Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ErPB89aySuKkSH6xisAgTuvQPs0.roa
File: ErPB89aySuKkSH6xisAgTuvQPs0.roa (raw, json)
Hash identifier: 0Gg9upYMlfkVibkUNqMlrNNrI4DvSLpSiliIGrLcLqA=
Subject key identifier: 12:B3:C1:F3:D6:B2:4A:E2:A4:48:7E:B1:8A:C0:20:4E:EB:D0:3E:CD
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 043E2073
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ErPB89aySuKkSH6xisAgTuvQPs0.roa
Signing time: Sun 20 Mar 2022 14:02:57 +0000
ROA not before: Sun 20 Mar 2022 14:02:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207569
IP address blocks: 139.28.221.0/24 maxlen: 24
5.180.136.0/24 maxlen: 24
5.180.137.0/24 maxlen: 24
5.180.138.0/24 maxlen: 24
5.180.139.0/24 maxlen: 24
185.94.164.0/24 maxlen: 24
185.94.167.0/24 maxlen: 24
45.133.245.0/24 maxlen: 24
185.188.181.0/24 maxlen: 24
95.214.8.0/24 maxlen: 24
185.17.2.0/24 maxlen: 24
85.209.0.0/24 maxlen: 24
5.252.116.0/24 maxlen: 24
45.89.64.0/24 maxlen: 24
46.17.106.0/24 maxlen: 24
2a0a:9300:1::/48 maxlen: 48
2a0a:9300:aaaa::/48 maxlen: 48
2a0a:9300::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71180403 (0x43e2073)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Mar 20 14:02:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12b3c1f3d6b24ae2a4487eb18ac0204eebd03ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fa:24:19:9c:23:58:c0:4a:bc:16:6b:cb:e3:
25:e7:de:79:47:4d:01:d6:7a:cf:79:0b:50:4f:d1:
c3:e8:11:94:e2:f7:04:b9:10:8a:33:a5:76:7f:08:
67:e5:6f:46:44:ab:ce:f7:a1:01:1f:3e:8b:72:50:
12:71:f9:2c:62:ca:7c:cf:c0:25:95:fa:ac:d3:ef:
41:3e:eb:04:86:6b:fd:97:fc:69:1a:e4:ee:c3:30:
69:08:1c:bc:a3:8a:3e:11:ea:41:33:5d:75:fa:70:
92:da:e2:16:eb:13:c9:b9:da:5b:0e:9a:66:ee:ca:
95:1b:0a:ef:a8:10:33:03:d1:5e:e2:1b:31:00:42:
ce:55:d8:b4:1d:f3:b5:d6:94:0c:93:01:93:39:90:
aa:15:3c:0f:a0:8f:86:0a:65:83:51:2f:fc:22:4c:
2c:29:fa:79:47:d6:ff:2c:cc:d8:be:e9:6d:06:38:
60:36:f0:d9:4b:a7:a0:bb:31:90:eb:2b:04:4f:a3:
11:4d:f5:1a:bb:70:82:8f:70:a2:b0:c2:0a:db:a8:
39:8b:10:b8:2d:d5:20:4b:9f:54:6b:d9:38:7a:54:
aa:38:74:b3:79:1a:36:07:64:c5:65:e1:e6:cb:57:
ee:08:51:e5:79:16:ab:75:8d:fe:b9:79:35:12:c7:
76:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B3:C1:F3:D6:B2:4A:E2:A4:48:7E:B1:8A:C0:20:4E:EB:D0:3E:CD
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ErPB89aySuKkSH6xisAgTuvQPs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.0/22
5.252.116.0/24
45.89.64.0/24
45.133.245.0/24
46.17.106.0/24
85.209.0.0/24
95.214.8.0/24
139.28.221.0/24
185.17.2.0/24
185.94.164.0/24
185.94.167.0/24
185.188.181.0/24
IPv6:
2a0a:9300::/32
Signature Algorithm: sha256WithRSAEncryption
