Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cUbQetliKaahfFoo-x3nzn5K-UY.roa
File: cUbQetliKaahfFoo-x3nzn5K-UY.roa (raw, json)
Hash identifier: gpNINFnfd7UO9txV+Q8DLteSEIJzWSRiFSXiY9OXTQk=
Subject key identifier: 71:46:D0:7A:D9:62:29:A6:A1:7C:5A:28:FB:1D:E7:CE:7E:4A:F9:46
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01830C99B4026050F6D41872F9D2A422604C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cUbQetliKaahfFoo-x3nzn5K-UY.roa
Signing time: Mon 05 Sep 2022 07:42:23 +0000
ROA not before: Mon 05 Sep 2022 07:42:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 85.31.45.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
185.218.136.0/24 maxlen: 24
82.115.208.0/24 maxlen: 24
82.115.209.0/24 maxlen: 24
82.115.210.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
84.54.49.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
80.76.50.0/24 maxlen: 24
80.76.48.0/24 maxlen: 24
193.42.32.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.69.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
94.103.126.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
193.25.218.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0c:99:b4:02:60:50:f6:d4:18:72:f9:d2:a4:22:60:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 5 07:42:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7146d07ad96229a6a17c5a28fb1de7ce7e4af946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:91:b5:30:59:a9:d7:fb:06:c5:89:ca:a7:a3:
8a:1a:71:74:31:c1:3f:f3:3a:cb:09:9c:89:b2:b2:
7f:b3:ef:14:80:17:51:0e:00:91:49:41:08:06:3b:
9a:ed:32:dd:09:12:74:6c:7a:85:16:11:65:d9:43:
17:2c:11:12:9b:78:69:32:9d:75:81:f9:66:04:f9:
a1:af:b8:6e:4e:58:72:e9:73:1e:7b:a7:82:7b:63:
40:97:dd:a3:f5:b0:17:59:8e:d9:c8:3a:b9:a4:76:
4b:b4:7d:d4:d8:35:cb:a6:c9:45:a1:56:dd:bd:26:
19:48:ff:6f:74:3f:e9:7e:6b:75:a1:bb:5a:56:47:
ca:a3:d0:d6:e8:dd:5d:a6:39:2a:c5:96:29:85:66:
56:c3:2b:d3:60:8e:12:d7:18:8a:93:5c:69:e8:07:
81:21:b1:0f:68:81:27:35:0d:1a:d9:6f:3f:d4:73:
0f:e4:ca:93:2d:ef:b0:6f:f4:74:37:58:b4:0b:9f:
54:44:4f:c2:98:c4:00:7a:64:5d:c3:e0:e7:29:0b:
bb:de:12:f2:ee:32:ef:18:1a:49:00:4a:24:57:8f:
b2:77:27:db:05:71:8c:da:14:42:0a:5b:c2:a1:e3:
61:f2:d4:c5:f9:bc:55:93:b2:a9:29:33:22:91:9b:
62:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:46:D0:7A:D9:62:29:A6:A1:7C:5A:28:FB:1D:E7:CE:7E:4A:F9:46
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cUbQetliKaahfFoo-x3nzn5K-UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.48.0/24
80.76.50.0/24
82.115.208.0/22
84.21.172.0/24
84.54.49.0/24
85.31.45.0/24
85.31.47.0/24
87.120.84.0/24
87.120.87.0/24
87.121.221.0/24
92.249.50.0/24
94.103.125.0-94.103.126.255
94.154.172.0/24
178.215.225.0-178.215.227.255
178.215.236.0/24
