Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/u8N-Zw-SZX1MDKTtJS7ZzfvJ5Zs.roa
File: u8N-Zw-SZX1MDKTtJS7ZzfvJ5Zs.roa (raw, json)
Hash identifier: Q3QFFaosPE0SujyGsEjbBvoNUyaaW6HCXmdhqpwhkok=
Subject key identifier: BB:C3:7E:67:0F:92:65:7D:4C:0C:A4:ED:25:2E:D9:CD:FB:C9:E5:9B
Certificate issuer: /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial: 01850DB265A4E0B44C14623652D13A9F8C22
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/u8N-Zw-SZX1MDKTtJS7ZzfvJ5Zs.roa
Signing time: Tue 13 Dec 2022 22:54:33 +0000
ROA not before: Tue 13 Dec 2022 22:54:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14593
IP address blocks: 145.224.64.0/21 maxlen: 24
145.224.64.0/18 maxlen: 24
145.224.72.0/21 maxlen: 24
145.224.80.0/21 maxlen: 24
145.224.88.0/22 maxlen: 24
188.92.248.0/21 maxlen: 24
145.224.94.0/23 maxlen: 24
145.224.96.0/21 maxlen: 24
145.224.92.0/23 maxlen: 24
188.95.144.0/23 maxlen: 24
216.128.0.0/19 maxlen: 24
169.155.224.0/19 maxlen: 24
217.65.136.0/22 maxlen: 24
217.65.136.0/21 maxlen: 24
91.102.180.0/22 maxlen: 24
145.224.108.0/22 maxlen: 24
145.224.124.0/22 maxlen: 24
209.198.128.0/19 maxlen: 24
2a0d:3340::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0d:b2:65:a4:e0:b4:4c:14:62:36:52:d1:3a:9f:8c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Validity
Not Before: Dec 13 22:54:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbc37e670f92657d4c0ca4ed252ed9cdfbc9e59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:94:39:c5:88:3a:ea:94:6c:dd:b9:76:a5:
d5:bd:71:3e:56:92:1c:69:23:f3:74:52:a9:1a:2b:
a4:84:96:cc:86:81:16:36:7a:16:ef:42:46:76:51:
c9:d4:dd:1a:9f:63:b2:0d:cb:4f:36:f1:c4:1d:c0:
45:5f:0e:f3:b8:91:ab:10:e0:f0:cc:7a:60:23:ff:
4d:65:18:44:0e:aa:e9:02:de:e7:3a:24:57:7b:b2:
09:a2:18:ee:2b:05:12:f5:cb:35:e9:23:78:c6:be:
3a:e4:69:df:d0:c7:8e:92:19:89:00:e2:c8:ec:f4:
d5:6e:c7:9f:b5:38:9e:91:de:41:8b:44:af:5c:47:
e7:a7:79:c8:3d:27:61:cc:65:e1:ec:90:6f:83:e5:
1f:61:58:43:9f:ad:a1:b4:f9:cc:5e:74:46:1d:27:
42:cf:db:83:41:d9:d6:2e:01:45:04:b3:4b:de:c9:
fa:56:00:9e:f9:a7:6a:5a:ff:51:ec:3f:f2:7f:0f:
af:7f:f8:67:f4:73:65:5c:d3:6a:83:b7:a3:cf:87:
fc:12:c4:0c:e6:17:cc:94:f3:0f:8c:b4:bf:d8:cf:
a1:42:9b:7b:15:65:df:fe:a6:2e:4f:12:df:f6:8f:
85:76:69:ad:3f:9d:ca:ba:e6:b3:92:4d:66:41:75:
5f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C3:7E:67:0F:92:65:7D:4C:0C:A4:ED:25:2E:D9:CD:FB:C9:E5:9B
X509v3 Authority Key Identifier:
keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/u8N-Zw-SZX1MDKTtJS7ZzfvJ5Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.180.0/22
145.224.64.0/18
169.155.224.0/19
188.92.248.0/21
188.95.144.0/23
209.198.128.0/19
216.128.0.0/19
217.65.136.0/21
