Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ndlQWs_KZTltu2bG7oR5ThRtR5g.roa
File: ndlQWs_KZTltu2bG7oR5ThRtR5g.roa (raw, json)
Hash identifier: cP0+FPd8WCMtpLFlAMd/evq3gMkuWr9j7es4c938s9w=
Subject key identifier: 9D:D9:50:5A:CF:CA:65:39:6D:BB:66:C6:EE:84:79:4E:14:6D:47:98
Certificate issuer: /CN=112ba797577ea60a561af9a4598c45060e3b7088
Certificate serial: 1828ED56
Authority key identifier: 11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ndlQWs_KZTltu2bG7oR5ThRtR5g.roa
Signing time: Thu 23 Jun 2022 05:57:32 +0000
ROA not before: Thu 23 Jun 2022 05:57:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34779
IP address blocks: 93.103.224.0/19 maxlen: 19
93.103.160.0/19 maxlen: 19
91.246.224.0/19 maxlen: 19
93.103.192.0/19 maxlen: 19
89.233.112.0/20 maxlen: 20
194.28.108.0/22 maxlen: 22
89.212.0.0/18 maxlen: 18
84.255.209.0/24 maxlen: 24
84.255.210.0/24 maxlen: 24
188.230.160.0/19 maxlen: 19
84.255.192.0/18 maxlen: 18
188.230.128.0/19 maxlen: 19
93.103.0.0/19 maxlen: 19
89.212.128.0/18 maxlen: 18
93.103.32.0/19 maxlen: 19
188.230.192.0/19 maxlen: 19
193.138.32.0/20 maxlen: 20
193.138.32.0/19 maxlen: 24
89.212.64.0/18 maxlen: 18
193.138.48.0/21 maxlen: 21
193.138.56.0/22 maxlen: 22
193.138.62.0/24 maxlen: 24
193.138.63.0/24 maxlen: 24
193.138.60.0/23 maxlen: 23
188.230.224.0/19 maxlen: 19
93.103.96.0/19 maxlen: 19
46.248.64.0/19 maxlen: 19
185.179.48.0/22 maxlen: 22
89.212.23.160/27 maxlen: 27
119.12.128.0/20 maxlen: 20
93.103.128.0/19 maxlen: 19
93.103.64.0/19 maxlen: 19
89.212.192.0/18 maxlen: 18
185.49.116.0/22 maxlen: 22
2a01:263::/32 maxlen: 32
2a01:261::/32 maxlen: 32
2a01:264::/32 maxlen: 32
2a01:267::/32 maxlen: 32
2a01:260::/32 maxlen: 32
2a01:266::/32 maxlen: 32
2a01:265::/32 maxlen: 32
2a01:262::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405335382 (0x1828ed56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112ba797577ea60a561af9a4598c45060e3b7088
Validity
Not Before: Jun 23 05:57:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9dd9505acfca65396dbb66c6ee84794e146d4798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:9d:b6:e7:26:0d:77:40:4d:13:99:c0:88:
59:f2:99:ba:a9:94:7d:70:1c:10:e1:a6:a1:d3:7a:
67:64:fe:fd:69:3e:23:f9:16:0c:b1:be:6f:08:7b:
93:b4:22:9b:43:ec:84:62:ad:b8:ef:43:22:64:d6:
51:ec:eb:57:ed:8f:3d:4c:59:74:90:ad:08:82:76:
21:00:81:11:33:f9:20:7b:da:98:d8:19:6a:99:66:
1d:4b:66:87:96:e4:cb:9e:d9:95:a0:1e:77:71:86:
75:ae:ab:fd:54:54:d0:d0:1b:b9:1f:95:97:b0:51:
d9:83:56:34:b2:fa:0a:7b:cf:35:dd:5c:6b:60:71:
89:72:0d:cb:98:63:54:66:1f:2b:8f:91:14:55:15:
0e:22:4c:5d:2c:c6:11:9f:54:96:2c:c4:25:6c:74:
04:14:31:2b:5f:76:49:78:4b:db:7f:b5:4f:4b:47:
c2:ae:e8:af:1b:1c:c6:94:1c:3e:6a:3a:f4:a3:85:
7b:a8:7a:2b:cd:bb:e0:52:60:ee:d1:8b:49:1c:59:
16:aa:95:89:06:39:6e:c4:ff:76:c8:27:56:a7:2e:
f0:4e:37:28:00:4e:9c:bb:90:32:d7:90:1b:5c:81:
96:63:3b:a1:a4:19:86:fa:35:8e:4d:0f:9d:fe:04:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D9:50:5A:CF:CA:65:39:6D:BB:66:C6:EE:84:79:4E:14:6D:47:98
X509v3 Authority Key Identifier:
