Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/xxtx83dj9EAWpr1kEJApG4Nb30o.roa
File: xxtx83dj9EAWpr1kEJApG4Nb30o.roa (raw, json)
Hash identifier: gyDeGuYtDTG9SlpEYtr47mmMvERg4J7OaCL5PCLPyqc=
Subject key identifier: C7:1B:71:F3:77:63:F4:40:16:A6:BD:64:10:90:29:1B:83:5B:DF:4A
Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial: 34C93F
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/xxtx83dj9EAWpr1kEJApG4Nb30o.roa
Signing time: Wed 08 Jun 2022 10:02:09 +0000
ROA not before: Wed 08 Jun 2022 10:02:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25394
IP address blocks: 91.196.140.0/22 maxlen: 24
212.90.128.0/19 maxlen: 24
109.75.16.0/20 maxlen: 24
217.199.192.0/20 maxlen: 24
153.94.128.0/17 maxlen: 24
153.94.32.0/20 maxlen: 24
178.210.96.0/19 maxlen: 24
153.94.48.0/21 maxlen: 24
85.220.128.0/17 maxlen: 24
93.93.248.0/21 maxlen: 24
82.100.192.0/18 maxlen: 24
213.172.96.0/19 maxlen: 24
31.209.112.0/20 maxlen: 24
2a00:4d80::/32 maxlen: 48
2001:1640::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3459391 (0x34c93f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Validity
Not Before: Jun 8 10:02:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c71b71f37763f44016a6bd641090291b835bdf4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:29:da:41:66:d6:35:16:b4:c3:ae:d0:7e:0c:
cd:62:0c:63:94:fa:60:8b:f6:62:9c:8c:8d:d4:45:
09:01:81:c6:89:b0:40:e0:8f:7a:df:f7:2b:e0:a6:
c3:da:72:a5:c2:96:fc:ef:4d:54:ad:1b:62:8e:98:
57:b4:8c:50:6c:99:79:05:d3:77:6d:af:a6:4e:83:
b7:58:6c:e0:6e:fa:b0:86:ca:84:59:f1:a8:2c:fa:
a2:54:b0:cd:ae:99:b2:bf:3e:90:a4:df:9d:0e:7b:
9f:18:2f:f9:b3:d0:1d:42:89:5d:d9:39:c5:39:7d:
b3:06:ca:bf:06:8d:e1:67:be:e1:d5:7a:74:71:d3:
19:5a:8f:f4:0b:8f:ff:ab:a0:52:b6:ce:02:ca:99:
03:be:00:40:61:fb:f2:b8:ce:0d:b1:4d:34:22:70:
23:59:e5:d5:e7:a6:db:f6:2d:85:b2:ba:61:2f:09:
94:4f:74:fb:1f:37:9a:fb:09:72:dd:ce:1d:d3:ea:
20:b0:4b:3e:78:d2:5e:3c:8d:27:53:b3:9e:55:28:
4b:5e:88:8f:8a:9c:e4:79:f6:31:b9:22:d0:0f:71:
a3:0a:8b:1a:bb:af:5f:98:6a:74:70:93:61:a9:f1:
09:87:3e:83:1f:f4:1b:b4:e4:09:5c:d9:20:da:97:
4f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1B:71:F3:77:63:F4:40:16:A6:BD:64:10:90:29:1B:83:5B:DF:4A
X509v3 Authority Key Identifier:
keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/xxtx83dj9EAWpr1kEJApG4Nb30o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.209.112.0/20
82.100.192.0/18
85.220.128.0/17
91.196.140.0/22
93.93.248.0/21
109.75.16.0/20
153.94.32.0-153.94.55.255
153.94.128.0/17
178.210.96.0/19
212.90.128.0/19
213.172.96.0/19
217.199.192.0/20
IPv6:
2001:1640::/32
2a00:4d80::/32
Signature Algorithm: sha256WithRSAEncryption