178.215.239.0/24
185.216.69.0-185.216.70.255
185.218.136.0/24
185.246.221.0/24
193.25.217.0-193.25.218.255
193.35.19.0/24
193.37.42.0/24
193.42.32.0/24
193.47.62.0/23
193.222.97.0/24
193.222.99.0/24
194.180.36.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:cf:5b:5e:e4:f3:a8:35:dd:34:84:97:d0:a9:fa:59:10:44:
68:84:4c:0b:d0:a3:c5:0a:58:f6:1b:b8:bd:25:ac:2e:fe:a3:
18:25:9c:0d:61:40:97:4c:e5:a0:75:fa:5f:4d:6d:39:61:23:
d2:9d:70:c2:77:f2:09:6f:9e:41:3b:96:8b:2f:e0:60:04:ca:
37:06:f5:ff:30:99:bb:38:3d:f6:e5:b6:3d:a3:70:91:01:65:
7b:81:84:e4:aa:61:9f:17:db:66:57:bb:b1:ce:cc:89:f5:40:
c6:b8:04:4c:1d:82:d4:e6:d5:ea:ea:6a:74:ae:32:a3:ad:9a:
94:9f:a7:d6:77:02:bc:3e:31:f1:3b:dc:9d:35:63:56:75:c0:
94:fb:5a:2c:00:a9:43:f1:ec:21:d4:00:cb:d3:fc:64:e8:ee:
04:08:2a:9e:3e:1a:29:b2:c3:d8:e6:e0:7a:06:50:03:b2:79:
9c:81:a2:30:26:ae:aa:d4:9e:e8:3d:bd:31:d6:b4:bd:9a:52:
6f:d4:65:12:4c:24:cd:24:15:86:2c:09:30:a2:87:43:a4:bd:
ab:7a:91:9d:f9:90:81:bc:84:03:07:be:db:12:af:6d:79:4f:
62:9b:2c:a4:3e:a6:f9:ba:cd:2e:a8:d2:c7:72:90:c1:61:61:
3a:36:0e:36
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgISAYMMmbQCYFD21Bhy+dKkImBMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIwOTA1MDc0MjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTQ2ZDA3YWQ5NjIyOWE2YTE3YzVhMjhmYjFkZTdjZTdlNGFmOTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZG1MFmp1/sGxYnKp6OKGnF0McE/
8zrLCZyJsrJ/s+8UgBdRDgCRSUEIBjua7TLdCRJ0bHqFFhFl2UMXLBESm3hpMp11
gflmBPmhr7huTlhy6XMee6eCe2NAl92j9bAXWY7ZyDq5pHZLtH3U2DXLpslFoVbd
vSYZSP9vdD/pfmt1obtaVkfKo9DW6N1dpjkqxZYphWZWwyvTYI4S1xiKk1xp6AeB
IbEPaIEnNQ0a2W8/1HMP5MqTLe+wb/R0N1i0C59URE/CmMQAemRdw+DnKQu73hLy
7jLvGBpJAEokV4+ydyfbBXGM2hRCClvCoeNh8tTF+bxVk7KpKTMikZtimwIDAQAB
o4ICyjCCAsYwHQYDVR0OBBYEFHFG0HrZYimmoXxaKPsd585+SvlGMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvY1ViUWV0bGlLYWFoZkZvby14M256bjVLLVVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHfBggrBgEFBQcBBwEB/wSBzzCBzDCByQQCAAEwgcIDBABQ
TDADBABQTDIDBAJSc9ADBABUFawDBABUNjEDBABVHy0DBABVHy8DBABXeFQDBABX
eFcDBABXed0DBABc+TIwDAMEAF5nfQMEAF5nfgMEAF6arDAMAwQAstfhAwQCstfg
AwQAstfsAwQAstfvMAwDBAC52EUDBAC52EYDBAC52ogDBAC59t0wDAMEAMEZ2QME
AMEZ2gMEAMEjEwMEAMElKgMEAMEqIAMEAcEvPgMEAMHeYQMEAMHeYwMEAMK0JDAN
BgkqhkiG9w0BAQsFAAOCAQEAnc9bXuTzqDXdNISX0Kn6WRBEaIRMC9CjxQpY9hu4
vSWsLv6jGCWcDWFAl0zloHX6X01tOWEj0p1wwnfyCW+eQTuWiy/gYATKNwb1/zCZ
uzg99uW2PaNwkQFle4GE5KphnxfbZle7sc7MifVAxrgETB2C1ObV6upqdK4yo62a
lJ+n1ncCvD4x8TvcnTVjVnXAlPtaLACpQ/HsIdQAy9P8ZOjuBAgqnj4aKbLD2Obg
egZQA7J5nIGiMCauqtSe6D29Mda0vZpSb9RlEkwkzSQVhiwJMKKHQ6S9q3qRnfmQ
gbyEAwe+2xKvbXlPYpsspD6m+brNLqjSx3KQwWFhOjYONg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:39 2023 by rpki-client on console-ams.rpki-client.org