Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/rvni4UegvCxLcXIElMTi0l-_Je0.roa
File: rvni4UegvCxLcXIElMTi0l-_Je0.roa (raw, json)
Hash identifier: UkNRR6z4CulgFf1IJ1yFbufrYFzG5nYtY5qZHu69Rvg=
Subject key identifier: AE:F9:E2:E1:47:A0:BC:2C:4B:71:72:04:94:C4:E2:D2:5F:BF:25:ED
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018461A2B7F96D938D5B6305738E4B4475C3
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/rvni4UegvCxLcXIElMTi0l-_Je0.roa
Signing time: Thu 10 Nov 2022 13:02:44 +0000
ROA not before: Thu 10 Nov 2022 13:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6233
IP address blocks: 80.66.196.0/24 maxlen: 24
141.98.196.0/22 maxlen: 24
45.11.45.0/24 maxlen: 24
94.124.116.0/22 maxlen: 24
185.200.64.0/22 maxlen: 24
194.36.242.0/24 maxlen: 24
195.245.219.0/24 maxlen: 24
45.139.193.0/24 maxlen: 24
185.184.222.0/24 maxlen: 24
45.13.197.0/24 maxlen: 24
45.13.196.0/22 maxlen: 24
45.13.196.0/24 maxlen: 24
45.130.20.0/22 maxlen: 24
79.143.140.0/22 maxlen: 24
45.87.164.0/22 maxlen: 24
195.245.242.0/24 maxlen: 24
45.87.164.0/24 maxlen: 24
195.245.241.0/24 maxlen: 24
194.104.152.0/22 maxlen: 24
45.147.48.0/22 maxlen: 24
45.153.244.0/22 maxlen: 24
194.36.24.0/24 maxlen: 24
194.36.24.0/22 maxlen: 24
45.143.232.0/22 maxlen: 24
45.143.233.0/24 maxlen: 24
185.248.87.0/24 maxlen: 24
45.143.235.0/24 maxlen: 24
45.143.234.0/24 maxlen: 24
194.169.54.0/24 maxlen: 24
194.169.54.0/23 maxlen: 24
185.194.52.0/22 maxlen: 24
185.222.216.0/21 maxlen: 24
2a09::/29 maxlen: 48
2a0d:c7c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:a2:b7:f9:6d:93:8d:5b:63:05:73:8e:4b:44:75:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Nov 10 13:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aef9e2e147a0bc2c4b71720494c4e2d25fbf25ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:4d:63:a1:c5:74:b2:9d:5f:43:38:f2:38:
66:20:e0:22:91:11:2c:47:3c:c4:fd:6b:59:aa:05:
7b:65:e0:9e:a6:fa:eb:4f:73:7f:fe:8a:0d:37:6a:
97:53:80:27:6e:27:fb:dd:01:57:ac:55:d4:54:0a:
d1:e9:8a:b7:b3:79:f7:d5:11:06:ba:99:b7:24:b6:
86:5e:5b:bf:f7:9f:e6:84:32:f4:91:a7:94:f8:c8:
67:6f:18:03:07:d5:d1:33:50:e2:72:ce:d7:97:ed:
84:27:41:bc:a7:0a:04:fa:15:4f:bd:f0:ed:97:16:
f8:69:53:7d:3d:ed:56:25:90:2a:13:93:8a:78:a0:
92:a8:8f:8f:ae:9c:91:f8:91:51:d8:c3:65:35:75:
82:52:12:47:0d:4e:5e:12:51:57:c5:b0:09:3e:78:
36:69:f2:38:de:0b:a5:4c:0b:95:af:c5:86:1e:3d:
ff:31:bc:23:49:f8:67:a3:5f:22:30:08:7c:45:df:
3c:19:87:5f:d8:c9:55:e0:09:68:6e:77:8e:d5:9c:
e3:27:44:c4:f7:dc:8f:3e:ba:3c:7f:f9:c0:d4:8b:
04:a6:18:87:fc:36:4b:ce:88:65:6a:24:cf:a9:ec:
4b:b7:a2:14:0f:a8:62:1f:c3:5d:9d:9d:81:8b:02:
23:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F9:E2:E1:47:A0:BC:2C:4B:71:72:04:94:C4:E2:D2:5F:BF:25:ED
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/rvni4UegvCxLcXIElMTi0l-_Je0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.45.0/24
