Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/smkLL_4v_FQzCQqvkx6p2tB6lg8.roa
File: smkLL_4v_FQzCQqvkx6p2tB6lg8.roa (raw, json)
Hash identifier: Smoui3lQ1vmAY6IFjo1yeqjxzmBqKzLRBv1nsHGyYeU=
Subject key identifier: B2:69:0B:2F:FE:2F:FC:54:33:09:0A:AF:93:1E:A9:DA:D0:7A:96:0F
Certificate issuer: /CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Certificate serial: ED0FBC
Authority key identifier: D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/smkLL_4v_FQzCQqvkx6p2tB6lg8.roa
Signing time: Tue 22 Mar 2022 23:06:30 +0000
ROA not before: Tue 22 Mar 2022 23:06:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44061
IP address blocks: 79.175.208.0/20 maxlen: 20
109.74.96.0/20 maxlen: 20
79.175.224.0/20 maxlen: 20
79.175.240.0/21 maxlen: 21
79.175.248.0/21 maxlen: 21
79.175.252.0/22 maxlen: 22
79.175.248.0/22 maxlen: 22
45.139.93.0/24 maxlen: 24
45.139.95.0/24 maxlen: 24
45.139.92.0/24 maxlen: 24
45.139.94.0/24 maxlen: 24
79.175.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15536060 (0xed0fbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Validity
Not Before: Mar 22 23:06:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2690b2ffe2ffc5433090aaf931ea9dad07a960f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:95:eb:c0:8b:c7:92:d1:5a:44:1b:f2:29:
cf:ee:17:70:c0:ae:df:4a:81:63:5d:1e:1d:0b:d0:
a8:25:da:8f:53:1b:c4:a2:ae:b2:a7:0f:d1:b2:f8:
eb:8a:a1:e2:08:db:ae:4a:0c:4c:2e:51:9c:46:e2:
59:f9:7b:5c:a8:3b:81:a8:bb:bf:ad:6b:42:a7:99:
8c:e6:b1:f6:cd:63:5b:b9:0c:78:58:f1:16:b1:72:
10:d7:3e:f5:cf:86:e8:c1:49:73:28:c0:70:3a:3d:
8b:c2:3a:ac:3b:b7:1a:7c:99:86:2e:4d:76:16:24:
a6:b7:34:78:de:7d:b6:ec:43:e3:1c:df:47:85:54:
28:aa:24:31:97:ec:ad:d6:c6:5a:ca:f6:ef:b2:4a:
69:40:08:7a:9e:f8:0e:b3:09:21:5c:e0:2a:4a:25:
40:67:a1:83:d1:14:23:5f:28:7e:65:f1:83:7d:17:
ad:f6:3d:8f:59:41:4c:29:c2:fc:5b:5a:9d:f3:46:
8d:8a:b5:1d:8e:15:5a:d3:42:a8:87:42:03:92:24:
5a:54:6a:13:52:25:b4:ec:fb:69:83:3d:2e:0b:99:
4b:fe:1f:94:c2:ef:2a:18:6d:38:a4:4b:8e:d4:5d:
f4:3c:96:6b:6e:92:29:18:33:8e:03:82:b2:c7:c4:
2b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:69:0B:2F:FE:2F:FC:54:33:09:0A:AF:93:1E:A9:DA:D0:7A:96:0F
X509v3 Authority Key Identifier:
keyid:D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/smkLL_4v_FQzCQqvkx6p2tB6lg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.92.0/22
79.175.192.0/18
109.74.96.0/20
Signature Algorithm: sha256WithRSAEncryption
7d:5a:c2:a8:e2:51:da:0e:b4:eb:34:a8:fc:fd:cb:b3:83:c8:
