Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Tn82H4aI5FtvDYushFK0-_PT1aE.roa
File: Tn82H4aI5FtvDYushFK0-_PT1aE.roa (raw, json)
Hash identifier: 0tL3FdfK2m3zhZyRCiZzaYTfj/ev3FvZK5QshuZrj6g=
Subject key identifier: 4E:7F:36:1F:86:88:E4:5B:6F:0D:8B:AC:84:52:B4:FB:F3:D3:D5:A1
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018354AC63DA3B33B4C57ADACFA821F7BFF2
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Tn82H4aI5FtvDYushFK0-_PT1aE.roa
Signing time: Mon 19 Sep 2022 07:35:27 +0000
ROA not before: Mon 19 Sep 2022 07:35:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1103
IP address blocks: 145.97.16.0/22 maxlen: 22
145.97.20.0/22 maxlen: 22
145.97.24.0/21 maxlen: 21
145.124.0.0/15 maxlen: 15
145.23.0.0/19 maxlen: 19
145.23.0.0/16 maxlen: 16
192.87.0.0/16 maxlen: 16
145.97.48.0/20 maxlen: 20
194.171.0.0/16 maxlen: 16
145.107.0.0/16 maxlen: 22
145.33.0.0/16 maxlen: 16
145.20.0.0/16 maxlen: 16
145.97.128.0/18 maxlen: 18
145.138.0.0/16 maxlen: 16
145.74.0.0/15 maxlen: 15
145.37.0.0/16 maxlen: 16
145.144.0.0/12 maxlen: 12
145.97.64.0/18 maxlen: 18
145.76.0.0/16 maxlen: 16
145.116.128.0/18 maxlen: 18
145.103.0.0/16 maxlen: 16
145.140.0.0/14 maxlen: 14
145.2.0.0/15 maxlen: 15
145.109.128.0/17 maxlen: 17
145.96.0.0/16 maxlen: 16
145.116.64.0/18 maxlen: 18
145.116.224.0/19 maxlen: 19
145.127.0.0/17 maxlen: 17
145.100.0.0/15 maxlen: 15
145.90.0.0/16 maxlen: 16
145.90.10.0/23 maxlen: 23
145.117.0.0/16 maxlen: 16
145.19.0.0/16 maxlen: 16
145.116.192.0/20 maxlen: 20
145.120.0.0/14 maxlen: 14
145.9.0.0/16 maxlen: 16
145.28.0.0/15 maxlen: 15
145.92.0.0/15 maxlen: 15
145.146.0.0/16 maxlen: 25
145.48.0.0/15 maxlen: 15
145.102.0.0/16 maxlen: 16
145.38.0.0/15 maxlen: 15
145.116.0.0/20 maxlen: 20
145.52.0.0/16 maxlen: 16
145.116.16.0/21 maxlen: 21
145.116.24.0/21 maxlen: 21
145.136.0.0/15 maxlen: 15
145.126.0.0/16 maxlen: 16
145.108.0.0/16 maxlen: 16
145.44.0.0/16 maxlen: 16
145.98.0.0/16 maxlen: 16
145.0.0.0/16 maxlen: 16
145.97.192.0/18 maxlen: 18
145.91.0.0/16 maxlen: 16
145.118.0.0/16 maxlen: 16
145.81.0.0/16 maxlen: 16
145.95.0.0/16 maxlen: 16
145.85.0.0/16 maxlen: 16
145.24.0.0/16 maxlen: 16
145.88.0.0/15 maxlen: 15
145.51.0.0/16 maxlen: 16
195.169.0.0/16 maxlen: 16
2001:610::/29 maxlen: 29
2001:610:130::/48 maxlen: 64
