Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/xHYwIlTjd8mX3leWNuiaetnGxJ0.roa
File: xHYwIlTjd8mX3leWNuiaetnGxJ0.roa (raw, json)
Hash identifier: kt9lf51/PmHi8Bncz5/jW4m96OYW04G0YCVwyI5ZOAg=
Subject key identifier: C4:76:30:22:54:E3:77:C9:97:DE:57:96:36:E8:9A:7A:D9:C6:C4:9D
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 07D1EBE9
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/xHYwIlTjd8mX3leWNuiaetnGxJ0.roa
Signing time: Mon 28 Feb 2022 16:01:11 +0000
ROA not before: Mon 28 Feb 2022 16:01:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.106.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
45.147.46.0/24 maxlen: 24
194.116.229.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
45.136.6.0/24 maxlen: 24
45.136.7.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131197929 (0x7d1ebe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Feb 28 16:01:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c476302254e377c997de579636e89a7ad9c6c49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:13:e8:de:31:f4:8c:64:3f:0b:7a:fc:c4:
29:04:dd:8b:f7:e6:99:54:53:5e:46:07:c7:db:d0:
33:97:39:9f:de:8c:98:42:7d:52:47:3e:59:72:7e:
28:95:6f:bf:1c:3d:df:01:9a:eb:e9:d7:01:01:c9:
6e:18:09:aa:1c:0f:64:a4:81:c3:8d:8e:45:46:1f:
ce:3b:b2:7d:2f:d6:1c:cc:46:56:07:af:d8:b1:f5:
31:0e:80:a3:16:77:72:6d:b8:6d:4c:d1:ea:58:59:
93:c1:6f:55:d2:37:9d:0e:bc:c3:74:83:20:3e:de:
73:3d:6b:a1:60:7c:86:2c:02:4c:af:da:d7:b9:ce:
a8:32:4a:56:62:af:be:3c:3c:c5:1c:e2:98:91:6b:
42:9f:d5:40:cd:3c:a6:c4:ad:9f:32:2d:a9:3b:48:
59:c7:6e:96:7a:b1:93:7a:31:d4:05:32:8d:8d:98:
65:1e:91:9f:c5:9d:0d:75:10:eb:79:2a:9f:8a:28:
39:f2:b6:63:bf:2d:5e:e0:57:1d:22:38:09:f5:e2:
99:4b:ce:3c:56:6f:3a:46:a6:b2:dd:3a:af:cb:28:
4b:95:cb:5f:5a:46:1f:5f:ca:db:21:89:2b:df:5e:
9e:53:4a:ee:40:25:54:71:f5:eb:75:15:77:1f:54:
26:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:76:30:22:54:E3:77:C9:97:DE:57:96:36:E8:9A:7A:D9:C6:C4:9D
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/xHYwIlTjd8mX3leWNuiaetnGxJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.106.0/24
45.131.0.0/24
45.136.6.0/23
45.141.150.0/24
45.147.46.0/24
77.83.200.0/22
194.116.229.0/24
194.116.236.0/23
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
Signature Algorithm: sha256WithRSAEncryption
2e:9b:a3:31:be:56:7f:ea:41:a3:6d:7e:e5:3c:d8:3e:3a:fa:
c4:6a:dc:26:a6:1c:69:48:6f:6e:bb:0c:2f:77:8a:e0:0d:f3:
4a:87:fd:b3:c2:51:43:a7:97:9c:06:49:25:d2:2e:48:41:ca:
