Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/AR9L8vXUy97kt4yU0JXNTtHKyPM.roa
File: AR9L8vXUy97kt4yU0JXNTtHKyPM.roa (raw, json)
Hash identifier: NF/6RrypystFw3R+HBRnskx2x0tPBeHVj48P4GA/Gwc=
Subject key identifier: 01:1F:4B:F2:F5:D4:CB:DE:E4:B7:8C:94:D0:95:CD:4E:D1:CA:C8:F3
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0183FB98171E1492DAF93052EBAA03E408FE
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/AR9L8vXUy97kt4yU0JXNTtHKyPM.roa
Signing time: Fri 21 Oct 2022 17:29:52 +0000
ROA not before: Fri 21 Oct 2022 17:29:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 45.151.2.0/24 maxlen: 24
45.151.0.0/23 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.108.0/22 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.13.191.0/24 maxlen: 24
45.94.168.0/22 maxlen: 24
45.144.215.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
85.209.121.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
45.138.180.0/22 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fb:98:17:1e:14:92:da:f9:30:52:eb:aa:03:e4:08:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 21 17:29:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=011f4bf2f5d4cbdee4b78c94d095cd4ed1cac8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:a5:34:0b:b3:d7:88:a4:b2:dc:ca:f4:63:
8c:bc:74:75:be:a2:06:61:f0:ae:5a:e1:24:6a:e1:
b2:db:81:d3:03:6f:48:f8:65:34:26:08:fb:01:61:
4f:cf:8e:a6:37:5b:c8:62:d0:35:d6:d4:71:ca:ce:
f7:ec:e6:b6:81:f9:ff:fa:e8:7c:fd:a1:7c:40:49:
82:a7:cc:58:b8:c2:fa:af:c7:2d:fa:57:49:0d:97:
ee:35:6b:d3:f9:12:ac:55:51:df:30:e6:4a:10:a7:
0d:b0:e4:da:5b:92:2c:35:73:93:b6:23:c1:2c:c6:
a8:48:ff:bc:9e:e3:ff:72:1f:3f:65:df:87:ea:97:
5e:a3:f5:8b:9c:ab:3c:b2:c7:80:a8:70:a0:1b:69:
6e:8d:a7:c7:15:4b:64:bd:89:e1:34:7f:84:46:61:
c1:43:04:22:aa:b9:3a:11:83:3d:73:10:5e:93:e3:
80:c0:f5:97:59:c8:04:ee:83:5a:00:06:43:ca:b0:
e6:a8:20:1a:0b:c1:c2:05:04:d4:88:fe:62:71:69:
da:2f:8d:05:5b:65:04:f3:fd:ea:5b:2d:e2:fb:df:
c8:5b:36:3a:ae:cd:9d:4d:4f:05:cf:25:e2:b5:2c:
de:2a:9c:db:25:d4:ac:fb:f2:b2:50:9d:ec:4d:e0:
24:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1F:4B:F2:F5:D4:CB:DE:E4:B7:8C:94:D0:95:CD:4E:D1:CA:C8:F3
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/AR9L8vXUy97kt4yU0JXNTtHKyPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
5.181.87.0/24
45.9.29.0/24
45.13.191.0/24
45.81.112.0/22
45.88.136.0/23
45.88.139.0/24
45.94.168.0/22
45.132.181.0/24
45.138.180.0/22
45.144.212.0/22
45.151.0.0-45.151.2.255
