Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/fmOqW3mUcQjR0fpsnhDgOU50ZI4.roa
File: fmOqW3mUcQjR0fpsnhDgOU50ZI4.roa (raw, json)
Hash identifier: 2QpCYnwLAC3A8dIbo2BegV26J/0lsqQx679YJOsO76s=
Subject key identifier: 7E:63:AA:5B:79:94:71:08:D1:D1:FA:6C:9E:10:E0:39:4E:74:64:8E
Certificate issuer: /CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Certificate serial: 38BC5732
Authority key identifier: 85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/fmOqW3mUcQjR0fpsnhDgOU50ZI4.roa
Signing time: Tue 01 Mar 2022 16:56:04 +0000
ROA not before: Tue 01 Mar 2022 16:56:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50583
IP address blocks: 212.114.0.0/21 maxlen: 21
212.114.0.0/20 maxlen: 20
212.114.7.0/24 maxlen: 24
212.114.8.0/21 maxlen: 21
46.33.160.0/24 maxlen: 24
46.33.160.0/19 maxlen: 19
46.33.162.0/24 maxlen: 24
46.33.161.0/24 maxlen: 24
46.33.164.0/24 maxlen: 24
46.33.163.0/24 maxlen: 24
46.33.166.0/24 maxlen: 24
46.33.165.0/24 maxlen: 24
46.33.172.0/24 maxlen: 24
46.33.167.0/24 maxlen: 24
46.33.169.0/24 maxlen: 24
46.33.168.0/24 maxlen: 24
46.33.171.0/24 maxlen: 24
46.33.170.0/24 maxlen: 24
195.191.172.0/24 maxlen: 24
195.191.172.0/23 maxlen: 23
195.191.173.0/24 maxlen: 24
46.33.175.0/24 maxlen: 24
46.33.173.0/24 maxlen: 24
46.33.174.0/24 maxlen: 24
46.33.176.0/24 maxlen: 24
46.33.178.0/24 maxlen: 24
185.173.125.0/24 maxlen: 24
185.173.124.0/22 maxlen: 22
185.173.124.0/24 maxlen: 24
46.33.177.0/24 maxlen: 24
46.33.179.0/24 maxlen: 24
46.33.186.0/24 maxlen: 24
185.173.126.0/24 maxlen: 24
46.33.180.0/24 maxlen: 24
46.33.181.0/24 maxlen: 24
185.173.127.0/24 maxlen: 24
46.33.183.0/24 maxlen: 24
46.33.182.0/24 maxlen: 24
46.33.185.0/24 maxlen: 24
46.33.184.0/24 maxlen: 24
46.33.187.0/24 maxlen: 24
46.33.188.0/24 maxlen: 24
46.33.190.0/24 maxlen: 24
46.33.189.0/24 maxlen: 24
46.33.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 951867186 (0x38bc5732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Validity
Not Before: Mar 1 16:56:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e63aa5b79947108d1d1fa6c9e10e0394e74648e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:b1:85:08:93:ec:d6:a5:d8:24:e8:3d:55:
fd:1f:25:6f:d5:80:61:32:52:c1:02:bd:78:9f:53:
d1:b0:a2:30:f3:85:f8:c9:ab:cd:9e:d9:ec:a3:d4:
54:8d:3b:1f:4b:ac:29:d3:ec:5c:50:10:c8:a8:7b:
e7:d6:7b:4f:7c:ea:fb:6e:9c:d8:d0:50:ca:d0:ca:
52:4e:cc:92:77:51:3a:33:48:02:81:fe:34:d9:3a:
4f:14:77:0e:a0:b1:b2:28:5f:f6:07:17:2b:58:4d:
4e:80:6f:ce:6c:75:21:17:71:ff:fe:81:fb:ac:6e:
77:5d:5f:a8:9a:21:03:7a:f8:30:a1:32:fe:ea:23:
38:e7:89:f8:85:43:f2:cf:33:01:4f:e0:b3:23:ab:
8d:00:a1:19:f9:e6:c2:5d:39:e1:c4:b5:b0:7d:31:
8b:0e:5b:f7:3a:c5:5b:7d:da:90:4f:88:93:ec:33:
da:08:de:6a:72:e0:7b:8f:9c:8d:d3:f1:e2:5b:35:
50:a4:5b:d6:a4:19:78:69:3f:6a:18:bd:91:7c:c2:
43:c7:13:12:36:e6:35:b1:3e:fb:d4:28:0e:4e:c9:
cd:27:28:27:41:dd:2c:fb:43:71:59:40:47:d9:10:
80:80:5f:6c:56:4d:6a:15:e9:fb:ab:a6:16:08:04:
e7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:63:AA:5B:79:94:71:08:D1:D1:FA:6C:9E:10:E0:39:4E:74:64:8E
X509v3 Authority Key Identifier:
keyid:85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/fmOqW3mUcQjR0fpsnhDgOU50ZI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.160.0/19
185.173.124.0/22
195.191.172.0/23
212.114.0.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:5e:d4:4c:6d:d1:5c:ca:be:b7:32:37:89:00:ae:95:67:4d:
75:53:59:8d:27:48:9b:a7:a1:05:59:3c:50:51:da:04:4f:d3:
39:da:56:06:b1:ee:f0:2a:fd:93:1a:55:f4:af:7e:9b:b5:24:
d1:1c:3b:b6:fa:c1:a0:c8:87:10:3a:d0:cd:42:dd:f1:ce:ef:
e7:0f:b7:3c:b7:61:21:36:01:ee:19:09:56:ec:78:c7:79:72:
8a:c9:49:6e:6c:b0:04:05:ed:9c:69:2d:7c:88:8a:01:ae:b5:
86:78:b2:77:25:19:b8:16:13:35:7d:37:d4:e1:74:8e:ff:91:
ac:f8:71:12:f7:71:b3:84:5a:71:47:17:c0:1e:fe:9e:aa:5e:
93:07:2e:75:e2:c6:90:ef:03:6e:fd:cb:9c:1b:ff:07:32:d8:
66:4e:ad:8d:1d:58:4f:7a:34:7c:0c:ab:2f:6a:5b:6e:d8:32:
5d:f3:60:57:d8:f9:0e:af:fe:ab:eb:b9:a0:55:db:de:57:1a:
34:58:d6:55:f2:5d:09:5b:a6:39:25:ff:1a:c5:9a:5e:8b:f6:
15:e7:e9:3c:8b:9f:df:c6:8b:7e:51:1a:7c:58:26:d4:21:63:
ed:0a:65:3d:cf:25:b6:5f:5f:22:f3:28:f1:c8:0a:ac:5b:63:
51:ef:96:b9
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEOLxXMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NTlkNTE3NzA3N2I5MDgxOGM2ZjkwYWU0ZTQ0MzMyZDhjYWNiYjc0MB4XDTIyMDMw
MTE2NTYwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2U2M2FhNWI3OTk0
NzEwOGQxZDFmYTZjOWUxMGUwMzk0ZTc0NjQ4ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL4bsYUIk+zWpdgk6D1V/R8lb9WAYTJSwQK9eJ9T0bCiMPOF
+MmrzZ7Z7KPUVI07H0usKdPsXFAQyKh759Z7T3zq+26c2NBQytDKUk7MkndROjNI
AoH+NNk6TxR3DqCxsihf9gcXK1hNToBvzmx1IRdx//6B+6xud11fqJohA3r4MKEy
/uojOOeJ+IVD8s8zAU/gsyOrjQChGfnmwl054cS1sH0xiw5b9zrFW33akE+Ik+wz
2gjeanLge4+cjdPx4ls1UKRb1qQZeGk/ahi9kXzCQ8cTEjbmNbE++9QoDk7JzSco
J0HdLPtDcVlAR9kQgIBfbFZNahXp+6umFggE550CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBR+Y6pbeZRxCNHR+myeEOA5TnRkjjAfBgNVHSMEGDAWgBSFnVF3B3uQgYxv
kK5ORDMtjKy7dDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2haMVJkd2Q3a0lHTWI1Q3VUa1F6TFl5c3UzUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2IvZmFlYTQzLWYzMzMtNDUwOS1hNmRiLTNhYzk2YmUyODVlMC8x
L2ZtT3FXM21VY1FqUjBmcHNuaERnT1U1MFpJNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Iv
ZmFlYTQzLWYzMzMtNDUwOS1hNmRiLTNhYzk2YmUyODVlMC8xL2haMVJkd2Q3a0lH
TWI1Q3VUa1F6TFl5c3UzUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEBS4hoAMEArmtfAMEAcO/rAMEBNRy
ADANBgkqhkiG9w0BAQsFAAOCAQEAH17UTG3RXMq+tzI3iQCulWdNdVNZjSdIm6eh
BVk8UFHaBE/TOdpWBrHu8Cr9kxpV9K9+m7Uk0Rw7tvrBoMiHEDrQzULd8c7v5w+3
PLdhITYB7hkJVux4x3lyislJbmywBAXtnGktfIiKAa61hniydyUZuBYTNX031OF0
jv+RrPhxEvdxs4RacUcXwB7+nqpekwcudeLGkO8Dbv3LnBv/BzLYZk6tjR1YT3o0
fAyrL2pbbtgyXfNgV9j5Dq/+q+u5oFXb3lcaNFjWVfJdCVumOSX/GsWaXov2Fefp
PIuf38aLflEafFgm1CFj7QplPc8ltl9fIvMo8cgKrFtjUe+WuQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:11 2024 by rpki-client on console-fra.rpki-client.org