Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/voaKGg7UrkZp4Usky1ARlQtSVAI.roa
File: voaKGg7UrkZp4Usky1ARlQtSVAI.roa (raw, json)
Hash identifier: wWUYioQUTOjyJTOcLYJQqXAn0zEFxlOxJJIpH+G8//w=
Subject key identifier: BE:86:8A:1A:0E:D4:AE:46:69:E1:4B:24:CB:50:11:95:0B:52:54:02
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01850FC11E46CF88206E7E56985117463B32
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/voaKGg7UrkZp4Usky1ARlQtSVAI.roa
Signing time: Wed 14 Dec 2022 08:29:52 +0000
ROA not before: Wed 14 Dec 2022 08:29:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8708
IP address blocks: 217.156.14.0/24 maxlen: 24
193.231.226.0/24 maxlen: 24
193.231.227.0/24 maxlen: 24
193.231.233.0/24 maxlen: 24
193.231.236.0/24 maxlen: 24
193.231.238.0/24 maxlen: 24
217.156.41.0/24 maxlen: 24
81.181.112.0/24 maxlen: 24
193.231.252.0/24 maxlen: 24
80.96.219.0/24 maxlen: 24
193.231.184.0/24 maxlen: 24
193.231.187.0/24 maxlen: 24
193.231.189.0/24 maxlen: 24
193.231.188.0/24 maxlen: 24
194.102.134.0/24 maxlen: 24
193.230.158.0/24 maxlen: 24
80.97.149.0/24 maxlen: 24
80.97.147.0/24 maxlen: 24
80.97.148.0/24 maxlen: 24
81.180.27.0/24 maxlen: 24
81.181.128.0/24 maxlen: 24
194.102.98.0/24 maxlen: 24
217.156.92.0/24 maxlen: 24
81.181.167.0/24 maxlen: 24
80.96.67.0/24 maxlen: 24
80.96.72.0/24 maxlen: 24
80.96.73.0/24 maxlen: 24
80.96.82.0/24 maxlen: 24
80.96.79.0/24 maxlen: 24
80.96.12.0/24 maxlen: 24
81.181.246.0/24 maxlen: 24
193.230.217.0/24 maxlen: 24
193.230.229.0/24 maxlen: 24
194.102.229.0/24 maxlen: 24
80.96.51.0/24 maxlen: 24
80.96.47.0/24 maxlen: 24
193.231.108.0/24 maxlen: 24
193.226.116.0/24 maxlen: 24
193.226.125.0/24 maxlen: 24
193.226.127.0/24 maxlen: 24
85.120.20.0/24 maxlen: 24
85.120.23.0/24 maxlen: 24
193.231.75.0/24 maxlen: 24
194.153.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:c1:1e:46:cf:88:20:6e:7e:56:98:51:17:46:3b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Dec 14 08:29:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be868a1a0ed4ae4669e14b24cb5011950b525402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2f:02:bf:d8:39:fb:ee:82:f6:9c:1c:c1:18:
7a:6f:34:a3:ce:71:18:e0:a2:f6:d2:85:f3:66:27:
18:19:37:7c:c1:98:ae:2d:aa:a7:f1:55:a5:18:c8:
43:31:48:1e:c5:1b:e9:0a:2e:8c:45:55:5f:99:95:
16:6c:fa:23:1d:74:13:a5:5b:71:cc:c4:23:6d:12:
5a:6a:e4:cb:de:85:63:64:8d:7e:6d:69:d5:e3:da:
4c:cb:ea:d9:e3:7e:0c:c3:80:31:e1:41:78:1c:59:
bd:30:27:ca:cf:7d:b6:20:cf:15:1b:fa:46:72:7e:
3e:74:17:32:85:dc:40:63:cd:82:e9:5a:ae:37:da:
0c:bd:14:e7:9c:d4:8d:57:86:72:c4:fd:57:2d:35:
0b:91:f5:e4:bf:f5:18:26:c7:65:73:eb:79:44:eb:
f7:0d:a7:4a:88:0e:dc:0a:62:57:6d:bf:24:1f:f0:
0f:1e:d1:38:a8:ad:8a:04:c2:c8:d0:04:ac:32:9f:
62:15:db:70:d8:b2:74:be:4d:45:5d:47:e3:10:7c:
fe:5b:ac:8b:2c:46:c0:01:91:8b:c5:6c:7f:08:63:
5e:d0:6e:d6:46:c0:f5:d4:7e:25:b0:3a:81:d5:52:
e7:d1:89:eb:30:7b:e8:9d:48:f7:c0:e2:19:27:a9:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:86:8A:1A:0E:D4:AE:46:69:E1:4B:24:CB:50:11:95:0B:52:54:02
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/voaKGg7UrkZp4Usky1ARlQtSVAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.12.0/24
80.96.47.0/24
