Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/s0CLQ3nT9g-v37lYnpTKrnDP3VI.roa
File: s0CLQ3nT9g-v37lYnpTKrnDP3VI.roa (raw, json)
Hash identifier: KaRcmcdsjRSspMrZWfBydohYP4JMbR2lXcpMIsWju1c=
Subject key identifier: B3:40:8B:43:79:D3:F6:0F:AF:DF:B9:58:9E:94:CA:AE:70:CF:DD:52
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0183787CCE2EF9A1BD0A6C9163D30652A651
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/s0CLQ3nT9g-v37lYnpTKrnDP3VI.roa
Signing time: Mon 26 Sep 2022 06:29:48 +0000
ROA not before: Mon 26 Sep 2022 06:29:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 193.39.209.0/24 maxlen: 24
194.33.62.0/24 maxlen: 24
193.41.69.0/24 maxlen: 24
193.41.68.0/24 maxlen: 24
193.41.86.0/24 maxlen: 24
45.146.129.0/24 maxlen: 24
45.130.254.0/24 maxlen: 24
80.253.248.0/24 maxlen: 24
103.59.42.0/24 maxlen: 24
103.59.43.0/24 maxlen: 24
103.59.40.0/24 maxlen: 24
103.59.41.0/24 maxlen: 24
91.212.120.0/24 maxlen: 24
45.13.187.0/24 maxlen: 24
45.145.59.0/24 maxlen: 24
103.74.77.0/24 maxlen: 24
103.74.76.0/24 maxlen: 24
45.146.181.0/24 maxlen: 24
85.209.131.0/24 maxlen: 24
194.41.38.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
45.157.39.0/24 maxlen: 24
45.147.31.0/24 maxlen: 24
2a07:7885::/32 maxlen: 32
2a07:7884::/32 maxlen: 32
2a07:7887::/32 maxlen: 32
2a0f:e840::/32 maxlen: 32
2a07:7881::/32 maxlen: 32
2a07:7882::/32 maxlen: 32
2a07:7886::/32 maxlen: 32
2a07:7883::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:78:7c:ce:2e:f9:a1:bd:0a:6c:91:63:d3:06:52:a6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 26 06:29:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3408b4379d3f60fafdfb9589e94caae70cfdd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3b:59:e6:14:59:fc:7b:5a:af:e7:e3:e0:7a:
5a:d8:ad:8b:ba:86:b6:1c:b4:aa:6f:48:17:7f:aa:
93:64:ac:e2:63:6f:1c:00:0f:d4:88:56:0a:cd:0d:
5c:c2:fd:87:70:44:ca:18:4f:30:37:f5:14:48:61:
9f:0b:96:b0:a2:39:f7:d1:7d:9f:31:6e:89:99:8d:
92:e7:31:72:b5:bb:07:73:1c:cd:e6:08:61:16:f1:
06:c7:46:b1:8a:49:98:28:a7:90:cf:b5:1d:7a:2d:
ac:79:f1:9d:b7:6d:41:19:df:b1:97:d3:c3:aa:6b:
b2:65:b7:d9:e2:0c:0f:a7:89:c6:1a:2f:91:63:d5:
ab:b6:50:3e:ff:0b:72:bd:16:6c:47:98:a7:ea:b3:
38:3e:57:55:1d:ef:8b:a3:c5:af:e0:50:e3:87:b5:
ad:92:52:2a:1c:53:0a:be:9b:73:27:31:b6:c7:7a:
52:c2:53:0a:a8:bf:69:d0:0d:d2:0e:2e:55:a8:b9:
ec:48:a0:37:d7:c9:53:57:55:4f:18:ac:51:27:0d:
29:d0:66:a9:75:08:f2:d2:ed:44:b6:4a:39:03:55:
8a:11:30:b8:35:10:0d:52:af:a8:b2:e0:df:3f:f2:
b0:95:da:6b:e1:f6:aa:9b:9b:15:f3:27:75:31:29:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:40:8B:43:79:D3:F6:0F:AF:DF:B9:58:9E:94:CA:AE:70:CF:DD:52
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/s0CLQ3nT9g-v37lYnpTKrnDP3VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.187.0/24
45.130.254.0/24
