Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/E3c6dn2zIpCtVJ44K90ldygwvOQ.roa
File: E3c6dn2zIpCtVJ44K90ldygwvOQ.roa (raw, json)
Hash identifier: bDlKLtrRsBZawX3xQQ4CHPA4YQ2t7RZ4sP3Sxxjiv4s=
Subject key identifier: 13:77:3A:76:7D:B3:22:90:AD:54:9E:38:2B:DD:25:77:28:30:BC:E4
Certificate issuer: /CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Certificate serial: 018416034D3227EFC7E6CBF08D36C36D706B
Authority key identifier: B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/E3c6dn2zIpCtVJ44K90ldygwvOQ.roa
Signing time: Wed 26 Oct 2022 20:37:05 +0000
ROA not before: Wed 26 Oct 2022 20:37:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198317
IP address blocks: 195.88.145.0/24 maxlen: 24
195.88.144.0/24 maxlen: 24
195.88.144.0/23 maxlen: 23
91.200.105.0/24 maxlen: 24
91.200.104.0/24 maxlen: 24
91.200.104.0/22 maxlen: 22
91.200.104.0/23 maxlen: 23
185.235.125.0/24 maxlen: 24
185.235.124.0/22 maxlen: 22
185.235.124.0/23 maxlen: 23
185.235.124.0/24 maxlen: 24
185.235.126.0/23 maxlen: 23
185.235.127.0/24 maxlen: 24
185.235.126.0/24 maxlen: 24
91.200.107.0/24 maxlen: 24
91.200.106.0/24 maxlen: 24
91.200.106.0/23 maxlen: 23
155.133.58.0/24 maxlen: 24
155.133.58.0/23 maxlen: 23
155.133.56.0/23 maxlen: 23
155.133.56.0/22 maxlen: 22
155.133.57.0/24 maxlen: 24
155.133.56.0/24 maxlen: 24
155.133.59.0/24 maxlen: 24
185.96.123.0/24 maxlen: 24
185.96.122.0/23 maxlen: 23
185.96.122.0/24 maxlen: 24
185.96.121.0/24 maxlen: 24
185.96.120.0/22 maxlen: 22
185.96.120.0/24 maxlen: 24
185.96.120.0/23 maxlen: 23
91.239.198.0/24 maxlen: 24
91.239.197.0/24 maxlen: 24
91.239.198.0/23 maxlen: 23
91.239.196.0/23 maxlen: 23
91.239.196.0/22 maxlen: 22
91.239.196.0/24 maxlen: 24
91.239.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:16:03:4d:32:27:ef:c7:e6:cb:f0:8d:36:c3:6d:70:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Validity
Not Before: Oct 26 20:37:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13773a767db32290ad549e382bdd25772830bce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:a4:70:00:e4:a1:90:33:f0:22:f8:a1:be:
a7:c1:27:15:96:68:bb:07:2b:60:35:28:21:53:0c:
08:91:ac:aa:df:51:c8:d1:a6:86:c9:23:7d:aa:e2:
60:da:31:06:32:ee:ff:45:98:95:03:83:e6:1c:5b:
12:bc:67:b8:20:fe:90:6a:39:00:45:74:64:d4:b5:
b4:09:8b:57:4f:ad:4b:fd:79:a9:57:fc:f2:95:25:
f9:44:6a:9c:e5:f0:99:ec:a1:c0:9f:52:90:6b:ea:
76:f2:3f:2e:04:e7:f8:0a:c7:54:b9:27:d2:0b:2f:
e4:cf:21:a0:53:e6:1b:fe:ed:1a:bc:61:60:26:f6:
2c:b3:24:f3:fb:c6:4d:ed:1f:f3:27:06:c5:61:f4:
fc:47:87:15:a7:37:67:a6:91:be:b9:cd:ec:6f:ee:
0c:3f:62:54:7c:8b:53:64:34:95:11:12:30:ce:8f:
16:89:5b:11:d3:fe:c6:2e:95:19:3a:14:04:ad:67:
74:c4:8c:29:a5:47:91:5e:27:65:c9:c4:2e:5d:98:
4c:44:a4:62:b8:b3:c9:47:4a:2d:5c:a5:1b:26:fc:
ec:08:21:3f:d5:64:bd:30:5e:e3:49:df:94:c3:e3:
fa:47:ff:3e:72:b2:d2:64:d4:80:bd:af:35:9b:c2:
e6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:77:3A:76:7D:B3:22:90:AD:54:9E:38:2B:DD:25:77:28:30:BC:E4