2001:610::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:54:ac:63:da:3b:33:b4:c5:7a:da:cf:a8:21:f7:bf:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Sep 19 07:35:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e7f361f8688e45b6f0d8bac8452b4fbf3d3d5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:54:04:b3:15:50:e3:e6:c4:07:7a:b7:81:
60:4c:ed:1c:78:9e:c4:86:f6:41:ef:c9:00:39:d0:
9a:72:39:66:60:c0:74:a5:f8:3b:2a:ac:aa:e5:fe:
e6:41:59:05:51:37:05:fa:a3:c2:cd:65:f7:df:0b:
3d:da:fd:9a:e5:02:54:fd:c0:07:0b:62:7b:a3:59:
22:25:50:05:de:0b:f0:38:b5:aa:d8:65:c6:b4:39:
2d:bd:f3:3c:68:70:81:de:01:84:b0:d7:0c:d5:04:
24:75:3d:5d:d9:61:22:87:05:03:a1:1e:f9:c9:02:
b6:06:0f:6e:19:71:8b:78:78:24:e0:05:05:2b:27:
17:1c:26:50:4f:97:35:48:29:b6:33:f3:46:4f:d2:
2e:9c:99:74:d5:12:d3:7b:87:70:09:10:83:7a:6d:
62:b7:ee:9d:2b:2d:53:2e:75:aa:ff:6f:de:63:ac:
d0:89:c4:32:7c:0a:57:a0:e9:a7:cf:53:7a:87:df:
65:f7:88:28:49:08:9f:ad:fb:b2:30:5d:ff:40:1b:
c4:24:d2:cb:ca:69:6f:89:68:fe:7a:d9:be:88:cc:
bf:1e:fa:c5:47:a7:8f:90:42:e3:87:90:c2:d1:4b:
2a:a5:8c:9c:dc:a9:22:97:6b:44:3e:56:86:71:d0:
3e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7F:36:1F:86:88:E4:5B:6F:0D:8B:AC:84:52:B4:FB:F3:D3:D5:A1
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Tn82H4aI5FtvDYushFK0-_PT1aE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.0.0.0/16
145.2.0.0/15
145.9.0.0/16
145.19.0.0-145.20.255.255
145.23.0.0-145.24.255.255
145.28.0.0/15
145.33.0.0/16
145.37.0.0-145.39.255.255
145.44.0.0/16
145.48.0.0/15
145.51.0.0-145.52.255.255
145.74.0.0-145.76.255.255
145.81.0.0/16
145.85.0.0/16
145.88.0.0-145.93.255.255
145.95.0.0-145.96.255.255
145.97.16.0/20
145.97.48.0-145.98.255.255
145.100.0.0/14
145.107.0.0-145.108.255.255
145.109.128.0/17
145.116.0.0/19
145.116.64.0-145.116.207.255
145.116.224.0-145.118.255.255
145.120.0.0-145.127.127.255
145.136.0.0-145.138.255.255
145.140.0.0-145.159.255.255
192.87.0.0/16
194.171.0.0/16
195.169.0.0/16
IPv6:
2001:610::/29
Signature Algorithm: sha256WithRSAEncryption
45:22:8b:2a:59:a6:7f:32:77:e7:4f:9b:3f:b3:5c:47:e5:d8:
e6:42:6d:57:de:e8:48:0b:4d:35:60:cb:06:e5:04:9a:4b:17:
1b:8a:bb:3e:15:94:85:12:e2:11:b5:e7:95:ff:b7:1b:f2:89:
98:6e:99:b1:c5:1a:3a:92:df:bf:a7:f9:4d:fa:81:84:45:16:
aa:e2:69:aa:4e:8c:fa:5e:a4:a3:fb:e9:66:49:a2:7f:fa:65:
5d:23:6f:97:1c:be:0f:b8:53:ce:c4:4d:68:5f:f4:0c:6a:45:
75:06:27:4c:20:2e:f2:6e:c4:b9:b9:f7:a4:9b:10:ae:49:3d:
93:37:60:9c:6d:cc:67:f8:31:9b:a8:e8:ab:9e:60:ac:c5:27:
1b:7e:7a:26:17:01:55:9d:ef:27:99:1e:64:42:7d:bf:87:f6:
00:32:e6:9d:aa:1d:3b:b4:bb:54:e8:a8:cb:b7:e4:64:50:b3:
eb:ee:26:2b:b8:b1:4e:91:d3:a2:59:d9:c6:61:cc:f0:66:6f:
6e:11:96:ff:b7:a3:e9:f8:ec:00:07:2c:d9:e1:a9:5c:c6:1d:
52:fa:e0:8a:42:ce:ed:11:36:90:e9:7f:27:ab:e3:4d:e3:4c:
b2:1d:d5:be:2d:ac:04:88:49:f3:e1:98:3e:61:35:a4:53:40:
c3:1c:fd:69
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgISAYNUrGPaOzO0xXraz6gh97/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjIwOTE5MDczNTI3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTdmMzYxZjg2ODhlNDViNmYwZDhiYWM4NDUyYjRmYmYzZDNkNWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMlUBLMVUOPmxAd6t4FgTO0ceJ7E
hvZB78kAOdCacjlmYMB0pfg7Kqyq5f7mQVkFUTcF+qPCzWX33ws92v2a5QJU/cAH
C2J7o1kiJVAF3gvwOLWq2GXGtDktvfM8aHCB3gGEsNcM1QQkdT1d2WEihwUDoR75
yQK2Bg9uGXGLeHgk4AUFKycXHCZQT5c1SCm2M/NGT9IunJl01RLTe4dwCRCDem1i
t+6dKy1TLnWq/2/eY6zQicQyfApXoOmnz1N6h99l94goSQifrfuyMF3/QBvEJNLL
ymlviWj+etm+iMy/HvrFR6ePkELjh5DC0UsqpYyc3Kkil2tEPlaGcdA+xwIDAQAB
o4IDHDCCAxgwHQYDVR0OBBYEFE5/Nh+GiORbbw2LrIRStPvz09WhMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvVG44Mkg0YUk1RnR2RFl1c2hGSzAtX1BUMWFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBMAYIKwYBBQUHAQcBAf8EggEfMIIBGzCCAQgEAgABMIIB
AAMDAJEAAwMBkQIDAwCRCTAKAwMAkRMDAwCRFDAKAwMAkRcDAwCRGAMDAZEcAwMA
kSEwCgMDAJElAwMDkSADAwCRLAMDAZEwMAoDAwCRMwMDAJE0MAoDAwGRSgMDAJFM
AwMAkVEDAwCRVTAKAwMDkVgDAwGRXDAKAwMAkV8DAwCRYAMEBJFhEDALAwQEkWEw
AwMAkWIDAwKRZDAKAwMAkWsDAwCRbAMEB5FtgAMEBZF0ADAMAwQGkXRAAwQEkXTA
MAsDBAWRdOADAwCRdjALAwMDkXgDBAeRfwAwCgMDA5GIAwMAkYowCgMDApGMAwMF
kYADAwDAVwMDAMKrAwMAw6kwDQQCAAIwBwMFAyABBhAwDQYJKoZIhvcNAQELBQAD
ggEBAEUiiypZpn8yd+dPmz+zXEfl2OZCbVfe6EgLTTVgywblBJpLFxuKuz4VlIUS
4hG155X/txvyiZhumbHFGjqS37+n+U36gYRFFqriaapOjPpepKP76WZJon/6ZV0j
b5ccvg+4U87ETWhf9AxqRXUGJ0wgLvJuxLm596SbEK5JPZM3YJxtzGf4MZuo6Kue
YKzFJxt+eiYXAVWd7yeZHmRCfb+H9gAy5p2qHTu0u1ToqMu35GRQs+vuJiu4sU6R
06JZ2cZhzPBmb24Rlv+3o+n47AAHLNnhqVzGHVL64IpCzu0RNpDpfyer403jTLId
1b4trASISfPhmD5hNaRTQMMc/Wk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:09 2024 by rpki-client on console-fra.rpki-client.org