Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ADRTyqdAgagVV4QJkZRFDcuufeM.roa
File: ADRTyqdAgagVV4QJkZRFDcuufeM.roa (raw, json)
Hash identifier: LaYTw6MjQcCj0Vm98kacu56OFgrEXx0jrqsKQ70zQxA=
Subject key identifier: 00:34:53:CA:A7:40:81:A8:15:57:84:09:91:94:45:0D:CB:AE:7D:E3
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0951A7C9
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ADRTyqdAgagVV4QJkZRFDcuufeM.roa
Signing time: Fri 24 Jun 2022 11:18:59 +0000
ROA not before: Fri 24 Jun 2022 11:18:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23959
IP address blocks: 45.66.216.0/22 maxlen: 24
213.232.112.0/22 maxlen: 24
176.119.148.0/22 maxlen: 24
45.159.48.0/22 maxlen: 24
88.214.20.0/22 maxlen: 24
147.78.240.0/21 maxlen: 24
193.111.30.0/23 maxlen: 24
45.66.128.0/22 maxlen: 24
91.200.240.0/24 maxlen: 24
91.200.242.0/24 maxlen: 24
45.149.156.0/22 maxlen: 24
78.142.228.0/22 maxlen: 24
2a09:7::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156346313 (0x951a7c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jun 24 11:18:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=003453caa74081a8155784099194450dcbae7de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:91:14:ce:de:c5:0d:d5:45:f6:65:a7:f2:
33:0c:04:cb:f2:b8:09:af:90:99:04:57:17:4f:80:
87:49:35:2e:ed:41:25:77:7e:1c:a7:8c:a8:9e:61:
4e:e8:73:d2:51:16:40:31:f8:d4:2c:13:f7:64:6e:
37:ce:ba:7c:29:4d:42:3e:ce:7b:67:4e:5f:4a:f4:
2d:4c:cd:3b:97:f0:31:8b:d1:c4:12:79:b0:d5:b2:
7c:ca:cc:df:06:e1:9c:31:34:73:e3:3a:54:30:66:
43:69:7a:81:54:25:31:ca:71:e7:b0:6b:7d:60:4f:
44:b9:b2:33:f0:66:05:cb:27:04:71:4a:75:4a:59:
ea:0f:b5:53:a7:a0:05:1d:4b:4d:1e:f0:e2:07:15:
d1:7d:7c:00:f6:3f:23:e0:97:51:2a:73:aa:e2:ae:
2f:dc:77:8a:44:fc:27:78:4e:3e:17:a8:26:2e:a1:
48:6f:9c:85:6b:5b:29:f6:c0:c6:45:62:f9:16:70:
f3:07:42:a3:6f:a9:bb:3e:a0:97:65:9a:6a:dc:bc:
b1:a0:02:d0:9b:42:a2:a3:d9:a4:f9:55:b2:b4:ef:
54:b2:eb:d2:78:08:51:19:fa:f6:66:f4:da:77:41:
00:26:b2:56:a9:0c:aa:67:f9:60:5c:54:51:a7:3c:
ea:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:34:53:CA:A7:40:81:A8:15:57:84:09:91:94:45:0D:CB:AE:7D:E3
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ADRTyqdAgagVV4QJkZRFDcuufeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.128.0/22
45.66.216.0/22
45.149.156.0/22
45.159.48.0/22
78.142.228.0/22
88.214.20.0/22
91.200.240.0/24
91.200.242.0/24
147.78.240.0/21
176.119.148.0/22
193.111.30.0/23
213.232.112.0/22
IPv6:
2a09:7::/36
Signature Algorithm: sha256WithRSAEncryption
16:cf:b8:82:f2:c6:89:c7:0a:8a:c1:84:3b:ea:bf:67:a3:a6:
