Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hMVwX7jkzyLNoLdPKesI4BN0csE.roa
File: hMVwX7jkzyLNoLdPKesI4BN0csE.roa (raw, json)
Hash identifier: 8UDbdZoDtGwYYpBgGpbesnS/kFgz12eTct7kCpeibEE=
Subject key identifier: 84:C5:70:5F:B8:E4:CF:22:CD:A0:B7:4F:29:EB:08:E0:13:74:72:C1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C749D02
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hMVwX7jkzyLNoLdPKesI4BN0csE.roa
Signing time: Sat 01 Jan 2022 01:02:39 +0000
ROA not before: Sat 01 Jan 2022 01:02:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57634
IP address blocks: 94.156.0.0/23 maxlen: 23
94.156.7.0/24 maxlen: 24
31.13.192.0/24 maxlen: 24
31.13.199.0/24 maxlen: 24
31.13.193.0/24 maxlen: 24
87.121.144.0/23 maxlen: 23
212.73.151.0/24 maxlen: 24
31.13.209.0/24 maxlen: 24
31.13.225.0/24 maxlen: 24
85.217.168.0/23 maxlen: 23
94.156.164.0/23 maxlen: 23
94.156.162.0/23 maxlen: 23
87.121.70.0/23 maxlen: 23
87.120.107.0/24 maxlen: 24
94.156.171.0/24 maxlen: 24
94.156.170.0/24 maxlen: 24
93.123.9.0/24 maxlen: 24
87.120.156.0/23 maxlen: 23
87.120.67.0/24 maxlen: 24
87.121.32.0/24 maxlen: 24
94.156.61.0/24 maxlen: 24
94.156.76.0/24 maxlen: 24
94.156.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477404418 (0x1c749d02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84c5705fb8e4cf22cda0b74f29eb08e0137472c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:0f:36:19:12:b9:1c:e3:c5:37:df:cf:1f:
96:8b:7b:97:f5:05:07:ea:1d:e4:87:68:d0:0f:15:
3a:cd:72:52:d1:de:29:85:95:65:93:dc:c3:5e:bd:
b6:3e:d7:e5:05:66:ca:fb:59:5d:d3:f8:4c:41:66:
44:c5:21:20:5f:18:80:e1:22:61:4f:1e:a0:c8:a0:
c9:2b:ab:86:a7:6e:ad:49:94:12:35:b1:2c:39:82:
ee:bc:b7:c9:94:8c:d9:61:52:48:bc:aa:1e:02:40:
83:8e:0f:ec:1f:9f:4a:47:b4:3c:6c:fb:d4:72:46:
c2:8e:e0:f3:2b:61:2f:d2:e3:3e:06:e8:59:21:65:
c0:3a:e8:04:5c:54:72:bd:6d:7b:84:04:2c:eb:7c:
be:9d:40:c9:ce:29:64:5a:c8:a9:d3:ac:10:ad:ab:
92:26:eb:da:6e:d8:2e:08:d4:5c:ea:16:dc:e5:ed:
2d:c3:b5:14:4e:84:45:b7:73:13:90:2b:1c:f9:20:
78:af:27:6f:28:d3:7e:28:3e:f3:75:4e:83:18:b5:
04:40:94:73:99:04:b5:0a:95:7f:9b:cb:e6:35:f5:
00:6f:2f:64:83:b3:5c:ba:1a:58:1d:04:52:50:61:
33:af:7a:5f:f0:8d:0e:0d:77:52:1d:d9:6d:63:f2:
de:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C5:70:5F:B8:E4:CF:22:CD:A0:B7:4F:29:EB:08:E0:13:74:72:C1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hMVwX7jkzyLNoLdPKesI4BN0csE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.192.0/23
31.13.199.0/24
31.13.209.0/24
31.13.225.0/24
85.217.168.0/23
87.120.67.0/24
87.120.107.0/24
