Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/REY_6FnWUGa3_hRD_0Cjy6n5kpQ.roa
File: REY_6FnWUGa3_hRD_0Cjy6n5kpQ.roa (raw, json)
Hash identifier: WExTR8lbuQXPXG2E1KyFrEVWdQ3BwHxfCkRI96V9ztg=
Subject key identifier: 44:46:3F:E8:59:D6:50:66:B7:FE:14:43:FF:40:A3:CB:A9:F9:92:94
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01854D8F1D41345A7F28FB3D1A132F2BCF9F
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/REY_6FnWUGa3_hRD_0Cjy6n5kpQ.roa
Signing time: Mon 26 Dec 2022 08:31:42 +0000
ROA not before: Mon 26 Dec 2022 08:31:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4785
IP address blocks: 45.14.104.0/24 maxlen: 24
45.14.105.0/24 maxlen: 24
45.14.106.0/24 maxlen: 24
45.14.107.0/24 maxlen: 24
45.142.124.0/22 maxlen: 24
45.87.92.0/24 maxlen: 24
45.87.94.0/24 maxlen: 24
45.87.93.0/24 maxlen: 24
45.87.95.0/24 maxlen: 24
149.62.44.0/24 maxlen: 24
185.184.223.0/24 maxlen: 24
45.141.44.0/22 maxlen: 24
45.131.155.0/24 maxlen: 24
45.8.112.0/22 maxlen: 24
194.114.136.0/24 maxlen: 24
195.245.229.0/24 maxlen: 24
195.245.241.0/24 maxlen: 24
195.245.242.0/24 maxlen: 24
194.104.144.0/24 maxlen: 24
194.36.24.0/24 maxlen: 24
185.248.84.0/24 maxlen: 24
45.14.71.0/24 maxlen: 24
45.14.70.0/24 maxlen: 24
45.135.40.0/24 maxlen: 24
45.135.42.0/24 maxlen: 24
45.135.41.0/24 maxlen: 24
45.135.43.0/24 maxlen: 24
45.8.221.0/24 maxlen: 24
45.8.223.0/24 maxlen: 24
45.8.220.0/24 maxlen: 24
45.8.222.0/24 maxlen: 24
91.200.243.0/24 maxlen: 24
91.200.242.0/24 maxlen: 24
193.32.148.0/22 maxlen: 24
45.89.216.0/22 maxlen: 24
2a10:480::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4d:8f:1d:41:34:5a:7f:28:fb:3d:1a:13:2f:2b:cf:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Dec 26 08:31:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44463fe859d65066b7fe1443ff40a3cba9f99294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:22:0c:8f:30:1e:2f:57:ce:c8:9e:46:17:
be:41:d2:6d:3d:da:ae:c1:db:ba:0c:91:f0:89:12:
8d:5b:4c:9c:87:f6:bf:c1:de:21:1e:be:94:94:c1:
9c:49:35:80:d8:38:9d:ff:72:94:7d:c7:01:53:86:
fc:4c:b4:73:12:12:18:0a:b0:bc:a1:8a:c3:a2:aa:
2f:e9:fd:8f:9a:df:fe:c7:d9:fe:97:f6:da:fc:f1:
55:4b:ad:cf:ef:eb:35:1d:2b:f3:9a:9d:69:6e:0f:
90:2d:63:88:38:81:e9:cc:b5:69:4d:c1:7a:c6:8d:
cf:eb:a0:5b:41:6d:f2:9a:51:2c:5b:cc:2c:09:67:
07:4f:14:d9:e5:e1:2f:57:39:e2:92:1d:b9:26:e8:
43:e4:68:95:60:f2:48:17:09:87:26:c4:f6:25:9e:
db:25:b5:5e:9b:77:98:ab:a8:7c:f9:62:44:97:d5:
4b:ea:ea:8c:bf:89:7f:fd:62:a2:19:82:40:a8:72:
2a:78:7e:22:bc:37:d5:c1:f3:8c:0b:64:64:3b:3a:
2b:66:45:aa:40:02:70:0f:b3:7a:46:0b:f5:60:67:
21:b5:e2:40:97:6d:a3:99:8d:97:98:2b:b6:49:0f:
81:eb:dc:cd:5c:69:ae:68:3a:bf:db:69:c8:bc:29:
bf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:46:3F:E8:59:D6:50:66:B7:FE:14:43:FF:40:A3:CB:A9:F9:92:94
