Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/MB8qJKvZeAvX_BvHzmCsEoM3CYY.roa
File: MB8qJKvZeAvX_BvHzmCsEoM3CYY.roa (raw, json)
Hash identifier: 04VPxiDDa1SAP8azHOe6uTqQdanD9bvjI67NvCiLE1E=
Subject key identifier: 30:1F:2A:24:AB:D9:78:0B:D7:FC:1B:C7:CE:60:AC:12:83:37:09:86
Certificate issuer: /CN=bc464ba9d26385f54df6254ac248926d370445b0
Certificate serial: 018308441763120F7446ADB983177534AB32
Authority key identifier: BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/MB8qJKvZeAvX_BvHzmCsEoM3CYY.roa
Signing time: Sun 04 Sep 2022 11:30:23 +0000
ROA not before: Sun 04 Sep 2022 11:30:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202909
IP address blocks: 185.151.20.0/22 maxlen: 24
45.155.184.0/22 maxlen: 24
185.236.166.0/24 maxlen: 24
185.236.164.0/23 maxlen: 24
2a07:7540::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:08:44:17:63:12:0f:74:46:ad:b9:83:17:75:34:ab:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc464ba9d26385f54df6254ac248926d370445b0
Validity
Not Before: Sep 4 11:30:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=301f2a24abd9780bd7fc1bc7ce60ac1283370986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c4:7e:bf:3c:59:d6:ec:c7:d0:18:f7:e6:fa:
ce:d6:0a:00:f8:9a:e2:7a:3a:cd:4f:cc:6a:26:67:
2f:d1:e3:5c:33:26:d2:96:d2:a3:cd:0d:bb:40:dc:
6b:05:90:77:e9:6d:d1:18:b8:7e:76:27:24:46:bd:
d4:6c:c0:20:6a:bd:e4:ce:92:3e:a2:8f:24:1b:ba:
18:5c:4d:77:b7:6c:42:e4:ba:b0:46:b3:b4:69:6a:
ea:af:a9:05:da:ac:11:74:a9:b6:b5:de:fd:a1:b1:
dc:f3:3c:81:13:9d:c3:02:e2:88:c7:e4:b6:2b:52:
b9:e7:eb:e1:b4:d4:5b:d6:bf:30:2c:03:e1:32:3a:
2b:90:ea:bb:98:93:c9:0d:f6:05:c7:7c:ca:97:3b:
b5:39:25:6f:45:d7:e0:7a:f3:0e:dc:71:49:c8:84:
f2:5f:3b:94:ac:7c:10:0e:00:a6:8c:37:de:45:19:
01:34:84:38:e6:5b:d4:46:53:d6:a5:1e:56:ee:4c:
85:06:23:c8:c3:0d:16:b3:cd:28:a8:8c:d8:40:23:
7e:e5:22:a3:95:0e:87:4a:95:3a:7d:08:b1:39:2c:
53:03:2e:b1:16:3e:0c:d3:cf:af:21:20:8c:d3:4c:
3a:bb:7e:95:d8:a4:86:47:71:8c:ca:03:65:1d:6f:
73:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1F:2A:24:AB:D9:78:0B:D7:FC:1B:C7:CE:60:AC:12:83:37:09:86
X509v3 Authority Key Identifier:
keyid:BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/MB8qJKvZeAvX_BvHzmCsEoM3CYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.184.0/22
185.151.20.0/22
185.236.164.0-185.236.166.255
IPv6:
2a07:7540::/29
Signature Algorithm: sha256WithRSAEncryption
00:e3:55:26:27:f2:80:2d:e9:c5:33:4d:fe:bd:26:c7:ca:2f:
55:a2:60:8c:b6:7e:f4:91:53:17:b5:75:d7:d8:69:f2:5f:30:
