Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/zpgbYX-avKXciu--kRJTdp7kQ1c.roa
File: zpgbYX-avKXciu--kRJTdp7kQ1c.roa (raw, json)
Hash identifier: EM+37eu+DmYAbpJUaZlMaoH0wdfybQ1RieoxBARniJA=
Subject key identifier: CE:98:1B:61:7F:9A:BC:A5:DC:8A:EF:BE:91:12:53:76:9E:E4:43:57
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 446B3C6D
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/zpgbYX-avKXciu--kRJTdp7kQ1c.roa
Signing time: Sat 01 Jan 2022 03:58:16 +0000
ROA not before: Sat 01 Jan 2022 03:58:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5511
IP address blocks: 193.251.220.0/22 maxlen: 24
193.251.240.0/20 maxlen: 24
90.84.48.0/20 maxlen: 24
81.52.128.0/21 maxlen: 24
90.84.128.0/20 maxlen: 24
81.52.136.0/22 maxlen: 24
81.52.140.0/23 maxlen: 24
90.84.151.0/24 maxlen: 24
193.251.160.0/20 maxlen: 24
193.251.169.0/24 maxlen: 24
80.15.224.0/21 maxlen: 24
81.52.236.0/22 maxlen: 24
80.15.232.0/22 maxlen: 24
80.15.238.0/24 maxlen: 24
80.15.236.0/23 maxlen: 24
90.84.255.0/24 maxlen: 24
81.52.160.0/24 maxlen: 24
81.52.176.0/20 maxlen: 24
80.12.71.0/24 maxlen: 32
80.12.76.0/24 maxlen: 24
80.12.79.0/24 maxlen: 24
81.52.190.0/24 maxlen: 24
193.251.128.0/19 maxlen: 24
80.12.98.0/24 maxlen: 24
80.12.96.0/22 maxlen: 24
81.52.202.0/24 maxlen: 24
80.12.96.0/23 maxlen: 24
2a01:c000::/19 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1147878509 (0x446b3c6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce981b617f9abca5dc8aefbe911253769ee44357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:b0:91:fb:87:20:11:88:66:10:11:99:5d:
58:84:2d:a3:47:af:9d:ad:30:e0:7b:31:2c:08:31:
85:0d:4b:4b:0c:0a:58:3c:35:b5:56:0c:73:24:90:
7e:70:5a:01:a9:38:7b:37:6f:57:89:68:c1:19:eb:
8a:96:92:f7:a8:99:48:6b:6b:35:a2:92:e4:96:f5:
4d:4b:3c:31:98:0a:a2:d3:5c:b6:33:a1:68:25:0d:
4e:0d:83:ec:7f:8d:9a:54:72:dc:63:19:bc:3d:7c:
9c:5c:84:4e:00:71:e8:4f:e5:df:bd:aa:73:79:d1:
ac:fa:f3:09:c7:b8:e1:4e:6c:f6:eb:d5:6b:83:0a:
70:0b:72:27:37:48:15:8b:c0:6a:1b:e6:a0:91:2d:
ba:00:95:26:34:b7:3c:35:88:07:c5:be:48:91:4e:
5e:30:9a:ef:53:8f:d9:eb:c2:05:88:20:68:32:cc:
b8:35:37:23:a6:b9:54:6b:08:7f:60:e7:21:5d:81:
d9:49:5c:8a:dc:da:3e:30:6c:c7:5a:7d:99:70:72:
b4:8a:73:c5:0c:bf:22:67:e3:d7:9a:c3:14:78:5e:
f7:f8:6d:4f:d5:24:25:ea:17:f1:7b:dc:fe:7a:3e:
1d:a6:ce:8a:77:ff:96:c2:50:e3:77:07:62:dc:eb:
ce:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:98:1B:61:7F:9A:BC:A5:DC:8A:EF:BE:91:12:53:76:9E:E4:43:57
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/zpgbYX-avKXciu--kRJTdp7kQ1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.12.71.0/24
80.12.76.0/24
80.12.79.0/24
80.12.96.0/22
80.15.224.0-80.15.238.255
81.52.128.0-81.52.141.255
81.52.160.0/24
81.52.176.0/20
81.52.202.0/24
81.52.236.0/22
90.84.48.0/20
90.84.128.0/20
90.84.151.0/24
90.84.255.0/24
193.251.128.0-193.251.175.255
