Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/PQAAJVdAiHeY5HoAWgZDMSS4zng.roa
File: PQAAJVdAiHeY5HoAWgZDMSS4zng.roa (raw, json)
Hash identifier: MAbZtuoZazO26SxNjFNLsUvpF5UuwEEF9M3FfRvJ+IE=
Subject key identifier: 3D:00:00:25:57:40:88:77:98:E4:7A:00:5A:06:43:31:24:B8:CE:78
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0182D093269EF5863E6CF035DEB813A9A04E
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/PQAAJVdAiHeY5HoAWgZDMSS4zng.roa
Signing time: Wed 24 Aug 2022 15:58:00 +0000
ROA not before: Wed 24 Aug 2022 15:58:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44477
IP address blocks: 185.250.148.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.228.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d0:93:26:9e:f5:86:3e:6c:f0:35:de:b8:13:a9:a0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Aug 24 15:58:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d0000255740887798e47a005a06433124b8ce78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:69:fe:a9:84:8a:7a:34:6c:32:7e:0a:a0:cd:
ce:3a:e6:c5:18:16:43:2a:50:d9:1a:1c:85:7b:19:
a0:bb:8a:4e:67:93:55:d4:81:87:c1:d2:b8:69:6f:
4e:eb:c1:eb:39:23:07:99:20:fb:a9:7e:10:bb:7b:
77:16:ab:66:91:23:3e:79:a1:38:06:70:46:ca:ec:
a9:35:b2:56:8e:06:10:8a:51:43:71:7a:31:80:a0:
7b:fe:b9:25:86:b0:4a:ed:36:12:12:d9:b7:8f:32:
3a:73:83:f1:90:ad:7e:a7:37:ce:50:61:27:7d:c7:
3c:c2:86:c4:33:9e:20:82:b4:fe:86:b3:3b:7f:b4:
f2:4f:30:df:5c:a0:bb:f9:2a:56:33:93:f2:7a:fe:
51:23:8c:52:ad:27:d6:07:1e:52:0c:74:db:45:34:
9a:1d:92:b7:32:17:25:9f:08:bd:a2:62:d3:e5:8f:
f8:6b:34:f2:67:f8:81:a8:81:43:f0:5a:dc:d0:b5:
f7:0a:7b:8f:a0:73:29:9f:7b:96:f4:b4:bb:a2:19:
52:af:91:53:f3:90:96:84:a8:b7:0a:30:62:45:aa:
98:78:d0:14:e4:11:75:9c:c0:9f:00:0c:7b:65:27:
d9:e8:23:45:33:9d:79:a1:11:9f:c4:60:54:96:e3:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:00:00:25:57:40:88:77:98:E4:7A:00:5A:06:43:31:24:B8:CE:78
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/PQAAJVdAiHeY5HoAWgZDMSS4zng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/23
45.67.231.0/24
74.119.195.0/24
80.92.206.0/24
185.250.148.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:65:b6:dd:3e:ab:a4:d0:ec:0a:66:ba:a2:04:cf:31:cb:b5:
7e:82:fe:b5:ae:99:64:5b:85:26:2a:79:75:36:67:ad:da:22:
68:98:3c:c9:53:29:0c:db:ab:f1:9d:a4:67:53:00:c3:c8:1f:
90:cd:cb:5e:79:84:8d:a9:ca:a1:01:9e:b0:3f:bb:80:5f:13:
09:ea:e8:6f:57:77:e8:f1:90:6f:33:be:e9:f3:2c:82:6c:ac:
0f:df:e1:06:ba:b8:5c:ce:8b:d6:bf:c4:fa:e8:24:14:e4:10:
76:dc:93:c6:79:31:08:57:63:1c:8a:29:ca:a8:e5:f7:2b:aa:
cf:93:08:2d:bf:a4:ff:bf:95:be:65:b6:8a:8d:bf:a3:7c:b8:
8d:1c:0c:e8:f4:24:bf:3a:a2:30:2e:5f:b2:cf:06:88:0e:26:
91:41:d3:50:f6:94:0b:61:ab:19:87:76:f7:86:aa:d5:88:ab:
2b:a0:3f:3f:0b:a0:d0:38:7a:ce:33:8f:44:fd:04:47:c6:65:
07:be:3a:6e:1f:c3:e9:4d:70:4a:3b:e0:f5:26:75:af:fe:5d:
c7:14:23:bb:7e:72:5e:01:7f:3d:5d:51:d8:d4:0d:71:9f:8e:
2d:d1:a9:2f:e0:da:a4:30:af:28:b5:ba:ec:d4:32:2a:7f:d8:
ea:65:95:e2
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYLQkyae9YY+bPA13rgTqaBOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl
YWNkNDAwHhcNMjIwODI0MTU1ODAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDAwMDAyNTU3NDA4ODc3OThlNDdhMDA1YTA2NDMzMTI0YjhjZTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGn+qYSKejRsMn4KoM3OOubFGBZD
KlDZGhyFexmgu4pOZ5NV1IGHwdK4aW9O68HrOSMHmSD7qX4Qu3t3FqtmkSM+eaE4
BnBGyuypNbJWjgYQilFDcXoxgKB7/rklhrBK7TYSEtm3jzI6c4PxkK1+pzfOUGEn
fcc8wobEM54ggrT+hrM7f7TyTzDfXKC7+SpWM5Pyev5RI4xSrSfWBx5SDHTbRTSa
HZK3Mhclnwi9omLT5Y/4azTyZ/iBqIFD8Frc0LX3CnuPoHMpn3uW9LS7ohlSr5FT
85CWhKi3CjBiRaqYeNAU5BF1nMCfAAx7ZSfZ6CNFM515oRGfxGBUluOEIwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFD0AACVXQIh3mOR6AFoGQzEkuM54MB8GA1UdIwQY
MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt
MTE5ZWZjYmIyMDIzLzEvUFFBQUpWZEFpSGVZNUhvQVdnWkRNU1M0em5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz
LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBLUPkAwQA
LUPnAwQASnfDAwQAUFzOAwQAufqUMA0GCSqGSIb3DQEBCwUAA4IBAQBfZbbdPquk
0OwKZrqiBM8xy7V+gv61rplkW4UmKnl1Nmet2iJomDzJUykM26vxnaRnUwDDyB+Q
zcteeYSNqcqhAZ6wP7uAXxMJ6uhvV3fo8ZBvM77p8yyCbKwP3+EGurhczovWv8T6
6CQU5BB23JPGeTEIV2MciinKqOX3K6rPkwgtv6T/v5W+ZbaKjb+jfLiNHAzo9CS/
OqIwLl+yzwaIDiaRQdNQ9pQLYasZh3b3hqrViKsroD8/C6DQOHrOM49E/QRHxmUH
vjpuH8PpTXBKO+D1JnWv/l3HFCO7fnJeAX89XVHY1A1xn44t0akv4NqkMK8otbrs
1DIqf9jqZZXi
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-fra.rpki-client.org