Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/m99bboV3J5OL7Nh0wnJTAxXpanQ.roa
File: m99bboV3J5OL7Nh0wnJTAxXpanQ.roa (raw, json)
Hash identifier: AeEp5KU196DUKFZmGBVWIPJCNt4B6mP9YYKI76fKrT4=
Subject key identifier: 9B:DF:5B:6E:85:77:27:93:8B:EC:D8:74:C2:72:53:03:15:E9:6A:74
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0183080C3FB84A62F94D81A719EDC87CA5D3
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/m99bboV3J5OL7Nh0wnJTAxXpanQ.roa
Signing time: Sun 04 Sep 2022 10:29:23 +0000
ROA not before: Sun 04 Sep 2022 10:29:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204997
IP address blocks: 185.174.137.0/24 maxlen: 24
45.144.64.0/24 maxlen: 24
45.144.66.0/24 maxlen: 24
45.144.65.0/24 maxlen: 24
45.144.67.0/24 maxlen: 24
185.139.69.0/24 maxlen: 24
185.139.71.0/24 maxlen: 24
185.139.68.0/24 maxlen: 24
185.139.70.0/24 maxlen: 24
193.109.78.0/24 maxlen: 24
193.109.79.0/24 maxlen: 24
185.252.146.0/24 maxlen: 24
185.252.147.0/24 maxlen: 24
185.195.24.0/24 maxlen: 24
185.195.27.0/24 maxlen: 24
185.195.25.0/24 maxlen: 24
185.195.26.0/24 maxlen: 24
185.204.0.0/24 maxlen: 24
185.204.2.0/24 maxlen: 24
185.204.3.0/24 maxlen: 24
139.28.223.0/24 maxlen: 24
139.28.222.0/24 maxlen: 24
185.212.148.0/24 maxlen: 24
91.217.81.0/24 maxlen: 24
185.188.183.0/24 maxlen: 24
185.188.182.0/24 maxlen: 24
185.17.3.0/24 maxlen: 24
185.180.231.0/24 maxlen: 24
185.180.230.0/24 maxlen: 24
147.78.64.0/24 maxlen: 24
195.66.114.0/24 maxlen: 24
147.78.66.0/24 maxlen: 24
147.78.65.0/24 maxlen: 24
147.78.67.0/24 maxlen: 24
46.17.104.0/24 maxlen: 24
185.104.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:08:0c:3f:b8:4a:62:f9:4d:81:a7:19:ed:c8:7c:a5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Sep 4 10:29:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bdf5b6e857727938becd874c272530315e96a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:22:b9:01:61:c2:6d:4f:b4:e1:ee:9e:c1:00:
f9:1d:ba:1e:0f:74:87:f8:0c:cd:b3:c2:c8:eb:0e:
11:c4:8a:91:c2:73:4d:b1:31:c8:f9:f3:98:4a:ea:
3a:3a:50:f1:e2:3a:d4:74:91:3d:ff:3c:83:19:b2:
ee:25:72:c7:06:6a:89:be:6c:be:d4:30:56:1d:93:
d2:7f:5b:c0:a4:bd:38:12:9f:36:cf:ad:98:b8:20:
ac:a1:8c:7c:61:5a:05:9b:1d:8f:f9:81:ba:40:e6:
3d:a6:f6:47:f1:1b:b7:24:9a:f6:52:c0:cf:86:a0:
8d:a6:b8:14:b7:cf:89:8c:87:60:48:c9:8a:f6:1d:
b3:c6:f7:95:69:1b:59:d5:be:40:f4:a8:f7:f0:c1:
42:7c:42:ff:5c:c1:2d:b7:81:92:86:00:90:33:d6:
e4:8e:a9:5c:fc:f5:68:0a:f3:62:cb:c1:02:63:d2:
d9:c5:cb:36:60:d8:35:69:86:d4:97:22:41:1f:36:
e9:8a:b5:3b:25:dd:3f:a3:0a:90:f4:bb:39:ec:db:
e9:87:58:a9:de:a3:a9:80:22:9b:a0:97:24:19:d6:
6f:d2:66:df:fd:11:10:04:68:18:b1:48:51:bb:08:
43:e7:3b:dd:6b:93:a8:e0:80:95:46:71:6f:c7:a8:
50:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DF:5B:6E:85:77:27:93:8B:EC:D8:74:C2:72:53:03:15:E9:6A:74