a4:5a:8d:02:70:d1:17:e9:31:92:f1:5d:50:38:66:3a:e6:42:
59:b2:73:c4:53:b6:d6:60:13:a2:d5:69:b1:a8:59:a7:a1:e2:
1e:94:5b:7d:8c:ae:bd:25:cc:d5:14:07:b3:ef:86:bb:8d:42:
ec:35:fe:f3:04:bb:65:e4:34:9b:ff:92:72:77:36:3a:77:c7:
74:e9:8c:cf:04:6b:df:c4:2d:b1:4a:05:e0:17:93:79:db:6b:
12:91:2e:7f:4c:24:48:6c:0b:35:e3:a0:c3:10:8a:a9:20:81:
19:34:fd:18:81:a8:92:70:0d:36:d5:2c:75:56:46:86:d8:34:
57:fc:b6:dc:32:46:f6:e5:ea:ff:e8:de:36:f0:88:50:d5:db:
9c:44:dd:9d:b8:ab:7a:f5:f5:3b:c4:f7:6c:ce:ff:ef:59:25:
98:d0:71:97:a9:6d:92:55:00:50:18:87:1a:e9:69:f7:09:94:
3f:5a:40:73:92:e7:bb:c0:24:a3:16:f6:35:52:33:46:30:bf:
de:a4:b4:41:90:41:cf:07:9a:33:86:89:ff:a3:db:45:2e:6f:
9d:12:6f:0b:c8:71:fb:22:52:2f:ee:35:d0:72:2d:a3:54:65:
5c:1a:02:c2:08:01:0f:f1:c3:06:16:51:68:a5:e7:ad:6c:24:
4f:6b:f2:3a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIEBD4gczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NGY5NjM0NWQzZjIyZWRiMzk1ZDI0N2Y3Yjg2ZDJkNzNlNGEwMDkxMB4XDTIyMDMy
MDE0MDI1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTJiM2MxZjNkNmIy
NGFlMmE0NDg3ZWIxOGFjMDIwNGVlYmQwM2VjZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKn6JBmcI1jASrwWa8vjJefeeUdNAdZ6z3kLUE/Rw+gRlOL3
BLkQijOldn8IZ+VvRkSrzvehAR8+i3JQEnH5LGLKfM/AJZX6rNPvQT7rBIZr/Zf8
aRrk7sMwaQgcvKOKPhHqQTNddfpwktriFusTybnaWw6aZu7KlRsK76gQMwPRXuIb
MQBCzlXYtB3ztdaUDJMBkzmQqhU8D6CPhgplg1Ev/CJMLCn6eUfW/yzM2L7pbQY4
YDbw2UunoLsxkOsrBE+jEU31Grtwgo9worDCCtuoOYsQuC3VIEufVGvZOHpUqjh0
s3kaNgdkxWXh5stX7ghR5XkWq3WN/rl5NRLHdgsCAwEAAaOCAlowggJWMB0GA1Ud
DgQWBBQSs8Hz1rJK4qRIfrGKwCBO69A+zTAfBgNVHSMEGDAWgBS0+WNF0/Iu2zld
JH97htLXPkoAkTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RQbGpSZFB5THRzNVhTUl9lNGJTMXo1S0FKRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvOGUxMjFkLTczYjMtNDM4YS04M2M0LTZmYzM0M2Q3N2NkMi8x
L0VyUEI4OWF5U3VLa1NINnhpc0FnVHV2UVBzMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
OGUxMjFkLTczYjMtNDM4YS04M2M0LTZmYzM0M2Q3N2NkMi8xL3RQbGpSZFB5THRz
NVhTUl9lNGJTMXo1S0FKRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBw
BggrBgEFBQcBBwEB/wRhMF8wTgQCAAEwSAMEAgW0iAMEAAX8dAMEAC1ZQAMEAC2F
9QMEAC4RagMEAFXRAAMEAF/WCAMEAIsc3QMEALkRAgMEALlepAMEALlepwMEALm8
tTANBAIAAjAHAwUAKgqTADANBgkqhkiG9w0BAQsFAAOCAQEApFqNAnDRF+kxkvFd
UDhmOuZCWbJzxFO21mATotVpsahZp6HiHpRbfYyuvSXM1RQHs++Gu41C7DX+8wS7
ZeQ0m/+Scnc2OnfHdOmMzwRr38QtsUoF4BeTedtrEpEuf0wkSGwLNeOgwxCKqSCB
GTT9GIGoknANNtUsdVZGhtg0V/y23DJG9uXq/+jeNvCIUNXbnETdnbirevX1O8T3
bM7/71klmNBxl6ltklUAUBiHGulp9wmUP1pAc5Lnu8Akoxb2NVIzRjC/3qS0QZBB
zweaM4aJ/6PbRS5vnRJvC8hx+yJSL+410HIto1RlXBoCwggBD/HDBhZRaKXnrWwk
T2vyOg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org