Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UXTKngVs7ayQU-6U60nap4tbVCY.roa
File: UXTKngVs7ayQU-6U60nap4tbVCY.roa (raw, json)
Hash identifier: l+3xswlBUvutZhedK8MTQDh24skBoNF7Xff4ogDrKvs=
Subject key identifier: 51:74:CA:9E:05:6C:ED:AC:90:53:EE:94:EB:49:DA:A7:8B:5B:54:26
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0182F3B590CA93A9A7E2A16C4EAABA94F7C8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UXTKngVs7ayQU-6U60nap4tbVCY.roa
Signing time: Wed 31 Aug 2022 11:42:18 +0000
ROA not before: Wed 31 Aug 2022 11:42:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 85.31.45.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
92.249.48.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
185.218.136.0/24 maxlen: 24
82.115.208.0/24 maxlen: 24
82.115.209.0/24 maxlen: 24
82.115.210.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
212.87.206.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
84.54.49.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
80.76.50.0/24 maxlen: 24
80.76.48.0/24 maxlen: 24
193.42.32.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.69.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
94.103.126.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f3:b5:90:ca:93:a9:a7:e2:a1:6c:4e:aa:ba:94:f7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 31 11:42:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5174ca9e056cedac9053ee94eb49daa78b5b5426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:73:54:df:63:e4:97:47:97:b6:00:e3:6c:84:
d2:6d:aa:b1:e5:1b:ea:df:ba:11:58:bf:5c:b0:64:
2a:cb:72:fc:37:02:14:e0:d0:8e:f5:d9:34:84:84:
e4:13:02:4b:89:ac:ad:56:be:a5:4b:e9:b9:54:ae:
cc:34:15:6b:6d:c9:49:28:81:4b:7b:0a:df:c8:14:
7b:09:69:5c:54:b6:cc:94:1b:61:60:96:6c:5d:d3:
80:88:8f:cb:2a:fb:73:ec:ea:fe:7c:8f:40:d9:db:
eb:08:aa:18:f8:16:95:df:4a:b5:57:a3:c4:df:70:
9b:e4:ec:20:e3:1a:34:36:e3:00:30:1d:6d:29:d3:
75:65:74:d3:31:88:f3:96:49:40:30:6a:2a:46:ff:
60:76:f4:23:0f:e8:9a:6d:da:ef:18:c0:7f:02:82:
0f:45:1d:2b:a2:09:fd:25:e0:36:1b:50:cb:a5:f0:
84:6e:83:b2:88:1b:fc:64:ab:7c:27:4d:7d:8d:ab:
1e:37:6f:f0:2d:47:8d:a7:3f:e9:a4:71:19:35:d9:
6a:71:25:c9:59:64:cd:83:47:56:de:82:49:e0:9b:
18:1d:17:96:64:f0:69:44:5f:5a:9e:ed:ea:19:5f:
e6:07:bf:1f:af:95:b0:b6:25:5c:ff:50:f1:cd:d8:
50:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:74:CA:9E:05:6C:ED:AC:90:53:EE:94:EB:49:DA:A7:8B:5B:54:26
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UXTKngVs7ayQU-6U60nap4tbVCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.48.0/24
80.76.50.0/24
82.115.208.0-82.115.210.255
84.54.49.0/24
85.31.45.0/24
85.31.47.0/24
87.120.84.0/24
87.120.87.0/24
92.249.48.0/24
92.249.50.0/24
94.103.125.0-94.103.127.255
94.154.172.0/24