keyid:11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ndlQWs_KZTltu2bG7oR5ThRtR5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.64.0/19
84.255.192.0/18
89.212.0.0/16
89.233.112.0/20
91.246.224.0/19
93.103.0.0/16
119.12.128.0/20
185.49.116.0/22
185.179.48.0/22
188.230.128.0/17
193.138.32.0/19
194.28.108.0/22
IPv6:
2a01:260::/29
Signature Algorithm: sha256WithRSAEncryption
45:f5:bd:ad:4e:57:15:b5:a2:72:99:8e:c5:13:3b:9c:23:e7:
95:53:70:39:72:cd:43:8f:46:49:2b:c4:7c:0e:4d:8d:cb:4a:
ee:82:b6:82:0f:08:9e:5b:88:a4:7c:1a:ab:c5:d4:77:cc:2e:
48:e4:94:98:d9:59:ad:4b:89:f3:44:93:e1:e4:ec:03:16:67:
c2:e0:b6:24:4e:58:0d:fd:3b:9a:21:74:e3:62:83:c2:cc:ee:
c7:c5:c5:51:23:a8:0d:ee:88:c0:2e:56:ee:72:dc:1e:6e:10:
ae:18:b9:1c:ec:ce:b5:e9:26:67:ed:fe:1f:f9:9c:63:3b:49:
c9:20:1c:e2:f6:c0:fe:cd:06:cc:1f:5b:1b:2f:b8:4b:5b:6c:
62:17:8d:23:22:0f:60:25:3c:7e:28:fe:7f:47:e4:78:ea:37:
a0:ca:d3:4b:6b:4c:68:7f:77:48:79:aa:f6:bc:30:96:16:b4:
de:3b:14:6b:4e:78:f2:79:bb:6b:42:ba:91:b3:a3:19:66:0b:
a0:c1:91:22:16:bd:cd:cf:74:02:8a:af:08:61:f4:9e:4b:e6:
20:7a:34:3e:99:5c:72:dc:4e:4e:fb:58:98:b6:8b:9c:3e:69:
6a:e1:cd:2b:41:02:84:78:1e:5d:cd:57:a4:d9:50:33:2d:49:
1a:0c:70:96
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIEGCjtVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MTJiYTc5NzU3N2VhNjBhNTYxYWY5YTQ1OThjNDUwNjBlM2I3MDg4MB4XDTIyMDYy
MzA1NTczMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWRkOTUwNWFjZmNh
NjUzOTZkYmI2NmM2ZWU4NDc5NGUxNDZkNDc5ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK3enbbnJg13QE0TmcCIWfKZuqmUfXAcEOGmodN6Z2T+/Wk+
I/kWDLG+bwh7k7Qim0PshGKtuO9DImTWUezrV+2PPUxZdJCtCIJ2IQCBETP5IHva
mNgZaplmHUtmh5bky57ZlaAed3GGda6r/VRU0NAbuR+Vl7BR2YNWNLL6CnvPNd1c
a2BxiXINy5hjVGYfK4+RFFUVDiJMXSzGEZ9UlizEJWx0BBQxK192SXhL23+1T0tH
wq7orxscxpQcPmo69KOFe6h6K8274FJg7tGLSRxZFqqViQY5bsT/dsgnVqcu8E43
KABOnLuQMteQG1yBlmM7oaQZhvo1jk0Pnf4EI/kCAwEAAaOCAlgwggJUMB0GA1Ud
DgQWBBSd2VBaz8plOW27ZsbuhHlOFG1HmDAfBgNVHSMEGDAWgBQRK6eXV36mClYa
+aRZjEUGDjtwiDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VTdW5sMWQtcGdwV0d2bWtXWXhGQmc0N2NJZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvZGU1YzVkLTU4MTItNGZlOC1iM2MwLTZiYzQ0M2YzNTU0NC8x
L25kbFFXc19LWlRsdHUyYkc3b1I1VGhSdFI1Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
ZGU1YzVkLTU4MTItNGZlOC1iM2MwLTZiYzQ0M2YzNTU0NC8xL0VTdW5sMWQtcGdw
V0d2bWtXWXhGQmc0N2NJZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBu
BggrBgEFBQcBBwEB/wRfMF0wTAQCAAEwRgMEBS74QAMEBlT/wAMDAFnUAwQEWelw
AwQFW/bgAwMAXWcDBAR3DIADBAK5MXQDBAK5szADBAe85oADBAXBiiADBALCHGww
DQQCAAIwBwMFAyoBAmAwDQYJKoZIhvcNAQELBQADggEBAEX1va1OVxW1onKZjsUT
O5wj55VTcDlyzUOPRkkrxHwOTY3LSu6CtoIPCJ5biKR8GqvF1HfMLkjklJjZWa1L
ifNEk+Hk7AMWZ8LgtiROWA39O5ohdONig8LM7sfFxVEjqA3uiMAuVu5y3B5uEK4Y
uRzszrXpJmft/h/5nGM7SckgHOL2wP7NBswfWxsvuEtbbGIXjSMiD2AlPH4o/n9H
5HjqN6DK00trTGh/d0h5qva8MJYWtN47FGtOePJ5u2tCupGzoxlmC6DBkSIWvc3P
dAKKrwhh9J5L5iB6ND6ZXHLcTk77WJi2i5w+aWrhzStBAoR4Hl3NV6TZUDMtSRoM
cJY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:18 2023 by rpki-client on console-ams.rpki-client.org