Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/nIoK5bTIynWhrqlSVM29oIzxRaY.roa
File: nIoK5bTIynWhrqlSVM29oIzxRaY.roa (raw, json)
Hash identifier: JpiqTL8RpvZmPlYMj71VJvneovB2LERzE0eRcrMaUxw=
Subject key identifier: 9C:8A:0A:E5:B4:C8:CA:75:A1:AE:A9:52:54:CD:BD:A0:8C:F1:45:A6
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0784D135
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/nIoK5bTIynWhrqlSVM29oIzxRaY.roa
Signing time: Tue 01 Feb 2022 09:33:36 +0000
ROA not before: Tue 01 Feb 2022 09:33:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.106.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
194.116.229.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
45.136.6.0/24 maxlen: 24
45.136.7.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126144821 (0x784d135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Feb 1 09:33:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c8a0ae5b4c8ca75a1aea95254cdbda08cf145a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:8a:5f:fe:36:06:47:b6:60:a1:1b:72:c9:
0e:67:5d:c6:48:75:99:f9:cd:44:9b:ea:df:56:53:
2b:27:a7:0c:b3:e1:65:16:ac:75:68:27:80:11:dd:
5f:08:d6:f1:fd:d2:bc:40:0b:e6:17:84:16:0d:76:
45:e9:04:87:1d:81:b8:ce:71:73:7e:74:73:08:15:
ed:a0:05:d3:04:38:b0:ce:43:be:43:ad:dc:e7:d7:
cf:0c:16:af:4e:2b:ca:b1:99:0e:3a:f5:22:2d:fe:
cf:36:e1:88:1d:ce:2b:8f:00:c6:89:13:3b:ee:38:
ae:65:7c:83:9f:68:be:04:dd:e3:52:ab:e3:a3:6d:
02:e6:30:cb:49:23:06:f8:b4:b9:ea:ac:8d:fd:f4:
85:48:75:de:e9:af:c1:37:89:86:5d:34:37:fd:5c:
de:4b:e3:5d:cd:4c:0a:cb:1d:c8:ba:67:fe:2c:e4:
1c:e1:f9:33:5a:ec:19:68:b2:ac:4f:a3:b8:a4:3f:
5b:f6:6d:f2:d0:22:41:d8:19:31:8b:ac:d9:30:f4:
7a:b9:94:1d:48:8b:68:02:ec:86:83:47:a4:a7:11:
da:9e:11:65:c3:28:cf:cf:aa:7a:30:cd:4c:a2:65:
34:92:6a:76:bc:d7:8b:b7:6a:39:56:77:70:17:ba:
0b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8A:0A:E5:B4:C8:CA:75:A1:AE:A9:52:54:CD:BD:A0:8C:F1:45:A6
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/nIoK5bTIynWhrqlSVM29oIzxRaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.106.0/24
45.131.0.0/24
45.136.6.0/23
45.141.150.0/24
77.83.200.0/22
194.116.229.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
Signature Algorithm: sha256WithRSAEncryption
15:72:d0:bc:9e:ff:75:6e:cf:88:52:2d:2e:4f:fd:80:33:8f:
4b:af:f1:0c:15:f1:7e:11:ef:52:22:62:21:7c:86:be:c7:9d:
94:53:6c:75:e8:7c:60:38:17:e0:d3:23:fc:76:c4:55:1e:b6:
d7:6f:ad:90:cf:1d:3d:86:cb:57:2c:f5:ea:82:49:7b:96:65:
06:7a:07:5d:0e:52:cd:84:d7:44:df:a8:6e:a9:8c:6b:53:36:
37:c7:05:9e:78:6c:bb:74:1e:f5:95:bf:c7:37:73:dc:72:2d:
93:af:c6:62:b8:3c:37:8e:59:53:98:26:5f:6d:b5:a7:37:ba:
89:d1:68:42:1f:3b:a8:1e:45:6b:25:eb:3a:00:f4:a4:19:a5:
8a:03:df:47:ae:77:9d:13:c0:de:ff:92:66:fb:23:3a:e2:ce:
be:51:f5:b3:45:40:55:4f:31:5a:23:58:25:b7:03:76:3f:ca:
1f:22:8d:19:77:ec:53:ed:4a:93:cc:7e:ec:cb:ae:37:63:0c:
78:8c:9d:57:b3:e5:f6:0b:18:5d:1c:99:3f:49:0f:65:fb:d1:
70:e6:d4:98:10:b5:f0:ba:7c:11:7c:5f:b8:1f:fb:cf:45:fa:
ad:ae:bf:bf:fe:fa:4c:c5:43:8a:4b:2f:da:3e:04:92:16:f1:
d1:ff:1c:42
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIEB4TRNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ODA1ZjE3YzJkNzEzM2QyZGFkM2E4ZGY3ZTM1MzE1ZTM3ZWY1ZGFmMB4XDTIyMDIw
MTA5MzMzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWM4YTBhZTViNGM4
Y2E3NWExYWVhOTUyNTRjZGJkYTA4Y2YxNDVhNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALXZil/+NgZHtmChG3LJDmddxkh1mfnNRJvq31ZTKyenDLPh
ZRasdWgngBHdXwjW8f3SvEAL5heEFg12RekEhx2BuM5xc350cwgV7aAF0wQ4sM5D
vkOt3OfXzwwWr04ryrGZDjr1Ii3+zzbhiB3OK48AxokTO+44rmV8g59ovgTd41Kr
46NtAuYwy0kjBvi0ueqsjf30hUh13umvwTeJhl00N/1c3kvjXc1MCssdyLpn/izk
HOH5M1rsGWiyrE+juKQ/W/Zt8tAiQdgZMYus2TD0ermUHUiLaALshoNHpKcR2p4R
ZcMoz8+qejDNTKJlNJJqdrzXi7dqOVZ3cBe6CwECAwEAAaOCAk4wggJKMB0GA1Ud
DgQWBBScigrltMjKdaGuqVJUzb2gjPFFpjAfBgNVHSMEGDAWgBRIBfF8LXEz0trT
qN9+NTFeN+9drzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NBWHhmQzF4TTlMYTA2amZmalV4WGpmdlhhOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGIvOGUwN2RkLTRmZTUtNDgyMC1iY2JlLTVkZDZlMjJlYmFiMC8x
L25Jb0s1YlRJeW5XaHJxbFNWTTI5b0l6eFJhWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIv
OGUwN2RkLTRmZTUtNDgyMC1iY2JlLTVkZDZlMjJlYmFiMC8xL1NBWHhmQzF4TTlM
YTA2amZmalV4WGpmdlhhOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBk
BggrBgEFBQcBBwEB/wRVMFMwQgQCAAEwPAMEAAW0agMEAC2DAAMEAS2IBgMEAC2N
lgMEAk1TyAMEAMJ05QMEAcJ07AMEAMKSGgMEAMKSJAMEAMKSLzANBAIAAjAHAwUD
KgmHgDANBgkqhkiG9w0BAQsFAAOCAQEAFXLQvJ7/dW7PiFItLk/9gDOPS6/xDBXx
fhHvUiJiIXyGvsedlFNsdeh8YDgX4NMj/HbEVR6212+tkM8dPYbLVyz16oJJe5Zl
BnoHXQ5SzYTXRN+obqmMa1M2N8cFnnhsu3Qe9ZW/xzdz3HItk6/GYrg8N45ZU5gm
X221pze6idFoQh87qB5FayXrOgD0pBmligPfR653nRPA3v+SZvsjOuLOvlH1s0VA
VU8xWiNYJbcDdj/KHyKNGXfsU+1Kk8x+7MuuN2MMeIydV7Pl9gsYXRyZP0kPZfvR
cObUmBC18Lp8EXxfuB/7z0X6ra6/v/76TMVDiksv2j4Ekhbx0f8cQg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:23 2025 by rpki-client