Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/QEIbXQMW2Z_-beudg1ck_kNbu_E.roa
File: QEIbXQMW2Z_-beudg1ck_kNbu_E.roa (raw, json)
Hash identifier: jo2/WxMfVLUp3MWd/QwCsc10OQVEAT3RmKKG55hPGrg=
Subject key identifier: 40:42:1B:5D:03:16:D9:9F:FE:6D:EB:9D:83:57:24:FE:43:5B:BB:F1
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 01839F4952B60761069AF535F56EDF081C50
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/QEIbXQMW2Z_-beudg1ck_kNbu_E.roa
Signing time: Mon 03 Oct 2022 19:18:46 +0000
ROA not before: Mon 03 Oct 2022 19:18:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43915
IP address blocks: 193.35.146.0/23 maxlen: 23
87.117.68.0/23 maxlen: 23
194.105.134.0/23 maxlen: 24
194.145.242.0/23 maxlen: 24
195.206.172.0/22 maxlen: 24
185.147.184.0/22 maxlen: 22
217.14.184.0/21 maxlen: 21
109.224.226.0/23 maxlen: 24
109.224.240.0/23 maxlen: 24
109.224.234.0/23 maxlen: 24
194.146.160.0/22 maxlen: 24
147.189.156.0/22 maxlen: 24
185.161.4.0/22 maxlen: 22
87.117.64.0/22 maxlen: 22
213.225.224.0/22 maxlen: 24
217.20.244.0/22 maxlen: 24
79.135.122.0/23 maxlen: 24
185.23.254.0/23 maxlen: 24
45.66.36.0/22 maxlen: 22
2a07:5940::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9f:49:52:b6:07:61:06:9a:f5:35:f5:6e:df:08:1c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Oct 3 19:18:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40421b5d0316d99ffe6deb9d835724fe435bbbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:89:76:13:76:f8:77:1c:8a:55:55:ec:36:
23:4b:cc:cc:3c:7b:01:21:39:d4:e9:ea:27:59:07:
5b:80:98:9f:97:74:3b:08:30:9c:8c:3f:85:67:59:
84:37:2f:76:62:50:0c:27:90:8c:cf:50:bf:e9:f7:
39:ec:72:70:a3:22:ec:1c:8e:54:ff:a3:da:59:97:
84:ca:5e:e2:68:1d:0a:21:3f:72:c7:be:b4:16:b0:
68:8d:a6:4a:dd:af:1c:cf:c6:e0:0b:47:11:fb:60:
be:75:6d:c4:e5:1a:98:2c:ef:f5:87:7a:87:86:a0:
dd:80:0a:e5:f7:cb:0f:29:15:17:56:35:f7:e2:02:
61:b8:c0:ab:a6:c1:81:39:2a:98:d2:b7:83:ef:bd:
bb:0f:52:fb:dc:78:45:c9:c7:97:c5:c3:26:39:f2:
34:4a:db:e4:68:b0:72:9d:1e:42:84:af:b1:49:24:
fc:5a:b3:f6:96:94:14:23:51:b2:ae:82:6a:17:20:
5b:75:f1:d8:2c:18:fe:35:a2:c5:fb:58:39:1c:f6:
dc:68:06:41:f7:33:56:7f:28:48:42:97:a0:a3:3b:
ec:e0:bb:1f:87:12:6c:a6:31:bb:4f:6c:37:0e:b0:
88:27:7f:52:a6:26:ce:35:be:59:49:5a:d3:75:64:
32:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:42:1B:5D:03:16:D9:9F:FE:6D:EB:9D:83:57:24:FE:43:5B:BB:F1
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/QEIbXQMW2Z_-beudg1ck_kNbu_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.36.0/22
79.135.122.0/23
87.117.64.0-87.117.69.255
109.224.226.0/23
109.224.234.0/23
109.224.240.0/23
147.189.156.0/22
185.23.254.0/23
185.147.184.0/22
185.161.4.0/22
193.35.146.0/23
194.105.134.0/23