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/REY_6FnWUGa3_hRD_0Cjy6n5kpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.112.0/22
45.8.220.0/22
45.14.70.0/23
45.14.104.0/22
45.87.92.0/22
45.89.216.0/22
45.131.155.0/24
45.135.40.0/22
45.141.44.0/22
45.142.124.0/22
91.200.242.0/23
149.62.44.0/24
185.184.223.0/24
185.248.84.0/24
193.32.148.0/22
194.36.24.0/24
194.104.144.0/24
194.114.136.0/24
195.245.229.0/24
195.245.241.0-195.245.242.255
IPv6:
2a10:480::/29
Signature Algorithm: sha256WithRSAEncryption
54:ab:87:73:0c:47:ff:c0:36:39:14:f2:87:e6:23:97:6e:66:
b5:e9:f8:fa:f7:a6:05:07:9f:27:18:01:d1:51:b6:31:49:c9:
a8:05:eb:96:b5:b8:05:6c:53:46:25:b0:e9:53:26:68:e0:22:
83:69:4e:0f:cf:de:32:67:ed:5a:c0:7f:f9:b7:a4:00:b7:19:
cb:eb:b4:8b:ef:f1:95:8b:28:ed:36:24:77:ff:ba:0d:1a:28:
74:9c:08:f1:db:0c:74:1a:31:af:46:85:ac:da:5a:fd:d3:d6:
73:b5:be:8e:b1:d9:f4:2d:c5:fe:7d:1b:65:6e:c2:e8:ae:5e:
5a:9c:18:37:f9:ac:5f:41:42:c3:76:8d:10:fc:8c:e6:4e:13:
8f:61:d0:56:4e:23:69:7c:13:43:48:49:cb:4d:ba:fb:f4:28:
6e:3b:ab:07:b6:37:6e:83:4f:32:51:47:85:cb:c8:01:e9:35:
a3:e4:6d:24:17:98:3f:e4:2e:aa:06:e0:f4:ee:16:42:64:3e:
63:bc:41:7f:6a:fc:1d:c3:de:31:47:7d:9e:9e:20:40:01:c6:
2c:1e:90:0a:8c:15:96:76:7a:04:6f:22:04:fa:fc:73:0f:d4:
b3:a4:a4:4c:02:10:93:4c:aa:77:48:e0:f7:72:4b:3a:62:b2:
24:ba:38:59
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgISAYVNjx1BNFp/KPs9GhMvK8+fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjIxMjI2MDgzMTQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDQ2M2ZlODU5ZDY1MDY2YjdmZTE0NDNmZjQwYTNjYmE5Zjk5Mjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1EiDI8wHi9XzsieRhe+QdJtPdqu
wdu6DJHwiRKNW0ych/a/wd4hHr6UlMGcSTWA2Did/3KUfccBU4b8TLRzEhIYCrC8
oYrDoqov6f2Pmt/+x9n+l/ba/PFVS63P7+s1HSvzmp1pbg+QLWOIOIHpzLVpTcF6
xo3P66BbQW3ymlEsW8wsCWcHTxTZ5eEvVznikh25JuhD5GiVYPJIFwmHJsT2JZ7b
JbVem3eYq6h8+WJEl9VL6uqMv4l//WKiGYJAqHIqeH4ivDfVwfOMC2RkOzorZkWq
QAJwD7N6Rgv1YGchteJAl22jmY2XmCu2SQ+B69zNXGmuaDq/22nIvCm/7QIDAQAB
o4IClzCCApMwHQYDVR0OBBYEFERGP+hZ1lBmt/4UQ/9Ao8up+ZKUMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvUkVZXzZGbldVR2EzX2hSRF8wQ2p5Nm41a3BRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGsBggrBgEFBQcBBwEB/wSBnDCBmTCBhwQCAAEwgYADBAIt
CHADBAItCNwDBAEtDkYDBAItDmgDBAItV1wDBAItWdgDBAAtg5sDBAIthygDBAIt
jSwDBAItjnwDBAFbyPIDBACVPiwDBAC5uN8DBAC5+FQDBALBIJQDBADCJBgDBADC
aJADBADCcogDBADD9eUwDAMEAMP18QMEAMP18jANBAIAAjAHAwUDKhAEgDANBgkq
hkiG9w0BAQsFAAOCAQEAVKuHcwxH/8A2ORTyh+Yjl25mten4+vemBQefJxgB0VG2
MUnJqAXrlrW4BWxTRiWw6VMmaOAig2lOD8/eMmftWsB/+bekALcZy+u0i+/xlYso
7TYkd/+6DRoodJwI8dsMdBoxr0aFrNpa/dPWc7W+jrHZ9C3F/n0bZW7C6K5eWpwY
N/msX0FCw3aNEPyM5k4Tj2HQVk4jaXwTQ0hJy026+/QobjurB7Y3boNPMlFHhcvI
Aek1o+RtJBeYP+Quqgbg9O4WQmQ+Y7xBf2r8HcPeMUd9np4gQAHGLB6QCowVlnZ6
BG8iBPr8cw/Us6SkTAIQk0yqd0jg93JLOmKyJLo4WQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:59 2023 by rpki-client on console-fra.rpki-client.org