Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/sEuVIRYExuaqKoN7tylueeZFubE.roa
File: sEuVIRYExuaqKoN7tylueeZFubE.roa (raw, json)
Hash identifier: 4EQJtoRVvp6ls6AkaI+0IPueDTg0cBrYAAB95UvFSpE=
Subject key identifier: B0:4B:95:21:16:04:C6:E6:AA:2A:83:7B:B7:29:6E:79:E6:45:B9:B1
Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial: 33F45C69
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/sEuVIRYExuaqKoN7tylueeZFubE.roa
Signing time: Tue 17 May 2022 12:10:28 +0000
ROA not before: Tue 17 May 2022 12:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31638
IP address blocks: 93.115.170.0/23 maxlen: 23
89.39.224.0/20 maxlen: 21
188.241.190.0/23 maxlen: 24
46.255.80.0/21 maxlen: 24
89.44.206.0/24 maxlen: 24
5.144.184.0/21 maxlen: 24
89.45.95.0/24 maxlen: 24
37.156.148.0/22 maxlen: 23
89.47.32.0/23 maxlen: 24
86.105.179.0/24 maxlen: 24
188.215.44.0/22 maxlen: 23
86.104.6.0/24 maxlen: 24
89.45.24.0/21 maxlen: 21
89.45.24.0/24 maxlen: 24
89.45.26.0/24 maxlen: 24
89.45.25.0/24 maxlen: 24
89.45.27.0/24 maxlen: 24
176.223.164.0/24 maxlen: 24
188.215.65.0/24 maxlen: 24
37.156.96.0/22 maxlen: 23
89.33.232.0/24 maxlen: 24
94.177.18.0/23 maxlen: 23
93.118.37.0/24 maxlen: 24
195.62.160.0/19 maxlen: 20
89.34.6.0/24 maxlen: 24
89.45.216.0/22 maxlen: 23
188.215.248.0/24 maxlen: 24
188.212.153.0/24 maxlen: 24
188.215.247.0/24 maxlen: 24
188.210.239.0/24 maxlen: 24
37.156.168.0/22 maxlen: 23
185.82.168.0/22 maxlen: 23
185.82.170.0/24 maxlen: 24
185.82.169.0/24 maxlen: 24
185.82.171.0/24 maxlen: 24
188.241.4.0/23 maxlen: 24
37.156.208.0/22 maxlen: 23
94.177.151.0/24 maxlen: 24
89.42.230.0/24 maxlen: 24
188.209.80.0/20 maxlen: 24
86.104.229.0/24 maxlen: 24
188.209.88.0/21 maxlen: 21
93.113.89.0/24 maxlen: 24
86.105.8.0/24 maxlen: 24
2a02:20d8::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 871652457 (0x33f45c69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Validity
Not Before: May 17 12:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b04b95211604c6e6aa2a837bb7296e79e645b9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:e6:20:28:c0:12:2a:d0:a0:7b:fc:78:c3:
30:ff:ae:2b:fb:d5:5b:f3:5c:61:17:26:48:07:2a:
57:f4:37:32:30:38:2c:73:ed:16:67:68:e9:2e:40:
3a:2f:9e:00:51:1d:dd:c2:8b:f5:98:15:6e:5c:75:
f8:12:4b:86:8c:e2:6b:4c:e5:6f:72:80:cf:54:76:
ad:78:3d:ed:d7:6c:cb:f4:fa:e2:51:13:46:a2:81:
6b:0e:70:bb:24:9c:1c:1c:f2:ff:17:7b:fc:0d:ba:
aa:46:ed:a2:8f:b9:2e:b6:ba:3f:3a:86:13:7d:8d:
87:9e:d1:c5:d0:2c:80:22:5a:07:0c:1a:33:b0:65:
bd:88:e2:2a:ee:c8:6c:23:0c:ed:0c:0d:0f:1a:ec:
92:87:b5:08:44:e9:1e:f2:8f:c7:cc:f8:99:7f:49:
78:88:fe:13:08:e3:3e:e7:4a:db:16:78:ad:22:82:
42:47:d1:3e:b3:cc:b6:b3:fa:4c:51:d5:95:15:30:
43:c6:31:79:a0:a9:53:b3:b7:39:96:88:28:ea:7d:
63:fa:a0:a6:aa:c4:0d:30:b1:82:d7:a8:37:77:46:
26:af:a2:52:22:14:5c:13:f8:37:03:f2:6b:ae:e8:
f7:37:14:f6:77:4e:f0:a6:7c:e0:4e:5d:47:51:9d:
b2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4B:95:21:16:04:C6:E6:AA:2A:83:7B:B7:29:6E:79:E6:45:B9:B1
X509v3 Authority Key Identifier:
keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/sEuVIRYExuaqKoN7tylueeZFubE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.184.0/21
37.156.96.0/22
37.156.148.0/22
37.156.168.0/22
37.156.208.0/22
46.255.80.0/21
86.104.6.0/24
86.104.229.0/24
86.105.8.0/24
86.105.179.0/24
89.33.232.0/24
