Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/2SkWz6_B1LjQaAdM17IPt5pNRt8.roa
File: 2SkWz6_B1LjQaAdM17IPt5pNRt8.roa (raw, json)
Hash identifier: 4w95wla5W/yjX42H2unc2ofMTrMF8JiwQVdl9qMlTtY=
Subject key identifier: D9:29:16:CF:AF:C1:D4:B8:D0:68:07:4C:D7:B2:0F:B7:9A:4D:46:DF
Certificate issuer: /CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Certificate serial: 09B51E38
Authority key identifier: F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/2SkWz6_B1LjQaAdM17IPt5pNRt8.roa
Signing time: Fri 27 May 2022 13:34:13 +0000
ROA not before: Fri 27 May 2022 13:34:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44684
IP address blocks: 176.126.240.0/21 maxlen: 24
185.101.96.0/24 maxlen: 24
195.10.223.0/24 maxlen: 24
45.139.80.0/22 maxlen: 22
45.139.80.0/24 maxlen: 24
93.93.128.0/21 maxlen: 24
185.47.60.0/22 maxlen: 22
46.235.224.0/21 maxlen: 24
2a04:ad80::/47 maxlen: 48
2a00:1098::/32 maxlen: 48
2a06:1c80::/29 maxlen: 29
2a04:ad80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162864696 (0x9b51e38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Validity
Not Before: May 27 13:34:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d92916cfafc1d4b8d068074cd7b20fb79a4d46df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d9:0b:52:e5:29:d7:ba:06:06:dd:5e:38:85:
75:c6:2d:a5:80:20:ba:f1:78:00:ff:aa:4b:c0:ed:
b6:6a:14:a6:10:ae:bc:1a:13:15:ea:6f:d8:e3:3c:
3b:61:b1:ec:86:9b:d6:96:db:b5:a2:3d:f5:a1:1f:
bf:b8:f5:4e:4d:a3:f6:2e:3c:7f:65:c6:a3:0c:74:
51:78:b8:0b:c2:0c:11:eb:21:01:73:d7:11:a6:e8:
1d:51:34:26:47:a0:52:81:6b:40:9b:64:e0:70:2e:
8a:13:3b:9b:bb:b9:8d:41:46:af:c1:08:a2:39:8e:
24:88:e6:13:b7:12:2e:e5:45:0b:48:33:30:f4:c7:
9d:66:bc:21:f3:f5:96:b3:15:49:07:1f:db:32:e1:
df:b6:83:58:d4:e5:27:bf:b2:5a:ef:47:d2:4c:29:
1b:0e:f6:94:12:6d:cb:22:d5:12:c0:61:ff:58:bd:
a7:7c:26:7d:61:34:63:8f:9f:54:60:b3:46:64:0e:
80:02:7f:a8:5d:39:8d:c4:7d:a0:05:cb:dc:d0:f5:
e7:67:41:c6:f3:fb:91:7e:14:32:c8:34:e7:45:83:
27:17:2a:43:ef:0c:53:10:65:a4:6f:d3:bd:50:f7:
00:b0:e5:09:bc:21:6e:3c:68:6d:f5:e5:fb:0d:dd:
c3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:29:16:CF:AF:C1:D4:B8:D0:68:07:4C:D7:B2:0F:B7:9A:4D:46:DF
X509v3 Authority Key Identifier:
keyid:F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/2SkWz6_B1LjQaAdM17IPt5pNRt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.80.0/22
46.235.224.0/21
93.93.128.0/21
176.126.240.0/21
185.47.60.0/22
185.101.96.0/24
195.10.223.0/24
IPv6:
2a00:1098::/32
2a04:ad80::/29
2a06:1c80::/29
Signature Algorithm: sha256WithRSAEncryption
55:c7:13:e5:81:73:84:fa:0d:75:8d:84:98:3e:36:e7:16:4b:
