Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/6r30CAMwCnNUCTHl_O_Ge9SZRt4.roa
File: 6r30CAMwCnNUCTHl_O_Ge9SZRt4.roa (raw, json)
Hash identifier: 1nrnj4B6ekEu02z4nXDdtSM3twgiBs3Uwr8ZyTVkT0c=
Subject key identifier: EA:BD:F4:08:03:30:0A:73:54:09:31:E5:FC:EF:C6:7B:D4:99:46:DE
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17FA5C3D
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/6r30CAMwCnNUCTHl_O_Ge9SZRt4.roa
Signing time: Sat 01 Jan 2022 04:54:56 +0000
ROA not before: Sat 01 Jan 2022 04:54:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 395800
IP address blocks: 45.82.206.0/23 maxlen: 32
45.12.232.0/24 maxlen: 32
185.182.60.0/24 maxlen: 24
92.119.150.0/23 maxlen: 32
45.15.38.0/23 maxlen: 32
91.188.203.0/24 maxlen: 32
193.187.155.0/24 maxlen: 32
193.187.154.0/24 maxlen: 32
193.187.153.0/24 maxlen: 32
45.14.46.0/24 maxlen: 32
2.59.174.0/23 maxlen: 32
45.10.2.0/23 maxlen: 32
193.160.212.0/24 maxlen: 24
213.232.104.0/24 maxlen: 32
5.181.148.0/23 maxlen: 32
185.226.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402283581 (0x17fa5c3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eabdf40803300a73540931e5fcefc67bd49946de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:d1:be:ef:6a:2b:6a:e4:04:a9:72:bc:1a:
47:d1:5e:57:6f:82:38:8d:51:58:2d:ac:7b:79:87:
79:a0:d2:5f:a5:0d:0f:5b:83:2d:94:50:df:95:41:
fb:28:ed:a5:a9:c4:12:e3:c5:e2:c1:6a:f4:1d:f7:
b5:12:52:2c:a7:d7:1c:92:75:6f:14:ce:7b:2a:95:
fb:48:3e:28:60:8c:98:a1:25:18:fc:23:b8:09:1e:
2a:58:a8:d2:19:b6:98:a7:41:d5:d3:75:3b:0f:12:
40:b8:10:15:e7:52:db:9c:2c:ab:88:e4:a3:8b:15:
86:70:d0:40:d7:a0:ff:10:d0:02:58:dd:ee:89:9c:
9d:98:e0:c5:f9:1c:23:46:f5:a4:47:8a:e1:66:af:
51:d9:f0:1a:a4:c1:79:b7:9b:1e:f5:f2:9c:69:e5:
7c:39:02:af:26:27:36:37:04:54:c0:fe:b4:bc:44:
04:a6:bd:0c:65:c3:e1:0b:c4:f0:88:ba:fd:f7:b7:
49:f0:67:80:d1:04:ed:31:d6:43:16:79:9b:7b:9f:
0c:c5:6f:cf:e2:67:27:e6:8b:62:ba:5d:4a:1b:8e:
d1:00:60:3c:6d:39:9d:38:23:15:bb:8e:ca:48:9e:
83:ae:77:1b:5c:fe:93:2f:77:76:45:14:af:44:c8:
99:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BD:F4:08:03:30:0A:73:54:09:31:E5:FC:EF:C6:7B:D4:99:46:DE
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/6r30CAMwCnNUCTHl_O_Ge9SZRt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.174.0/23
5.181.148.0/23
45.10.2.0/23
45.12.232.0/24
45.14.46.0/24
45.15.38.0/23
45.82.206.0/23
91.188.203.0/24
92.119.150.0/23
