Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/M-LqNzC_pXt5tG1FYwPuqDAUXa0.roa
File: M-LqNzC_pXt5tG1FYwPuqDAUXa0.roa (raw, json)
Hash identifier: 0hDJkQC5cIdzyGwUZQmXqcADge//LtR+742zOOB+KxQ=
Subject key identifier: 33:E2:EA:37:30:BF:A5:7B:79:B4:6D:45:63:03:EE:A8:30:14:5D:AD
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 38C360CF
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/M-LqNzC_pXt5tG1FYwPuqDAUXa0.roa
Signing time: Sat 01 Jan 2022 07:55:06 +0000
ROA not before: Sat 01 Jan 2022 07:55:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1101
IP address blocks: 145.208.0.0/13 maxlen: 13
145.220.0.0/16 maxlen: 16
145.111.0.0/16 maxlen: 16
145.192.0.0/12 maxlen: 12
145.216.0.0/15 maxlen: 15
145.99.0.0/16 maxlen: 16
145.102.4.0/23 maxlen: 23
2001:67c:6ec::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 952328399 (0x38c360cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 07:55:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33e2ea3730bfa57b79b46d456303eea830145dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:e2:0c:9a:53:85:29:73:c1:ef:5e:88:d8:0f:
61:cb:76:60:fb:1a:6b:f4:10:52:fe:19:ef:a1:bc:
2e:70:5c:97:48:97:d5:f5:c9:98:89:16:31:a9:fa:
67:43:d9:fa:2d:6e:aa:7b:0f:17:6d:1d:b4:77:8b:
71:32:81:66:2f:d0:a6:46:58:b3:5a:49:0e:2f:0f:
29:c6:fb:96:3a:13:52:69:ba:8c:d5:0f:d5:08:86:
ed:b9:4c:76:74:72:8c:7e:4f:ed:91:b2:2f:a2:7f:
b2:ce:44:7b:c5:42:de:c7:a5:ca:b3:19:96:5b:27:
31:9a:b8:e3:6b:43:2a:57:6f:30:3c:5d:78:7a:f7:
14:fb:33:70:cd:28:d5:e2:dc:97:54:63:b8:d3:71:
4b:73:1f:d3:47:1a:97:26:87:9f:b6:d6:61:27:52:
f9:17:9d:ee:78:19:57:6e:e7:a4:c1:ed:15:17:26:
8b:ce:5c:67:30:2f:7c:26:2a:04:73:76:b4:25:a8:
ef:98:b1:c2:08:f9:85:27:08:80:6a:44:b6:e4:9c:
dd:43:ec:e7:ca:c9:53:ec:26:1f:52:b4:74:99:e4:
7e:26:11:de:6e:b0:ce:ed:26:65:7f:57:7e:bc:cf:
12:35:b5:2d:1f:dd:66:22:b7:a1:08:2d:32:1e:fd:
d6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E2:EA:37:30:BF:A5:7B:79:B4:6D:45:63:03:EE:A8:30:14:5D:AD
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/M-LqNzC_pXt5tG1FYwPuqDAUXa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.99.0.0/16
145.102.4.0/23
145.111.0.0/16
145.192.0.0-145.217.255.255
145.220.0.0/16
IPv6:
2001:67c:6ec::/48
Signature Algorithm: sha256WithRSAEncryption
ab:b0:da:c5:13:f2:47:be:2d:e9:c3:a4:a6:3b:6d:91:91:a5:
4a:ae:c8:90:8e:8f:c0:b0:14:b8:d5:28:5d:d9:45:fc:6a:eb:
b5:69:6d:5d:26:d8:11:9d:a1:49:cf:b1:6e:c7:80:0c:f1:22:
