Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/_JHIhGtS5VqBZYw7wnA4fGbK-cs.roa
File: _JHIhGtS5VqBZYw7wnA4fGbK-cs.roa (raw, json)
Hash identifier: FWbH1Q4IfdlaJVoxSzBTVs+7ji99RzyrD1IjiLZ8vfM=
Subject key identifier: FC:91:C8:84:6B:52:E5:5A:81:65:8C:3B:C2:70:38:7C:66:CA:F9:CB
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 447DE0E8
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/_JHIhGtS5VqBZYw7wnA4fGbK-cs.roa
Signing time: Wed 04 May 2022 07:04:58 +0000
ROA not before: Wed 04 May 2022 07:04:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 37.235.48.0/24 maxlen: 24
89.31.120.0/24 maxlen: 24
89.31.121.0/24 maxlen: 24
91.132.95.0/24 maxlen: 24
158.255.208.0/24 maxlen: 24
158.255.213.0/24 maxlen: 24
158.255.214.0/24 maxlen: 24
158.255.215.0/24 maxlen: 24
185.26.239.0/24 maxlen: 24
149.154.157.0/24 maxlen: 24
149.154.158.0/24 maxlen: 24
149.154.159.0/24 maxlen: 24
151.236.15.0/24 maxlen: 24
151.236.16.0/24 maxlen: 24
151.236.17.0/24 maxlen: 24
151.236.18.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.21.0/24 maxlen: 24
151.236.22.0/24 maxlen: 24
151.236.25.0/24 maxlen: 24
46.183.187.0/24 maxlen: 24
103.57.248.0/24 maxlen: 24
103.57.249.0/24 maxlen: 24
103.57.251.0/24 maxlen: 24
2a03:f80:65::/48 maxlen: 48
2a03:f80:45::/48 maxlen: 48
2a03:f80:40::/48 maxlen: 48
2a03:f80:39::/48 maxlen: 48
2a03:f80:33::/48 maxlen: 48
2a03:f80:4416::/48 maxlen: 48
2a03:f80:971::/48 maxlen: 48
2a03:f80:47::/48 maxlen: 48
2a03:f80:49::/48 maxlen: 48
2a03:f80:852::/48 maxlen: 48
2a03:f80:32::/48 maxlen: 48
2a03:f80:48::/48 maxlen: 48
2a03:f80:61::/48 maxlen: 48
2a03:f80:381::/48 maxlen: 48
2a03:f80:81::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149100264 (0x447de0e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: May 4 07:04:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc91c8846b52e55a81658c3bc270387c66caf9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:11:87:48:ac:91:9b:99:58:76:a5:e7:18:8a:
d6:14:3f:20:38:a2:cc:26:be:6b:f9:46:13:b7:3b:
85:94:29:db:fa:e8:f4:9b:45:27:85:90:04:66:e2:
37:16:ff:5f:48:04:4b:40:87:02:a1:4f:2a:b2:ce:
e6:63:ad:31:23:ea:c1:58:c6:b3:86:5b:4d:d5:7f:
28:53:d6:b6:49:18:2a:fd:11:11:57:06:44:0c:2c:
de:be:8c:9b:92:ef:7e:9d:4d:b2:98:47:81:91:95:
ae:71:60:0c:eb:73:64:55:f0:eb:82:71:b7:b8:8e:
69:36:e0:bf:08:51:35:85:aa:40:ae:59:5c:97:e3:
de:3f:17:3c:8a:6c:33:63:b1:3b:08:5f:b4:16:51:
f2:76:d4:e5:a9:60:09:27:7a:9f:9f:d2:78:ec:37:
89:13:21:9f:61:08:58:29:a8:19:3d:ac:e1:cf:b3:
37:72:6e:d1:92:af:d4:64:1b:ae:c0:4c:7e:e1:1f:
32:9a:90:d7:90:3e:de:d7:31:b3:5c:ee:c9:1f:c3:
1d:f3:c9:f4:e3:e3:f2:46:28:33:7a:e8:d3:f8:d5:
e9:fa:a1:2f:1a:8b:61:9d:b1:c3:33:7d:51:18:e5:
b8:76:56:f5:41:b3:85:25:3f:c1:89:04:68:f0:d7:
4a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:91:C8:84:6B:52:E5:5A:81:65:8C:3B:C2:70:38:7C:66:CA:F9:CB
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/_JHIhGtS5VqBZYw7wnA4fGbK-cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.48.0/24
46.183.187.0/24
89.31.120.0/23
91.132.95.0/24
103.57.248.0/23
103.57.251.0/24
149.154.157.0-149.154.159.255
151.236.15.0-151.236.18.255
151.236.20.0-151.236.22.255
151.236.25.0/24
158.255.208.0/24
158.255.213.0-158.255.215.255
