Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/n5ViGZiG6X4jgzjZJpFM7FYR1jU.roa
File: n5ViGZiG6X4jgzjZJpFM7FYR1jU.roa (raw, json)
Hash identifier: LF1zv4J7MoaUkLLyh8sjTUGrq88B3KAfApJwb8YNZBI=
Subject key identifier: 9F:95:62:19:98:86:E9:7E:23:83:38:D9:26:91:4C:EC:56:11:D6:35
Certificate issuer: /CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Certificate serial: 0183692B99DC81D3C093DBEBF14733483C48
Authority key identifier: 96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/n5ViGZiG6X4jgzjZJpFM7FYR1jU.roa
Signing time: Fri 23 Sep 2022 07:06:48 +0000
ROA not before: Fri 23 Sep 2022 07:06:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49088
IP address blocks: 45.90.92.0/22 maxlen: 22
185.216.184.0/22 maxlen: 22
185.144.72.0/22 maxlen: 22
195.39.250.0/23 maxlen: 23
195.39.252.0/23 maxlen: 23
91.212.160.0/23 maxlen: 23
185.214.200.0/22 maxlen: 22
91.212.72.0/23 maxlen: 23
45.86.108.0/22 maxlen: 22
45.135.68.0/22 maxlen: 22
2a07:3d00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:69:2b:99:dc:81:d3:c0:93:db:eb:f1:47:33:48:3c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Validity
Not Before: Sep 23 07:06:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f9562199886e97e238338d926914cec5611d635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b8:a2:f4:9a:4a:ef:6d:63:75:c9:ca:35:74:
bd:28:f3:22:c6:05:a7:f8:f0:6f:e6:21:9b:96:36:
9e:b6:72:ed:e4:f4:41:d5:d8:3f:d3:47:6f:4e:df:
0d:fd:53:db:83:02:73:a1:fd:c3:73:03:16:c3:39:
81:4e:3c:74:8c:cd:7c:b6:70:99:87:c0:92:42:bd:
c6:c2:a2:33:74:50:0d:0e:d5:96:65:91:07:55:7d:
09:f5:4b:a3:99:4f:37:b5:36:64:9f:09:6f:9f:ac:
b1:c7:27:a0:a8:81:97:40:b8:84:cb:a8:d4:c0:25:
fb:b0:c6:8f:bb:e2:86:e1:e0:67:66:a3:c2:6f:f0:
66:37:84:97:19:02:79:a5:7b:67:04:49:c0:0a:dd:
03:79:58:16:6b:f6:2e:4a:f6:d4:e8:66:d1:c7:cc:
5f:f7:c5:31:7c:06:b9:03:57:62:f8:c3:3a:3d:f9:
fe:8e:ad:ed:5b:94:51:c1:cc:21:c3:1f:5b:c4:82:
a6:d3:2b:94:4b:51:59:9b:b3:63:08:d2:46:fd:49:
ad:a1:50:65:21:70:3f:7b:3a:b1:0e:7f:58:4c:b7:
e6:a4:02:30:72:43:17:7c:b7:c3:e7:8a:44:e4:b8:
a8:f7:c8:38:06:d4:1a:4e:de:a6:58:d8:85:08:e8:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:95:62:19:98:86:E9:7E:23:83:38:D9:26:91:4C:EC:56:11:D6:35
X509v3 Authority Key Identifier:
keyid:96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/n5ViGZiG6X4jgzjZJpFM7FYR1jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.108.0/22
45.90.92.0/22
45.135.68.0/22
91.212.72.0/23
91.212.160.0/23
185.144.72.0/22
185.214.200.0/22
185.216.184.0/22
195.39.250.0-195.39.253.255
IPv6:
2a07:3d00::/29
Signature Algorithm: sha256WithRSAEncryption