80.96.51.0/24
80.96.67.0/24
80.96.72.0/23
80.96.79.0/24
80.96.82.0/24
80.96.219.0/24
80.97.147.0-80.97.149.255
81.180.27.0/24
81.181.112.0/24
81.181.128.0/24
81.181.167.0/24
81.181.246.0/24
85.120.20.0/24
85.120.23.0/24
193.226.116.0/24
193.226.125.0/24
193.226.127.0/24
193.230.158.0/24
193.230.217.0/24
193.230.229.0/24
193.231.75.0/24
193.231.108.0/24
193.231.184.0/24
193.231.187.0-193.231.189.255
193.231.226.0/23
193.231.233.0/24
193.231.236.0/24
193.231.238.0/24
193.231.252.0/24
194.102.98.0/24
194.102.134.0/24
194.102.229.0/24
194.153.224.0/24
217.156.14.0/24
217.156.41.0/24
217.156.92.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c7:68:8f:19:a1:34:de:1b:5c:d6:3d:a8:15:39:46:a9:ca:
9d:ed:10:5e:cc:89:7d:49:05:fc:4f:ab:bb:6a:8c:61:c6:d6:
23:ee:c5:d7:26:04:f7:db:27:1d:3e:86:60:3c:41:2c:d4:66:
02:08:dd:96:5a:13:85:69:b1:35:d9:da:f2:e1:e4:5e:78:ba:
d0:b7:fd:70:73:ad:30:48:be:cb:81:7d:34:b5:56:8d:ed:e7:
d0:91:6b:c6:67:e6:64:8e:c0:b6:f1:53:d4:61:77:fd:51:7e:
b9:f8:8f:12:8d:c6:9c:56:18:06:4d:01:0d:29:48:66:fe:6e:
71:4d:59:b2:f0:49:c3:d9:0b:d2:46:29:2c:e8:f5:4e:35:ca:
c2:dc:bc:4a:79:40:46:a9:7b:18:0e:f5:9a:67:77:29:a0:f1:
c4:65:62:2f:60:ac:14:c6:ab:2b:da:3f:79:bb:8b:cb:ef:17:
5c:bf:d4:22:b8:9d:9d:ef:ff:ff:36:52:15:21:a7:8b:03:18:
f9:e2:1a:5f:7b:92:db:48:e8:24:1d:eb:5b:9e:aa:21:bb:3b:
d0:43:e5:a2:f9:2d:c3:d0:b3:2f:18:15:e8:7c:a9:9a:0f:81:
cb:56:a3:54:dc:0d:3d:f6:66:9a:b8:f2:30:e1:b9:91:0c:c5:
7f:de:4d:13
-----BEGIN CERTIFICATE-----
MIIF8jCCBNqgAwIBAgISAYUPwR5Gz4ggbn5WmFEXRjsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjIxMjE0MDgyOTUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTg2OGExYTBlZDRhZTQ2NjllMTRiMjRjYjUwMTE5NTBiNTI1NDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny8Cv9g5++6C9pwcwRh6bzSjznEY
4KL20oXzZicYGTd8wZiuLaqn8VWlGMhDMUgexRvpCi6MRVVfmZUWbPojHXQTpVtx
zMQjbRJaauTL3oVjZI1+bWnV49pMy+rZ434Mw4Ax4UF4HFm9MCfKz322IM8VG/pG
cn4+dBcyhdxAY82C6VquN9oMvRTnnNSNV4ZyxP1XLTULkfXkv/UYJsdlc+t5ROv3
DadKiA7cCmJXbb8kH/APHtE4qK2KBMLI0ASsMp9iFdtw2LJ0vk1FXUfjEHz+W6yL
LEbAAZGLxWx/CGNe0G7WRsD11H4lsDqB1VLn0YnrMHvonUj3wOIZJ6kSRQIDAQAB
o4IC/jCCAvowHQYDVR0OBBYEFL6GihoO1K5GaeFLJMtQEZULUlQCMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvdm9hS0dnN1Vya1pwNFVza3kxQVJsUXRTVkFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBEgYIKwYBBQUHAQcBAf8EggEBMIH+MIH7BAIAATCB9AME
AFBgDAMEAFBgLwMEAFBgMwMEAFBgQwMEAVBgSAMEAFBgTwMEAFBgUgMEAFBg2zAM
AwQAUGGTAwQBUGGUAwQAUbQbAwQAUbVwAwQAUbWAAwQAUbWnAwQAUbX2AwQAVXgU
AwQAVXgXAwQAweJ0AwQAweJ9AwQAweJ/AwQAweaeAwQAwebZAwQAweblAwQAwedL
AwQAwedsAwQAwee4MAwDBADB57sDBAHB57wDBAHB5+IDBADB5+kDBADB5+wDBADB
5+4DBADB5/wDBADCZmIDBADCZoYDBADCZuUDBADCmeADBADZnA4DBADZnCkDBADZ
nFwwDQYJKoZIhvcNAQELBQADggEBAFnHaI8ZoTTeG1zWPagVOUapyp3tEF7MiX1J
BfxPq7tqjGHG1iPuxdcmBPfbJx0+hmA8QSzUZgII3ZZaE4VpsTXZ2vLh5F54utC3
/XBzrTBIvsuBfTS1Vo3t59CRa8Zn5mSOwLbxU9Rhd/1Rfrn4jxKNxpxWGAZNAQ0p
SGb+bnFNWbLwScPZC9JGKSzo9U41ysLcvEp5QEapexgO9Zpndymg8cRlYi9grBTG
qyvaP3m7i8vvF1y/1CK4nZ3v//82UhUhp4sDGPniGl97kttI6CQd61ueqiG7O9BD
5aL5LcPQsy8YFeh8qZoPgctWo1TcDT32Zpq48jDhuZEMxX/eTRM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:06 2024 by rpki-client on console-ams.rpki-client.org