Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/iO_f_-f2xGmAHBObf1NhObkRF9k.roa
File: iO_f_-f2xGmAHBObf1NhObkRF9k.roa (raw, json)
Hash identifier: 1B9AQ2haIOJnKop26dO4Mb29YTYdQcELRITtP4BO+b4=
Subject key identifier: 88:EF:DF:FF:E7:F6:C4:69:80:1C:13:9B:7F:53:61:39:B9:11:17:D9
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 0FA00ACF
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/iO_f_-f2xGmAHBObf1NhObkRF9k.roa
Signing time: Fri 04 Feb 2022 14:26:48 +0000
ROA not before: Fri 04 Feb 2022 14:26:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35444
IP address blocks: 80.90.83.0/24 maxlen: 24
80.90.80.0/20 maxlen: 20
80.90.87.0/24 maxlen: 24
80.90.90.0/24 maxlen: 24
45.93.220.0/22 maxlen: 22
93.93.168.0/23 maxlen: 23
93.93.168.0/22 maxlen: 22
93.93.170.0/23 maxlen: 23
81.26.200.0/24 maxlen: 24
81.26.200.0/21 maxlen: 21
81.26.201.0/24 maxlen: 24
81.26.202.0/24 maxlen: 24
81.26.203.0/24 maxlen: 24
81.26.204.0/24 maxlen: 24
81.26.205.0/24 maxlen: 24
81.26.206.0/23 maxlen: 24
185.239.9.0/24 maxlen: 24
185.239.10.0/24 maxlen: 24
185.239.10.0/23 maxlen: 23
185.239.11.0/24 maxlen: 24
185.239.8.0/23 maxlen: 23
185.239.8.0/24 maxlen: 24
185.239.8.0/22 maxlen: 22
185.158.0.0/24 maxlen: 24
185.158.0.0/23 maxlen: 23
185.158.0.0/22 maxlen: 22
185.158.1.0/24 maxlen: 24
185.158.2.0/23 maxlen: 23
185.158.2.0/24 maxlen: 24
185.158.3.0/24 maxlen: 24
185.187.0.0/24 maxlen: 24
185.187.0.0/22 maxlen: 23
185.187.1.0/24 maxlen: 24
185.187.2.0/24 maxlen: 24
185.187.3.0/24 maxlen: 24
185.132.92.0/23 maxlen: 23
185.132.92.0/24 maxlen: 24
185.132.93.0/24 maxlen: 24
185.132.94.0/24 maxlen: 24
185.132.95.0/24 maxlen: 24
185.175.252.0/22 maxlen: 22
185.212.189.0/24 maxlen: 24
185.212.190.0/24 maxlen: 24
185.212.190.0/23 maxlen: 23
185.212.191.0/24 maxlen: 24
185.212.188.0/22 maxlen: 22
185.212.188.0/23 maxlen: 23
185.212.188.0/24 maxlen: 24
2a03:2de0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262146767 (0xfa00acf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: Feb 4 14:26:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88efdfffe7f6c469801c139b7f536139b91117d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:a8:2f:ff:80:88:42:0e:92:c4:f0:de:dc:
0e:84:c7:fc:de:0d:e6:16:40:14:b5:69:6c:ba:41:
e2:74:a0:f8:45:4b:1e:d3:d4:8c:60:62:5c:9e:0f:
57:a7:69:3b:b3:e9:15:22:69:a7:85:f1:2d:df:a1:
e1:dd:fe:68:54:28:e2:89:5c:23:94:42:bc:da:29:
5a:79:ce:da:2f:29:25:4f:cf:e7:19:7c:e0:68:0e:
e7:89:39:bc:5c:e1:60:e5:89:f0:50:c7:8b:ee:ab:
f0:4d:b6:aa:3e:41:2a:1f:7e:42:f2:ba:6e:8a:4d:
bc:c4:89:f5:0f:1f:4b:e4:b5:01:e1:87:dc:fa:85:
e6:70:bd:d2:57:84:f2:42:1b:40:a0:52:86:b2:9d:
04:9c:31:29:c6:ea:6b:ae:4d:3d:68:3e:30:80:9a:
38:4b:dc:c9:a6:50:dd:71:a4:7e:70:cd:de:d7:58:
48:c1:13:1b:79:c5:9f:2d:00:6e:81:63:58:51:c7:
c0:e3:09:26:34:5c:83:75:b1:ec:b6:9b:4e:16:e7:
36:80:45:7d:d5:5b:20:8b:a4:c7:96:a4:50:22:50:
a0:1b:11:e6:ea:dc:1c:49:eb:62:54:37:55:44:19:
f8:09:69:11:e4:25:b6:c5:af:6d:a1:6b:10:1d:d0:
1c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EF:DF:FF:E7:F6:C4:69:80:1C:13:9B:7F:53:61:39:B9:11:17:D9
