Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/CM-4W-hPjosvlfaXuaVUDo3vtv4.roa
File: CM-4W-hPjosvlfaXuaVUDo3vtv4.roa (raw, json)
Hash identifier: mMQB38kaZsreVDm5JaGM05Z7PXI6xTMd/we7APZFVD0=
Subject key identifier: 08:CF:B8:5B:E8:4F:8E:8B:2F:95:F6:97:B9:A5:54:0E:8D:EF:B6:FE
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185437F11F16DE341E028FE33A14304B859
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/CM-4W-hPjosvlfaXuaVUDo3vtv4.roa
Signing time: Sat 24 Dec 2022 09:37:59 +0000
ROA not before: Sat 24 Dec 2022 09:37:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 91.217.250.0/24 maxlen: 24
91.217.249.0/24 maxlen: 24
45.89.32.0/22 maxlen: 24
84.245.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:43:7f:11:f1:6d:e3:41:e0:28:fe:33:a1:43:04:b8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Dec 24 09:37:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08cfb85be84f8e8b2f95f697b9a5540e8defb6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:57:c6:d2:6a:06:b2:76:82:d2:5d:24:3a:02:
03:a5:d3:7d:29:a1:13:ee:97:5e:36:31:00:fd:8d:
30:7d:b3:35:ec:f3:41:bb:a9:be:6b:ed:6a:00:87:
70:5c:74:9f:e0:02:bd:8a:e0:04:ba:4a:40:d9:4b:
81:c0:e6:72:64:98:52:af:91:46:91:73:38:27:6c:
8a:e7:2b:de:c8:a8:39:e4:e8:61:f2:2c:05:b3:3e:
6e:36:18:16:b0:4a:06:f2:5f:ad:58:df:09:6a:64:
e8:2d:f5:fd:a3:95:2d:ce:da:c0:12:5c:97:da:44:
df:2c:11:88:7a:f6:fc:90:ae:c5:be:b9:50:e2:3b:
6a:d9:80:33:4e:1f:df:96:0e:0c:01:c4:7e:9f:1f:
1e:55:f8:53:81:8f:f9:fa:40:4e:7f:f1:ad:20:a0:
77:9e:cd:9e:60:e0:f6:ca:04:9a:30:4c:92:f1:3e:
20:ab:da:b2:04:be:dc:f2:6e:f1:67:b9:0a:74:29:
8e:77:ee:d8:1e:92:b6:ae:f7:3d:cf:e7:64:d9:e8:
d7:d7:1a:25:65:78:1c:0c:0b:df:db:48:a9:ee:76:
05:bc:d1:5c:37:be:a4:07:60:9b:09:1b:50:bb:d1:
d9:9f:83:63:b4:31:4b:31:34:c3:b2:3e:4a:7f:a2:
2c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CF:B8:5B:E8:4F:8E:8B:2F:95:F6:97:B9:A5:54:0E:8D:EF:B6:FE
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/CM-4W-hPjosvlfaXuaVUDo3vtv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.32.0/22
84.245.57.0/24
91.217.249.0-91.217.250.255
Signature Algorithm: sha256WithRSAEncryption
1a:97:0c:f5:8e:89:47:1f:89:71:75:14:e7:49:09:28:46:ce:
b8:a8:fa:2e:48:01:0a:02:4e:7e:b6:be:8b:bc:61:c5:67:ec:
0a:55:44:d0:6a:81:17:4d:47:36:79:ac:c8:f8:2e:a4:91:27:
12:a5:43:2a:6a:72:97:0d:6b:a0:14:99:88:72:61:f3:49:2b:
33:df:a3:d8:be:8a:b1:e9:c0:47:69:29:7e:29:92:d6:2a:9f:
ff:46:fe:a4:78:de:38:6e:84:2b:35:36:4f:1b:90:71:67:8b:
79:7d:f5:9a:35:e8:2e:42:ce:73:30:6a:b1:84:f7:20:b3:80:
fd:c4:26:00:35:d4:b7:e1:57:6a:5e:79:83:7e:6d:b9:a1:52:
a6:92:19:e8:03:df:cb:b0:3c:78:9e:d4:0c:e2:f8:c1:e3:55:
ca:02:11:ad:c9:41:8f:bc:39:a7:81:d5:2c:08:30:bf:c8:78:
29:9c:51:12:80:ff:81:1d:61:ac:8a:a2:b0:24:b9:fd:c5:10:
60:11:2b:7a:c4:29:b7:4e:12:d7:5c:dd:22:22:b7:13:f7:00:
06:2f:d3:91:55:e5:47:ed:84:2e:2c:8f:b7:e6:81:cf:42:1d:
b9:f0:4a:b9:d5:50:bb:12:71:86:c6:49:15:77:f3:b3:9b:dc:
d0:9d:af:83
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYVDfxHxbeNB4Cj+M6FDBLhZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjIxMjI0MDkzNzU5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGNmYjg1YmU4NGY4ZThiMmY5NWY2OTdiOWE1NTQwZThkZWZiNmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFfG0moGsnaC0l0kOgIDpdN9KaET
7pdeNjEA/Y0wfbM17PNBu6m+a+1qAIdwXHSf4AK9iuAEukpA2UuBwOZyZJhSr5FG
kXM4J2yK5yveyKg55Ohh8iwFsz5uNhgWsEoG8l+tWN8JamToLfX9o5UtztrAElyX
2kTfLBGIevb8kK7FvrlQ4jtq2YAzTh/flg4MAcR+nx8eVfhTgY/5+kBOf/GtIKB3
ns2eYOD2ygSaMEyS8T4gq9qyBL7c8m7xZ7kKdCmOd+7YHpK2rvc9z+dk2ejX1xol
ZXgcDAvf20ip7nYFvNFcN76kB2CbCRtQu9HZn4NjtDFLMTTDsj5Kf6IsFwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFAjPuFvoT46LL5X2l7mlVA6N77b+MB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvQ00tNFctaFBqb3N2bGZhWHVhVlVEbzN2dHY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCLVkgAwQA
VPU5MAwDBABb2fkDBABb2fowDQYJKoZIhvcNAQELBQADggEBABqXDPWOiUcfiXF1
FOdJCShGzrio+i5IAQoCTn62vou8YcVn7ApVRNBqgRdNRzZ5rMj4LqSRJxKlQypq
cpcNa6AUmYhyYfNJKzPfo9i+irHpwEdpKX4pktYqn/9G/qR43jhuhCs1Nk8bkHFn
i3l99Zo16C5CznMwarGE9yCzgP3EJgA11LfhV2peeYN+bbmhUqaSGegD38uwPHie
1Azi+MHjVcoCEa3JQY+8OaeB1SwIML/IeCmcURKA/4EdYayKorAkuf3FEGARK3rE
KbdOEtdc3SIitxP3AAYv05FV5UfthC4sj7fmgc9CHbnwSrnVULsScYbGSRV387Ob
3NCdr4M=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:58 2023 by rpki-client on console-fra.rpki-client.org