Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/TH3KIZrHbLgHPo1xpKpC3Ew359c.roa
File: TH3KIZrHbLgHPo1xpKpC3Ew359c.roa (raw, json)
Hash identifier: gOmwDG5VoZmw+Y+KJnTRdnKrhkpple9NYkgzPSuvL6I=
Subject key identifier: 4C:7D:CA:21:9A:C7:6C:B8:07:3E:8D:71:A4:AA:42:DC:4C:37:E7:D7
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 0A01E363
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/TH3KIZrHbLgHPo1xpKpC3Ew359c.roa
Signing time: Thu 05 May 2022 15:39:16 +0000
ROA not before: Thu 05 May 2022 15:39:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43915
IP address blocks: 193.35.146.0/23 maxlen: 23
87.117.68.0/23 maxlen: 23
195.206.172.0/22 maxlen: 24
185.147.184.0/22 maxlen: 22
217.14.184.0/21 maxlen: 21
194.146.160.0/22 maxlen: 24
147.189.156.0/22 maxlen: 24
185.161.4.0/22 maxlen: 22
87.117.64.0/22 maxlen: 22
213.225.224.0/22 maxlen: 24
185.23.254.0/23 maxlen: 24
45.66.36.0/22 maxlen: 22
2a07:5940::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167895907 (0xa01e363)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: May 5 15:39:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c7dca219ac76cb8073e8d71a4aa42dc4c37e7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:4d:7f:fd:d5:8a:61:a3:92:22:39:d2:7c:
2c:a1:da:4a:e6:7c:c9:68:dd:19:ab:18:59:c0:5e:
fc:58:b5:ef:47:ee:44:82:73:83:ad:63:88:67:4d:
8e:e1:6a:b8:9e:b3:4b:08:eb:2a:cb:e2:e3:dd:f4:
6c:e6:d6:10:3e:af:e5:e0:f0:9d:e7:14:66:6c:10:
f6:be:90:51:ca:b2:79:3a:57:e3:c3:d8:d7:d5:6c:
a8:70:48:61:fd:c7:20:e5:d4:aa:d4:b0:76:ad:78:
ba:4f:ac:d5:ba:48:4d:cb:c3:9f:b1:49:28:92:d3:
fc:f9:ca:7e:4e:d9:75:a2:66:af:8b:c4:e0:8c:2f:
c8:de:de:78:4e:54:61:ff:10:b3:b2:1d:56:06:0c:
62:9f:7f:3c:dc:48:cc:f1:e8:1a:37:b9:8c:dc:85:
0e:e7:2a:06:bb:79:28:14:9f:7c:be:e3:fe:42:62:
4f:b2:7b:fc:e5:32:06:87:37:ca:06:dd:39:3e:fb:
00:11:71:5a:b0:91:62:49:c5:0c:d1:09:cf:d3:69:
a9:20:c7:47:88:4a:8a:bb:48:20:b7:4c:7e:f9:f2:
ef:23:c3:7d:26:02:95:88:b0:85:36:39:98:43:7c:
0e:22:4c:2b:95:29:f0:e6:6f:94:ce:0e:a2:ff:b4:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7D:CA:21:9A:C7:6C:B8:07:3E:8D:71:A4:AA:42:DC:4C:37:E7:D7
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/TH3KIZrHbLgHPo1xpKpC3Ew359c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.36.0/22
87.117.64.0-87.117.69.255
147.189.156.0/22
185.23.254.0/23
185.147.184.0/22
185.161.4.0/22
193.35.146.0/23
194.146.160.0/22
195.206.172.0/22
213.225.224.0/22
217.14.184.0/21
IPv6:
2a07:5940::/32
Signature Algorithm: sha256WithRSAEncryption
1d:3b:cf:1e:30:1c:61:c1:d1:3b:ca:fb:6f:2d:b9:32:05:59:
b7:06:d0:15:aa:9f:be:0b:2f:f8:c6:c2:ea:76:45:a3:1a:e6:
3b:e5:da:f8:20:c7:a2:fb:41:c6:91:09:48:42:43:f7:30:81:
81:87:fe:b4:72:af:f6:e2:21:14:f8:83:0f:a9:6d:a2:27:b5:
95:46:96:7a:92:32:82:5b:09:23:ca:99:3e:d4:bd:0f:31:ac:
5c:6f:f2:05:d4:7f:d9:a4:fb:dd:75:26:8d:80:aa:9e:eb:74:
3d:2e:df:49:1d:11:56:73:8c:90:ca:43:0c:12:38:79:e1:f8:
12:13:2f:35:1a:1f:88:a7:b4:ef:07:31:ab:18:89:9d:60:69:
e9:2c:ae:a0:9e:3a:76:7d:68:23:27:65:28:a2:8f:4e:94:3b:
5f:db:3e:7d:e2:95:62:65:77:e0:02:28:b7:27:ca:ed:b7:b0:
5f:da:9a:b4:96:4d:c4:ad:e4:d3:3d:31:55:b8:17:9e:5a:79:
53:82:c9:10:0d:cc:0a:b5:4f:01:98:36:a1:2b:99:22:d0:02:
9f:70:04:78:ec:6f:a2:98:b1:a3:42:1d:2d:4e:5d:ab:96:34:
64:78:e2:db:5e:6d:73:ff:bd:9d:04:63:30:fa:8b:1f:67:4d:
b9:24:5d:5b
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIECgHjYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZjI2YWM5ZWViM2EyY2ZhMmY2Y2EzZjQxM2VmYjljZGZmZTk3MjRlMB4XDTIyMDUw
NTE1MzkxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGM3ZGNhMjE5YWM3
NmNiODA3M2U4ZDcxYTRhYTQyZGM0YzM3ZTdkNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKOeTX/91Ypho5IiOdJ8LKHaSuZ8yWjdGasYWcBe/Fi170fu
RIJzg61jiGdNjuFquJ6zSwjrKsvi4930bObWED6v5eDwnecUZmwQ9r6QUcqyeTpX
48PY19VsqHBIYf3HIOXUqtSwdq14uk+s1bpITcvDn7FJKJLT/PnKfk7ZdaJmr4vE
4IwvyN7eeE5UYf8Qs7IdVgYMYp9/PNxIzPHoGje5jNyFDucqBrt5KBSffL7j/kJi
T7J7/OUyBoc3ygbdOT77ABFxWrCRYknFDNEJz9NpqSDHR4hKirtIILdMfvny7yPD
fSYClYiwhTY5mEN8DiJMK5Up8OZvlM4Oov+0tWMCAwEAAaOCAlwwggJYMB0GA1Ud
DgQWBBRMfcohmsdsuAc+jXGkqkLcTDfn1zAfBgNVHSMEGDAWgBSfJqye6zos+i9s
o/QT77nN/+lyTjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L255YXNudXM2TFBvdmJLUDBFLS01emZfcGNrNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzcvZGMzMThiLTkyNDAtNDc3NS1hNGFiLTdkNDI2NmNmODIyYS8x
L1RIM0tJWnJIYkxnSFBvMXhwS3BDM0V3MzU5Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcv
ZGMzMThiLTkyNDAtNDc3NS1hNGFiLTdkNDI2NmNmODIyYS8xL255YXNudXM2TFBv
dmJLUDBFLS01emZfcGNrNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBy
BggrBgEFBQcBBwEB/wRjMGEwUAQCAAEwSgMEAi1CJDAMAwQGV3VAAwQBV3VEAwQC
k72cAwQBuRf+AwQCuZO4AwQCuaEEAwQBwSOSAwQCwpKgAwQCw86sAwQC1eHgAwQD
2Q64MA0EAgACMAcDBQAqB1lAMA0GCSqGSIb3DQEBCwUAA4IBAQAdO88eMBxhwdE7
yvtvLbkyBVm3BtAVqp++Cy/4xsLqdkWjGuY75dr4IMei+0HGkQlIQkP3MIGBh/60
cq/24iEU+IMPqW2iJ7WVRpZ6kjKCWwkjypk+1L0PMaxcb/IF1H/ZpPvddSaNgKqe
63Q9Lt9JHRFWc4yQykMMEjh54fgSEy81Gh+Ip7TvBzGrGImdYGnpLK6gnjp2fWgj
J2Uooo9OlDtf2z594pViZXfgAii3J8rtt7Bf2pq0lk3EreTTPTFVuBeeWnlTgskQ
DcwKtU8BmDahK5ki0AKfcAR47G+imLGjQh0tTl2rljRkeOLbXm1z/72dBGMw+osf
Z025JF1b
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:39 2024 by rpki-client on console-ams.rpki-client.org