Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/_ah8yYi9MmbUDkgAsO3OEY_flY0.roa
File: _ah8yYi9MmbUDkgAsO3OEY_flY0.roa (raw, json)
Hash identifier: 9rc9D6lVmN6U8OWPnkVx+mR/JfH9gKAxpv2FTe8hBSs=
Subject key identifier: FD:A8:7C:C9:88:BD:32:66:D4:0E:48:00:B0:ED:CE:11:8F:DF:95:8D
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 178B1D2A
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/_ah8yYi9MmbUDkgAsO3OEY_flY0.roa
Signing time: Sat 01 Jan 2022 04:53:48 +0000
ROA not before: Sat 01 Jan 2022 04:53:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 5.183.204.0/23 maxlen: 32
45.82.206.0/23 maxlen: 32
45.12.232.0/24 maxlen: 32
185.182.60.0/24 maxlen: 32
45.15.38.0/23 maxlen: 32
92.119.150.0/23 maxlen: 32
91.188.203.0/24 maxlen: 32
193.187.154.0/23 maxlen: 32
193.187.153.0/24 maxlen: 32
45.14.46.0/24 maxlen: 32
45.10.2.0/23 maxlen: 32
2.59.174.0/23 maxlen: 32
193.160.212.0/24 maxlen: 32
213.232.104.0/24 maxlen: 32
45.67.16.0/23 maxlen: 32
5.181.148.0/23 maxlen: 32
185.226.75.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394992938 (0x178b1d2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fda87cc988bd3266d40e4800b0edce118fdf958d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:83:d3:61:20:90:52:16:b6:60:71:6a:8a:
35:b0:b7:b2:5c:99:f4:99:ab:0e:78:fa:0c:74:57:
78:50:72:bb:3e:62:c2:23:5c:c2:06:f6:12:3c:cb:
f3:83:0f:76:f8:fa:ac:f7:93:36:a1:cf:79:d8:eb:
c5:90:6e:cf:83:b3:fc:30:a9:82:1d:f5:43:61:9b:
32:a4:e4:16:3b:de:04:5c:67:2e:d4:94:20:ff:82:
1a:35:05:90:73:70:37:9e:93:af:6e:34:ff:bc:1c:
cc:b5:8c:88:0e:c5:8e:fe:0d:c9:1e:ed:03:55:c0:
93:a6:8a:4c:49:b9:15:e9:5c:c7:cb:7f:c6:79:40:
28:02:cd:65:69:d9:5b:98:cf:9d:4e:aa:92:8c:df:
07:64:8f:08:f9:00:11:bf:5a:57:7d:69:03:c7:4e:
22:0a:06:45:0b:5f:e9:51:48:79:33:fb:ae:93:0d:
d2:b2:d8:f4:1b:64:e8:34:34:c5:f2:b6:46:e6:00:
7d:22:db:71:8d:61:78:9c:59:af:d0:af:e3:64:5b:
90:3d:50:09:eb:b6:c7:33:b1:b8:6f:4d:1f:b4:cd:
d8:c9:c6:8e:87:b8:c9:3c:b0:a4:14:83:42:41:91:
23:c9:74:fd:1a:40:d2:df:2a:47:1f:97:36:5e:9d:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A8:7C:C9:88:BD:32:66:D4:0E:48:00:B0:ED:CE:11:8F:DF:95:8D
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/_ah8yYi9MmbUDkgAsO3OEY_flY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.174.0/23
5.181.148.0/23
5.183.204.0/23
45.10.2.0/23
45.12.232.0/24
45.14.46.0/24
45.15.38.0/23
45.67.16.0/23
45.82.206.0/23
91.188.203.0/24