45.145.59.0/24
45.146.129.0/24
45.146.181.0/24
45.147.31.0/24
45.157.37.0/24
45.157.39.0/24
80.253.248.0/24
85.209.131.0/24
91.212.120.0/24
103.59.40.0/22
103.74.76.0/23
193.39.209.0/24
193.41.39.0/24
193.41.68.0/23
193.41.86.0/24
194.33.62.0/24
194.41.38.0/24
IPv6:
2a07:7881::-2a07:7887:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:e840::/32
Signature Algorithm: sha256WithRSAEncryption
3b:69:5a:4a:19:f5:16:da:6f:cc:c5:b6:ab:83:43:1d:99:37:
5c:ec:64:d9:0a:09:7a:23:7a:77:2d:91:98:7c:15:a7:cf:a6:
1b:a2:ce:a3:04:4d:25:ef:45:fe:47:d5:12:f9:b9:2b:0b:5b:
49:d7:c8:77:04:b2:40:a2:8f:bf:a3:4f:38:8f:51:40:56:2f:
16:a7:f3:06:10:57:30:00:3d:b3:65:dc:72:a1:08:dc:9c:4b:
45:7e:f9:82:b7:13:26:9e:a1:2a:b1:f8:ba:48:97:db:71:1f:
af:ce:fb:c9:60:66:c0:6d:9d:76:a9:55:8c:5f:92:2b:f7:e9:
24:37:02:aa:3e:aa:9d:ab:d1:07:e3:96:db:8c:65:fa:f1:75:
2f:5b:76:a9:55:19:dd:ff:f8:5b:20:f6:56:ba:d1:da:c1:ed:
b8:e9:73:e9:02:0d:a4:33:13:be:a2:fc:7a:4b:60:e8:d1:d5:
d6:a9:68:4c:df:c5:d3:71:51:ed:13:34:a8:65:66:dc:e4:1e:
f7:d5:99:d1:8a:81:3e:42:c1:df:79:02:c7:6b:a1:0a:f1:7a:
c3:41:e2:69:13:72:0e:83:a4:b1:94:98:62:76:03:0e:9c:19:
32:f8:f7:02:ec:86:5a:fe:39:0e:09:7a:ba:62:15:0b:ce:53:
3b:27:a3:41
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgISAYN4fM4u+aG9CmyRY9MGUqZRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjIwOTI2MDYyOTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzQwOGI0Mzc5ZDNmNjBmYWZkZmI5NTg5ZTk0Y2FhZTcwY2ZkZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTtZ5hRZ/Htar+fj4Hpa2K2Luoa2
HLSqb0gXf6qTZKziY28cAA/UiFYKzQ1cwv2HcETKGE8wN/UUSGGfC5awojn30X2f
MW6JmY2S5zFytbsHcxzN5ghhFvEGx0axikmYKKeQz7Udei2sefGdt21BGd+xl9PD
qmuyZbfZ4gwPp4nGGi+RY9WrtlA+/wtyvRZsR5in6rM4PldVHe+Lo8Wv4FDjh7Wt
klIqHFMKvptzJzG2x3pSwlMKqL9p0A3SDi5VqLnsSKA318lTV1VPGKxRJw0p0Gap
dQjy0u1Etko5A1WKETC4NRANUq+osuDfP/Kwldpr4faqm5sV8yd1MSmRuwIDAQAB
o4IClzCCApMwHQYDVR0OBBYEFLNAi0N50/YPr9+5WJ6Uyq5wz91SMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvczBDTFEzblQ5Zy12MzdsWW5wVEtybkRQM1ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGsBggrBgEFBQcBBwEB/wSBnDCBmTB4BAIAATByAwQALQ27
AwQALYL+AwQALZE7AwQALZKBAwQALZK1AwQALZMfAwQALZ0lAwQALZ0nAwQAUP34
AwQAVdGDAwQAW9R4AwQCZzsoAwQBZ0pMAwQAwSfRAwQAwSknAwQBwSlEAwQAwSlW
AwQAwiE+AwQAwikmMB0EAgACMBcwDgMFACoHeIEDBQMqB3iAAwUAKg/oQDANBgkq
hkiG9w0BAQsFAAOCAQEAO2laShn1FtpvzMW2q4NDHZk3XOxk2QoJeiN6dy2RmHwV
p8+mG6LOowRNJe9F/kfVEvm5KwtbSdfIdwSyQKKPv6NPOI9RQFYvFqfzBhBXMAA9
s2XccqEI3JxLRX75grcTJp6hKrH4ukiX23Efr877yWBmwG2ddqlVjF+SK/fpJDcC
qj6qnavRB+OW24xl+vF1L1t2qVUZ3f/4WyD2VrrR2sHtuOlz6QINpDMTvqL8ektg
6NHV1qloTN/F03FR7RM0qGVm3OQe99WZ0YqBPkLB33kCx2uhCvF6w0HiaRNyDoOk
sZSYYnYDDpwZMvj3AuyGWv45Dgl6umIVC85TOyejQQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:12 2023 by rpki-client on console-ams.rpki-client.org