Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/TRZ4ZhwJYySv3BAXB93aM9tePEY.roa
File: TRZ4ZhwJYySv3BAXB93aM9tePEY.roa (raw, json)
Hash identifier: 251vg4CtLtGneGLpbx3WjamZ1nE6j7mDX4I7nwkx3Nk=
Subject key identifier: 4D:16:78:66:1C:09:63:24:AF:DC:10:17:07:DD:DA:33:DB:5E:3C:46
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17CA61A3
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/TRZ4ZhwJYySv3BAXB93aM9tePEY.roa
Signing time: Sat 01 Jan 2022 04:54:28 +0000
ROA not before: Sat 01 Jan 2022 04:54:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 132422
IP address blocks: 45.158.35.0/24 maxlen: 32
45.148.128.0/22 maxlen: 24
194.145.142.0/24 maxlen: 24
194.145.143.0/24 maxlen: 24
128.0.117.0/24 maxlen: 24
128.0.119.0/24 maxlen: 24
194.145.197.0/24 maxlen: 24
194.145.196.0/24 maxlen: 24
45.134.1.0/24 maxlen: 32
194.49.109.0/24 maxlen: 24
194.49.112.0/24 maxlen: 24
45.131.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399139235 (0x17ca61a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d1678661c096324afdc101707ddda33db5e3c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:50:4d:13:a1:a6:a2:70:72:f8:70:7b:e7:e4:
1f:12:9c:7e:52:2b:21:13:ab:20:b5:43:26:30:9a:
0a:37:47:2b:47:00:c6:a1:9f:4b:96:6f:0e:49:07:
47:ea:d5:a8:84:8b:1b:b2:52:fa:53:31:e0:6e:af:
ea:bb:a6:84:92:2e:fd:3b:00:78:bb:fa:c4:06:65:
4f:76:d2:64:95:b4:b3:ae:55:4f:56:3f:39:5d:e3:
c4:2c:93:f1:96:70:3f:63:3f:e4:0d:dd:c0:6e:6c:
fe:9e:d2:a8:25:3c:3e:6f:82:45:92:a4:cc:4b:ff:
b5:9b:1f:2e:06:59:9b:0c:ed:62:2d:b7:8e:db:70:
17:16:bb:4f:32:da:df:8f:45:1e:18:6e:f1:78:38:
bb:9c:bf:12:70:db:93:97:43:0d:a5:f9:dd:0e:50:
93:fc:6e:9f:7c:91:ee:c2:c9:58:47:c7:3c:ae:62:
07:a0:68:bd:56:7f:84:56:b3:d1:0c:5b:70:95:c9:
f7:8c:b9:31:e6:c3:6a:e4:ed:5c:48:16:5c:6c:a1:
6c:d7:47:68:3d:c8:8a:58:b1:9b:3f:f3:b5:76:36:
56:e3:4f:ca:bc:a3:f2:3e:3c:7d:9e:04:93:68:2b:
bf:2f:3d:59:29:68:b4:55:8f:e5:2f:ca:8c:6d:3b:
1b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:16:78:66:1C:09:63:24:AF:DC:10:17:07:DD:DA:33:DB:5E:3C:46
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/TRZ4ZhwJYySv3BAXB93aM9tePEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.25.0/24
45.134.1.0/24
45.148.128.0/22
45.158.35.0/24
128.0.117.0/24
128.0.119.0/24
194.49.109.0/24
194.49.112.0/24
194.145.142.0/23
194.145.196.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:ed:75:cd:48:91:dd:94:de:49:a1:2b:f1:e0:35:e5:52:e3:
0a:dd:87:bf:48:3e:c7:93:90:7f:10:b7:e3:b6:60:18:0d:62:
c1:5a:17:69:ef:c1:ab:6d:15:9b:02:a1:1d:a2:5b:61:e9:1c:
0e:71:63:70:a5:03:55:f5:b0:da:23:ee:9c:59:6e:fb:af:2c:
2b:36:db:42:26:25:6b:4c:d1:cc:61:65:3a:18:da:bb:d6:d0:
f6:e5:99:93:b2:fa:ea:23:ab:a7:73:92:3d:64:95:48:20:7b:
74:a4:22:ab:bd:11:93:00:74:d9:a0:83:22:a4:0f:00:43:79:
7f:22:ae:23:84:45:0d:e2:8d:54:a0:09:be:7f:b2:fb:bd:c5:
4c:95:f1:e2:1e:a1:1e:9e:9c:1a:95:b3:46:f5:4f:8b:41:de:
2f:ac:13:b8:0c:4b:0d:e9:49:67:0c:96:73:18:b2:ea:6c:eb:
c9:8b:1c:7c:d6:e5:3d:bc:2d:31:c6:4f:08:3f:e8:7d:ff:56:
13:88:bb:2d:03:84:fa:95:f2:af:40:c9:d8:95:18:42:eb:b0:
8b:98:e1:1e:dd:0d:b8:02:17:5a:16:80:c9:07:2f:64:ec:c5:
38:a7:a4:71:a2:cf:c9:ec:9b:3f:ff:1b:f4:53:fd:4c:d2:0c:
d4:51:8e:d9
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIEF8phozANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDEw
MTA0NTQyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGQxNjc4NjYxYzA5
NjMyNGFmZGMxMDE3MDdkZGRhMzNkYjVlM2M0NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANNQTROhpqJwcvhwe+fkHxKcflIrIROrILVDJjCaCjdHK0cA
xqGfS5ZvDkkHR+rVqISLG7JS+lMx4G6v6rumhJIu/TsAeLv6xAZlT3bSZJW0s65V
T1Y/OV3jxCyT8ZZwP2M/5A3dwG5s/p7SqCU8Pm+CRZKkzEv/tZsfLgZZmwztYi23
jttwFxa7TzLa349FHhhu8Xg4u5y/EnDbk5dDDaX53Q5Qk/xun3yR7sLJWEfHPK5i
B6BovVZ/hFaz0QxbcJXJ94y5MebDauTtXEgWXGyhbNdHaD3Iilixmz/ztXY2VuNP
yryj8j48fZ4Ek2grvy89WSlotFWP5S/KjG07G0ECAwEAAaOCAj8wggI7MB0GA1Ud
DgQWBBRNFnhmHAljJK/cEBcH3doz2148RjAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L1RSWjRaaHdKWXlTdjNCQVhCOTNhTTl0ZVBFWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBV
BggrBgEFBQcBBwEB/wRGMEQwQgQCAAEwPAMEAC2DGQMEAC2GAQMEAi2UgAMEAC2e
IwMEAIAAdQMEAIAAdwMEAMIxbQMEAMIxcAMEAcKRjgMEAcKRxDANBgkqhkiG9w0B
AQsFAAOCAQEAw+11zUiR3ZTeSaEr8eA15VLjCt2Hv0g+x5OQfxC347ZgGA1iwVoX
ae/Bq20VmwKhHaJbYekcDnFjcKUDVfWw2iPunFlu+68sKzbbQiYla0zRzGFlOhja
u9bQ9uWZk7L66iOrp3OSPWSVSCB7dKQiq70RkwB02aCDIqQPAEN5fyKuI4RFDeKN
VKAJvn+y+73FTJXx4h6hHp6cGpWzRvVPi0HeL6wTuAxLDelJZwyWcxiy6mzryYsc
fNblPbwtMcZPCD/off9WE4i7LQOE+pXyr0DJ2JUYQuuwi5jhHt0NuAIXWhaAyQcv
ZOzFOKekcaLPyeybP/8b9FP9TNIM1FGO2Q==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org