Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/v2RlkzzaKweawoXx2YWSE0llYKE.roa
File: v2RlkzzaKweawoXx2YWSE0llYKE.roa (raw, json)
Hash identifier: UoCzPGEa/VFBm+0YrLQY1Gax0sOC42OM1vwhGk3nTrE=
Subject key identifier: BF:64:65:93:3C:DA:2B:07:9A:C2:85:F1:D9:85:92:13:49:65:60:A1
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 190186C0
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/v2RlkzzaKweawoXx2YWSE0llYKE.roa
Signing time: Sat 05 Mar 2022 00:52:10 +0000
ROA not before: Sat 05 Mar 2022 00:52:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54600
IP address blocks: 45.81.236.0/22 maxlen: 32
45.135.220.0/22 maxlen: 32
45.12.234.0/24 maxlen: 32
45.12.235.0/24 maxlen: 32
45.12.162.0/24 maxlen: 32
185.117.23.0/24 maxlen: 24
185.115.129.0/24 maxlen: 24
45.15.37.0/24 maxlen: 32
45.15.36.0/24 maxlen: 32
45.15.36.0/23 maxlen: 32
185.137.183.0/24 maxlen: 24
185.253.249.0/24 maxlen: 24
45.83.252.0/23 maxlen: 32
45.83.253.0/24 maxlen: 32
45.83.252.0/24 maxlen: 32
185.133.74.0/24 maxlen: 24
185.146.195.0/24 maxlen: 24
45.82.204.0/23 maxlen: 32
45.94.164.0/22 maxlen: 24
185.182.63.0/24 maxlen: 24
79.143.50.0/24 maxlen: 24
79.143.57.0/24 maxlen: 24
79.143.63.0/24 maxlen: 24
185.240.236.0/22 maxlen: 24
45.128.28.0/22 maxlen: 24
45.81.11.0/24 maxlen: 32
45.81.10.0/24 maxlen: 32
45.135.100.0/22 maxlen: 24
45.14.47.0/24 maxlen: 32
185.172.144.0/24 maxlen: 24
185.120.33.0/24 maxlen: 24
45.130.74.0/24 maxlen: 24
194.49.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419530432 (0x190186c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Mar 5 00:52:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf6465933cda2b079ac285f1d9859213496560a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:05:70:86:5c:34:f5:2f:ab:44:27:69:04:05:
77:6d:3a:30:4f:77:31:f4:b1:15:f4:a6:26:81:c9:
8d:ff:37:06:f6:26:aa:fe:14:2f:bd:20:78:c3:70:
62:07:d7:59:40:78:83:3a:24:b2:da:e3:ab:11:30:
01:e4:ee:84:ef:40:bc:7d:1b:46:99:96:8f:e9:83:
5e:a2:5d:60:e7:87:d8:e2:e8:aa:0d:4b:d4:90:7b:
17:aa:8e:9e:e6:c2:87:d4:bf:1b:ee:0e:b1:52:e8:
3a:21:a1:1f:a2:36:07:e5:b6:30:a9:26:23:03:79:
28:eb:bc:d0:0a:d7:ae:7c:23:38:b3:52:4d:b7:b5:
c8:5e:6e:f8:c9:66:f6:c3:a1:c7:ae:1d:b9:f8:ac:
07:4d:63:cb:b7:ce:66:89:99:45:78:e5:1f:12:f6:
a1:a9:62:e2:aa:89:2b:7a:84:30:f8:ca:cf:76:b2:
07:d0:ad:f6:08:c8:5e:40:52:be:18:0e:ed:9c:01:
a7:65:d8:ae:67:6e:db:da:89:c8:32:4b:84:b6:47:
03:b7:73:20:fb:02:23:9e:fc:6a:4e:88:23:5c:ee:
2b:3e:df:93:4f:60:06:96:96:5a:fa:ed:45:77:03:
d5:e5:2b:b4:9b:0a:84:88:a0:6d:3a:20:fb:03:df:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:64:65:93:3C:DA:2B:07:9A:C2:85:F1:D9:85:92:13:49:65:60:A1
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/v2RlkzzaKweawoXx2YWSE0llYKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.162.0/24
45.12.234.0/23
45.14.47.0/24