185.182.60.0/24
185.226.75.0/24
193.160.212.0/24
193.187.153.0-193.187.155.255
213.232.104.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:44:da:6b:67:e2:c6:bd:1e:5f:9e:e6:26:c5:07:cd:3f:b6:
90:0b:72:c8:0c:19:b5:52:41:d2:ec:07:82:be:7d:38:98:98:
68:d6:d1:f7:c3:4e:2d:b2:95:82:c0:16:b2:37:fb:7a:54:80:
fa:30:fc:32:3a:0f:0e:2c:a3:d9:47:f8:14:7a:f2:d7:60:ad:
e0:e5:eb:d8:44:98:14:3f:7b:13:1c:df:5e:18:31:2f:fa:1f:
61:3c:23:a8:a6:7c:7d:9a:51:4e:66:bd:3e:3b:0b:64:fe:f2:
9f:0b:b2:fc:c2:68:fc:18:6d:62:ad:3f:f7:a5:c7:d8:29:1d:
cf:bd:88:1e:ca:96:ec:06:61:be:f7:a5:2c:cd:ad:93:15:57:
59:97:f1:40:20:e7:f7:5e:7a:f9:17:09:cf:63:ad:78:9b:14:
1d:1f:b5:2a:b7:fa:1d:4d:1d:42:47:1c:39:0a:89:36:7e:9c:
10:c0:4b:f0:ea:a9:22:6f:43:03:38:d3:48:28:24:8d:7f:57:
ef:d4:00:c4:ea:79:70:d0:a5:05:c6:2a:ac:ff:93:ab:04:a2:
28:74:a4:b3:dd:32:cf:78:62:c7:d7:8b:ec:ea:f5:35:5d:23:
4f:02:43:e8:84:6d:8e:f1:e3:fe:56:8b:ca:e3:2d:98:fe:be:
8d:b3:47:87
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIEF/pcPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDEw
MTA0NTQ1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWFiZGY0MDgwMzMw
MGE3MzU0MDkzMWU1ZmNlZmM2N2JkNDk5NDZkZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALTF0b7vaitq5ASpcrwaR9FeV2+COI1RWC2se3mHeaDSX6UN
D1uDLZRQ35VB+yjtpanEEuPF4sFq9B33tRJSLKfXHJJ1bxTOeyqV+0g+KGCMmKEl
GPwjuAkeKlio0hm2mKdB1dN1Ow8SQLgQFedS25wsq4jko4sVhnDQQNeg/xDQAljd
7omcnZjgxfkcI0b1pEeK4WavUdnwGqTBebebHvXynGnlfDkCryYnNjcEVMD+tLxE
BKa9DGXD4QvE8Ii6/fe3SfBngNEE7THWQxZ5m3ufDMVvz+JnJ+aLYrpdShuO0QBg
PG05nTgjFbuOykieg653G1z+ky93dkUUr0TImYMCAwEAAaOCAl8wggJbMB0GA1Ud
DgQWBBTqvfQIAzAKc1QJMeX878Z71JlG3jAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
LzZyMzBDQU13Q25OVUNUSGxfT19HZTlTWlJ0NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB1
BggrBgEFBQcBBwEB/wRmMGQwYgQCAAEwXAMEAQI7rgMEAQW1lAMEAS0KAgMEAC0M
6AMEAC0OLgMEAS0PJgMEAS1SzgMEAFu8ywMEAVx3lgMEALm2PAMEALniSwMEAMGg
1DAMAwQAwbuZAwQCwbuYAwQA1ehoMA0GCSqGSIb3DQEBCwUAA4IBAQB/RNprZ+LG
vR5fnuYmxQfNP7aQC3LIDBm1UkHS7AeCvn04mJho1tH3w04tspWCwBayN/t6VID6
MPwyOg8OLKPZR/gUevLXYK3g5evYRJgUP3sTHN9eGDEv+h9hPCOopnx9mlFOZr0+
Owtk/vKfC7L8wmj8GG1irT/3pcfYKR3PvYgeypbsBmG+96Usza2TFVdZl/FAIOf3
Xnr5FwnPY614mxQdH7Uqt/odTR1CRxw5Cok2fpwQwEvw6qkib0MDONNIKCSNf1fv
1ADE6nlw0KUFxiqs/5OrBKIodKSz3TLPeGLH14vs6vU1XSNPAkPohG2O8eP+VovK
4y2Y/r6Ns0eH
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org