Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/E-0D0FcUZ9LjFcLsjH3Np8p9NkM.roa
File: E-0D0FcUZ9LjFcLsjH3Np8p9NkM.roa (raw, json)
Hash identifier: S7I3nydWiyZgoirYGUOzmythNrOgGkU77WtNfYqBooE=
Subject key identifier: 13:ED:03:D0:57:14:67:D2:E3:15:C2:EC:8C:7D:CD:A7:CA:7D:36:43
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 43914190
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/E-0D0FcUZ9LjFcLsjH3Np8p9NkM.roa
Signing time: Mon 24 Jan 2022 10:55:04 +0000
ROA not before: Mon 24 Jan 2022 10:55:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 37.235.48.0/24 maxlen: 24
89.31.120.0/24 maxlen: 24
158.255.208.0/24 maxlen: 24
158.255.213.0/24 maxlen: 24
158.255.214.0/24 maxlen: 24
158.255.215.0/24 maxlen: 24
185.26.239.0/24 maxlen: 24
149.154.157.0/24 maxlen: 24
149.154.158.0/24 maxlen: 24
149.154.159.0/24 maxlen: 24
151.236.15.0/24 maxlen: 24
151.236.16.0/24 maxlen: 24
151.236.17.0/24 maxlen: 24
151.236.18.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.21.0/24 maxlen: 24
151.236.22.0/24 maxlen: 24
151.236.25.0/24 maxlen: 24
46.183.187.0/24 maxlen: 24
103.57.248.0/24 maxlen: 24
103.57.249.0/24 maxlen: 24
103.57.251.0/24 maxlen: 24
2a03:f80:65::/48 maxlen: 48
2a03:f80:45::/48 maxlen: 48
2a03:f80:40::/48 maxlen: 48
2a03:f80:39::/48 maxlen: 48
2a03:f80:33::/48 maxlen: 48
2a03:f80:971::/48 maxlen: 48
2a03:f80:47::/48 maxlen: 48
2a03:f80:49::/48 maxlen: 48
2a03:f80:852::/48 maxlen: 48
2a03:f80:32::/48 maxlen: 48
2a03:f80:48::/48 maxlen: 48
2a03:f80:61::/48 maxlen: 48
2a03:f80:81::/48 maxlen: 48
2a03:f80:381::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1133592976 (0x43914190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 24 10:55:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13ed03d0571467d2e315c2ec8c7dcda7ca7d3643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:1e:ce:8c:34:b0:23:d0:85:4e:8c:35:ca:
b2:7f:95:66:fb:0f:ae:b9:63:64:c4:fb:4e:4c:ee:
81:ae:71:ec:ec:98:48:03:db:0b:b1:d8:48:97:ee:
6d:36:5b:de:d6:5f:a0:d1:1e:a4:c6:08:e1:57:98:
3f:35:1e:1c:4d:6c:5d:d7:87:fb:23:08:3e:56:fb:
6c:5c:85:dc:33:76:89:c1:48:dc:eb:4d:a0:41:93:
ef:bf:64:95:30:a9:f1:2f:f8:d5:bb:35:d2:cd:d6:
d8:8e:cf:3d:0d:e6:dc:38:3d:ca:be:7a:a8:5f:39:
d8:f8:28:49:32:7b:c3:2b:cd:18:d4:90:03:b0:80:
ca:53:d1:25:85:3d:b2:79:66:62:b3:25:8a:67:75:
a2:3d:18:ae:8f:25:f1:b4:eb:f4:be:66:14:ef:0f:
70:1a:33:f1:67:9a:28:98:79:26:b4:92:0c:34:c0:
31:e2:7f:f3:67:08:54:55:7a:6f:94:3d:e3:ce:6f:
0e:90:e6:3c:77:1d:8d:6a:19:2b:15:b7:9e:2a:6a:
9e:67:eb:d1:ed:15:b6:f1:a0:c3:02:0b:5f:02:6e:
94:47:4a:4f:b0:90:65:36:d2:ee:9a:6f:53:56:ab:
cc:be:f0:c6:92:86:c5:be:6a:23:10:65:90:d5:5d:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:ED:03:D0:57:14:67:D2:E3:15:C2:EC:8C:7D:CD:A7:CA:7D:36:43
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/E-0D0FcUZ9LjFcLsjH3Np8p9NkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.48.0/24
46.183.187.0/24
89.31.120.0/24
103.57.248.0/23
103.57.251.0/24
149.154.157.0-149.154.159.255
151.236.15.0-151.236.18.255
151.236.20.0-151.236.22.255
151.236.25.0/24
158.255.208.0/24
158.255.213.0-158.255.215.255
185.26.239.0/24
IPv6:
2a03:f80:32::/47
2a03:f80:39::/48
2a03:f80:40::/48
2a03:f80:45::/48
2a03:f80:47::-2a03:f80:49:ffff:ffff:ffff:ffff:ffff
2a03:f80:61::/48
2a03:f80:65::/48
2a03:f80:81::/48
2a03:f80:381::/48
2a03:f80:852::/48
2a03:f80:971::/48
Signature Algorithm: sha256WithRSAEncryption
4d:9c:7d:c1:17:e5:0e:a5:97:f5:db:46:61:23:d2:6d:5c:98:
73:b6:28:9d:53:62:81:2b:cf:ab:88:73:99:4b:55:e3:f6:9c:
89:f3:99:5f:d1:63:da:7f:6e:b6:0a:81:82:5d:a1:66:18:37:
e0:f2:09:5e:d7:76:c8:7c:c8:05:42:ea:bf:48:24:bf:29:d1:
d2:fa:36:f9:6f:7f:57:bb:a3:6e:ce:f8:00:ea:65:e8:bf:84:
bc:e9:73:61:2e:75:c3:9e:1f:f1:21:2f:c8:8a:1d:2d:70:75:
48:5a:db:4f:ed:ef:76:e1:1c:aa:de:60:e2:76:88:32:0d:6c:
ae:7e:dd:c5:a1:f4:15:13:28:e0:7e:04:57:13:bb:d9:af:6c:
9c:52:35:1a:eb:02:8a:c7:dd:06:ba:c5:b3:fa:4a:a3:db:2a:
82:27:c2:e5:f8:6a:78:15:5f:48:01:c3:4c:23:03:71:5e:a6:
5e:eb:6c:b7:2e:2f:d6:22:3c:09:39:12:2c:2c:fa:fb:01:11:
dc:54:9f:dc:7d:34:95:9d:c1:8a:74:6b:f3:3e:71:39:10:e4:
e1:38:c2:90:cc:1b:69:03:55:82:5e:73:ae:44:ca:5c:bd:be:
80:50:9d:b4:4b:e1:f6:58:21:4a:68:dc:c3:6a:37:7e:5a:0b:
e1:97:39:19
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIEQ5FBkDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MjE3YjQ3MmM4NDFjMWQ2ODU1MGEyNGYxOTM2ZDI5Y2M2YzI4ZjZhMB4XDTIyMDEy
NDEwNTUwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTNlZDAzZDA1NzE0
NjdkMmUzMTVjMmVjOGM3ZGNkYTdjYTdkMzY0MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJszHs6MNLAj0IVOjDXKsn+VZvsPrrljZMT7Tkzuga5x7OyY
SAPbC7HYSJfubTZb3tZfoNEepMYI4VeYPzUeHE1sXdeH+yMIPlb7bFyF3DN2icFI
3OtNoEGT779klTCp8S/41bs10s3W2I7PPQ3m3Dg9yr56qF852PgoSTJ7wyvNGNSQ
A7CAylPRJYU9snlmYrMlimd1oj0Yro8l8bTr9L5mFO8PcBoz8WeaKJh5JrSSDDTA
MeJ/82cIVFV6b5Q9485vDpDmPHcdjWoZKxW3nipqnmfr0e0VtvGgwwILXwJulEdK
T7CQZTbS7ppvU1arzL7wxpKGxb5qIxBlkNVdwVsCAwEAAaOCAuQwggLgMB0GA1Ud
DgQWBBQT7QPQVxRn0uMVwuyMfc2nyn02QzAfBgNVHSMEGDAWgBTSF7RyyEHB1oVQ
ok8ZNtKcxsKPajAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBoZTBjc2hCd2RhRlVLSlBHVGJTbk1iQ2oyby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTAvMjkwZTQ0LWI0NzktNDZjZi1hYjRiLWIzOGUyNjc3YjNkYy8x
L0UtMEQwRmNVWjlMakZjTHNqSDNOcDhwOU5rTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAv
MjkwZTQ0LWI0NzktNDZjZi1hYjRiLWIzOGUyNjc3YjNkYy8xLzBoZTBjc2hCd2Rh
RlVLSlBHVGJTbk1iQ2oyby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
+QYIKwYBBQUHAQcBAf8EgekwgeYwbgQCAAEwaAMEACXrMAMEAC63uwMEAFkfeAME
AWc5+AMEAGc5+zAMAwQAlZqdAwQFlZqAMAwDBACX7A8DBACX7BIwDAMEApfsFAME
AJfsFgMEAJfsGQMEAJ7/0DAMAwQAnv/VAwQDnv/QAwQAuRrvMHQEAgACMG4DBwEq
Aw+AADIDBwAqAw+AADkDBwAqAw+AAEADBwAqAw+AAEUwEgMHACoDD4AARwMHASoD
D4AASAMHACoDD4AAYQMHACoDD4AAZQMHACoDD4AAgQMHACoDD4ADgQMHACoDD4AI
UgMHACoDD4AJcTANBgkqhkiG9w0BAQsFAAOCAQEATZx9wRflDqWX9dtGYSPSbVyY
c7YonVNigSvPq4hzmUtV4/acifOZX9Fj2n9utgqBgl2hZhg34PIJXtd2yHzIBULq
v0gkvynR0vo2+W9/V7ujbs74AOpl6L+EvOlzYS51w54f8SEvyIodLXB1SFrbT+3v
duEcqt5g4naIMg1srn7dxaH0FRMo4H4EVxO72a9snFI1GusCisfdBrrFs/pKo9sq
gifC5fhqeBVfSAHDTCMDcV6mXutsty4v1iI8CTkSLCz6+wER3FSf3H00lZ3BinRr
8z5xORDk4TjCkMwbaQNVgl5zrkTKXL2+gFCdtEvh9lghSmjcw2o3floL4Zc5GQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:58 2023 by rpki-client on console-ams.rpki-client.org