89.34.6.0/24
89.39.224.0/20
89.42.230.0/24
89.44.206.0/24
89.45.24.0/21
89.45.95.0/24
89.45.216.0/22
89.47.32.0/23
93.113.89.0/24
93.115.170.0/23
93.118.37.0/24
94.177.18.0/23
94.177.151.0/24
176.223.164.0/24
185.82.168.0/22
188.209.80.0/20
188.210.239.0/24
188.212.153.0/24
188.215.44.0/22
188.215.65.0/24
188.215.247.0-188.215.248.255
188.241.4.0/23
188.241.190.0/23
195.62.160.0/19
IPv6:
2a02:20d8::/29
Signature Algorithm: sha256WithRSAEncryption
66:da:9e:8e:ea:e7:d5:ad:34:e8:34:e7:fa:87:34:55:a3:09:
0d:73:29:99:de:16:f6:f6:65:76:ef:2d:f1:4c:71:e3:eb:c7:
6a:6d:af:16:02:0f:b1:54:36:db:18:67:d7:30:46:e8:c2:5f:
f6:02:9e:6e:05:39:75:c3:6a:d5:2d:f0:bd:2a:7c:45:e6:a6:
9f:67:25:42:ee:59:85:71:3f:de:1a:60:ff:91:42:15:98:1b:
f8:86:d5:95:a3:94:4d:cb:6f:83:f8:2d:1f:a3:f0:95:e6:83:
7f:7c:04:d0:c8:c2:4f:04:bf:3c:85:9d:1e:42:b6:7e:c2:e3:
60:a4:86:eb:a0:9d:72:0a:85:e7:1f:73:db:81:21:ad:e1:5d:
a4:2d:cd:57:a9:6e:77:07:2e:d2:20:dd:38:4d:a2:94:d7:e1:
c5:60:50:a7:4a:f9:b6:49:36:ea:75:1d:fb:3b:76:ae:53:78:
7a:ab:5d:74:87:de:d2:09:c8:1f:54:4c:af:fd:97:1a:0a:d0:
fc:99:f6:2d:ab:61:a7:36:bc:6d:bc:9b:f9:ed:ad:f9:16:ed:
a2:59:be:eb:51:d6:ce:5f:36:13:1c:d5:0c:3a:1a:9b:af:63:
7d:31:e7:78:03:5a:58:b3:13:b4:db:69:4f:0a:b7:95:ed:e7:
3f:b2:47:7f
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIEM/RcaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YjIwMGQwZTdhZDNjZWY3MjIzOGI1MTY0YzRiMmNkZGUyM2E2YTFlMB4XDTIyMDUx
NzEyMTAyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjA0Yjk1MjExNjA0
YzZlNmFhMmE4MzdiYjcyOTZlNzllNjQ1YjliMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALBA5iAowBIq0KB7/HjDMP+uK/vVW/NcYRcmSAcqV/Q3MjA4
LHPtFmdo6S5AOi+eAFEd3cKL9ZgVblx1+BJLhozia0zlb3KAz1R2rXg97ddsy/T6
4lETRqKBaw5wuyScHBzy/xd7/A26qkbtoo+5Lra6PzqGE32Nh57RxdAsgCJaBwwa
M7BlvYjiKu7IbCMM7QwNDxrskoe1CETpHvKPx8z4mX9JeIj+EwjjPudK2xZ4rSKC
QkfRPrPMtrP6TFHVlRUwQ8YxeaCpU7O3OZaIKOp9Y/qgpqrEDTCxgteoN3dGJq+i
UiIUXBP4NwPya67o9zcU9ndO8KZ84E5dR1Gdst8CAwEAAaOCAvIwggLuMB0GA1Ud
DgQWBBSwS5UhFgTG5qoqg3u3KW555kW5sTAfBgNVHSMEGDAWgBSbIA0OetPO9yI4
tRZMSyzd4jpqHjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L215QU5EbnJUenZjaU9MVVdURXNzM2VJNmFoNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGMvZmNiY2M2LTczOWItNGY1Yy1hZTNjLWE0ZjA4ZGJiODVhNS8x
L3NFdVZJUllFeHVhcUtvTjd0eWx1ZWVaRnViRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMv
ZmNiY2M2LTczOWItNGY1Yy1hZTNjLWE0ZjA4ZGJiODVhNS8xL215QU5EbnJUenZj
aU9MVVdURXNzM2VJNmFoNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AQYGCCsGAQUFBwEHAQH/BIH2MIHzMIHhBAIAATCB2gMEAwWQuAMEAiWcYAMEAiWc
lAMEAiWcqAMEAiWc0AMEAy7/UAMEAFZoBgMEAFZo5QMEAFZpCAMEAFZpswMEAFkh
6AMEAFkiBgMEBFkn4AMEAFkq5gMEAFkszgMEA1ktGAMEAFktXwMEAlkt2AMEAVkv
IAMEAF1xWQMEAV1zqgMEAF12JQMEAV6xEgMEAF6xlwMEALDfpAMEArlSqAMEBLzR
UAMEALzS7wMEALzUmQMEArzXLAMEALzXQTAMAwQAvNf3AwQAvNf4AwQBvPEEAwQB
vPG+AwQFwz6gMA0EAgACMAcDBQMqAiDYMA0GCSqGSIb3DQEBCwUAA4IBAQBm2p6O
6ufVrTToNOf6hzRVowkNcymZ3hb29mV27y3xTHHj68dqba8WAg+xVDbbGGfXMEbo
wl/2Ap5uBTl1w2rVLfC9KnxF5qafZyVC7lmFcT/eGmD/kUIVmBv4htWVo5RNy2+D
+C0fo/CV5oN/fATQyMJPBL88hZ0eQrZ+wuNgpIbroJ1yCoXnH3PbgSGt4V2kLc1X
qW53By7SIN04TaKU1+HFYFCnSvm2STbqdR37O3auU3h6q110h97SCcgfVEyv/Zca
CtD8mfYtq2GnNrxtvJv57a35Fu2iWb7rUdbOXzYTHNUMOhqbr2N9Med4A1pYsxO0
22lPCreV7ec/skd/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:42 2024 by rpki-client on console-fra.rpki-client.org