Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/kFZ5QbBK1H5xg1U7zajwbfie8Wk.roa
File: kFZ5QbBK1H5xg1U7zajwbfie8Wk.roa (raw, json)
Hash identifier: L7sPfZlCm6kK0JraT1jHMV0fws0Zad/zRRcKDAEX9Pc=
Subject key identifier: 90:56:79:41:B0:4A:D4:7E:71:83:55:3B:CD:A8:F0:6D:F8:9E:F1:69
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0182C3B80F0BD542891089B3520F58C9429B
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/kFZ5QbBK1H5xg1U7zajwbfie8Wk.roa
Signing time: Mon 22 Aug 2022 04:03:15 +0000
ROA not before: Mon 22 Aug 2022 04:03:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 80.66.196.0/24 maxlen: 24
80.66.199.0/24 maxlen: 24
194.104.144.0/24 maxlen: 24
45.87.92.0/24 maxlen: 24
45.87.93.0/24 maxlen: 24
95.214.166.0/24 maxlen: 24
95.214.167.0/24 maxlen: 24
45.139.192.0/24 maxlen: 24
45.139.195.0/24 maxlen: 24
45.139.193.0/24 maxlen: 24
45.139.194.0/24 maxlen: 24
45.141.44.0/24 maxlen: 24
45.141.45.0/24 maxlen: 24
45.141.46.0/24 maxlen: 24
45.141.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c3:b8:0f:0b:d5:42:89:10:89:b3:52:0f:58:c9:42:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Aug 22 04:03:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90567941b04ad47e7183553bcda8f06df89ef169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:94:5d:95:b6:61:c8:e9:9c:e6:4e:ce:79:
be:fc:ef:ac:d2:e4:c3:54:86:f6:78:90:2a:29:72:
af:dc:31:c4:d3:d4:ba:dd:ad:7d:ad:d4:bd:31:ac:
81:42:4d:aa:1a:7c:fe:2a:69:64:0e:2d:75:88:5a:
19:6e:7a:d4:db:40:8f:e0:f3:0a:cd:7c:b3:31:3a:
e9:3d:19:5f:5b:28:2a:7d:51:fb:36:49:24:e1:7a:
ac:81:5b:92:63:6f:d8:93:30:3f:ab:06:29:17:7e:
12:97:64:16:d6:9c:69:5b:d0:e6:f7:6c:82:19:de:
b8:76:d7:0c:d2:66:d5:d4:9e:f3:ec:04:0e:76:56:
5d:8c:4f:fa:f4:35:f0:a3:a0:6e:3c:ac:9a:8c:a7:
4a:6c:fe:5f:68:1b:67:ff:20:a0:2f:e2:b4:f9:c1:
59:68:7a:98:bf:e8:23:38:cb:53:0f:58:f9:ac:ce:
63:c5:87:14:00:9f:19:dd:7d:7e:53:d4:78:19:17:
6d:a5:61:33:bf:ea:9a:55:1c:27:32:23:3b:f5:71:
82:76:cc:ab:f8:28:25:e1:cb:26:64:e2:19:3f:0d:
65:cc:3f:8b:19:44:03:32:44:52:bb:e3:0b:fb:ec:
13:fc:28:d0:80:cc:12:e1:aa:72:67:5f:79:23:cc:
9b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:56:79:41:B0:4A:D4:7E:71:83:55:3B:CD:A8:F0:6D:F8:9E:F1:69
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/kFZ5QbBK1H5xg1U7zajwbfie8Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.92.0/23
45.139.192.0/22
45.141.44.0/22
80.66.196.0/24
80.66.199.0/24
95.214.166.0/23
194.104.144.0/24
Signature Algorithm: sha256WithRSAEncryption
17:41:70:7d:fa:13:20:68:16:a9:a9:a8:14:6d:4c:08:a4:a1:
76:68:ee:a8:a7:f0:a2:be:c8:d3:a6:cb:75:55:7a:46:f7:95:
a4:4b:3f:37:6b:df:98:74:1c:67:cc:23:d2:09:8b:14:70:29:
db:27:17:d7:17:0b:c7:dd:b7:10:1c:19:7a:89:ea:0e:f2:9c:
19:54:0e:fe:79:2b:19:7d:76:65:88:2d:5c:8d:10:33:c3:3d:
7d:13:72:83:0d:8e:90:d2:23:86:f7:0b:6d:29:f5:15:53:7a:
81:44:43:40:7b:6e:8c:d4:ca:a5:06:33:a8:45:c5:19:55:b8:
77:3b:3c:a3:32:ab:e7:c8:61:ab:22:93:18:90:55:e5:eb:c6:
c6:f0:97:44:90:33:32:71:92:68:b1:90:9d:3d:a4:21:4e:7b:
14:ed:15:dd:1a:77:79:4a:8a:e3:47:7a:92:6b:4a:51:19:76:
a0:a4:8b:f1:01:f3:e3:11:f8:36:9d:f0:46:7f:85:58:a9:e3:
c8:ba:f5:f4:2c:9f:71:6d:bd:fe:fe:e9:11:8c:3c:23:d6:a4:
e6:90:05:a1:64:3d:b6:90:6e:f2:0f:a5:13:76:9b:f7:28:09:
34:4a:11:ba:ac:f4:47:72:b3:ce:df:dc:c6:8d:ba:34:b4:77:
33:b3:8d:b2
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYLDuA8L1UKJEImzUg9YyUKbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjIwODIyMDQwMzE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDU2Nzk0MWIwNGFkNDdlNzE4MzU1M2JjZGE4ZjA2ZGY4OWVmMTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveOUXZW2YcjpnOZOznm+/O+s0uTD
VIb2eJAqKXKv3DHE09S63a19rdS9MayBQk2qGnz+KmlkDi11iFoZbnrU20CP4PMK
zXyzMTrpPRlfWygqfVH7Nkkk4XqsgVuSY2/YkzA/qwYpF34Sl2QW1pxpW9Dm92yC
Gd64dtcM0mbV1J7z7AQOdlZdjE/69DXwo6BuPKyajKdKbP5faBtn/yCgL+K0+cFZ
aHqYv+gjOMtTD1j5rM5jxYcUAJ8Z3X1+U9R4GRdtpWEzv+qaVRwnMiM79XGCdsyr
+Cgl4csmZOIZPw1lzD+LGUQDMkRSu+ML++wT/CjQgMwS4apyZ195I8ybeQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFJBWeUGwStR+cYNVO82o8G34nvFpMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEva0ZaNVFiQksxSDV4ZzFVN3phandiZmllOFdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBLVdcAwQC
LYvAAwQCLY0sAwQAUELEAwQAUELHAwQBX9amAwQAwmiQMA0GCSqGSIb3DQEBCwUA
A4IBAQAXQXB9+hMgaBapqagUbUwIpKF2aO6op/CivsjTpst1VXpG95WkSz83a9+Y
dBxnzCPSCYsUcCnbJxfXFwvH3bcQHBl6ieoO8pwZVA7+eSsZfXZliC1cjRAzwz19
E3KDDY6Q0iOG9wttKfUVU3qBRENAe26M1MqlBjOoRcUZVbh3OzyjMqvnyGGrIpMY
kFXl68bG8JdEkDMycZJosZCdPaQhTnsU7RXdGnd5SorjR3qSa0pRGXagpIvxAfPj
Efg2nfBGf4VYqePIuvX0LJ9xbb3+/ukRjDwj1qTmkAWhZD22kG7yD6UTdpv3KAk0
ShG6rPRHcrPO39zGjbo0tHczs42y
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-ams.rpki-client.org