Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ppvicpt7eiLswtZ4yV_a0Twoi6I.roa
File: Ppvicpt7eiLswtZ4yV_a0Twoi6I.roa (raw, json)
Hash identifier: 15z1+LnYjPvLvxGBFkPjSRP95HeogkT9Nu7r2mEuXgI=
Subject key identifier: 3E:9B:E2:72:9B:7B:7A:22:EC:C2:D6:78:C9:5F:DA:D1:3C:28:8B:A2
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 19B03FB9
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ppvicpt7eiLswtZ4yV_a0Twoi6I.roa
Signing time: Tue 12 Apr 2022 08:43:05 +0000
ROA not before: Tue 12 Apr 2022 08:43:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46261
IP address blocks: 5.183.204.0/23 maxlen: 32
193.187.153.0/24 maxlen: 32
193.187.154.0/23 maxlen: 32
45.12.232.0/24 maxlen: 32
45.14.46.0/24 maxlen: 32
45.138.210.0/23 maxlen: 24
193.160.212.0/24 maxlen: 32
213.232.104.0/24 maxlen: 32
5.181.148.0/23 maxlen: 32
185.226.75.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430981049 (0x19b03fb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Apr 12 08:43:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e9be2729b7b7a22ecc2d678c95fdad13c288ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:bd:ec:c1:42:61:1f:69:a9:c8:96:ab:30:
cb:d9:ce:50:67:53:11:7a:d2:cf:1d:7f:a3:46:39:
9a:b6:99:d5:6c:b3:72:c4:ac:28:c6:6b:7c:bf:9f:
90:78:84:f4:5e:15:30:f6:d3:e5:a5:f4:f4:a2:64:
d4:c9:a8:11:d8:d7:35:57:56:99:16:d8:50:c7:cb:
d8:6f:e8:c8:c6:7d:18:c8:f0:12:eb:52:f1:15:53:
c7:56:53:75:5b:ba:86:fb:12:b3:12:3b:4a:11:80:
90:4e:29:a0:d7:27:6e:3d:cb:c6:c5:11:85:a3:e5:
82:a6:c5:44:e5:01:4e:97:89:59:64:0a:14:98:1f:
87:35:3e:80:10:e0:70:ef:0d:ea:99:f2:ba:49:47:
b7:3b:1c:1b:ff:20:7d:4f:34:7b:6f:25:da:19:66:
67:93:8c:f3:da:36:1c:8c:a2:21:24:b1:2b:2e:a8:
e0:62:c8:ad:2c:3c:c3:17:eb:31:d3:43:98:70:20:
b6:8c:4f:54:16:e8:19:54:07:9b:c9:b7:0f:25:f9:
92:7a:1d:46:a5:15:1a:15:4e:b8:69:18:57:15:c2:
53:77:21:13:e7:1c:fd:5a:1b:70:a0:aa:68:e3:38:
ab:ba:d6:29:d3:e1:83:67:d3:89:bb:95:e9:96:1f:
d8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9B:E2:72:9B:7B:7A:22:EC:C2:D6:78:C9:5F:DA:D1:3C:28:8B:A2
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ppvicpt7eiLswtZ4yV_a0Twoi6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.148.0/23
5.183.204.0/23
45.12.232.0/24
45.14.46.0/24
45.138.210.0/23
185.226.75.0/24
193.160.212.0/24
193.187.153.0-193.187.155.255
213.232.104.0/24
Signature Algorithm: sha256WithRSAEncryption
06:8d:5b:39:51:8e:0d:79:53:37:be:c8:e8:b7:90:a8:2e:7b:
e9:74:c9:72:91:7a:ea:83:71:fa:ae:36:fb:51:4e:05:ca:61:
86:86:1a:9e:8b:56:56:a9:1f:ed:73:ca:9e:f2:84:aa:25:0c:
35:2f:4b:d8:93:9f:fe:c1:1f:c6:e6:f3:e3:ec:12:f7:52:0d:
4a:7c:0c:2e:f7:fd:57:48:be:d3:48:67:02:a0:50:b4:03:69:
ef:dc:cf:14:8d:70:17:2a:d5:bb:32:78:1b:1a:b5:fe:be:3a:
7a:9a:c3:14:25:6e:41:e6:0a:c9:8d:20:1d:02:32:cd:6e:ea:
08:c9:4b:b6:2b:ff:a0:15:3c:91:dd:03:e6:7a:a4:86:27:be:
d9:b8:94:eb:a8:e3:66:82:02:fa:25:07:a9:86:09:d4:b3:56:
bf:47:65:3d:13:36:76:11:f8:4c:8f:c1:ee:c7:03:05:48:af:
2e:88:53:a5:85:6c:1a:e5:b0:59:3c:e8:8e:80:e2:9e:69:e4:
3f:f6:37:19:09:97:eb:65:c3:31:25:8a:f8:f5:3b:9f:3a:a7:
32:40:7c:10:0d:b7:47:5a:20:c7:96:af:66:a3:c5:b4:69:87:
9f:7d:f4:da:c9:9b:32:f7:fd:9f:d7:8e:ca:60:15:e9:ac:a8:
2b:3d:b3:21
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIEGbA/uTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDQx
MjA4NDMwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2U5YmUyNzI5Yjdi
N2EyMmVjYzJkNjc4Yzk1ZmRhZDEzYzI4OGJhMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM12vezBQmEfaanIlqswy9nOUGdTEXrSzx1/o0Y5mraZ1Wyz
csSsKMZrfL+fkHiE9F4VMPbT5aX09KJk1MmoEdjXNVdWmRbYUMfL2G/oyMZ9GMjw
EutS8RVTx1ZTdVu6hvsSsxI7ShGAkE4poNcnbj3LxsURhaPlgqbFROUBTpeJWWQK
FJgfhzU+gBDgcO8N6pnyuklHtzscG/8gfU80e28l2hlmZ5OM89o2HIyiISSxKy6o
4GLIrSw8wxfrMdNDmHAgtoxPVBboGVQHm8m3DyX5knodRqUVGhVOuGkYVxXCU3ch
E+cc/VobcKCqaOM4q7rWKdPhg2fTibuV6ZYf2JECAwEAAaOCAkEwggI9MB0GA1Ud
DgQWBBQ+m+Jym3t6IuzC1njJX9rRPCiLojAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L1BwdmljcHQ3ZWlMc3d0WjR5Vl9hMFR3b2k2SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBX
BggrBgEFBQcBBwEB/wRIMEYwRAQCAAEwPgMEAQW1lAMEAQW3zAMEAC0M6AMEAC0O
LgMEAS2K0gMEALniSwMEAMGg1DAMAwQAwbuZAwQCwbuYAwQA1ehoMA0GCSqGSIb3
DQEBCwUAA4IBAQAGjVs5UY4NeVM3vsjot5CoLnvpdMlykXrqg3H6rjb7UU4FymGG
hhqei1ZWqR/tc8qe8oSqJQw1L0vYk5/+wR/G5vPj7BL3Ug1KfAwu9/1XSL7TSGcC
oFC0A2nv3M8UjXAXKtW7MngbGrX+vjp6msMUJW5B5grJjSAdAjLNbuoIyUu2K/+g
FTyR3QPmeqSGJ77ZuJTrqONmggL6JQephgnUs1a/R2U9EzZ2EfhMj8HuxwMFSK8u
iFOlhWwa5bBZPOiOgOKeaeQ/9jcZCZfrZcMxJYr49TufOqcyQHwQDbdHWiDHlq9m
o8W0aYefffTayZsy9/2f147KYBXprKgrPbMh
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org