45.13.196.0/22
45.87.164.0/22
45.130.20.0/22
45.139.193.0/24
45.143.232.0/22
45.147.48.0/22
45.153.244.0/22
79.143.140.0/22
80.66.196.0/24
94.124.116.0/22
141.98.196.0/22
185.184.222.0/24
185.194.52.0/22
185.200.64.0/22
185.222.216.0/21
185.248.87.0/24
194.36.24.0/22
194.36.242.0/24
194.104.152.0/22
194.169.54.0/23
195.245.219.0/24
195.245.241.0-195.245.242.255
IPv6:
2a09::/29
2a0d:c7c0::/32
Signature Algorithm: sha256WithRSAEncryption
8b:57:4c:a6:bd:84:29:f8:be:b8:21:63:ca:6c:51:75:be:fc:
f5:c4:90:df:9f:4c:b8:a4:27:8c:06:5d:65:fb:42:0b:2f:32:
21:ba:0d:40:ca:cc:d1:34:70:57:1a:79:93:dd:66:ef:69:27:
00:e7:58:88:68:87:96:bf:ea:bc:4d:46:11:89:fe:81:74:22:
17:91:6a:43:db:6b:a7:89:ee:e2:64:7b:4c:60:cb:74:bb:d0:
6b:9b:c8:cd:f4:0d:bd:f9:06:cf:48:b4:28:81:60:7c:cb:e0:
1f:2c:96:63:11:28:1f:fe:60:ec:1f:5a:59:53:43:d5:9f:0f:
5a:70:cf:b7:50:bf:c5:f0:ec:21:65:2c:3c:b2:24:67:2d:36:
4b:cd:0a:25:10:7b:f2:d4:a1:9d:6b:e4:cd:55:94:5d:62:3e:
fa:03:16:ae:af:37:18:f4:c9:8a:ef:0d:33:e7:ba:aa:99:33:
ad:81:93:37:71:2d:1a:bd:3f:b9:a4:b1:28:61:1d:8a:9c:86:
96:60:b0:b0:12:95:f2:8a:1d:ac:08:6b:4b:13:44:20:d0:30:
8a:f1:21:3a:68:ba:c7:6d:20:32:c7:db:17:f7:76:be:4a:55:
46:4d:b2:d5:57:19:81:c6:bc:11:8f:95:38:94:63:6c:d6:a2:
87:2e:d6:15
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAYRhorf5bZONW2MFc45LRHXDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjIxMTEwMTMwMjQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWY5ZTJlMTQ3YTBiYzJjNGI3MTcyMDQ5NGM0ZTJkMjVmYmYyNWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/RNY6HFdLKdX0M48jhmIOAikREs
RzzE/WtZqgV7ZeCepvrrT3N//ooNN2qXU4Anbif73QFXrFXUVArR6Yq3s3n31REG
upm3JLaGXlu/95/mhDL0kaeU+MhnbxgDB9XRM1Dics7Xl+2EJ0G8pwoE+hVPvfDt
lxb4aVN9Pe1WJZAqE5OKeKCSqI+PrpyR+JFR2MNlNXWCUhJHDU5eElFXxbAJPng2
afI43gulTAuVr8WGHj3/MbwjSfhno18iMAh8Rd88GYdf2MlV4AlobneO1ZzjJ0TE
99yPPro8f/nA1IsEphiH/DZLzohlaiTPqexLt6IUD6hiH8NdnZ2BiwIjGwIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFK754uFHoLwsS3FyBJTE4tJfvyXtMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvcnZuaTRVZWd2Q3hMY1hJRWxNVGkwbC1fSmUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBmQQCAAEwgZIDBAAt
Cy0DBAItDcQDBAItV6QDBAItghQDBAAti8EDBAItj+gDBAItkzADBAItmfQDBAJP
j4wDBABQQsQDBAJefHQDBAKNYsQDBAC5uN4DBAK5wjQDBAK5yEADBAO53tgDBAC5
+FcDBALCJBgDBADCJPIDBALCaJgDBAHCqTYDBADD9dswDAMEAMP18QMEAMP18jAU
BAIAAjAOAwUDKgkAAAMFACoNx8AwDQYJKoZIhvcNAQELBQADggEBAItXTKa9hCn4
vrghY8psUXW+/PXEkN+fTLikJ4wGXWX7QgsvMiG6DUDKzNE0cFcaeZPdZu9pJwDn
WIhoh5a/6rxNRhGJ/oF0IheRakPba6eJ7uJke0xgy3S70GubyM30Db35Bs9ItCiB
YHzL4B8slmMRKB/+YOwfWllTQ9WfD1pwz7dQv8Xw7CFlLDyyJGctNkvNCiUQe/LU
oZ1r5M1VlF1iPvoDFq6vNxj0yYrvDTPnuqqZM62BkzdxLRq9P7mksShhHYqchpZg
sLASlfKKHawIa0sTRCDQMIrxITpousdtIDLH2xf3dr5KVUZNstVXGYHGvBGPlTiU
Y2zWoocu1hU=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-ams.rpki-client.org