45.15.36.0/23
45.81.10.0/23
45.81.236.0/22
45.82.204.0/23
45.83.252.0/23
45.94.164.0/22
45.128.28.0/22
45.130.74.0/24
45.135.100.0/22
45.135.220.0/22
79.143.50.0/24
79.143.57.0/24
79.143.63.0/24
185.115.129.0/24
185.117.23.0/24
185.120.33.0/24
185.133.74.0/24
185.137.183.0/24
185.146.195.0/24
185.172.144.0/24
185.182.63.0/24
185.240.236.0/22
185.253.249.0/24
194.49.113.0/24
Signature Algorithm: sha256WithRSAEncryption
51:29:59:22:da:db:e1:46:10:fa:99:20:11:8a:c8:43:dd:b7:
c4:c0:ba:12:1c:88:63:5b:ae:67:f8:d4:3e:4b:98:ef:aa:cd:
71:49:5a:f8:b6:bb:9f:e0:13:a6:c1:43:41:24:45:b4:8f:ee:
e1:bf:e2:73:e3:02:1e:bc:d1:c9:29:98:44:e2:91:28:60:a0:
2b:b7:fc:8d:10:70:da:0c:17:40:19:5d:53:79:a3:69:a4:33:
88:88:54:6a:34:b4:a8:29:2b:8b:51:ea:48:26:0a:2b:44:10:
89:99:51:b6:c9:f5:ec:62:1f:95:87:3f:9f:99:c5:32:8c:77:
f5:5e:cc:6f:fd:29:ba:8e:ca:6e:b2:fe:63:9e:56:7d:90:5d:
04:ff:86:5c:5d:dc:0a:61:4e:43:23:d8:15:3c:ce:33:7d:fa:
3f:55:74:bc:75:a2:4f:93:9f:82:85:d3:5b:29:72:c1:8f:e3:
41:20:8d:19:d6:39:8c:79:a9:ad:d5:9e:4f:f5:1b:f7:53:bc:
0a:2d:c0:fc:06:2a:7a:61:66:fc:49:db:64:f9:ff:22:9a:e2:
2e:ae:f4:9d:22:71:bb:c2:bb:3b:a0:04:b0:f9:82:88:81:ae:
17:e6:0c:3c:bc:10:9b:5e:8f:1e:e7:db:58:02:b4:eb:67:6e:
dc:8d:5c:59
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIEGQGGwDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDMw
NTAwNTIxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmY2NDY1OTMzY2Rh
MmIwNzlhYzI4NWYxZDk4NTkyMTM0OTY1NjBhMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMwFcIZcNPUvq0QnaQQFd206ME93MfSxFfSmJoHJjf83BvYm
qv4UL70geMNwYgfXWUB4gzokstrjqxEwAeTuhO9AvH0bRpmWj+mDXqJdYOeH2OLo
qg1L1JB7F6qOnubCh9S/G+4OsVLoOiGhH6I2B+W2MKkmIwN5KOu80ArXrnwjOLNS
Tbe1yF5u+Mlm9sOhx64dufisB01jy7fOZomZRXjlHxL2oali4qqJK3qEMPjKz3ay
B9Ct9gjIXkBSvhgO7ZwBp2XYrmdu29qJyDJLhLZHA7dzIPsCI578ak6II1zuKz7f
k09gBpaWWvrtRXcD1eUrtJsKhIigbTog+wPfBP8CAwEAAaOCAqowggKmMB0GA1Ud
DgQWBBS/ZGWTPNorB5rChfHZhZITSWVgoTAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L3YyUmxrenphS3dlYXdvWHgyWVdTRTBsbFlLRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
vwYIKwYBBQUHAQcBAf8Ega8wgawwgakEAgABMIGiAwQALQyiAwQBLQzqAwQALQ4v
AwQBLQ8kAwQBLVEKAwQCLVHsAwQBLVLMAwQBLVP8AwQCLV6kAwQCLYAcAwQALYJK
AwQCLYdkAwQCLYfcAwQAT48yAwQAT485AwQAT48/AwQAuXOBAwQAuXUXAwQAuXgh
AwQAuYVKAwQAuYm3AwQAuZLDAwQAuayQAwQAubY/AwQCufDsAwQAuf35AwQAwjFx
MA0GCSqGSIb3DQEBCwUAA4IBAQBRKVki2tvhRhD6mSARishD3bfEwLoSHIhjW65n
+NQ+S5jvqs1xSVr4truf4BOmwUNBJEW0j+7hv+Jz4wIevNHJKZhE4pEoYKArt/yN
EHDaDBdAGV1TeaNppDOIiFRqNLSoKSuLUepIJgorRBCJmVG2yfXsYh+Vhz+fmcUy
jHf1Xsxv/Sm6jspusv5jnlZ9kF0E/4ZcXdwKYU5DI9gVPM4zffo/VXS8daJPk5+C
hdNbKXLBj+NBII0Z1jmMeamt1Z5P9Rv3U7wKLcD8Bip6YWb8Sdtk+f8imuIurvSd
InG7wrs7oASw+YKIga4X5gw8vBCbXo8e59tYArTrZ27cjVxZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:46 2024 by rpki-client on console-fra.rpki-client.org