92.119.150.0/23
185.182.60.0/24
185.226.75.0/24
193.160.212.0/24
193.187.153.0-193.187.155.255
213.232.104.0/24
Signature Algorithm: sha256WithRSAEncryption
25:42:36:19:c6:2b:4d:f5:01:cd:b4:ea:10:f1:27:b6:e2:2a:
ad:5b:fd:63:64:b4:c8:17:a9:72:68:e3:d9:d7:0f:5e:ba:c2:
f3:d3:cf:e7:7a:be:3d:ac:9d:2b:fd:fa:26:65:96:c5:82:97:
eb:4e:c6:37:f1:ae:05:e3:f8:4d:71:c9:33:e8:ec:ab:71:f5:
96:bf:63:ac:66:95:ae:17:0f:9f:68:cf:32:fc:29:dc:b2:9d:
e8:53:ed:4e:15:21:2d:c6:ef:29:3d:c4:2b:ba:16:eb:9f:dd:
3a:c4:4f:b7:54:f0:13:2e:e9:9a:98:be:3b:77:db:6e:91:86:
32:95:00:47:40:bf:76:c5:25:f0:39:d0:36:57:5a:16:14:ba:
fa:5b:14:ba:26:df:60:08:c6:93:30:b2:c4:09:07:52:3b:a3:
4a:97:ee:7f:c9:54:60:1e:99:8b:98:e5:38:69:57:a0:bd:82:
60:f0:ae:b3:e7:50:25:e1:d8:f1:7c:35:85:19:a7:ea:ea:4f:
04:a8:64:e6:85:d9:b5:6d:d4:9f:18:79:35:9b:d3:b7:fe:56:
4b:7c:b0:66:9e:c7:62:5f:30:2b:a2:c9:70:d2:4f:50:d5:4c:
a8:a5:56:82:10:bc:0f:2b:06:c7:94:62:18:1c:73:0a:8f:2d:
10:d3:35:1c
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIEF4sdKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDEw
MTA0NTM0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmRhODdjYzk4OGJk
MzI2NmQ0MGU0ODAwYjBlZGNlMTE4ZmRmOTU4ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM+gg9NhIJBSFrZgcWqKNbC3slyZ9JmrDnj6DHRXeFByuz5i
wiNcwgb2EjzL84MPdvj6rPeTNqHPedjrxZBuz4Oz/DCpgh31Q2GbMqTkFjveBFxn
LtSUIP+CGjUFkHNwN56Tr240/7wczLWMiA7Fjv4NyR7tA1XAk6aKTEm5Felcx8t/
xnlAKALNZWnZW5jPnU6qkozfB2SPCPkAEb9aV31pA8dOIgoGRQtf6VFIeTP7rpMN
0rLY9Btk6DQ0xfK2RuYAfSLbcY1heJxZr9Cv42RbkD1QCeu2xzOxuG9NH7TN2MnG
joe4yTywpBSDQkGRI8l0/RpA0t8qRx+XNl6dpv0CAwEAAaOCAmwwggJoMB0GA1Ud
DgQWBBT9qHzJiL0yZtQOSACw7c4Rj9+VjTAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L19haDh5WWk5TW1iVURrZ0FzTzNPRVlfZmxZMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
gQYIKwYBBQUHAQcBAf8EcjBwMG4EAgABMGgDBAECO64DBAEFtZQDBAEFt8wDBAEt
CgIDBAAtDOgDBAAtDi4DBAEtDyYDBAEtQxADBAEtUs4DBABbvMsDBAFcd5YDBAC5
tjwDBAC54ksDBADBoNQwDAMEAMG7mQMEAsG7mAMEANXoaDANBgkqhkiG9w0BAQsF
AAOCAQEAJUI2GcYrTfUBzbTqEPEntuIqrVv9Y2S0yBepcmjj2dcPXrrC89PP53q+
PaydK/36JmWWxYKX607GN/GuBeP4TXHJM+jsq3H1lr9jrGaVrhcPn2jPMvwp3LKd
6FPtThUhLcbvKT3EK7oW65/dOsRPt1TwEy7pmpi+O3fbbpGGMpUAR0C/dsUl8DnQ
NldaFhS6+lsUuibfYAjGkzCyxAkHUjujSpfuf8lUYB6Zi5jlOGlXoL2CYPCus+dQ
JeHY8Xw1hRmn6upPBKhk5oXZtW3Unxh5NZvTt/5WS3ywZp7HYl8wK6LJcNJPUNVM
qKVWghC8DysGx5RiGBxzCo8tENM1HA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org