Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/cT3O5lfbzfsXR8GKg1jAEN-hkfc.roa
File: cT3O5lfbzfsXR8GKg1jAEN-hkfc.roa (raw, json)
Hash identifier: N2HKEBgcqqla1lMTBWPGMcyVlm71vcc9+Kz3M1lxKmQ=
Subject key identifier: 71:3D:CE:E6:57:DB:CD:FB:17:47:C1:8A:83:58:C0:10:DF:A1:91:F7
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01842A0D197C2D156EFBE942C7E0661FD55E
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/cT3O5lfbzfsXR8GKg1jAEN-hkfc.roa
Signing time: Sun 30 Oct 2022 18:00:12 +0000
ROA not before: Sun 30 Oct 2022 18:00:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 45.141.150.0/24 maxlen: 24
5.180.104.0/24 maxlen: 24
45.147.45.0/24 maxlen: 24
194.116.229.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
45.131.2.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2a:0d:19:7c:2d:15:6e:fb:e9:42:c7:e0:66:1f:d5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 30 18:00:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=713dcee657dbcdfb1747c18a8358c010dfa191f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:90:bb:92:f9:3b:c3:36:93:2e:e7:68:7b:
19:1d:8e:da:57:d4:3a:df:b3:bb:76:4b:dd:05:29:
d4:21:bb:ae:27:51:dc:bb:75:a2:86:59:19:b9:1a:
3f:12:7e:9a:89:0b:77:62:b8:2b:7a:af:87:48:7e:
52:20:e5:ab:eb:12:f4:00:60:10:4d:40:33:e9:c2:
7c:36:92:4a:1e:8c:78:4f:ff:7b:73:79:18:ad:31:
fb:c7:aa:f4:e7:59:23:2f:1e:38:db:7f:bb:13:b6:
ef:d1:44:d1:71:0d:d1:cf:fe:b7:23:7b:ac:ed:a1:
b0:59:e1:02:b7:eb:c1:65:04:c3:c1:3a:92:c1:1a:
b0:85:d0:0a:57:37:a8:1b:ca:3b:7b:4f:57:74:a5:
8d:63:d6:a4:48:66:72:54:db:ca:50:00:35:b0:ab:
00:2a:ba:55:a9:c3:d2:e3:9e:56:13:bd:50:79:24:
de:81:eb:9e:1d:67:ea:4f:72:ee:79:ad:3c:b7:0e:
7e:f5:23:96:a8:56:5d:ce:79:18:3b:c9:0e:1e:62:
31:84:98:10:f0:e3:27:d3:41:11:e0:90:6c:bc:d3:
51:8e:91:9c:42:c2:b7:81:78:ec:14:9c:62:ac:45:
58:01:9d:9f:b5:fc:17:a8:32:6d:f8:c3:54:20:34:
2c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3D:CE:E6:57:DB:CD:FB:17:47:C1:8A:83:58:C0:10:DF:A1:91:F7
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/cT3O5lfbzfsXR8GKg1jAEN-hkfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
45.131.2.0/24
45.141.150.0/24
45.147.45.0/24
77.83.200.0/22
194.116.229.0/24
194.116.236.0/23
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
Signature Algorithm: sha256WithRSAEncryption
8b:a5:07:03:2b:c4:95:fd:fc:3b:ec:d7:79:73:1f:59:2d:ad:
b5:42:4f:2f:0d:38:80:5f:8e:af:25:29:7a:68:78:60:33:90:
e8:b3:95:14:91:55:d8:0c:07:62:91:a1:a5:4a:88:5e:55:51:
a6:cc:af:32:1f:92:19:42:70:0d:d7:7c:e2:27:46:21:ff:89:
61:a3:98:90:37:c7:3a:74:89:e1:d4:27:5e:d0:bf:9a:bc:55:
01:00:52:34:5d:e7:d3:0f:0f:2f:06:54:d9:58:7f:c0:1f:5a:
fd:15:88:fd:96:c2:fe:bb:c4:aa:cd:5c:41:b2:b5:dc:dd:34:
51:ca:4f:e4:b5:01:13:9f:a2:d3:b5:ce:31:fd:65:4d:62:2b:
44:7f:7b:88:8b:d4:c9:dc:3a:c8:dc:a3:bf:2e:f9:31:f9:fd:
da:4f:f5:43:26:41:5d:f0:06:29:04:a0:9c:c3:6a:07:2c:08:
03:f9:40:79:9e:e0:c8:aa:0b:49:df:81:e9:e5:2e:f0:3e:e4:
cf:ed:8a:33:27:65:8f:d8:18:7b:bb:14:ae:08:e1:c6:9a:8c:
95:ab:5e:7b:63:3b:23:a3:64:f6:98:7b:0f:6a:85:15:48:86:
60:a2:c3:04:fe:e0:14:80:61:42:6b:9d:20:51:c4:4a:c8:f1:
4f:71:88:18
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAYQqDRl8LRVu++lCx+BmH9VeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjIxMDMwMTgwMDEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTNkY2VlNjU3ZGJjZGZiMTc0N2MxOGE4MzU4YzAxMGRmYTE5MWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ+Qu5L5O8M2ky7naHsZHY7aV9Q6
37O7dkvdBSnUIbuuJ1Hcu3WihlkZuRo/En6aiQt3Yrgreq+HSH5SIOWr6xL0AGAQ
TUAz6cJ8NpJKHox4T/97c3kYrTH7x6r051kjLx4423+7E7bv0UTRcQ3Rz/63I3us
7aGwWeECt+vBZQTDwTqSwRqwhdAKVzeoG8o7e09XdKWNY9akSGZyVNvKUAA1sKsA
KrpVqcPS455WE71QeSTegeueHWfqT3Luea08tw5+9SOWqFZdznkYO8kOHmIxhJgQ
8OMn00ER4JBsvNNRjpGcQsK3gXjsFJxirEVYAZ2ftfwXqDJt+MNUIDQshwIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFHE9zuZX2837F0fBioNYwBDfoZH3MB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvY1QzTzVsZmJ6ZnNYUjhHS2cxakFFTi1oa2ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQABbRoAwQA
LYMCAwQALY2WAwQALZMtAwQCTVPIAwQAwnTlAwQBwnTsAwQAwpIkAwQAwpIvMA0E
AgACMAcDBQMqCYeAMA0GCSqGSIb3DQEBCwUAA4IBAQCLpQcDK8SV/fw77Nd5cx9Z
La21Qk8vDTiAX46vJSl6aHhgM5Dos5UUkVXYDAdikaGlSoheVVGmzK8yH5IZQnAN
13ziJ0Yh/4lho5iQN8c6dInh1Cde0L+avFUBAFI0XefTDw8vBlTZWH/AH1r9FYj9
lsL+u8SqzVxBsrXc3TRRyk/ktQETn6LTtc4x/WVNYitEf3uIi9TJ3DrI3KO/Lvkx
+f3aT/VDJkFd8AYpBKCcw2oHLAgD+UB5nuDIqgtJ34Hp5S7wPuTP7YozJ2WP2Bh7
uxSuCOHGmoyVq157Yzsjo2T2mHsPaoUVSIZgosME/uAUgGFCa50gUcRKyPFPcYgY
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:08 2025 by rpki-client