Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/q79FY4RU280tWp-FYb3w455Y4T4.roa
File: q79FY4RU280tWp-FYb3w455Y4T4.roa (raw, json)
Hash identifier: 6zxu7Sm++tOV6nVidh6Au/10cg026Jb/HPpdRikGMcI=
Subject key identifier: AB:BF:45:63:84:54:DB:CD:2D:5A:9F:85:61:BD:F0:E3:9E:58:E1:3E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0721BB06
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/q79FY4RU280tWp-FYb3w455Y4T4.roa
Signing time: Wed 09 Mar 2022 10:19:13 +0000
ROA not before: Wed 09 Mar 2022 10:19:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.230.52.0/23 maxlen: 24
185.255.124.0/24 maxlen: 24
185.223.76.0/22 maxlen: 24
185.225.0.0/22 maxlen: 22
185.121.12.0/22 maxlen: 24
185.206.248.0/22 maxlen: 24
185.226.104.0/22 maxlen: 24
185.234.20.0/22 maxlen: 24
185.194.28.0/22 maxlen: 24
185.194.29.0/24 maxlen: 24
45.8.20.0/22 maxlen: 24
185.246.112.0/22 maxlen: 24
185.238.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119651078 (0x721bb06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 9 10:19:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abbf45638454dbcd2d5a9f8561bdf0e39e58e13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:d4:f9:01:54:65:99:4f:b2:f1:19:7b:bc:
8f:0f:5a:c2:f6:34:60:ab:4a:74:82:a5:62:8d:f3:
aa:88:05:18:66:63:d3:ca:21:5c:3c:ee:70:07:df:
10:d4:00:02:3f:3e:8e:7e:1e:1a:a1:42:2b:0b:31:
03:d7:c9:c7:8b:06:40:21:6b:c7:d1:00:4f:10:1a:
79:50:36:3c:b4:14:24:40:7c:4c:bd:f0:ed:7d:5d:
6d:4f:c2:fc:ef:80:e7:81:b6:20:50:36:47:36:58:
d9:c7:50:e0:80:49:c0:5e:e2:65:4e:44:3f:70:38:
a6:cb:f2:f3:56:47:f0:b8:8e:a4:4b:73:a7:1b:c8:
e3:82:6e:b1:cd:51:66:16:d2:08:f7:99:45:e8:53:
ad:c0:63:8a:f8:ce:a4:51:32:63:63:59:47:81:f8:
92:25:b7:36:75:3f:d8:c5:fa:3a:b7:98:41:bf:87:
b3:f1:ae:9b:e7:71:7e:78:19:61:fd:84:9f:d3:cf:
cc:be:b1:6e:fb:25:2c:99:7b:d0:28:b4:b6:01:76:
48:c1:6b:72:3a:79:7c:53:78:26:b3:0b:ba:18:3f:
4f:3c:07:61:db:d3:a0:43:16:b2:64:8e:4d:f6:4e:
2b:99:b9:a4:de:8b:b1:da:50:59:ee:73:53:28:d2:
34:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BF:45:63:84:54:DB:CD:2D:5A:9F:85:61:BD:F0:E3:9E:58:E1:3E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/q79FY4RU280tWp-FYb3w455Y4T4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.20.0/22
185.121.12.0/22
185.194.28.0/22
185.206.248.0/22
185.223.76.0/22
185.225.0.0/22
185.226.104.0/22
185.230.52.0/23
185.234.20.0/22
185.238.228.0/22
185.246.112.0/22
185.255.124.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:2a:f1:6c:5d:cc:e9:f5:22:8b:da:9d:c4:18:5c:a9:27:7c:
30:15:30:f3:12:27:39:c6:5d:b7:be:03:01:34:5a:57:fe:47:
ec:35:a2:62:70:d3:d0:54:0e:58:cf:26:86:65:8d:c4:61:8c:
3f:59:93:a6:5f:1c:59:b9:c0:ba:61:97:34:3d:f9:01:5f:6c:
e3:db:6b:3b:e5:41:c8:08:2b:71:d3:ff:2e:10:de:7c:a0:26:
33:47:ed:57:db:d5:17:3f:ad:60:27:ec:c6:3c:ff:1d:78:97:
71:44:15:a4:e2:e1:37:f2:c4:7d:76:8b:2d:3f:8e:4b:fa:fb:
3f:ce:43:80:de:26:c9:a9:cf:1b:36:3d:18:6d:f9:b9:6c:e4:
4e:6a:ef:16:c0:1c:2f:c1:fe:86:25:81:42:6c:1c:2f:fc:79:
7b:24:9f:87:9c:8c:64:e3:84:06:4f:6c:d9:a8:60:cb:df:d9:
f2:a4:47:2c:5c:e3:e5:f9:46:ec:3c:6a:06:c1:d8:c3:2f:00:
30:c1:10:71:b4:21:f2:4e:ab:62:75:01:0b:ae:5d:62:11:08:
ac:92:6d:3f:ac:80:e5:14:66:3e:62:41:bf:4e:3d:30:4c:80:
c1:0d:29:9f:4e:96:68:84:67:e5:f4:62:97:26:63:2e:4c:10:
77:7b:0c:72
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIEByG7BjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MDY3ODRjMTA1MDg1YjlkNmFkNWY3M2EwM2IyMGQ5YTVjMTE0Y2FmMB4XDTIyMDMw
OTEwMTkxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWJiZjQ1NjM4NDU0
ZGJjZDJkNWE5Zjg1NjFiZGYwZTM5ZTU4ZTEzZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMKt1PkBVGWZT7LxGXu8jw9awvY0YKtKdIKlYo3zqogFGGZj
08ohXDzucAffENQAAj8+jn4eGqFCKwsxA9fJx4sGQCFrx9EATxAaeVA2PLQUJEB8
TL3w7X1dbU/C/O+A54G2IFA2RzZY2cdQ4IBJwF7iZU5EP3A4psvy81ZH8LiOpEtz
pxvI44Jusc1RZhbSCPeZRehTrcBjivjOpFEyY2NZR4H4kiW3NnU/2MX6OreYQb+H
s/Gum+dxfngZYf2En9PPzL6xbvslLJl70Ci0tgF2SMFrcjp5fFN4JrMLuhg/TzwH
YdvToEMWsmSOTfZOK5m5pN6LsdpQWe5zUyjSNPcCAwEAAaOCAkswggJHMB0GA1Ud
DgQWBBSrv0VjhFTbzS1an4VhvfDjnljhPjAfBgNVHSMEGDAWgBRgZ4TBBQhbnWrV
9zoDsg2aXBFMrzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lHZUV3UVVJVzUxcTFmYzZBN0lObWx3UlRLOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvMmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFiYy8x
L3E3OUZZNFJVMjgwdFdwLUZZYjN3NDU1WTRUNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
MmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFiYy8xL1lHZUV3UVVJVzUx
cTFmYzZBN0lObWx3UlRLOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBh
BggrBgEFBQcBBwEB/wRSMFAwTgQCAAEwSAMEAi0IFAMEArl5DAMEArnCHAMEArnO
+AMEArnfTAMEArnhAAMEArniaAMEAbnmNAMEArnqFAMEArnu5AMEArn2cAMEALn/
fDANBgkqhkiG9w0BAQsFAAOCAQEAqirxbF3M6fUii9qdxBhcqSd8MBUw8xInOcZd
t74DATRaV/5H7DWiYnDT0FQOWM8mhmWNxGGMP1mTpl8cWbnAumGXND35AV9s49tr
O+VByAgrcdP/LhDefKAmM0ftV9vVFz+tYCfsxjz/HXiXcUQVpOLhN/LEfXaLLT+O
S/r7P85DgN4myanPGzY9GG35uWzkTmrvFsAcL8H+hiWBQmwcL/x5eySfh5yMZOOE
Bk9s2ahgy9/Z8qRHLFzj5flG7DxqBsHYwy8AMMEQcbQh8k6rYnUBC65dYhEIrJJt
P6yA5RRmPmJBv049MEyAwQ0pn06WaIRn5fRilyZjLkwQd3sMcg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org