28:ae:6f:37:ef:52:a6:7a:61:5d:43:94:74:1b:0d:b2:d4:1f:
d4:9e:61:1e:2c:b0:ac:ba:b5:09:13:0f:d5:ee:b7:24:a1:bd:
45:bf:b9:9b:0b:cd:52:49:36:f7:b5:74:d1:7b:8a:37:9a:09:
38:71:8f:2c:9c:d0:36:3b:ee:e1:79:a6:73:5f:da:c6:6b:14:
42:53:17:6a:56:e4:f4:75:fc:32:30:ee:d1:03:6d:64:ec:23:
c8:97:e2:23:ad:ea:90:d8:1e:7d:ae:ab:e4:ef:91:60:5e:ed:
69:21:fa:c5:3d:2d:27:13:a3:cd:e5:93:6f:ee:f0:6f:ac:df:
55:b0:b2:f2:4c:a8:e5:bc:f4:89:1f:e7:88:f5:6d:af:7d:fe:
33:e6:31:12:e6:16:3a:ca:5b:9a:49:d4:d2:92:fc:58:27:fd:
33:bb:5c:f4:9b:6a:20:cf:a7:9d:9f:12:1b:dd:4c:dd:39:20:
a6:09:5a:ef:07:80:8e:dc:cf:29:18:19:b7:86:d9:57:ae:04:
5f:6b:1d:5c:f3:26:13:90:26:86:d9:84:b0:4b:c3:d4:a0:6a:
71:ef:94:dd:f3:11:0b:de:3b:80:d6:f0:a6:6b:76:88:fc:78:
ff:32:8b:bb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIECbUeODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ODFmYzhjODI5ODYzMTBjNWY2YTliNTZmYjc2YjZiZDk4NzdmY2MwMB4XDTIyMDUy
NzEzMzQxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDkyOTE2Y2ZhZmMx
ZDRiOGQwNjgwNzRjZDdiMjBmYjc5YTRkNDZkZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMrZC1LlKde6BgbdXjiFdcYtpYAguvF4AP+qS8DttmoUphCu
vBoTFepv2OM8O2Gx7Iab1pbbtaI99aEfv7j1Tk2j9i48f2XGowx0UXi4C8IMEesh
AXPXEaboHVE0JkegUoFrQJtk4HAuihM7m7u5jUFGr8EIojmOJIjmE7cSLuVFC0gz
MPTHnWa8IfP1lrMVSQcf2zLh37aDWNTlJ7+yWu9H0kwpGw72lBJtyyLVEsBh/1i9
p3wmfWE0Y4+fVGCzRmQOgAJ/qF05jcR9oAXL3ND152dBxvP7kX4UMsg050WDJxcq
Q+8MUxBlpG/TvVD3ALDlCbwhbjxobfXl+w3dw20CAwEAAaOCAkwwggJIMB0GA1Ud
DgQWBBTZKRbPr8HUuNBoB0zXsg+3mk1G3zAfBgNVHSMEGDAWgBT4H8jIKYYxDF9q
m1b7dra9mHf8wDAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtQl9JeUNtR01ReGZhcHRXLTNhMnZaaDNfTUEuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzhmLzNlNTljOS05ZjAxLTQ1NjItOTIxZC01MTNjYThlNmNlY2Uv
MS8yU2tXejZfQjFMalFhQWRNMTdJUHQ1cE5SdDgucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhm
LzNlNTljOS05ZjAxLTQ1NjItOTIxZC01MTNjYThlNmNlY2UvMS8xLUJfSXlDbUdN
UXhmYXB0Vy0zYTJ2WmgzX01BLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MGAGCCsGAQUFBwEHAQH/BFEwTzAwBAIAATAqAwQCLYtQAwQDLuvgAwQDXV2AAwQD
sH7wAwQCuS88AwQAuWVgAwQAwwrfMBsEAgACMBUDBQAqABCYAwUDKgStgAMFAyoG
HIAwDQYJKoZIhvcNAQELBQADggEBAFXHE+WBc4T6DXWNhJg+NucWSyiubzfvUqZ6
YV1DlHQbDbLUH9SeYR4ssKy6tQkTD9XutyShvUW/uZsLzVJJNve1dNF7ijeaCThx
jyyc0DY77uF5pnNf2sZrFEJTF2pW5PR1/DIw7tEDbWTsI8iX4iOt6pDYHn2uq+Tv
kWBe7Wkh+sU9LScTo83lk2/u8G+s31WwsvJMqOW89Ikf54j1ba99/jPmMRLmFjrK
W5pJ1NKS/Fgn/TO7XPSbaiDPp52fEhvdTN05IKYJWu8HgI7czykYGbeG2VeuBF9r
HVzzJhOQJobZhLBLw9SganHvlN3zEQveO4DW8KZrdoj8eP8yi7s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-fra.rpki-client.org