Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/cHTJBO5mruresg99vu3FPuvYjww.roa
File: cHTJBO5mruresg99vu3FPuvYjww.roa (raw, json)
Hash identifier: ibBr0YmUuCYPtGY29ze0d+lATPDspQui3zus76S9j80=
Subject key identifier: 70:74:C9:04:EE:66:AE:EA:DE:B2:0F:7D:BE:ED:C5:3E:EB:D8:8F:0C
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 08912C41
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/cHTJBO5mruresg99vu3FPuvYjww.roa
Signing time: Tue 17 May 2022 05:47:30 +0000
ROA not before: Tue 17 May 2022 05:47:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 45.151.2.0/24 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.13.188.0/24 maxlen: 24
45.13.191.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.144.215.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
194.15.52.0/23 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
85.209.121.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143731777 (0x8912c41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 17 05:47:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7074c904ee66aeeadeb20f7dbeedc53eebd88f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:22:5c:5a:0f:63:30:09:93:a4:ec:3f:48:
b2:49:d5:d6:20:9e:49:e5:9c:2a:51:a7:02:69:64:
5e:7b:9e:5a:99:f5:bf:8d:eb:f2:69:0d:e0:05:f0:
08:1c:63:c1:07:ea:a5:3e:7b:46:94:b8:1e:e8:c1:
43:a5:43:61:ee:7b:70:09:95:37:97:cb:cc:96:80:
b7:e1:78:72:5c:c4:4a:ab:8e:82:e4:fe:c6:1f:0c:
cf:ee:59:53:18:fc:ec:26:b9:d7:dc:9d:d5:b5:c0:
0d:03:cb:c1:5e:ea:c5:13:b8:ca:58:a6:06:f1:77:
ae:9f:c1:0c:bc:76:bc:f0:1e:16:3f:32:58:e0:c3:
7e:6a:86:20:65:ed:b6:e3:a5:ae:3b:a7:63:8c:ac:
04:72:ec:f1:58:28:db:a9:52:6d:c4:9a:67:9d:8c:
b0:59:5d:2b:c1:2d:1e:65:8c:fc:4e:c7:bf:b5:a3:
1a:68:f0:8b:b1:63:11:e7:c7:e1:e9:94:d6:03:79:
ce:49:a9:bd:c6:be:b0:ff:f1:1a:2f:03:2e:78:89:
a3:82:77:82:09:f3:cc:ba:f4:f8:dc:be:68:4c:3d:
e3:13:0d:20:c8:30:6f:95:cd:6c:5b:85:51:48:9f:
76:d5:c8:2a:49:0b:fd:63:b3:71:97:17:8b:fe:3f:
98:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:74:C9:04:EE:66:AE:EA:DE:B2:0F:7D:BE:ED:C5:3E:EB:D8:8F:0C
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/cHTJBO5mruresg99vu3FPuvYjww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.29.0/24
45.13.188.0/23
45.13.191.0/24
45.88.136.0/22
45.132.181.0/24
45.144.212.0/22
45.151.2.0/24
77.83.37.0-77.83.39.255
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.41.0/24
193.57.43.0/24
194.15.52.0/23
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.190.0/24
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
a1:b7:2d:d2:30:e3:ab:ad:bd:f3:51:20:0e:ea:66:27:2a:cc:
35:15:18:6e:1a:d5:54:14:17:80:c5:fa:ab:58:4a:35:d9:16:
26:2a:c5:bb:05:9a:95:f9:f2:d9:6b:00:ab:8f:5b:bd:42:63:
2f:cc:b7:18:d5:1e:00:74:a4:2e:ca:42:e2:a2:68:d6:99:bb:
28:85:0d:6f:29:58:88:82:3f:c3:03:20:b9:84:63:b5:71:2c:
9a:94:c1:34:ab:c6:76:57:04:1e:54:35:0c:ce:90:c4:10:a5:
96:e3:cc:67:7a:21:42:f0:97:33:b3:7f:87:ef:a7:b5:7d:a4:
de:76:12:22:fe:56:f5:3d:3f:b5:e4:aa:46:32:77:43:21:58:
e4:af:bc:4f:6d:98:c2:0f:11:78:00:2e:ea:87:18:5e:59:f7:
17:0d:74:0d:89:38:1f:c0:ce:7e:55:a3:24:fb:67:d5:2f:1b:
74:25:19:94:27:20:1f:39:a1:19:c1:10:26:83:f8:5e:6e:74:
d8:40:22:3c:59:40:06:38:d3:eb:1a:77:71:57:78:2f:74:ad:
06:66:cb:0a:a6:e1:a6:fb:01:c4:5c:66:53:8b:32:f2:25:3c:
be:7f:e5:a3:5d:19:c5:9c:3c:9c:1d:97:5e:8f:f6:13:08:d8:
b3:ff:63:58
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgIECJEsQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZDJhNDc4YmIwYjA4ZTY2MWIwYjJmOWZiZTg5MzViYzljMmEyOGExMB4XDTIyMDUx
NzA1NDczMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzA3NGM5MDRlZTY2
YWVlYWRlYjIwZjdkYmVlZGM1M2VlYmQ4OGYwYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKyCIlxaD2MwCZOk7D9IsknV1iCeSeWcKlGnAmlkXnueWpn1
v43r8mkN4AXwCBxjwQfqpT57RpS4HujBQ6VDYe57cAmVN5fLzJaAt+F4clzESquO
guT+xh8Mz+5ZUxj87Ca519yd1bXADQPLwV7qxRO4ylimBvF3rp/BDLx2vPAeFj8y
WODDfmqGIGXttuOlrjunY4ysBHLs8Vgo26lSbcSaZ52MsFldK8EtHmWM/E7Hv7Wj
Gmjwi7FjEefH4emU1gN5zkmpvca+sP/xGi8DLniJo4J3ggnzzLr0+Ny+aEw94xMN
IMgwb5XNbFuFUUifdtXIKkkL/WOzcZcXi/4/mBUCAwEAAaOCArMwggKvMB0GA1Ud
DgQWBBRwdMkE7mau6t6yD32+7cU+69iPDDAfBgNVHSMEGDAWgBSdKkeLsLCOZhsL
L5++iTW8nCoooTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25TcEhpN0N3am1ZYkN5LWZ2b2sxdkp3cUtLRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTYvNjYzZGY1LTU4MGMtNGYyYy1hNjZjLWVlZjM1MTFmNmM2MC8x
L2NIVEpCTzVtcnVyZXNnOTl2dTNGUHV2WWp3dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYv
NjYzZGY1LTU4MGMtNGYyYy1hNjZjLWVlZjM1MTFmNmM2MC8xL25TcEhpN0N3am1Z
YkN5LWZ2b2sxdkp3cUtLRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
yAYIKwYBBQUHAQcBAf8EgbgwgbUwgYcEAgABMIGAAwQALQkdAwQBLQ28AwQALQ2/
AwQCLViIAwQALYS1AwQCLZDUAwQALZcCMAwDBABNUyUDBANNUyADBAJV0XgDBAG5
K/gDBAC5K/sDBAG5yD4DBALBHvADBADBOSkDBADBOSsDBAHCDzQDBALC8mADBADD
PhgDBALDsVwDBADD074wKQQCAAIwIwMFACoBcSADBQMqB5IAAwUDKgylgAMFAyoQ
38ADBQMqEQWAMA0GCSqGSIb3DQEBCwUAA4IBAQChty3SMOOrrb3zUSAO6mYnKsw1
FRhuGtVUFBeAxfqrWEo12RYmKsW7BZqV+fLZawCrj1u9QmMvzLcY1R4AdKQuykLi
omjWmbsohQ1vKViIgj/DAyC5hGO1cSyalME0q8Z2VwQeVDUMzpDEEKWW48xneiFC
8Jczs3+H76e1faTedhIi/lb1PT+15KpGMndDIVjkr7xPbZjCDxF4AC7qhxheWfcX
DXQNiTgfwM5+VaMk+2fVLxt0JRmUJyAfOaEZwRAmg/hebnTYQCI8WUAGONPrGndx
V3gvdK0GZssKpuGm+wHEXGZTizLyJTy+f+WjXRnFnDycHZdej/YTCNiz/2NY
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org