Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/TNDlwHGUXHf2i_cXfVHCZN-wqsg.roa
File: TNDlwHGUXHf2i_cXfVHCZN-wqsg.roa (raw, json)
Hash identifier: NqE9bJtuW1KN8DRK1dneoH9m2ofjtDMWnmo1IuhnvCc=
Subject key identifier: 4C:D0:E5:C0:71:94:5C:77:F6:8B:F7:17:7D:51:C2:64:DF:B0:AA:C8
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018335CDE853AC0A8785B8C1F920799203C2
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/TNDlwHGUXHf2i_cXfVHCZN-wqsg.roa
Signing time: Tue 13 Sep 2022 07:43:50 +0000
ROA not before: Tue 13 Sep 2022 07:43:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 212.60.13.0/24 maxlen: 24
162.218.93.0/24 maxlen: 24
185.205.204.0/24 maxlen: 24
185.253.120.0/24 maxlen: 24
185.253.121.0/24 maxlen: 24
5.182.196.0/24 maxlen: 24
5.182.197.0/24 maxlen: 24
185.161.190.0/24 maxlen: 24
79.98.183.0/24 maxlen: 24
78.31.205.0/24 maxlen: 24
92.249.29.0/24 maxlen: 24
185.201.42.0/24 maxlen: 24
5.182.185.0/24 maxlen: 24
147.78.204.0/24 maxlen: 24
147.78.207.0/24 maxlen: 24
94.154.171.0/24 maxlen: 24
94.154.178.0/24 maxlen: 24
185.208.152.0/24 maxlen: 24
217.197.170.0/24 maxlen: 24
185.208.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:35:cd:e8:53:ac:0a:87:85:b8:c1:f9:20:79:92:03:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Sep 13 07:43:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4cd0e5c071945c77f68bf7177d51c264dfb0aac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:19:7e:85:29:ad:5b:03:e0:a6:cd:ae:23:18:
4b:6d:b2:7a:05:ca:cb:a2:70:c0:41:01:0f:36:63:
84:e9:d7:ab:06:a7:d9:11:64:94:28:14:ec:75:82:
35:5b:9c:ef:0a:1a:bb:1e:fd:f1:3d:2b:89:e9:d8:
da:fd:63:88:6d:d7:f2:fc:38:f8:28:1a:c3:02:e6:
64:e6:0e:e1:a3:1d:c6:b6:8b:ef:1c:9b:91:e5:09:
40:5a:04:95:2f:c3:99:2a:4d:52:fb:24:90:ae:c7:
b5:60:8f:6a:d8:11:1a:9b:60:21:a6:3a:ec:f9:65:
da:cd:f5:4d:04:39:e4:a5:bf:d2:0a:4a:63:90:fa:
f1:a7:fc:73:6a:b2:d9:ba:8d:8c:cf:18:63:28:3e:
8f:eb:76:d6:1e:cb:23:47:7a:6b:19:ec:48:ad:c0:
13:9b:21:6d:2b:05:99:37:dd:cc:aa:cc:52:ea:7f:
fa:77:6d:27:2c:b2:5f:c3:31:85:4f:39:3a:03:14:
18:e6:04:86:84:a4:27:d3:fd:99:ef:b3:43:0e:47:
a0:c1:dd:b6:c7:9d:b2:02:63:4a:e0:92:46:9a:08:
aa:68:13:a8:65:f0:c8:76:68:29:55:c2:61:af:a1:
1d:a2:9e:35:94:fe:17:48:92:9c:6c:2e:b0:b3:08:
e9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D0:E5:C0:71:94:5C:77:F6:8B:F7:17:7D:51:C2:64:DF:B0:AA:C8
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/TNDlwHGUXHf2i_cXfVHCZN-wqsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.185.0/24
5.182.196.0/23
78.31.205.0/24
79.98.183.0/24
92.249.29.0/24