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/iO_f_-f2xGmAHBObf1NhObkRF9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.220.0/22
80.90.80.0/20
81.26.200.0/21
93.93.168.0/22
185.132.92.0/22
185.158.0.0/22
185.175.252.0/22
185.187.0.0/22
185.212.188.0/22
185.239.8.0/22
IPv6:
2a03:2de0::/32
Signature Algorithm: sha256WithRSAEncryption
13:43:bf:7e:a6:69:dc:aa:6e:3c:c2:28:f3:c4:90:cd:b6:9d:
83:77:e9:04:88:79:ac:5f:35:e6:eb:31:68:52:a9:4a:2e:87:
a0:c7:51:f6:7e:f7:41:35:d6:fd:83:b1:61:97:63:07:bf:b2:
b1:50:13:ed:12:7b:ac:97:8a:02:79:77:8c:00:5a:d4:d3:ac:
04:3e:eb:c0:bc:d5:64:c4:25:50:9d:be:e9:06:19:8f:d4:e8:
e2:ec:4f:1e:c9:4a:a3:50:f1:12:41:e1:55:9b:ac:53:1d:c8:
99:3c:ed:39:10:15:68:e8:72:32:f3:5e:4e:94:9d:e4:d4:7a:
51:04:c1:53:27:58:42:b2:70:03:e7:dd:3e:ff:ce:38:41:65:
b1:a2:a9:98:87:30:3c:00:a0:17:32:9e:0e:5d:ab:45:26:64:
1c:42:dc:3f:99:b1:7c:a7:ba:a8:4b:92:aa:c0:c5:09:e6:82:
92:20:df:a8:d8:e4:b9:21:3e:6b:b0:1c:2b:aa:8f:55:31:68:
18:27:1d:48:cd:3c:45:89:14:e4:a0:79:f9:1b:1c:66:45:78:
96:da:56:84:90:0c:05:df:dc:99:bc:1a:7e:43:da:c7:ed:1a:
d4:e7:2d:b3:48:ff:e8:00:d4:56:c7:f6:fc:a5:3a:8e:99:b1:
36:a9:26:c1
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIED6AKzzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YTkyZjVkOTM2NzUyYmFmMmQwZGY3MTMyOTk0OTljZWNmYTlmNDhkMB4XDTIyMDIw
NDE0MjY0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODhlZmRmZmZlN2Y2
YzQ2OTgwMWMxMzliN2Y1MzYxMzliOTExMTdkOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALdFqC//gIhCDpLE8N7cDoTH/N4N5hZAFLVpbLpB4nSg+EVL
HtPUjGBiXJ4PV6dpO7PpFSJpp4XxLd+h4d3+aFQo4olcI5RCvNopWnnO2i8pJU/P
5xl84GgO54k5vFzhYOWJ8FDHi+6r8E22qj5BKh9+QvK6bopNvMSJ9Q8fS+S1AeGH
3PqF5nC90leE8kIbQKBShrKdBJwxKcbqa65NPWg+MICaOEvcyaZQ3XGkfnDN3tdY
SMETG3nFny0AboFjWFHHwOMJJjRcg3Wx7LabThbnNoBFfdVbIIukx5akUCJQoBsR
5urcHEnrYlQ3VUQZ+AlpEeQltsWvbaFrEB3QHD0CAwEAAaOCAk4wggJKMB0GA1Ud
DgQWBBSI79//5/bEaYAcE5t/U2E5uREX2TAfBgNVHSMEGDAWgBQ6kvXZNnUrry0N
9xMplJnOz6n0jTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09wTDEyVFoxSzY4dERmY1RLWlNaenMtcDlJMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDEvN2NkMTU3LWM1OGYtNGNiOS04MjUyLTE2OTZiMjQ2Y2Q1MC8x
L2lPX2ZfLWYyeEdtQUhCT2JmMU5oT2JrUkY5ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEv
N2NkMTU3LWM1OGYtNGNiOS04MjUyLTE2OTZiMjQ2Y2Q1MC8xL09wTDEyVFoxSzY4
dERmY1RLWlNaenMtcDlJMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBk
BggrBgEFBQcBBwEB/wRVMFMwQgQCAAEwPAMEAi1d3AMEBFBaUAMEA1EayAMEAl1d
qAMEArmEXAMEArmeAAMEArmv/AMEArm7AAMEArnUvAMEArnvCDANBAIAAjAHAwUA
KgMt4DANBgkqhkiG9w0BAQsFAAOCAQEAE0O/fqZp3KpuPMIo88SQzbadg3fpBIh5
rF815usxaFKpSi6HoMdR9n73QTXW/YOxYZdjB7+ysVAT7RJ7rJeKAnl3jABa1NOs
BD7rwLzVZMQlUJ2+6QYZj9To4uxPHslKo1DxEkHhVZusUx3ImTztORAVaOhyMvNe
TpSd5NR6UQTBUydYQrJwA+fdPv/OOEFlsaKpmIcwPACgFzKeDl2rRSZkHELcP5mx
fKe6qEuSqsDFCeaCkiDfqNjkuSE+a7AcK6qPVTFoGCcdSM08RYkU5KB5+RscZkV4
ltpWhJAMBd/cmbwafkPax+0a1Octs0j/6ADUVsf2/KU6jpmxNqkmwQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:57 2024 by rpki-client on console-fra.rpki-client.org