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/m99bboV3J5OL7Nh0wnJTAxXpanQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.64.0/22
46.17.104.0/24
91.217.81.0/24
139.28.222.0/23
147.78.64.0/22
185.17.3.0/24
185.104.249.0/24
185.139.68.0/22
185.174.137.0/24
185.180.230.0/23
185.188.182.0/23
185.195.24.0/22
185.204.0.0/24
185.204.2.0/23
185.212.148.0/24
185.252.146.0/23
193.109.78.0/23
195.66.114.0/24
Signature Algorithm: sha256WithRSAEncryption
06:fe:ca:07:01:3f:41:28:5b:1d:ff:f1:64:f2:3f:b1:ea:4c:
0f:17:3d:88:70:9a:5e:a6:76:d0:8e:af:74:7b:cb:48:69:6f:
ad:ea:91:fd:48:e5:ce:86:2c:8f:d2:bc:ab:7a:56:3e:38:48:
9f:6e:fc:3c:09:13:6d:ea:96:dd:6f:3b:b8:53:b8:04:f3:1a:
83:d7:7d:70:e3:7f:e0:97:07:55:b6:42:08:6c:ad:13:f2:fe:
d1:4d:9f:b0:de:a4:f8:37:69:8f:24:f7:80:0b:77:0a:45:e8:
46:bd:64:75:fb:de:00:df:72:9e:ed:41:06:35:f6:f8:1e:68:
72:0b:9c:28:9e:37:ac:7a:15:5c:6f:ec:3b:f1:4a:04:8a:2b:
2c:b1:85:e0:a7:d2:84:63:39:f0:d1:09:9f:2c:25:5c:81:29:
8c:fb:52:f9:29:65:01:2d:aa:7d:6b:88:15:ca:25:88:c4:25:
f9:74:39:18:3b:d7:b7:65:63:20:0b:ec:89:69:ff:d1:35:a7:
7a:19:04:ba:67:76:f9:01:e4:8b:0c:e0:bb:a6:0d:af:1d:53:
cd:be:5c:16:e9:a4:40:1e:1f:f9:a4:c9:c5:33:26:09:79:50:
dc:0a:d7:b4:05:41:96:ee:15:8a:fb:79:e6:19:30:2c:61:4d:
8e:f1:76:02
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAYMIDD+4SmL5TYGnGe3IfKXTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjIwOTA0MTAyOTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmRmNWI2ZTg1NzcyNzkzOGJlY2Q4NzRjMjcyNTMwMzE1ZTk2YTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SK5AWHCbU+04e6ewQD5HboeD3SH
+AzNs8LI6w4RxIqRwnNNsTHI+fOYSuo6OlDx4jrUdJE9/zyDGbLuJXLHBmqJvmy+
1DBWHZPSf1vApL04Ep82z62YuCCsoYx8YVoFmx2P+YG6QOY9pvZH8Ru3JJr2UsDP
hqCNprgUt8+JjIdgSMmK9h2zxveVaRtZ1b5A9Kj38MFCfEL/XMEtt4GShgCQM9bk
jqlc/PVoCvNiy8ECY9LZxcs2YNg1aYbUlyJBHzbpirU7Jd0/owqQ9Ls57Nvph1ip
3qOpgCKboJckGdZv0mbf/REQBGgYsUhRuwhD5zvda5Oo4ICVRnFvx6hQrwIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFJvfW26FdyeTi+zYdMJyUwMV6Wp0MB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvbTk5YmJvVjNKNU9MN05oMHduSlRBeFhwYW5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAi2QQAME
AC4RaAMEAFvZUQMEAYsc3gMEApNOQAMEALkRAwMEALlo+QMEArmLRAMEALmuiQME
Abm05gMEAbm8tgMEArnDGAMEALnMAAMEAbnMAgMEALnUlAMEAbn8kgMEAcFtTgME
AMNCcjANBgkqhkiG9w0BAQsFAAOCAQEABv7KBwE/QShbHf/xZPI/sepMDxc9iHCa
XqZ20I6vdHvLSGlvreqR/UjlzoYsj9K8q3pWPjhIn278PAkTbeqW3W87uFO4BPMa
g9d9cON/4JcHVbZCCGytE/L+0U2fsN6k+DdpjyT3gAt3CkXoRr1kdfveAN9ynu1B
BjX2+B5ocgucKJ43rHoVXG/sO/FKBIorLLGF4KfShGM58NEJnywlXIEpjPtS+Sll
AS2qfWuIFcoliMQl+XQ5GDvXt2VjIAvsiWn/0TWnehkEumd2+QHkiwzgu6YNrx1T
zb5cFumkQB4f+aTJxTMmCXlQ3ArXtAVBlu4Vivt55hkwLGFNjvF2Ag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org