94.154.171.0/24
94.154.178.0/24
147.78.204.0/24
147.78.207.0/24
162.218.93.0/24
185.161.190.0/24
185.201.42.0/24
185.205.204.0/24
185.208.152.0/23
185.253.120.0/23
212.60.13.0/24
217.197.170.0/24
Signature Algorithm: sha256WithRSAEncryption
73:0a:67:a4:1f:6d:d5:1b:1d:db:9d:e8:1e:e3:9e:e6:b0:01:
4d:32:b6:d6:7f:f5:82:1b:82:57:3c:cf:21:82:e8:a3:4b:f2:
b8:f7:07:51:f5:75:d2:f4:13:c1:c0:7b:03:bf:c3:5e:ce:88:
53:d6:68:68:fe:9d:cf:2a:4f:39:b7:e2:17:e3:a1:6b:3c:10:
d7:50:90:08:18:28:71:8b:78:f8:c4:7b:36:ae:46:d8:3d:9b:
8d:9d:d8:0c:53:58:83:2d:45:93:bf:b5:da:a0:0d:55:06:2d:
07:0f:b0:a1:40:1b:d7:5a:ec:a6:de:e7:64:f8:f9:53:17:0f:
78:f0:b8:a0:e9:b3:3e:f5:f1:3e:73:d0:07:e8:c3:03:1d:13:
be:2b:8f:75:73:47:64:2c:e4:5d:36:e3:e5:ec:a5:b9:78:d0:
ea:b8:a3:65:1e:d8:32:74:8f:42:14:ab:86:ef:f6:44:41:79:
6a:47:55:eb:bb:03:37:11:a1:8d:e5:47:69:3d:82:d6:20:b2:
99:6c:9b:e9:c7:a5:e6:8d:18:86:be:fc:a7:ed:59:27:6d:cc:
4d:a6:ac:f6:d3:36:36:7f:d3:6a:49:73:42:01:b3:48:d4:fe:
b5:6b:e8:e8:af:5e:ca:19:90:7a:64:a3:3c:63:97:63:cb:3d:
19:09:09:27
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAYM1zehTrAqHhbjB+SB5kgPCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjIwOTEzMDc0MzUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2QwZTVjMDcxOTQ1Yzc3ZjY4YmY3MTc3ZDUxYzI2NGRmYjBhYWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRl+hSmtWwPgps2uIxhLbbJ6BcrL
onDAQQEPNmOE6derBqfZEWSUKBTsdYI1W5zvChq7Hv3xPSuJ6dja/WOIbdfy/Dj4
KBrDAuZk5g7hox3GtovvHJuR5QlAWgSVL8OZKk1S+ySQrse1YI9q2BEam2Ahpjrs
+WXazfVNBDnkpb/SCkpjkPrxp/xzarLZuo2MzxhjKD6P63bWHssjR3prGexIrcAT
myFtKwWZN93MqsxS6n/6d20nLLJfwzGFTzk6AxQY5gSGhKQn0/2Z77NDDkegwd22
x52yAmNK4JJGmgiqaBOoZfDIdmgpVcJhr6Edop41lP4XSJKcbC6wswjpFwIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFEzQ5cBxlFx39ov3F31RwmTfsKrIMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvVE5EbHdIR1VYSGYyaV9jWGZWSENaTi13cXNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQABba5AwQB
BbbEAwQATh/NAwQAT2K3AwQAXPkdAwQAXpqrAwQAXpqyAwQAk07MAwQAk07PAwQA
otpdAwQAuaG+AwQAuckqAwQAuc3MAwQBudCYAwQBuf14AwQA1DwNAwQA2cWqMA0G
CSqGSIb3DQEBCwUAA4IBAQBzCmekH23VGx3bnege457msAFNMrbWf/WCG4JXPM8h
guijS/K49wdR9XXS9BPBwHsDv8NezohT1mho/p3PKk85t+IX46FrPBDXUJAIGChx
i3j4xHs2rkbYPZuNndgMU1iDLUWTv7XaoA1VBi0HD7ChQBvXWuym3udk+PlTFw94
8Lig6bM+9fE+c9AH6MMDHRO+K491c0dkLORdNuPl7KW5eNDquKNlHtgydI9CFKuG
7/ZEQXlqR1XruwM3EaGN5UdpPYLWILKZbJvpx6XmjRiGvvyn7VknbcxNpqz20zY2
f9NqSXNCAbNI1P61a+jor17KGZB6ZKM8Y5djyz0ZCQkn
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:58 2023 by rpki-client on console-fra.rpki-client.org