Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/m_uwDYERY-bMFipNZR-VKkrttGQ.roa
File: m_uwDYERY-bMFipNZR-VKkrttGQ.roa (raw, json)
Hash identifier: XtnU3q4ugW0t7YwEVRd2u+1GqV9ZzBdm0S+ZzwCYrvA=
Subject key identifier: 9B:FB:B0:0D:81:11:63:E6:CC:16:2A:4D:65:1F:95:2A:4A:ED:B4:64
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01BB6783
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/m_uwDYERY-bMFipNZR-VKkrttGQ.roa
Signing time: Thu 24 Mar 2022 14:31:31 +0000
ROA not before: Thu 24 Mar 2022 14:31:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210906
IP address blocks: 45.113.238.0/24 maxlen: 24
43.245.116.0/23 maxlen: 23
209.35.99.0/24 maxlen: 24
193.36.76.0/24 maxlen: 24
209.35.113.0/24 maxlen: 24
193.36.86.0/24 maxlen: 24
207.244.216.0/22 maxlen: 22
147.185.250.0/24 maxlen: 24
43.245.119.0/24 maxlen: 24
193.36.172.0/24 maxlen: 24
209.35.4.0/23 maxlen: 23
162.218.158.0/24 maxlen: 24
147.185.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29058947 (0x1bb6783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Mar 24 14:31:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bfbb00d811163e6cc162a4d651f952a4aedb464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:aa:d3:db:bb:26:6a:ca:36:66:b1:f6:20:72:
07:29:05:d9:39:07:8e:38:ad:6f:b5:df:77:0f:3f:
5c:63:5c:96:2d:c3:96:d1:99:6b:03:46:b7:9b:df:
99:55:75:51:80:70:4e:71:c3:a2:13:9c:b5:ed:22:
f1:75:6f:a6:00:f6:5c:16:0b:61:d6:c0:79:e7:26:
a9:47:3b:2a:a5:d6:35:7c:ca:55:9e:75:7d:2e:fd:
1b:78:3d:75:5f:79:5d:fc:e2:06:d9:fe:f3:0e:ac:
7c:4d:b5:cb:99:9b:5d:34:f5:0d:9e:32:c5:18:47:
7b:2a:68:77:1d:75:26:23:b9:94:39:b2:49:c5:f2:
97:99:e2:d6:51:90:9c:a2:89:68:54:f0:f4:b9:95:
0f:6a:53:d2:9e:cc:78:bc:c1:e4:92:de:50:11:e3:
a1:cd:66:b6:36:fd:f9:d8:66:8c:0e:4c:b0:7c:77:
94:86:39:21:86:a7:a5:f7:09:8e:50:54:fc:6e:cf:
c3:d2:b6:c1:b4:c5:88:89:c1:3c:56:98:8f:c4:6f:
ad:eb:7a:8a:0e:a9:68:5c:44:ce:a2:76:78:aa:b6:
95:f7:d5:69:82:48:02:e7:a3:83:85:d9:40:eb:e1:
7e:a0:eb:26:c4:92:09:84:8a:d1:f6:d9:9b:1a:c6:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FB:B0:0D:81:11:63:E6:CC:16:2A:4D:65:1F:95:2A:4A:ED:B4:64
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/m_uwDYERY-bMFipNZR-VKkrttGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.245.116.0/23
43.245.119.0/24
45.113.238.0/24
147.185.217.0/24
147.185.250.0/24
162.218.158.0/24
193.36.76.0/24
193.36.86.0/24
193.36.172.0/24
207.244.216.0/22
209.35.4.0/23
209.35.99.0/24
209.35.113.0/24
Signature Algorithm: sha256WithRSAEncryption
99:15:3c:88:1f:5a:3b:d4:36:b2:b1:d6:ac:13:c7:fa:57:da:
1d:4f:b7:26:0f:62:63:9c:ec:60:14:42:98:b7:9d:43:83:b4:
ba:de:85:0b:bf:40:3a:ad:b0:d7:bc:8a:00:18:77:6d:0a:80:
61:c6:01:c9:b5:3e:1f:f0:3d:fb:72:2d:45:99:80:07:56:19:
9b:86:67:01:8a:b5:ec:1f:09:e7:5a:4c:d6:05:2d:12:b8:ad:
a6:50:c6:b6:0f:e1:19:8b:d3:a1:cb:7d:4e:9e:34:70:73:b5:
b5:b7:9f:0e:30:78:6a:05:10:aa:0c:b1:bc:93:76:5d:07:a2:
26:4f:1f:7c:dd:83:f8:e6:bb:03:be:23:a6:7c:55:f9:f0:31:
18:e9:80:59:7e:0e:86:bf:e7:54:6c:6e:d1:16:53:64:ef:ac:
c2:43:4b:e8:2c:fe:8d:13:ca:2b:74:ae:c8:35:00:87:eb:a2:
35:11:37:75:ce:34:78:de:3f:f9:3e:eb:7f:58:be:80:14:4f:
b7:2b:7b:c9:0d:34:b2:50:da:95:48:c6:75:97:7c:c6:52:16:
b5:d4:41:97:6a:bc:b3:fa:81:ba:7d:27:7a:13:62:5d:74:75:
25:6b:90:35:6f:81:02:8d:69:12:17:de:bf:59:31:1d:d9:69:
8a:c0:b7:e0
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIEAbtngzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NWZiMzJkMjI2NmIxZjliY2U1N2NhYzk4YmMwMjQ3ZjJjOTE5N2YyMB4XDTIyMDMy
NDE0MzEzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWJmYmIwMGQ4MTEx
NjNlNmNjMTYyYTRkNjUxZjk1MmE0YWVkYjQ2NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI+q09u7JmrKNmax9iByBykF2TkHjjitb7Xfdw8/XGNcli3D
ltGZawNGt5vfmVV1UYBwTnHDohOcte0i8XVvpgD2XBYLYdbAeecmqUc7KqXWNXzK
VZ51fS79G3g9dV95XfziBtn+8w6sfE21y5mbXTT1DZ4yxRhHeypodx11JiO5lDmy
ScXyl5ni1lGQnKKJaFTw9LmVD2pT0p7MeLzB5JLeUBHjoc1mtjb9+dhmjA5MsHx3
lIY5IYanpfcJjlBU/G7Pw9K2wbTFiInBPFaYj8Rvret6ig6paFxEzqJ2eKq2lffV
aYJIAuejg4XZQOvhfqDrJsSSCYSK0fbZmxrGtsMCAwEAAaOCAlEwggJNMB0GA1Ud
DgQWBBSb+7ANgRFj5swWKk1lH5UqSu20ZDAfBgNVHSMEGDAWgBT1+zLSJmsfm85X
ysmLwCR/LJGX8jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
Lzlmc3kwaVpySDV2T1Y4ckppOEFrZnl5UmxfSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODAvZmI0MmVjLTEwYjQtNGRjZi1iZWYwLTJkMTQzZDdiODUzYy8x
L21fdXdEWUVSWS1iTUZpcE5aUi1WS2tydHRHUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAv
ZmI0MmVjLTEwYjQtNGRjZi1iZWYwLTJkMTQzZDdiODUzYy8xLzlmc3kwaVpySDV2
T1Y4ckppOEFrZnl5UmxfSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBn
BggrBgEFBQcBBwEB/wRYMFYwVAQCAAEwTgMEASv1dAMEACv1dwMEAC1x7gMEAJO5
2QMEAJO5+gMEAKLangMEAMEkTAMEAMEkVgMEAMEkrAMEAs/02AMEAdEjBAMEANEj
YwMEANEjcTANBgkqhkiG9w0BAQsFAAOCAQEAmRU8iB9aO9Q2srHWrBPH+lfaHU+3
Jg9iY5zsYBRCmLedQ4O0ut6FC79AOq2w17yKABh3bQqAYcYBybU+H/A9+3ItRZmA
B1YZm4ZnAYq17B8J51pM1gUtEritplDGtg/hGYvToct9Tp40cHO1tbefDjB4agUQ
qgyxvJN2XQeiJk8ffN2D+Oa7A74jpnxV+fAxGOmAWX4Ohr/nVGxu0RZTZO+swkNL
6Cz+jRPKK3SuyDUAh+uiNRE3dc40eN4/+T7rf1i+gBRPtyt7yQ00slDalUjGdZd8
xlIWtdRBl2q8s/qBun0nehNiXXR1JWuQNW+BAo1pEhfev1kxHdlpisC34A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:15 2023 by rpki-client on console-ams.rpki-client.org