Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ID5SXssCFYUX6tfYN0lmHoXSCdA.roa
File: ID5SXssCFYUX6tfYN0lmHoXSCdA.roa (raw, json)
Hash identifier: c/UygkjMPJlWdTgw8YceA+Mn20JhRWmzqRDpRLTMb04=
Subject key identifier: 20:3E:52:5E:CB:02:15:85:17:EA:D7:D8:37:49:66:1E:85:D2:09:D0
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01853945D24C656127A3AE5EF03A67DE2573
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ID5SXssCFYUX6tfYN0lmHoXSCdA.roa
Signing time: Thu 22 Dec 2022 09:59:15 +0000
ROA not before: Thu 22 Dec 2022 09:59:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201153
IP address blocks: 45.155.48.0/22 maxlen: 24
80.209.255.0/24 maxlen: 24
185.81.76.0/22 maxlen: 24
185.142.100.0/22 maxlen: 24
95.214.108.0/22 maxlen: 24
195.181.255.0/24 maxlen: 24
212.237.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:45:d2:4c:65:61:27:a3:ae:5e:f0:3a:67:de:25:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 22 09:59:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=203e525ecb02158517ead7d83749661e85d209d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3b:80:38:0e:2e:b4:23:7e:53:0b:b4:34:c0:
3c:35:44:c6:58:e0:34:34:84:52:51:21:70:76:eb:
be:ab:9d:15:78:93:f4:98:0e:63:5b:43:d1:86:79:
5c:4b:b4:13:93:32:c4:d6:24:08:36:31:ac:30:92:
3c:60:be:1f:e5:17:9b:aa:46:39:cf:99:73:e6:48:
0b:03:79:b3:fe:b5:56:7c:58:c4:35:46:a0:c2:a5:
29:51:c3:3a:c0:c7:62:a2:cb:78:be:68:ec:41:d4:
af:e4:98:d4:97:1f:c1:40:85:a0:1d:d8:50:b9:40:
95:68:dc:13:8a:61:97:e5:30:08:da:62:3d:60:64:
e1:64:db:9d:3f:56:b5:51:b4:e6:f3:2d:93:e7:1d:
db:b0:be:c2:7d:43:ba:2c:77:e5:4a:81:7f:de:e7:
8e:ba:8e:23:cd:b3:62:0f:5e:49:98:2e:9e:26:99:
e6:2c:74:82:ee:6c:4b:d9:96:93:47:40:58:a3:bd:
ba:dc:bb:75:ed:25:20:da:6b:48:78:8a:f0:d5:89:
09:73:a9:47:59:60:21:a8:ca:8d:3b:72:90:6e:49:
25:31:7a:71:45:3a:4a:22:eb:6a:2e:ad:d2:9d:25:
1a:2f:fb:cc:b1:16:61:6e:10:ea:39:91:8e:d5:3b:
05:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3E:52:5E:CB:02:15:85:17:EA:D7:D8:37:49:66:1E:85:D2:09:D0
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ID5SXssCFYUX6tfYN0lmHoXSCdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.48.0/22
80.209.255.0/24
95.214.108.0/22
185.81.76.0/22
185.142.100.0/22
195.181.255.0/24
212.237.255.0/24
Signature Algorithm: sha256WithRSAEncryption
99:35:86:a5:0b:bb:6d:af:9f:f0:07:0c:29:17:2f:f3:3e:a8:
1f:dc:83:a0:86:9e:5a:92:e7:36:b6:c2:1b:c9:83:00:0b:44:
01:6e:9e:ce:8e:af:11:2e:a4:e2:e1:65:5b:5a:23:9b:36:0d:
88:97:c8:82:1d:4a:46:dd:45:84:63:9d:94:31:68:fa:c1:d2:
2e:56:76:b5:66:aa:44:20:d9:33:48:c9:ea:2c:4f:7d:e2:2d:
9e:21:65:dc:cf:0a:00:8b:e3:51:a4:75:fc:94:0a:51:88:1d:
8a:9d:4b:2b:0f:88:1a:7a:eb:b3:6c:7b:0b:ac:d5:0b:11:aa:
ae:bb:e4:de:92:61:ec:13:03:9d:c6:d4:e1:e0:a4:56:b3:5d:
ed:d6:70:c3:e2:15:d1:4c:d6:53:e0:0d:d8:37:0e:5c:19:9b:
17:43:ec:aa:eb:76:e0:bd:a4:12:4f:d4:40:e6:04:eb:52:fd:
7f:d4:ba:f3:fb:6e:1b:60:28:06:c2:5a:2f:25:e1:d1:23:52:
fc:e4:50:1d:90:e5:8a:2c:3f:f5:f3:77:f3:6e:39:9f:1e:0e:
a1:bb:c5:93:70:f3:f4:52:9a:08:51:17:8c:f2:3d:cd:a1:67:
b1:57:e3:9f:45:99:b3:6b:ae:ce:72:8e:3f:3c:c2:71:e4:3f:
35:09:68:40
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYU5RdJMZWEno65e8Dpn3iVzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjIxMjIyMDk1OTE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDNlNTI1ZWNiMDIxNTg1MTdlYWQ3ZDgzNzQ5NjYxZTg1ZDIwOWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTuAOA4utCN+Uwu0NMA8NUTGWOA0
NIRSUSFwduu+q50VeJP0mA5jW0PRhnlcS7QTkzLE1iQINjGsMJI8YL4f5RebqkY5
z5lz5kgLA3mz/rVWfFjENUagwqUpUcM6wMdiost4vmjsQdSv5JjUlx/BQIWgHdhQ
uUCVaNwTimGX5TAI2mI9YGThZNudP1a1UbTm8y2T5x3bsL7CfUO6LHflSoF/3ueO
uo4jzbNiD15JmC6eJpnmLHSC7mxL2ZaTR0BYo7263Lt17SUg2mtIeIrw1YkJc6lH
WWAhqMqNO3KQbkklMXpxRTpKIutqLq3SnSUaL/vMsRZhbhDqOZGO1TsFnwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFCA+Ul7LAhWFF+rX2DdJZh6F0gnQMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvSUQ1U1hzc0NGWVVYNnRmWU4wbG1Ib1hTQ2RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCLZswAwQA
UNH/AwQCX9ZsAwQCuVFMAwQCuY5kAwQAw7X/AwQA1O3/MA0GCSqGSIb3DQEBCwUA
A4IBAQCZNYalC7ttr5/wBwwpFy/zPqgf3IOghp5akuc2tsIbyYMAC0QBbp7Ojq8R
LqTi4WVbWiObNg2Il8iCHUpG3UWEY52UMWj6wdIuVna1ZqpEINkzSMnqLE994i2e
IWXczwoAi+NRpHX8lApRiB2KnUsrD4gaeuuzbHsLrNULEaquu+TekmHsEwOdxtTh
4KRWs13t1nDD4hXRTNZT4A3YNw5cGZsXQ+yq63bgvaQST9RA5gTrUv1/1Lrz+24b
YCgGwlovJeHRI1L85FAdkOWKLD/183fzbjmfHg6hu8WTcPP0UpoIUReM8j3NoWex
V+OfRZmza67Oco4/PMJx5D81CWhA
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org