IPv6:
2a0d:3340::/29
Signature Algorithm: sha256WithRSAEncryption
70:e5:9f:7f:58:4a:b8:d1:b8:87:2d:2e:09:94:8a:a8:5c:de:
31:f2:83:2c:cc:f7:4d:b5:30:14:00:7b:b6:5a:0c:01:c4:0c:
d9:2b:9f:95:6a:46:77:34:de:71:c7:5f:ef:89:17:63:c3:2e:
d4:17:51:35:80:34:5e:65:63:19:71:60:9e:20:b0:4c:bf:cd:
e8:fa:24:ab:80:f6:73:27:4b:27:c8:0d:f4:b1:c9:e2:ad:b1:
a8:4f:a7:f3:a2:33:88:c9:b4:54:b0:c6:de:aa:f1:8e:82:67:
70:9b:41:1e:bf:3d:65:55:c8:f8:23:c3:57:1a:28:6f:e4:3d:
77:ce:f0:4f:dc:47:f1:7d:e6:90:15:67:2a:05:74:d1:c3:f6:
d0:2f:75:47:3d:e3:ce:d9:20:48:a7:e1:b9:51:79:5d:a6:b4:
f2:2f:2c:1d:6e:3d:13:42:bd:ce:7d:16:08:cc:64:f1:88:a8:
83:a4:50:16:f2:db:d7:fd:e0:1a:53:e3:cc:e3:d0:77:15:85:
a8:bd:72:21:88:8b:c6:b7:20:0d:2f:61:d3:70:09:6a:fd:cb:
a2:ff:c9:33:99:05:e9:50:80:a6:dc:05:b1:e9:0c:d7:79:e2:
5f:f8:42:56:14:36:17:4b:22:ea:35:ff:71:ae:84:9d:ca:f1:
b0:34:c0:bd
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAYUNsmWk4LRMFGI2UtE6n4wiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTliMzI3ZGQ2Y2RhMWFkMzdiYzFjMjI0YTQ1NGIwMmRl
YTJhZmMwHhcNMjIxMjEzMjI1NDMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmMzN2U2NzBmOTI2NTdkNGMwY2E0ZWQyNTJlZDljZGZiYzllNTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV6UOcWIOuqUbN25dqXVvXE+VpIc
aSPzdFKpGiukhJbMhoEWNnoW70JGdlHJ1N0an2OyDctPNvHEHcBFXw7zuJGrEODw
zHpgI/9NZRhEDqrpAt7nOiRXe7IJohjuKwUS9cs16SN4xr465Gnf0MeOkhmJAOLI
7PTVbseftTiekd5Bi0SvXEfnp3nIPSdhzGXh7JBvg+UfYVhDn62htPnMXnRGHSdC
z9uDQdnWLgFFBLNL3sn6VgCe+adqWv9R7D/yfw+vf/hn9HNlXNNqg7ejz4f8EsQM
5hfMlPMPjLS/2M+hQpt7FWXf/qYuTxLf9o+FdmmtP53Kuuazkk1mQXVfmwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFLvDfmcPkmV9TAyk7SUu2c37yeWbMB8GA1UdIwQY
MBaAFFeZsyfdbNoa03vBwiSkVLAt6ir8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVteko5MXMyaHJUZThIQ0pLUlVzQzNxS3Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84YzJhZTktMGE3Ny00OWViLWFkM2Et
ZWExNTBlNzYzOGNlLzEvdThOLVp3LVNaWDFNREtUdEpTN1p6ZnZKNVpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84YzJhZTktMGE3Ny00OWViLWFkM2EtZWExNTBlNzYzOGNl
LzEvVjVteko5MXMyaHJUZThIQ0pLUlVzQzNxS3Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQCW2a0AwQG
keBAAwQFqZvgAwQDvFz4AwQBvF+QAwQF0caAAwQF2IAAAwQD2UGIMA0EAgACMAcD
BQMqDTNAMA0GCSqGSIb3DQEBCwUAA4IBAQBw5Z9/WEq40biHLS4JlIqoXN4x8oMs
zPdNtTAUAHu2WgwBxAzZK5+VakZ3NN5xx1/viRdjwy7UF1E1gDReZWMZcWCeILBM
v83o+iSrgPZzJ0snyA30scnirbGoT6fzojOIybRUsMbeqvGOgmdwm0Eevz1lVcj4
I8NXGihv5D13zvBP3EfxfeaQFWcqBXTRw/bQL3VHPePO2SBIp+G5UXldprTyLywd
bj0TQr3OfRYIzGTxiKiDpFAW8tvX/eAaU+PM49B3FYWovXIhiIvGtyANL2HTcAlq
/cui/8kzmQXpUICm3AWx6QzXeeJf+EJWFDYXSyLqNf9xroSdyvGwNMC9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:46 2024 by rpki-client on console-fra.rpki-client.org