5c:55:75:1a:62:20:6f:d6:4e:56:b3:b3:ed:ae:3a:e7:15:67:
52:8a:d4:fb:db:02:5c:2f:5b:48:0f:10:3b:f6:81:59:1f:6f:
e0:4a:a0:6f:8e:0b:f7:f0:e4:11:a8:1b:c1:db:f1:01:f0:b5:
ab:d1:56:a9:4b:f6:fc:a5:9c:34:e5:fa:89:2c:76:30:73:ad:
e0:af:9f:6c:95:4a:1d:6f:11:15:de:0e:71:99:a3:b6:ba:5e:
1a:14:b5:bd:cb:42:2f:d8:2e:be:e4:82:ba:65:43:75:58:ee:
67:32:8e:30:20:50:f3:19:2f:34:b9:08:bb:0d:af:a2:bc:51:
60:e9:9a:e2:ac:29:04:82:f5:61:cb:3c:2a:5c:65:6f:81:8f:
53:a0:44:7b:e1:8b:ea:58:6e:a2:25:0c:74:1f:47:0f:c3:83:
0d:59:ff:a1:14:aa:85:d0:db:9a:23:38:8c:71:0d:02:22:8d:
1d:48:34:c9:f7:f7:28:e5:49:e6:9b:07:f1:c4:bf:14:67:0d:
07:ce:62:2b
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIEB9Hr6TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ODA1ZjE3YzJkNzEzM2QyZGFkM2E4ZGY3ZTM1MzE1ZTM3ZWY1ZGFmMB4XDTIyMDIy
ODE2MDExMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzQ3NjMwMjI1NGUz
NzdjOTk3ZGU1Nzk2MzZlODlhN2FkOWM2YzQ5ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAManE+jeMfSMZD8LevzEKQTdi/fmmVRTXkYHx9vQM5c5n96M
mEJ9Ukc+WXJ+KJVvvxw93wGa6+nXAQHJbhgJqhwPZKSBw42ORUYfzjuyfS/WHMxG
Vgev2LH1MQ6AoxZ3cm24bUzR6lhZk8FvVdI3nQ68w3SDID7ecz1roWB8hiwCTK/a
17nOqDJKVmKvvjw8xRzimJFrQp/VQM08psStnzItqTtIWcdulnqxk3ox1AUyjY2Y
ZR6Rn8WdDXUQ63kqn4ooOfK2Y78tXuBXHSI4CfXimUvOPFZvOkamst06r8soS5XL
X1pGH1/K2yGJK99enlNK7kAlVHH163UVdx9UJjcCAwEAAaOCAk4wggJKMB0GA1Ud
DgQWBBTEdjAiVON3yZfeV5Y26Jp62cbEnTAfBgNVHSMEGDAWgBRIBfF8LXEz0trT
qN9+NTFeN+9drzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NBWHhmQzF4TTlMYTA2amZmalV4WGpmdlhhOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGIvOGUwN2RkLTRmZTUtNDgyMC1iY2JlLTVkZDZlMjJlYmFiMC8x
L3hIWXdJbFRqZDhtWDNsZVdOdWlhZXRuR3hKMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIv
OGUwN2RkLTRmZTUtNDgyMC1iY2JlLTVkZDZlMjJlYmFiMC8xL1NBWHhmQzF4TTlM
YTA2amZmalV4WGpmdlhhOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBk
BggrBgEFBQcBBwEB/wRVMFMwQgQCAAEwPAMEAAW0agMEAC2DAAMEAS2IBgMEAC2N
lgMEAC2TLgMEAk1TyAMEAMJ05QMEAcJ07AMEAMKSJAMEAMKSLzANBAIAAjAHAwUD
KgmHgDANBgkqhkiG9w0BAQsFAAOCAQEALpujMb5Wf+pBo21+5TzYPjr6xGrcJqYc
aUhvbrsML3eK4A3zSof9s8JRQ6eXnAZJJdIuSEHKXFV1GmIgb9ZOVrOz7a465xVn
UorU+9sCXC9bSA8QO/aBWR9v4Eqgb44L9/DkEagbwdvxAfC1q9FWqUv2/KWcNOX6
iSx2MHOt4K+fbJVKHW8RFd4OcZmjtrpeGhS1vctCL9guvuSCumVDdVjuZzKOMCBQ
8xkvNLkIuw2vorxRYOma4qwpBIL1Ycs8Klxlb4GPU6BEe+GL6lhuoiUMdB9HD8OD
DVn/oRSqhdDbmiM4jHENAiKNHUg0yff3KOVJ5psH8cS/FGcNB85iKw==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:03 2025 by rpki-client