194.145.242.0/23
194.146.160.0/22
195.206.172.0/22
213.225.224.0/22
217.14.184.0/21
217.20.244.0/22
IPv6:
2a07:5940::/32
Signature Algorithm: sha256WithRSAEncryption
06:b4:cf:3d:19:3f:6d:c1:b6:b2:18:bf:d2:1e:3d:2d:cc:f4:
0a:c2:23:2f:5f:b4:ac:5e:14:12:81:a5:16:a2:66:23:cd:b4:
14:9b:3b:b8:39:a2:28:1e:be:c3:dc:99:b1:5f:cd:c9:26:32:
2e:f7:b7:74:e7:b6:9e:c8:db:c0:06:d5:c7:b8:83:d8:51:16:
96:48:58:ac:cb:32:df:61:66:91:6a:00:03:96:48:ab:b0:11:
bc:e6:50:9f:00:71:07:3a:57:c7:1c:d5:4f:3b:8e:d1:53:4e:
5c:e3:04:d1:40:0e:07:09:b5:81:db:62:e0:ee:70:42:42:d4:
37:db:d9:aa:37:27:d4:db:bb:0d:36:a9:a2:f4:5a:a6:1d:70:
a2:ac:12:e9:9b:fb:f3:80:6b:2a:66:d7:4e:8b:62:c9:4a:71:
07:b1:53:b9:9b:db:8b:b9:56:a2:11:d0:ae:a6:cc:00:5d:2d:
b3:52:87:47:4e:8e:a3:4c:2e:92:ad:55:b2:ba:ed:19:dc:85:
e9:ab:51:4a:17:fd:e4:e9:72:f5:e4:5b:57:74:ea:b4:0b:5e:
78:ca:16:65:ac:64:30:1f:31:79:15:bf:a1:aa:10:02:8a:88:
9b:e9:41:f2:e8:9c:89:6c:5e:71:33:ab:6b:c8:4d:43:da:46:
b9:94:ee:dd
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgISAYOfSVK2B2EGmvU19W7fCBxQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjZhYzllZWIzYTJjZmEyZjZjYTNmNDEzZWZiOWNkZmZl
OTcyNGUwHhcNMjIxMDAzMTkxODQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDQyMWI1ZDAzMTZkOTlmZmU2ZGViOWQ4MzU3MjRmZTQzNWJiYmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm2JdhN2+HccilVV7DYjS8zMPHsB
ITnU6eonWQdbgJifl3Q7CDCcjD+FZ1mENy92YlAMJ5CMz1C/6fc57HJwoyLsHI5U
/6PaWZeEyl7iaB0KIT9yx760FrBojaZK3a8cz8bgC0cR+2C+dW3E5RqYLO/1h3qH
hqDdgArl98sPKRUXVjX34gJhuMCrpsGBOSqY0reD7727D1L73HhFyceXxcMmOfI0
StvkaLBynR5ChK+xSST8WrP2lpQUI1GyroJqFyBbdfHYLBj+NaLF+1g5HPbcaAZB
9zNWfyhIQpegozvs4LsfhxJspjG7T2w3DrCIJ39SpibONb5ZSVrTdWQyjQIDAQAB
o4ICiTCCAoUwHQYDVR0OBBYEFEBCG10DFtmf/m3rnYNXJP5DW7vxMB8GA1UdIwQY
MBaAFJ8mrJ7rOiz6L2yj9BPvuc3/6XJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWIt
N2Q0MjY2Y2Y4MjJhLzEvUUVJYlhRTVcyWl8tYmV1ZGcxY2tfa05idV9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWItN2Q0MjY2Y2Y4MjJh
LzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGeBggrBgEFBQcBBwEB/wSBjjCBizB6BAIAATB0AwQCLUIk
AwQBT4d6MAwDBAZXdUADBAFXdUQDBAFt4OIDBAFt4OoDBAFt4PADBAKTvZwDBAG5
F/4DBAK5k7gDBAK5oQQDBAHBI5IDBAHCaYYDBAHCkfIDBALCkqADBALDzqwDBALV
4eADBAPZDrgDBALZFPQwDQQCAAIwBwMFACoHWUAwDQYJKoZIhvcNAQELBQADggEB
AAa0zz0ZP23BtrIYv9IePS3M9ArCIy9ftKxeFBKBpRaiZiPNtBSbO7g5oigevsPc
mbFfzckmMi73t3Tntp7I28AG1ce4g9hRFpZIWKzLMt9hZpFqAAOWSKuwEbzmUJ8A
cQc6V8cc1U87jtFTTlzjBNFADgcJtYHbYuDucEJC1Dfb2ao3J9Tbuw02qaL0WqYd
cKKsEumb+/OAaypm106LYslKcQexU7mb24u5VqIR0K6mzABdLbNSh0dOjqNMLpKt
VbK67RnchemrUUoX/eTpcvXkW1d06rQLXnjKFmWsZDAfMXkVv6GqEAKKiJvpQfLo
nIlsXnEzq2vITUPaRrmU7t0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:28 2024 by rpki-client on console-fra.rpki-client.org