36:08:95:29:46:a4:33:81:1a:f9:81:a4:a4:a4:38:27:b3:74:
bc:44:3b:46:b9:4d:35:71:2b:24:1f:11:cd:f2:6f:96:4b:cc:
4c:c2:2e:be:b0:76:bf:5f:d0:dc:66:34:8c:2a:ed:00:0d:53:
1d:eb:a9:f0:d5:1d:41:0d:7d:b6:1d:7f:6f:4a:42:38:f4:d3:
87:e7:be:31:19:be:84:a4:61:72:3a:5c:87:88:3c:8c:af:00:
fa:ed:43:04:c9:71:87:76:94:7f:ff:b0:06:47:eb:f2:a4:8d:
de:81:05:68:c7:37:95:ab:57:e7:14:7b:b2:20:80:a5:49:f0:
52:65:04:76:3c:9f:ab:73:6a:b9:07:e2:cf:05:76:60:2e:0a:
cf:c0:a0:b4:e3:80:71:b8:fa:28:e2:e4:fa:19:91:a1:e8:1e:
d5:1e:8f:6f:57:0c:b4:5a:21:d6:68:26:48:7d:fc:6b:3d:b4:
68:a2:7c:6c:2b:b0:eb:da:0e:9b:0c:0c:13:b4:3f:73:31:78:
d4:a6:84:a4:83:d8:1d:4c:30:e5:ce:ef:41:b1:28:31:70:01:
1f:c2:3f:6e:46:41:20:55:78:4d:f3:d3:9f:88:a4:a7:ff:5c:
d4:2a:0f:ca:35:d9:68:78:b4:ab:1d:b1:6c:37:b0:88:0e:e7:
a1:9e:39:49
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDNMk/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYy
MjJmYmU4NWFlNDA4ZDM3N2IyMTdkNGViYTdiMzhiMjRiYWY1ZGQwHhcNMjIwNjA4
MTAwMjA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjNzFiNzFmMzc3NjNm
NDQwMTZhNmJkNjQxMDkwMjkxYjgzNWJkZjRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3inaQWbWNRa0w67QfgzNYgxjlPpgi/ZinIyN1EUJAYHGibBA
4I963/cr4KbD2nKlwpb8701UrRtijphXtIxQbJl5BdN3ba+mToO3WGzgbvqwhsqE
WfGoLPqiVLDNrpmyvz6QpN+dDnufGC/5s9AdQold2TnFOX2zBsq/Bo3hZ77h1Xp0
cdMZWo/0C4//q6BSts4CypkDvgBAYfvyuM4NsU00InAjWeXV56bb9i2FsrphLwmU
T3T7Hzea+wly3c4d0+ogsEs+eNJePI0nU7OeVShLXoiPipzkefYxuSLQD3GjCosa
u69fmGp0cJNhqfEJhz6DH/QbtOQJXNkg2pdPuwIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFMcbcfN3Y/RAFqa9ZBCQKRuDW99KMB8GA1UdIwQYMBaAFPIi++ha5AjTd7IX
1Ouns4skuvXdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
OGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9mMi8xYWE4NzUtMDNiNS00YzE3LWJiMzktYjBjMWUzMzA0ZTc0LzEv
eHh0eDgzZGo5RUFXcHIxa0VKQXBHNE5iMzBvLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8x
YWE4NzUtMDNiNS00YzE3LWJiMzktYjBjMWUzMzA0ZTc0LzEvOGlMNzZGcmtDTk4z
c2hmVTY2ZXppeVM2OWQwLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH8G
CCsGAQUFBwEHAQH/BHAwbjBWBAIAATBQAwQEH9FwAwQGUmTAAwQHVdyAAwQCW8SM
AwQDXV34AwQEbUsQMAwDBAWZXiADBAOZXjADBAeZXoADBAWy0mADBAXUWoADBAXV
rGADBATZx8AwFAQCAAIwDgMFACABFkADBQAqAE2AMA0GCSqGSIb3DQEBCwUAA4IB
AQA2CJUpRqQzgRr5gaSkpDgns3S8RDtGuU01cSskHxHN8m+WS8xMwi6+sHa/X9Dc
ZjSMKu0ADVMd66nw1R1BDX22HX9vSkI49NOH574xGb6EpGFyOlyHiDyMrwD67UME
yXGHdpR//7AGR+vypI3egQVoxzeVq1fnFHuyIIClSfBSZQR2PJ+rc2q5B+LPBXZg
LgrPwKC044BxuPoo4uT6GZGh6B7VHo9vVwy0WiHWaCZIffxrPbRoonxsK7Dr2g6b
DAwTtD9zMXjUpoSkg9gdTDDlzu9BsSgxcAEfwj9uRkEgVXhN89OfiKSn/1zUKg/K
NdloeLSrHbFsN7CIDuehnjlJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:13 2024 by rpki-client on console-ams.rpki-client.org