e7:6f:79:
81:8d:4e:58:92:fc:5a:e4:4a:f0:b3:45:16:7e:20:
2e:91:4c:3b:c2:20:6e:d0:ce:64:a9:2f:f0:c5:79:
24:4b:92:8e:03:3f:4b:e1:2b:28:64:bc:6f:23:f0:
51:9d:e7:88:3b:de:c5:ee:75:9e:63:32:25:46:d7:
a6:ea:64:ab:33:10:11:db:60:d9:f1:bd:9f:0c:80:
6f:b4:e3:6b:bd:04:a8:23:5c:0c:6f:00:2d:94:b9:
4b:4b:65:69:e7:23:17:20:9a:9b:e3:34:a9:9a:7f:
d4:92:44:4e:f4:f2:1f:37:4a:c1:8d:68:dd:4d:dd:
06:46:61:3b:ba:55:6b:62:07:66:75:85:b2:11:0b:
a6:14:68:c4:37:f4:21:75:c2:3a:63:39:7e:50:34:
46:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:91:2C:9C:D1:E9:F6:5E:92:93:49:55:B1:03:F8:B4:43:00:D3:45
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/15EsnNHp9l6Sk0lVsQP4tEMA00U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.128.0/23
193.187.92.0/22
193.202.8.0/21
193.202.84.0/22
Signature Algorithm: sha256WithRSAEncryption
89:5c:d4:63:c7:56:e9:6c:33:32:73:df:c3:66:eb:55:81:44:
f3:d1:20:3a:90:30:81:16:a5:7d:73:52:62:e1:08:d7:84:36:
e0:c2:44:ff:38:cb:e1:67:e0:c5:02:59:95:b5:ba:e2:f9:3e:
26:65:c3:2a:1c:26:66:6d:82:8d:57:47:48:6d:ca:4c:3e:96:
b4:a5:43:4c:3f:3d:01:60:65:5e:b4:d6:cc:e8:ce:d3:b4:d8:
2c:d5:bf:75:69:66:23:74:42:bc:7f:00:e3:34:ba:21:f6:fa:
e8:e4:8e:88:a2:cb:cb:87:23:12:54:45:50:e8:85:0b:50:1a:
86:9d:bb:39:fe:5f:3e:31:81:db:93:d5:37:15:71:f7:ef:4d:
98:31:07:3e:64:6c:a5:89:b6:d9:45:b9:5e:90:dd:7d:47:b2:
cf:2f:ab:fa:80:45:15:9d:45:45:63:1e:ea:c8:5c:df:89:98:
33:69:67:dc:a1:2a:4f:66:e7:03:0c:a8:a9:45:81:22:c2:1c:
d2:46:1c:6f:df:69:71:0f:21:9d:bd:51:20:c4:88:08:a1:f8:
bf:5e:66:fe:b2:67:aa:71:9f:58:34:e1:eb:9b:31:03:93:47:
9e:e5:58:7b:8f:96:1c:10:fe:50:96:64:50:48:1f:4d:95:a7:
30:41:d1:69
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYKGpLqqvK3jm/IpO6ghhtNCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3
Y2Q0MjMwHhcNMjIwODEwMDcyNTE4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzkxMmM5Y2QxZTlmNjVlOTI5MzQ5NTViMTAzZjhiNDQzMDBkMzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb1ZxpSJ/Fldmw1diFBsbECmkIdW
lFra8N4Aq6DH8okJdw1KYybOx0+gKdt+Yu10gJPPEKlENv10Yl2Efecd96fPj4QU
aif7gqdIfM7eTMpi+SGcL1Nc8Yn554pB74/MKTiTX9fnb3mBjU5Ykvxa5Erws0UW
fiAukUw7wiBu0M5kqS/wxXkkS5KOAz9L4SsoZLxvI/BRneeIO97F7nWeYzIlRtem
6mSrMxAR22DZ8b2fDIBvtONrvQSoI1wMbwAtlLlLS2Vp5yMXIJqb4zSpmn/UkkRO
9PIfN0rBjWjdTd0GRmE7ulVrYgdmdYWyEQumFGjEN/QhdcI6Yzl+UDRGnQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFNeRLJzR6fZekpNJVbED+LRDANNFMB8GA1UdIwQY
MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli
LWExYjdjZWVmYTE2Yy8xLzE1RXNuTkhwOWw2U2swbFZzUVA0dEVNQTAwVS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjliLWExYjdjZWVmYTE2
Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAEtkYAD
BALBu1wDBAPByggDBALBylQwDQYJKoZIhvcNAQELBQADggEBAIlc1GPHVulsMzJz
38Nm61WBRPPRIDqQMIEWpX1zUmLhCNeENuDCRP84y+Fn4MUCWZW1uuL5PiZlwyoc
JmZtgo1XR0htykw+lrSlQ0w/PQFgZV601szoztO02CzVv3VpZiN0Qrx/AOM0uiH2
+ujkjoiiy8uHIxJURVDohQtQGoaduzn+Xz4xgduT1TcVcffvTZgxBz5kbKWJttlF
uV6Q3X1Hss8vq/qARRWdRUVjHurIXN+JmDNpZ9yhKk9m5wMMqKlFgSLCHNJGHG/f
aXEPIZ29USDEiAih+L9eZv6yZ6pxn1g04eubMQOTR57lWHuPlhwQ/lCWZFBIH02V
pzBB0Wk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:59 2023 by rpki-client on console-fra.rpki-client.org