77.83.37.0-77.83.39.255
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
6e:38:1a:fe:17:d0:e2:54:ac:e2:c2:1a:37:34:75:c1:98:83:
ee:b3:42:0d:a0:ce:de:2e:2d:9a:49:2c:59:a8:d0:3a:2d:c8:
77:6b:50:bc:a1:ae:a8:d3:09:d7:ec:c8:c5:0f:ac:cb:17:b4:
e7:e5:fe:c6:92:23:ae:5e:9a:92:ef:d4:e8:1b:77:d3:21:3a:
56:a5:73:59:90:9c:28:e0:97:d3:7d:5c:af:35:0e:05:06:57:
8e:a1:65:70:17:60:5c:1a:90:4d:94:49:d5:e8:2c:3d:c4:40:
91:72:5e:2b:60:51:71:38:f8:03:1b:85:70:4a:f2:36:4c:44:
e8:d1:33:78:bf:80:6d:ef:70:05:b3:aa:85:24:de:72:ad:85:
3d:4e:88:fc:9e:d3:26:1c:7b:e8:76:f7:9a:62:63:00:4f:99:
09:30:46:44:e9:7e:86:6c:eb:c9:87:e9:f0:ac:09:d0:a2:d7:
bc:65:d8:49:77:2b:2a:55:7b:02:01:2f:d2:08:0a:9c:79:78:
f1:f9:e3:90:45:e8:d7:ad:86:bb:ca:25:4a:eb:21:41:6e:9e:
e7:07:82:a6:0f:f8:7e:be:d1:b5:67:60:03:22:f1:86:2e:48:
8a:75:7e:49:40:be:07:1e:81:5b:a1:4b:71:93:cd:a5:a1:14:
58:24:ef:7d
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgISAYP7mBceFJLa+TBS66oD5Aj+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjIxMDIxMTcyOTUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTFmNGJmMmY1ZDRjYmRlZTRiNzhjOTRkMDk1Y2Q0ZWQxY2FjOGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN6lNAuz14ikstzK9GOMvHR1vqIG
YfCuWuEkauGy24HTA29I+GU0Jgj7AWFPz46mN1vIYtA11tRxys737Oa2gfn/+uh8
/aF8QEmCp8xYuML6r8ct+ldJDZfuNWvT+RKsVVHfMOZKEKcNsOTaW5IsNXOTtiPB
LMaoSP+8nuP/ch8/Zd+H6pdeo/WLnKs8sseAqHCgG2lujafHFUtkvYnhNH+ERmHB
QwQiqrk6EYM9cxBek+OAwPWXWcgE7oNaAAZDyrDmqCAaC8HCBQTUiP5icWnaL40F
W2UE8/3qWy3i+9/IWzY6rs2dTU8FzyXitSzeKpzbJdSs+/KyUJ3sTeAkowIDAQAB
o4IC0jCCAs4wHQYDVR0OBBYEFAEfS/L11Mve5LeMlNCVzU7RysjzMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvQVI5TDh2WFV5OTdrdDR5VTBKWE5UdEhLeVBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHnBggrBgEFBQcBBwEB/wSB1zCB1DCBpgQCAAEwgZ8DBAIC
OGwDBAAFtVcDBAAtCR0DBAAtDb8DBAItUXADBAEtWIgDBAAtWIsDBAItXqgDBAAt
hLUDBAItirQDBAItkNQwCwMDAC2XAwQALZcCMAwDBABNUyUDBANNUyADBAJV0XgD
BAG5K/gDBAC5K/sDBAG5yD4DBALBHvADBADBOSkDBADBOSsDBALC8mADBADDPhgD
BALDsVwDBALD07wwKQQCAAIwIwMFACoBcSADBQMqB5IAAwUDKgylgAMFAyoQ38AD
BQMqEQWAMA0GCSqGSIb3DQEBCwUAA4IBAQBuOBr+F9DiVKziwho3NHXBmIPus0IN
oM7eLi2aSSxZqNA6Lch3a1C8oa6o0wnX7MjFD6zLF7Tn5f7GkiOuXpqS79ToG3fT
ITpWpXNZkJwo4JfTfVyvNQ4FBleOoWVwF2BcGpBNlEnV6Cw9xECRcl4rYFFxOPgD
G4VwSvI2TETo0TN4v4Bt73AFs6qFJN5yrYU9Toj8ntMmHHvodveaYmMAT5kJMEZE
6X6GbOvJh+nwrAnQote8ZdhJdysqVXsCAS/SCAqceXjx+eOQRejXrYa7yiVK6yFB
bp7nB4KmD/h+vtG1Z2ADIvGGLkiKdX5JQL4HHoFboUtxk82loRRYJO99
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org