f2:2b:e1:e3:62:e7:da:9d:7a:94:e9:5b:ec:eb:7c:72:4d:45:
a6:02:5b:46:a8:12:dc:9b:28:81:c8:31:a7:3c:ef:8a:66:d1:
2f:ca:61:46:43:d3:da:f2:56:03:e7:5a:3e:fc:7e:3f:83:63:
d8:92:d9:88:ac:73:b2:a4:52:d9:61:b2:ca:6d:78:11:d7:08:
c7:87:e0:52:7a:ec:2b:75:55:d3:13:eb:92:e3:39:b7:29:6d:
0f:37:9c:6f:c8:9a:02:a4:0e:89:72:67:89:81:d2:ed:e8:44:
f0:f0:b0:ec:47:03:51:55:77:6e:18:5f:ad:e7:df:f9:a1:32:
de:76:54:a9:e6:e4:15:45:d6:d3:f9:9a:54:49:6d:a3:ad:be:
a8:6f:0a:a1:02:f4:98:a9:c7:7f:e1:ed:3a:83:71:13:85:0e:
7a:36:bc:e4:57:ff:ad:7d:d4:18:8c:2b:18:c7:08:b3:03:a4:
e6:49:e1:29:f2:c5:3f:d2:c5:21:13:07:8e:39:cb:aa:8a:6d:
37:ab:91:e4:20:13:4e:89:6b:26:ef:14:88:7f:ab:98:cc:54:
73:42:70:25:53:ab:0f:71:96:39:28:24:2f:8f:f9:c8:25:92:
40:3a:78:fb
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEAO0PvDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NDVkZjk4YmVjODI3NmI4MmJhODJkOTM3NjA0NDdiYTQ0ZDFhMTliMB4XDTIyMDMy
MjIzMDYzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjI2OTBiMmZmZTJm
ZmM1NDMzMDkwYWFmOTMxZWE5ZGFkMDdhOTYwZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKO2levAi8eS0VpEG/Ipz+4XcMCu30qBY10eHQvQqCXaj1Mb
xKKusqcP0bL464qh4gjbrkoMTC5RnEbiWfl7XKg7gai7v61rQqeZjOax9s1jW7kM
eFjxFrFyENc+9c+G6MFJcyjAcDo9i8I6rDu3GnyZhi5NdhYkprc0eN59tuxD4xzf
R4VUKKokMZfsrdbGWsr277JKaUAIep74DrMJIVzgKkolQGehg9EUI18ofmXxg30X
rfY9j1lBTCnC/FtanfNGjYq1HY4VWtNCqIdCA5IkWlRqE1IltOz7aYM9LguZS/4f
lMLvKhhtOKRLjtRd9DyWa26SKRgzjgOCssfEK/MCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBSyaQsv/i/8VDMJCq+THqna0HqWDzAfBgNVHSMEGDAWgBTUXfmL7IJ2uCuo
LZN2BEe6RNGhmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFGMzVpLXlDZHJncnFDMlRkZ1JIdWtUUm9acy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGEvZGUwNjVkLTMwZTItNDNkNS1iMzU3LWMwOTU2YTgwMTMyZC8x
L3Nta0xMXzR2X0ZRekNRcXZreDZwMnRCNmxnOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEv
ZGUwNjVkLTMwZTItNDNkNS1iMzU3LWMwOTU2YTgwMTMyZC8xLzFGMzVpLXlDZHJn
cnFDMlRkZ1JIdWtUUm9acy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAi2LXAMEBk+vwAMEBG1KYDANBgkq
hkiG9w0BAQsFAAOCAQEAfVrCqOJR2g606zSo/P3Ls4PI8ivh42Ln2p16lOlb7Ot8
ck1FpgJbRqgS3JsogcgxpzzvimbRL8phRkPT2vJWA+daPvx+P4Nj2JLZiKxzsqRS
2WGyym14EdcIx4fgUnrsK3VV0xPrkuM5tyltDzecb8iaAqQOiXJniYHS7ehE8PCw
7EcDUVV3bhhfreff+aEy3nZUqebkFUXW0/maVElto62+qG8KoQL0mKnHf+HtOoNx
E4UOeja85Ff/rX3UGIwrGMcIswOk5knhKfLFP9LFIRMHjjnLqoptN6uR5CATTolr
Ju8UiH+rmMxUc0JwJVOrD3GWOSgkL4/5yCWSQDp4+w==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:52 2023 by rpki-client on console-fra.rpki-client.org