21:f1:f6:b9:6a:73:03:1f:ec:42:fb:9c:42:3d:63:5a:1d:b1:
ec:52:a9:2f:9b:8a:05:74:64:be:4c:a2:dd:0f:aa:91:3b:72:
55:04:fe:34:f5:d1:f3:33:a7:65:c5:23:c6:ff:60:ec:dd:b8:
90:5c:8d:39:05:e3:46:8f:68:ea:af:74:fc:4f:ec:14:5c:b9:
02:bd:ab:fe:eb:67:37:65:b9:5b:1b:ce:e4:ea:ba:61:1b:09:
d0:4f:10:45:5e:26:20:64:0c:11:bf:35:61:57:eb:6f:05:95:
96:34:78:b4:60:1e:52:cf:b5:e2:4f:db:73:2f:5a:fc:7e:1d:
ab:aa:aa:84:d0:77:5f:6b:9d:18:7c:2d:fc:3e:8e:3e:5f:70:
64:fa:65:cc:cc:b5:94:a3:31:2f:9d:77:9a:8c:48:34:08:5c:
12:8e:42:85:da:7c:27:2e:c6:cf:34:9f:b8:55:de:64:de:43:
f4:db:3c:e4:da:e0:a4:0a:d5:d3:de:8d:73:03:5e:94:5c:b1:
6b:cb:4f:59:de:1a:2a:b1:79:41:c5:9b:d0:5c:78:ec:d6:b8:
65:dd:ea:8a:d0:57:83:b2:3b:0f:20:3e:ca:08:31:ad:1d:7a:
0f:36:dc:70:26:79:e6:f6:78:df:c3:7f:c8:23:94:b2:9d:ed:
22:25:55:ca
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgISAYNpK5ncgdPAk9vr8UczSDxIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YWI0Njk3YTZhNDhmNmM2YzY5M2UzODM5YmZkNWIzZmIw
ZTNiZjEwHhcNMjIwOTIzMDcwNjQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Zjk1NjIxOTk4ODZlOTdlMjM4MzM4ZDkyNjkxNGNlYzU2MTFkNjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rii9JpK721jdcnKNXS9KPMixgWn
+PBv5iGbljaetnLt5PRB1dg/00dvTt8N/VPbgwJzof3DcwMWwzmBTjx0jM18tnCZ
h8CSQr3GwqIzdFANDtWWZZEHVX0J9UujmU83tTZknwlvn6yxxyegqIGXQLiEy6jU
wCX7sMaPu+KG4eBnZqPCb/BmN4SXGQJ5pXtnBEnACt0DeVgWa/YuSvbU6GbRx8xf
98UxfAa5A1di+MM6Pfn+jq3tW5RRwcwhwx9bxIKm0yuUS1FZm7NjCNJG/UmtoVBl
IXA/ezqxDn9YTLfmpAIwckMXfLfD54pE5Lio98g4BtQaTt6mWNiFCOhR6wIDAQAB
o4ICUDCCAkwwHQYDVR0OBBYEFJ+VYhmYhul+I4M42SaRTOxWEdY1MB8GA1UdIwQY
MBaAFJarRpempI9sbGk+ODm/1bP7DjvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHF0R2w2YWtqMnhzYVQ0NE9iX1ZzX3NPT19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zNzFjYTktNTZhZC00ZDEyLTk2ZjQt
M2IxZTcyMmE5ZGM4LzEvbjVWaUdaaUc2WDRqZ3pqWkpwRk03RllSMWpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8zNzFjYTktNTZhZC00ZDEyLTk2ZjQtM2IxZTcyMmE5ZGM4
LzEvbHF0R2w2YWtqMnhzYVQ0NE9iX1ZzX3NPT19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBEBAIAATA+AwQCLVZsAwQC
LVpcAwQCLYdEAwQBW9RIAwQBW9SgAwQCuZBIAwQCudbIAwQCudi4MAwDBAHDJ/oD
BAHDJ/wwDQQCAAIwBwMFAyoHPQAwDQYJKoZIhvcNAQELBQADggEBACHx9rlqcwMf
7EL7nEI9Y1odsexSqS+bigV0ZL5Mot0PqpE7clUE/jT10fMzp2XFI8b/YOzduJBc
jTkF40aPaOqvdPxP7BRcuQK9q/7rZzdluVsbzuTqumEbCdBPEEVeJiBkDBG/NWFX
628FlZY0eLRgHlLPteJP23MvWvx+HauqqoTQd19rnRh8Lfw+jj5fcGT6ZczMtZSj
MS+dd5qMSDQIXBKOQoXafCcuxs80n7hV3mTeQ/TbPOTa4KQK1dPejXMDXpRcsWvL
T1neGiqxeUHFm9BceOzWuGXd6orQV4OyOw8gPsoIMa0deg823HAmeeb2eN/Df8gj
lLKd7SIlVco=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:20 2023 by rpki-client on console.sobornost.net