86:6b:dd:9a:9d:58:b2:f8:ed:5a:cc:a8:67:6f:1d:29:62:c8:
c8:c7:a0:97:78:b3:ba:40:3d:16:bc:3b:e8:75:89:0e:50:db:
0c:d5:2e:fe:ca:df:b6:98:c6:c2:c1:b0:bc:45:94:95:15:26:
fe:0b:02:0b:fa:3f:1c:67:35:28:74:3d:45:90:90:d7:f3:1e:
15:50:5c:b3:79:1e:f7:2f:a1:a1:96:4e:5b:77:ec:1f:5f:5e:
36:64:aa:72:d4:68:e6:8d:a5:31:e9:84:ff:31:8e:90:06:04:
a1:96:7a:0e:fd:24:0b:8d:c7:f5:84:e0:a3:ac:43:42:4a:72:
aa:aa:db:82:a8:83:7b:be:3f:59:81:1c:c9:9f:0b:4f:c1:6e:
c9:24:de:64:9f:1c:10:27:c4:1a:99:d5:d6:6d:98:2c:57:b0:
31:e8:54:9b:c7:05:cb:95:17:2c:92:6a:bb:e2:e8:02:3b:a6:
a7:96:9e:7f:4b:53:55:b5:e0:1a:c8:95:b9:fd:f7:83:b2:0a:
47:f2:74:12:e1:cb:73:88:28:c8:a7:4d:0a:da:bb:40:6f:b4:
b8:13:76:92:c6:27:80:ed:05:50:5c:d4:1b:c1:2e:78:6f:6d:
e7:4a:b1:80
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIECVGnyTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NTc2ZWIyY2M0NjJlNmU0YmYwZGU2OWI5ZjYzNDg3NWRlYmJhYWUyMB4XDTIyMDYy
NDExMTg1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDAzNDUzY2FhNzQw
ODFhODE1NTc4NDA5OTE5NDQ1MGRjYmFlN2RlMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKVmkRTO3sUN1UX2ZafyMwwEy/K4Ca+QmQRXF0+Ah0k1Lu1B
JXd+HKeMqJ5hTuhz0lEWQDH41CwT92RuN866fClNQj7Oe2dOX0r0LUzNO5fwMYvR
xBJ5sNWyfMrM3wbhnDE0c+M6VDBmQ2l6gVQlMcpx57BrfWBPRLmyM/BmBcsnBHFK
dUpZ6g+1U6egBR1LTR7w4gcV0X18APY/I+CXUSpzquKuL9x3ikT8J3hOPheoJi6h
SG+chWtbKfbAxkVi+RZw8wdCo2+puz6gl2Waaty8saAC0JtCoqPZpPlVsrTvVLLr
0ngIURn69mb02ndBACayVqkMqmf5YFxUUac86lUCAwEAAaOCAlswggJXMB0GA1Ud
DgQWBBQANFPKp0CBqBVXhAmRlEUNy6594zAfBgNVHSMEGDAWgBSldussxGLm5L8N
5pufY0h13ruq4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BYYnJMTVJpNXVTX0RlYWJuMk5JZGQ2N3F1SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODcvOTMxOTI3LTlmMzgtNDFiNi04N2ZhLTI1NGFjZDkyYjRlMS8x
L0FEUlR5cWRBZ2FnVlY0UUprWlJGRGN1dWZlTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcv
OTMxOTI3LTlmMzgtNDFiNi04N2ZhLTI1NGFjZDkyYjRlMS8xL3BYYnJMTVJpNXVT
X0RlYWJuMk5JZGQ2N3F1SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBx
BggrBgEFBQcBBwEB/wRiMGAwTgQCAAEwSAMEAi1CgAMEAi1C2AMEAi2VnAMEAi2f
MAMEAk6O5AMEAljWFAMEAFvI8AMEAFvI8gMEA5NO8AMEArB3lAMEAcFvHgMEAtXo
cDAOBAIAAjAIAwYEKgkABwAwDQYJKoZIhvcNAQELBQADggEBABbPuILyxonHCorB
hDvqv2ejpoZr3ZqdWLL47VrMqGdvHSliyMjHoJd4s7pAPRa8O+h1iQ5Q2wzVLv7K
37aYxsLBsLxFlJUVJv4LAgv6PxxnNSh0PUWQkNfzHhVQXLN5HvcvoaGWTlt37B9f
XjZkqnLUaOaNpTHphP8xjpAGBKGWeg79JAuNx/WE4KOsQ0JKcqqq24Kog3u+P1mB
HMmfC0/Bbskk3mSfHBAnxBqZ1dZtmCxXsDHoVJvHBcuVFyySarvi6AI7pqeWnn9L
U1W14BrIlbn994OyCkfydBLhy3OIKMinTQrau0BvtLgTdpLGJ4DtBVBc1BvBLnhv
bedKsYA=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-ams.rpki-client.org