c8:e9:9a:dc:a1:e2:f8:23:c1:fd:f5:3b:23:f9:50:2c:4f:17:
ea:e5:50:92:82:56:92:96:27:51:fa:a0:c2:f6:ec:bc:0e:95:
99:e2:c2:e1:08:ef:1e:cd:af:44:3b:f5:cf:01:1b:5d:b8:87:
26:3b:5c:36:3a:1f:71:7b:70:b1:59:c2:8e:c0:ef:3a:71:b7:
9e:96:92:9b:53:bd:e7:a8:73:da:6d:18:66:6b:c3:b2:bc:48:
12:14:43:8a:4c:18:f6:e8:12:ad:d8:e8:e3:90:26:0c:85:cd:
5a:af:72:b1:a1:54:82:2a:f4:01:b9:8a:8a:03:80:9a:6d:4b:
28:97:10:47:19:98:71:3a:65:c6:a8:e3:ab:9c:be:b3:2f:64:
45:d3:0b:39:2d:9e:8f:30:a1:6f:df:6c:9c:03:eb:df:4d:5f:
95:69:b2:e0:85:48:85:88:6d:70:55:13:fd:7c:61:2e:2d:f5:
3c:41:3f:88:01:72:49:f2:58:7a:8b:9a:7c:2f:7b:cd:bb:b3:
b8:97:0b:a7
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgIEOMNgzzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NzczZGIxNzc5NWQyYmYxYjRiNTM0NWM1YjI5MzkwZGJhZjQ1MjNlMB4XDTIyMDEw
MTA3NTUwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzNlMmVhMzczMGJm
YTU3Yjc5YjQ2ZDQ1NjMwM2VlYTgzMDE0NWRhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPviDJpThSlzwe9eiNgPYct2YPsaa/QQUv4Z76G8LnBcl0iX
1fXJmIkWMan6Z0PZ+i1uqnsPF20dtHeLcTKBZi/QpkZYs1pJDi8PKcb7ljoTUmm6
jNUP1QiG7blMdnRyjH5P7ZGyL6J/ss5Ee8VC3selyrMZllsnMZq442tDKldvMDxd
eHr3FPszcM0o1eLcl1RjuNNxS3Mf00calyaHn7bWYSdS+Red7ngZV27npMHtFRcm
i85cZzAvfCYqBHN2tCWo75ixwgj5hScIgGpEtuSc3UPs58rJU+wmH1K0dJnkfiYR
3m6wzu0mZX9XfrzPEjW1LR/dZiK3oQgtMh791vcCAwEAAaOCAjUwggIxMB0GA1Ud
DgQWBBQz4uo3ML+le3m0bUVjA+6oMBRdrTAfBgNVHSMEGDAWgBQXc9sXeV0r8bS1
NFxbKTkNuvRSPjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0YzUGJGM2xkS19HMHRUUmNXeWs1RGJyMFVqNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmQvZjc3Y2JkLTg5M2ItNDYxNi05ZDc2LTU0ODYxZjIzMjQ5ZC8x
L00tTHFOekNfcFh0NXRHMUZZd1B1cURBVVhhMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQv
Zjc3Y2JkLTg5M2ItNDYxNi05ZDc2LTU0ODYxZjIzMjQ5ZC8xL0YzUGJGM2xkS19H
MHRUUmNXeWs1RGJyMFVqNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBL
BggrBgEFBQcBBwEB/wQ8MDowJwQCAAEwIQMDAJFjAwQBkWYEAwMAkW8wCgMDBpHA
AwMBkdgDAwCR3DAPBAIAAjAJAwcAIAEGfAbsMA0GCSqGSIb3DQEBCwUAA4IBAQCr
sNrFE/JHvi3pw6SmO22RkaVKrsiQjo/AsBS41Shd2UX8auu1aW1dJtgRnaFJz7Fu
x4AM8SLI6ZrcoeL4I8H99Tsj+VAsTxfq5VCSglaSlidR+qDC9uy8DpWZ4sLhCO8e
za9EO/XPARtduIcmO1w2Oh9xe3CxWcKOwO86cbeelpKbU73nqHPabRhma8OyvEgS
FEOKTBj26BKt2OjjkCYMhc1ar3KxoVSCKvQBuYqKA4CabUsolxBHGZhxOmXGqOOr
nL6zL2RF0ws5LZ6PMKFv32ycA+vfTV+VabLghUiFiG1wVRP9fGEuLfU8QT+IAXJJ
8lh6i5p8L3vNu7O4lwun
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:44 2024 by rpki-client on console-ams.rpki-client.org