178.215.225.0-178.215.227.255
178.215.236.0/24
178.215.239.0/24
185.216.69.0-185.216.70.255
185.218.136.0/24
185.246.221.0/24
185.252.177.0/24
193.25.216.0/24
193.35.19.0/24
193.37.42.0/24
193.37.47.0/24
193.42.32.0/24
193.47.62.0/23
193.222.97.0/24
194.180.36.0/24
212.87.206.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ea:7e:9f:30:3e:7b:0a:f1:57:4b:ae:33:1f:2f:84:cc:5c:
24:0d:7e:26:66:23:a4:9a:9e:cd:c6:53:50:c7:cb:bd:83:8b:
02:bc:91:4c:66:45:80:97:a0:0d:57:7a:0f:f2:11:ac:bc:c0:
5a:a6:26:f0:5b:54:76:0a:84:39:59:1e:8c:0e:e1:c1:cf:cf:
11:94:47:a5:29:fc:e3:d2:f8:89:8d:22:ea:75:2f:6e:f5:62:
78:24:64:aa:fb:b0:d2:42:a5:b7:0d:2b:93:d6:8d:82:cb:77:
4f:6c:93:80:36:b2:8a:e4:ef:b9:80:b7:7d:22:75:98:7d:6d:
c9:12:50:d8:ca:dc:ac:cb:75:e8:49:40:ab:6c:f3:79:85:76:
cd:c5:4c:19:2b:20:f9:0f:ae:a5:1d:e2:44:4b:38:8b:bd:e1:
1f:fd:a6:b1:37:2f:67:7b:98:71:79:8e:b7:be:98:4f:2a:ab:
fc:7c:a9:de:9d:d1:de:85:55:f0:9b:53:f6:37:43:04:e4:43:
11:46:42:2f:15:7d:e3:5f:24:c1:cd:1b:58:41:4b:5f:8c:9c:
2e:ae:c4:b4:54:22:20:ea:9c:cd:3c:48:38:4f:9f:d2:91:b5:
69:fc:e4:ec:d8:9f:7a:ec:95:35:d3:04:a1:36:b0:f6:40:81:
a2:c6:5b:55
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgISAYLztZDKk6mn4qFsTqq6lPfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIwODMxMTE0MjE4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTc0Y2E5ZTA1NmNlZGFjOTA1M2VlOTRlYjQ5ZGFhNzhiNWI1NDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3NU32Pkl0eXtgDjbITSbaqx5Rvq
37oRWL9csGQqy3L8NwIU4NCO9dk0hITkEwJLiaytVr6lS+m5VK7MNBVrbclJKIFL
ewrfyBR7CWlcVLbMlBthYJZsXdOAiI/LKvtz7Or+fI9A2dvrCKoY+BaV30q1V6PE
33Cb5Owg4xo0NuMAMB1tKdN1ZXTTMYjzlklAMGoqRv9gdvQjD+iabdrvGMB/AoIP
RR0rogn9JeA2G1DLpfCEboOyiBv8ZKt8J019jaseN2/wLUeNpz/ppHEZNdlqcSXJ
WWTNg0dW3oJJ4JsYHReWZPBpRF9anu3qGV/mB78fr5WwtiVc/1DxzdhQswIDAQAB
o4IC0DCCAswwHQYDVR0OBBYEFFF0yp4FbO2skFPulOtJ2qeLW1QmMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvVVhUS25nVnM3YXlRVS02VTYwbmFwNHRiVkNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHlBggrBgEFBQcBBwEB/wSB1TCB0jCBzwQCAAEwgcgDBABQ
TDADBABQTDIwDAMEBFJz0AMEAFJz0gMEAFQ2MQMEAFUfLQMEAFUfLwMEAFd4VAME
AFd4VwMEAFz5MAMEAFz5MjAMAwQAXmd9AwQHXmcAAwQAXpqsMAwDBACy1+EDBAKy
1+ADBACy1+wDBACy1+8wDAMEALnYRQMEALnYRgMEALnaiAMEALn23QMEALn8sQME
AMEZ2AMEAMEjEwMEAMElKgMEAMElLwMEAMEqIAMEAcEvPgMEAMHeYQMEAMK0JAME
ANRXzjANBgkqhkiG9w0BAQsFAAOCAQEAfOp+nzA+ewrxV0uuMx8vhMxcJA1+JmYj
pJqezcZTUMfLvYOLAryRTGZFgJegDVd6D/IRrLzAWqYm8FtUdgqEOVkejA7hwc/P
EZRHpSn849L4iY0i6nUvbvVieCRkqvuw0kKltw0rk9aNgst3T2yTgDayiuTvuYC3
fSJ1mH1tyRJQ2MrcrMt16ElAq2zzeYV2zcVMGSsg+Q+upR3iREs4i73hH/2msTcv
Z3uYcXmOt76YTyqr/Hyp3p3R3oVV8JtT9jdDBORDEUZCLxV9418kwc0bWEFLX4yc
Lq7EtFQiIOqczTxIOE+f0pG1afzk7NifeuyVNdMEoTaw9kCBosZbVQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-ams.rpki-client.org