X509v3 Authority Key Identifier:
keyid:B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/E3c6dn2zIpCtVJ44K90ldygwvOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.104.0/22
91.239.196.0/22
155.133.56.0/22
185.96.120.0/22
185.235.124.0/22
195.88.144.0/23
Signature Algorithm: sha256WithRSAEncryption
15:31:a0:cf:5a:e8:15:a0:b6:98:1a:1c:fe:9e:7a:21:54:33:
cc:f4:51:d4:3c:bb:5b:05:4d:02:96:21:e9:a8:a6:89:24:77:
df:c5:0e:72:4c:b3:b5:09:13:de:34:47:9a:28:d5:cf:92:c4:
31:f6:fe:a6:cc:13:51:3d:3b:89:ad:76:f8:d7:1c:68:02:a1:
38:d5:41:d5:b4:6e:21:1d:cf:60:fb:2b:5d:5a:88:e2:f9:72:
d0:c2:a0:df:4f:93:2f:55:ea:eb:b9:14:aa:52:9b:86:8f:fb:
9c:d9:62:b8:22:fa:d2:60:f2:ec:ce:6f:b7:c8:e3:77:e2:7d:
e6:82:2a:09:b2:ac:d8:73:dd:9d:f5:01:46:78:8d:6c:c5:df:
55:3d:1b:25:2b:ea:75:13:95:59:ba:85:bc:ba:ad:39:ad:0e:
47:ea:44:97:0a:48:10:34:1c:29:f3:83:66:f6:61:8c:5d:3f:
b8:94:4d:c0:b1:77:14:7a:fc:4f:71:f6:c1:e7:37:b4:03:76:
a3:45:e1:8a:90:2d:c9:26:0f:d4:ae:a1:a0:fa:7b:e3:3c:29:
3e:d7:84:e4:93:2e:8a:04:79:9a:c2:05:de:7f:1b:29:54:e1:
b0:e0:6e:38:f2:13:47:f5:96:70:83:79:e6:d9:0b:07:d9:4c:
b3:0f:d0:0a
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYQWA00yJ+/H5svwjTbDbXBrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NWY1NTYwZDc5ZjA0YTkyZDdhMTUwZjNlZDhkYTQzMDhh
YmVhMzMwHhcNMjIxMDI2MjAzNzA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzc3M2E3NjdkYjMyMjkwYWQ1NDllMzgyYmRkMjU3NzI4MzBiY2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd2kcADkoZAz8CL4ob6nwScVlmi7
BytgNSghUwwIkayq31HI0aaGySN9quJg2jEGMu7/RZiVA4PmHFsSvGe4IP6QajkA
RXRk1LW0CYtXT61L/XmpV/zylSX5RGqc5fCZ7KHAn1KQa+p28j8uBOf4CsdUuSfS
Cy/kzyGgU+Yb/u0avGFgJvYssyTz+8ZN7R/zJwbFYfT8R4cVpzdnppG+uc3sb+4M
P2JUfItTZDSVERIwzo8WiVsR0/7GLpUZOhQErWd0xIwppUeRXidlycQuXZhMRKRi
uLPJR0otXKUbJvzsCCE/1WS9MF7jSd+Uw+P6R/8+crLSZNSAva81m8LmAwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFBN3OnZ9syKQrVSeOCvdJXcoMLzkMB8GA1UdIwQY
MBaAFLRfVWDXnwSpLXoVDz7Y2kMIq+ozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEY5VllOZWZCS2t0ZWhVUFB0amFRd2lyNmpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83YjE2OWQtZmMwOS00OWJiLTk2Njkt
YzMyMjI0NzRlZWYxLzEvRTNjNmRuMnpJcEN0Vko0NEs5MGxkeWd3dk9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy83YjE2OWQtZmMwOS00OWJiLTk2NjktYzMyMjI0NzRlZWYx
LzEvdEY5VllOZWZCS2t0ZWhVUFB0amFRd2lyNmpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCW8hoAwQC
W+/EAwQCm4U4AwQCuWB4AwQCuet8AwQBw1iQMA0GCSqGSIb3DQEBCwUAA4IBAQAV
MaDPWugVoLaYGhz+nnohVDPM9FHUPLtbBU0CliHpqKaJJHffxQ5yTLO1CRPeNEea
KNXPksQx9v6mzBNRPTuJrXb41xxoAqE41UHVtG4hHc9g+ytdWoji+XLQwqDfT5Mv
VerruRSqUpuGj/uc2WK4IvrSYPLszm+3yON34n3mgioJsqzYc92d9QFGeI1sxd9V
PRslK+p1E5VZuoW8uq05rQ5H6kSXCkgQNBwp84Nm9mGMXT+4lE3AsXcUevxPcfbB
5ze0A3ajReGKkC3JJg/UrqGg+nvjPCk+14Tkky6KBHmawgXefxspVOGw4G448hNH
9ZZwg3nm2QsH2UyzD9AK
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:50 2025 by rpki-client