193.251.220.0/22
193.251.240.0/20
IPv6:
2a01:c000::/19
Signature Algorithm: sha256WithRSAEncryption
0f:a8:38:32:ef:51:3a:46:00:80:6d:7b:d6:a7:77:45:4f:5d:
66:94:d2:97:4a:66:a0:34:32:f6:7c:34:a3:b4:2e:72:89:4d:
e0:e6:39:fd:e0:33:a2:f2:e7:df:fc:eb:9d:c7:1e:24:2b:65:
e4:fa:92:ca:da:db:7b:85:b9:38:ca:81:21:d9:e4:63:30:c3:
95:06:16:7a:6c:f8:b7:2f:13:34:f5:48:73:d0:15:e0:23:4d:
8a:59:db:e2:98:31:64:2c:d7:ba:e9:01:7b:72:c2:4d:b3:67:
6b:db:85:86:26:df:a4:97:d2:d8:ed:92:8f:54:14:31:cf:f3:
b8:77:07:08:58:ae:17:59:e3:ba:f4:06:f7:e6:0a:de:60:ce:
f2:62:a6:05:b5:36:88:42:7d:bf:e1:d2:8e:e0:70:26:fd:ab:
72:25:03:02:d1:bd:2a:94:c4:ba:10:79:a2:55:9f:08:c5:a3:
d0:8c:73:cb:a6:1c:94:53:7f:ef:cf:fe:67:1d:da:8a:c9:e4:
26:f4:db:f8:76:0a:f0:77:6e:54:53:8e:08:ed:52:54:84:3d:
97:f2:fb:c6:5d:4d:23:c6:05:ea:5f:ab:f2:5c:0f:97:e2:42:
d1:99:c0:fe:d6:fc:21:f9:c7:ea:8f:a0:58:5d:c4:94:a7:b4:
2a:71:54:7c
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIERGs8bTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YWYwOWJhMzNiNWFlNTgxYjBkMjkzMjMyNDkzMTRmNzZhYTEwNTExMB4XDTIyMDEw
MTAzNTgxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2U5ODFiNjE3Zjlh
YmNhNWRjOGFlZmJlOTExMjUzNzY5ZWU0NDM1NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJz4sJH7hyARiGYQEZldWIQto0evna0w4HsxLAgxhQ1LSwwK
WDw1tVYMcySQfnBaAak4ezdvV4lowRnripaS96iZSGtrNaKS5Jb1TUs8MZgKotNc
tjOhaCUNTg2D7H+NmlRy3GMZvD18nFyETgBx6E/l372qc3nRrPrzCce44U5s9uvV
a4MKcAtyJzdIFYvAahvmoJEtugCVJjS3PDWIB8W+SJFOXjCa71OP2evCBYggaDLM
uDU3I6a5VGsIf2DnIV2B2UlcitzaPjBsx1p9mXBytIpzxQy/Imfj15rDFHhe9/ht
T9UkJeoX8Xvc/no+HabOinf/lsJQ43cHYtzrzp8CAwEAAaOCApMwggKPMB0GA1Ud
DgQWBBTOmBthf5q8pdyK776RElN2nuRDVzAfBgNVHSMEGDAWgBQ68JujO1rlgbDS
kyMkkxT3aqEFETAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L092Q2JvenRhNVlHdzBwTWpKSk1VOTJxaEJSRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmIvMzNkNWQxLWM0NTAtNDEzYi1hZmU0LTQ1OTM1ZjUwNmExMi8x
L3pwZ2JZWC1hdktYY2l1LS1rUkpUZHA3a1ExYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIv
MzNkNWQxLWM0NTAtNDEzYi1hZmU0LTQ1OTM1ZjUwNmExMi8xL092Q2JvenRhNVlH
dzBwTWpKSk1VOTJxaEJSRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
qAYIKwYBBQUHAQcBAf8EgZgwgZUwgYQEAgABMH4DBABQDEcDBABQDEwDBABQDE8D
BAJQDGAwDAMEBVAP4AMEAFAP7jAMAwQHUTSAAwQBUTSMAwQAUTSgAwQEUTSwAwQA
UTTKAwQCUTTsAwQEWlQwAwQEWlSAAwQAWlSXAwQAWlT/MAwDBAfB+4ADBATB+6AD
BALB+9wDBATB+/AwDAQCAAIwBgMEBSoBwDANBgkqhkiG9w0BAQsFAAOCAQEAD6g4
Mu9ROkYAgG171qd3RU9dZpTSl0pmoDQy9nw0o7QucolN4OY5/eAzovLn3/zrncce
JCtl5PqSytrbe4W5OMqBIdnkYzDDlQYWemz4ty8TNPVIc9AV4CNNilnb4pgxZCzX
uukBe3LCTbNna9uFhibfpJfS2O2Sj1QUMc/zuHcHCFiuF1njuvQG9+YK3mDO8mKm
BbU2iEJ9v+HSjuBwJv2rciUDAtG9KpTEuhB5olWfCMWj0Ixzy6YclFN/78/+Zx3a
isnkJvTb+HYK8HduVFOOCO1SVIQ9l/L7xl1NI8YF6l+r8lwPl+JC0ZnA/tb8IfnH
6o+gWF3ElKe0KnFUfA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:20 2024 by rpki-client on console-ams.rpki-client.org