cb:23:87:ed:b2:00:d9:21:e2:a7:2c:b7:67:ec:de:ed:d1:3a:
d7:98:91:72:bd:a0:aa:3e:a0:d6:18:2c:bd:eb:2d:a4:c1:f6:
0f:af:77:1d:f6:0b:63:3f:86:71:e2:b0:f7:f9:7d:62:c8:2a:
ca:73:93:3e:94:f2:bd:a1:84:8c:d5:ea:41:71:4c:f9:76:38:
cb:0f:c2:4f:a9:ac:b3:e8:81:ba:60:2c:bc:f8:ad:64:de:99:
50:44:3a:b2:f8:ae:9a:c6:ab:60:c7:22:f7:9a:11:c9:e6:2b:
d8:20:4c:19:3f:22:47:3e:ef:0a:07:a2:ba:9f:0b:31:fb:82:
69:6d:95:8f:24:fe:1c:cd:06:25:55:e6:64:f0:36:f8:a5:23:
83:f7:28:69:0a:fa:85:59:42:9e:d2:81:d8:e1:ec:37:61:bd:
87:3c:1e:87:d6:cd:33:77:95:d8:2a:f7:9b:4b:58:05:d5:28:
ca:ed:84:2a:67:94:3c:77:d3:4a:73:83:60:db:e0:44:11:6f:
82:f8:14:ce:1a:b4:5c:a1:18:4d:d8:5d:d6:54:40:40:22:fc:
5c:73:b3:2f
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYMIRBdjEg90Rq25gxd1NKsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNDY0YmE5ZDI2Mzg1ZjU0ZGY2MjU0YWMyNDg5MjZkMzcw
NDQ1YjAwHhcNMjIwOTA0MTEzMDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDFmMmEyNGFiZDk3ODBiZDdmYzFiYzdjZTYwYWMxMjgzMzcwOTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sR+vzxZ1uzH0Bj35vrO1goA+Jri
ejrNT8xqJmcv0eNcMybSltKjzQ27QNxrBZB36W3RGLh+dickRr3UbMAgar3kzpI+
oo8kG7oYXE13t2xC5LqwRrO0aWrqr6kF2qwRdKm2td79obHc8zyBE53DAuKIx+S2
K1K55+vhtNRb1r8wLAPhMjorkOq7mJPJDfYFx3zKlzu1OSVvRdfgevMO3HFJyITy
XzuUrHwQDgCmjDfeRRkBNIQ45lvURlPWpR5W7kyFBiPIww0Ws80oqIzYQCN+5SKj
lQ6HSpU6fQixOSxTAy6xFj4M08+vISCM00w6u36V2KSGR3GMygNlHW9zCQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFDAfKiSr2XgL1/wbx85grBKDNwmGMB8GA1UdIwQY
MBaAFLxGS6nSY4X1TfYlSsJIkm03BEWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkVaTHFkSmpoZlZOOWlWS3draVNiVGNFUmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81MDFmMmItZmQxZi00NWVhLWI0OTQt
ZDczZGM0YjQxY2UxLzEvTUI4cUpLdlplQXZYX0J2SHptQ3NFb00zQ1lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81MDFmMmItZmQxZi00NWVhLWI0OTQtZDczZGM0YjQxY2Ux
LzEvdkVaTHFkSmpoZlZOOWlWS3draVNiVGNFUmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQCLZu4AwQC
uZcUMAwDBAK57KQDBAC57KYwDQQCAAIwBwMFAyoHdUAwDQYJKoZIhvcNAQELBQAD
ggEBAADjVSYn8oAt6cUzTf69JsfKL1WiYIy2fvSRUxe1ddfYafJfMMsjh+2yANkh
4qcst2fs3u3ROteYkXK9oKo+oNYYLL3rLaTB9g+vdx32C2M/hnHisPf5fWLIKspz
kz6U8r2hhIzV6kFxTPl2OMsPwk+prLPogbpgLLz4rWTemVBEOrL4rprGq2DHIvea
EcnmK9ggTBk/Ikc+7woHorqfCzH7gmltlY8k/hzNBiVV5mTwNvilI4P3KGkK+oVZ
Qp7Sgdjh7DdhvYc8HofWzTN3ldgq95tLWAXVKMrthCpnlDx300pzg2Db4EQRb4L4
FM4atFyhGE3YXdZUQEAi/Fxzsy8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:58 2024 by rpki-client on console-fra.rpki-client.org