87.120.156.0/23
87.121.32.0/24
87.121.70.0/23
87.121.144.0/23
93.123.9.0/24
94.156.0.0/23
94.156.7.0/24
94.156.61.0/24
94.156.76.0/24
94.156.92.0/24
94.156.162.0-94.156.165.255
94.156.170.0/23
212.73.151.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d5:80:eb:50:d1:06:b5:ee:0a:1e:cb:bd:f1:c1:b3:7c:53:
2b:a9:b5:a3:29:37:f9:3d:0b:d8:9d:49:d2:88:69:39:27:d5:
0f:d3:e6:18:78:2a:6f:68:4c:89:8c:22:25:bf:72:8d:70:92:
4b:cf:28:83:46:0d:33:6a:81:f3:11:35:c9:22:36:bf:e8:bc:
a2:46:7c:44:74:c8:a5:1c:51:4d:93:be:4e:60:fa:7f:43:f2:
dc:0a:5e:6c:8f:27:7d:5e:b6:4d:59:d6:c0:02:57:8c:23:17:
ee:46:d9:d5:d8:c1:19:99:8f:7a:f7:a7:a6:ad:83:13:6c:cb:
cf:fa:e2:85:27:91:1b:ae:63:7a:50:5d:d5:24:8f:61:af:fa:
75:6b:ae:51:e4:41:cd:c4:94:43:ff:0b:ed:4f:cc:43:70:88:
09:5c:62:de:42:d9:e4:15:7d:1f:dc:4c:4d:ae:d0:e7:81:96:
15:33:70:f0:86:ed:fe:d0:cb:0c:86:e9:b3:55:c0:ff:ef:5f:
a2:4f:a4:d6:b2:9f:b5:b4:79:0f:74:bf:db:1b:50:00:ad:49:
ea:86:c1:d9:02:5d:aa:94:70:80:ab:f0:15:09:78:42:eb:9c:
6a:5a:d4:d9:fa:e0:21:7e:cc:22:2b:e7:4f:17:10:9e:60:2c:
a6:93:5c:8e
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIEHHSdAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDEw
MTAxMDIzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODRjNTcwNWZiOGU0
Y2YyMmNkYTBiNzRmMjllYjA4ZTAxMzc0NzJjMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJUqDzYZErkc48U3388flot7l/UFB+od5Ido0A8VOs1yUtHe
KYWVZZPcw169tj7X5QVmyvtZXdP4TEFmRMUhIF8YgOEiYU8eoMigySurhqdurUmU
EjWxLDmC7ry3yZSM2WFSSLyqHgJAg44P7B+fSke0PGz71HJGwo7g8ythL9LjPgbo
WSFlwDroBFxUcr1te4QELOt8vp1Ayc4pZFrIqdOsEK2rkibr2m7YLgjUXOoW3OXt
LcO1FE6ERbdzE5ArHPkgeK8nbyjTfig+83VOgxi1BECUc5kEtQqVf5vL5jX1AG8v
ZIOzXLoaWB0EUlBhM696X/CNDg13Uh3ZbWPy3qcCAwEAAaOCAogwggKEMB0GA1Ud
DgQWBBSExXBfuOTPIs2gt08p6wjgE3RywTAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
L2hNVndYN2prenlMTm9MZFBLZXNJNEJOMGNzRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
nQYIKwYBBQUHAQcBAf8EgY0wgYowgYcEAgABMIGAAwQBHw3AAwQAHw3HAwQAHw3R
AwQAHw3hAwQBVdmoAwQAV3hDAwQAV3hrAwQBV3icAwQAV3kgAwQBV3lGAwQBV3mQ
AwQAXXsJAwQBXpwAAwQAXpwHAwQAXpw9AwQAXpxMAwQAXpxcMAwDBAFenKIDBAFe
nKQDBAFenKoDBADUSZcwDQYJKoZIhvcNAQELBQADggEBABfVgOtQ0Qa17goey73x
wbN8UyuptaMpN/k9C9idSdKIaTkn1Q/T5hh4Km9oTImMIiW/co1wkkvPKINGDTNq
gfMRNckiNr/ovKJGfER0yKUcUU2Tvk5g+n9D8twKXmyPJ31etk1Z1sACV4wjF+5G
2dXYwRmZj3r3p6atgxNsy8/64oUnkRuuY3pQXdUkj2Gv+nVrrlHkQc3ElEP/C+1P
zENwiAlcYt5C2eQVfR/cTE2u0OeBlhUzcPCG7f7QywyG6bNVwP/vX6JPpNayn7W0
eQ90v9sbUACtSeqGwdkCXaqUcICr8BUJeELrnGpa1Nn64CF+zCIr508XEJ5gLKaT
XI4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org