185.26.239.0/24
IPv6:
2a03:f80:32::/47
2a03:f80:39::/48
2a03:f80:40::/48
2a03:f80:45::/48
2a03:f80:47::-2a03:f80:49:ffff:ffff:ffff:ffff:ffff
2a03:f80:61::/48
2a03:f80:65::/48
2a03:f80:81::/48
2a03:f80:381::/48
2a03:f80:852::/48
2a03:f80:971::/48
2a03:f80:4416::/48
Signature Algorithm: sha256WithRSAEncryption
ba:98:a6:d7:93:b7:ef:de:44:7b:ec:15:cf:26:3b:15:0e:34:
b4:64:be:71:1f:f2:e0:0d:23:54:1b:8f:00:7b:25:d0:3f:99:
76:1d:d3:4c:d3:54:38:23:16:31:ed:31:0e:88:9d:3e:ac:76:
38:26:bb:54:a1:78:9d:d9:68:6e:90:21:80:45:09:60:7a:65:
de:24:35:c4:1e:f3:7b:90:dc:1e:79:3e:db:3d:6b:e7:1e:08:
af:bb:70:f7:7b:08:2a:34:98:11:e4:46:60:0d:c6:2f:ce:f2:
c5:86:ec:ba:10:cc:8d:3b:2e:60:00:27:a2:1d:ff:85:45:24:
86:34:da:cb:45:a3:06:e5:f9:4d:66:d3:2e:52:39:fd:13:68:
84:58:8c:db:f8:ea:b1:79:f0:b8:34:44:00:7a:d5:77:b1:45:
c0:ca:83:35:01:ba:b1:53:b6:d2:fa:4f:53:e0:50:c9:db:2d:
ca:37:29:8d:f4:f1:b6:81:d9:fc:c3:a1:bf:f2:34:0a:d0:56:
a1:ae:97:f1:95:af:0d:7b:98:41:77:39:58:a3:0f:03:43:ef:
99:b4:1b:65:c8:a7:f3:52:79:65:f4:7a:d9:dc:b1:16:eb:87:
36:47:a5:c5:2d:6a:aa:13:69:bc:ae:2a:af:e6:4f:86:5d:cc:
1f:4f:20:92
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIERH3g6DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MjE3YjQ3MmM4NDFjMWQ2ODU1MGEyNGYxOTM2ZDI5Y2M2YzI4ZjZhMB4XDTIyMDUw
NDA3MDQ1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmM5MWM4ODQ2YjUy
ZTU1YTgxNjU4YzNiYzI3MDM4N2M2NmNhZjljYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ8Rh0iskZuZWHal5xiK1hQ/IDiizCa+a/lGE7c7hZQp2/ro
9JtFJ4WQBGbiNxb/X0gES0CHAqFPKrLO5mOtMSPqwVjGs4ZbTdV/KFPWtkkYKv0R
EVcGRAws3r6Mm5Lvfp1NsphHgZGVrnFgDOtzZFXw64Jxt7iOaTbgvwhRNYWqQK5Z
XJfj3j8XPIpsM2OxOwhftBZR8nbU5algCSd6n5/SeOw3iRMhn2EIWCmoGT2s4c+z
N3Ju0ZKv1GQbrsBMfuEfMpqQ15A+3tcxs1zuyR/DHfPJ9OPj8kYoM3ro0/jV6fqh
LxqLYZ2xwzN9URjluHZW9UGzhSU/wYkEaPDXShECAwEAAaOCAvQwggLwMB0GA1Ud
DgQWBBT8kciEa1LlWoFljDvCcDh8Zsr5yzAfBgNVHSMEGDAWgBTSF7RyyEHB1oVQ
ok8ZNtKcxsKPajAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBoZTBjc2hCd2RhRlVLSlBHVGJTbk1iQ2oyby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTAvMjkwZTQ0LWI0NzktNDZjZi1hYjRiLWIzOGUyNjc3YjNkYy8x
L19KSEloR3RTNVZxQlpZdzd3bkE0ZkdiSy1jcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAv
MjkwZTQ0LWI0NzktNDZjZi1hYjRiLWIzOGUyNjc3YjNkYy8xLzBoZTBjc2hCd2Rh
RlVLSlBHVGJTbk1iQ2oyby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AQgGCCsGAQUFBwEHAQH/BIH4MIH1MHQEAgABMG4DBAAl6zADBAAut7sDBAFZH3gD
BABbhF8DBAFnOfgDBABnOfswDAMEAJWanQMEBZWagDAMAwQAl+wPAwQAl+wSMAwD
BAKX7BQDBACX7BYDBACX7BkDBACe/9AwDAMEAJ7/1QMEA57/0AMEALka7zB9BAIA
AjB3AwcBKgMPgAAyAwcAKgMPgAA5AwcAKgMPgABAAwcAKgMPgABFMBIDBwAqAw+A
AEcDBwEqAw+AAEgDBwAqAw+AAGEDBwAqAw+AAGUDBwAqAw+AAIEDBwAqAw+AA4ED
BwAqAw+ACFIDBwAqAw+ACXEDBwAqAw+ARBYwDQYJKoZIhvcNAQELBQADggEBALqY
pteTt+/eRHvsFc8mOxUONLRkvnEf8uANI1QbjwB7JdA/mXYd00zTVDgjFjHtMQ6I
nT6sdjgmu1SheJ3ZaG6QIYBFCWB6Zd4kNcQe83uQ3B55Pts9a+ceCK+7cPd7CCo0
mBHkRmANxi/O8sWG7LoQzI07LmAAJ6Id/4VFJIY02stFowbl+U1m0y5SOf0TaIRY
jNv46rF58Lg0RAB61XexRcDKgzUBurFTttL6T1PgUMnbLco3KY308baB2fzDob/y
NArQVqGul/GVrw17mEF3OVijDwND75m0G2XIp/NSeWX0etncsRbrhzZHpcUtaqoT
abyuKq/mT4ZdzB9PIJI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:09 2023 by rpki-client on console-fra.rpki-client.org