Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/cMCIBW6MKNaHs264WVr-H0Mu7js.roa
File: cMCIBW6MKNaHs264WVr-H0Mu7js.roa (raw, json)
Hash identifier: yrWNzqznQNkxYBhoAAMBHzVQIbVxwC4JpqQsywjoSWI=
Subject key identifier: 70:C0:88:05:6E:8C:28:D6:87:B3:6E:B8:59:5A:FE:1F:43:2E:EE:3B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0183C1D2A3DDF2A5CE9208C3F98EDA72447C
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/cMCIBW6MKNaHs264WVr-H0Mu7js.roa
Signing time: Mon 10 Oct 2022 12:15:50 +0000
ROA not before: Mon 10 Oct 2022 12:15:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 45.151.2.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.13.191.0/24 maxlen: 24
45.144.215.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
194.15.52.0/23 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
85.209.121.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.38.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c1:d2:a3:dd:f2:a5:ce:92:08:c3:f9:8e:da:72:44:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 10 12:15:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70c088056e8c28d687b36eb8595afe1f432eee3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:47:09:f3:04:e8:44:9a:02:98:c3:3c:f4:70:
66:ea:ca:24:f9:d1:1e:c4:06:ae:91:2e:24:c4:cd:
91:86:67:71:e5:bb:ce:52:11:c4:3c:10:02:92:51:
c9:f7:28:00:0b:c3:11:2e:80:c5:c5:ce:53:42:60:
20:d9:8f:2d:db:63:9c:2a:2e:2a:71:3a:db:df:e6:
e4:f1:a1:35:ca:e4:d9:dc:58:55:dd:46:74:77:47:
ba:31:ab:0f:26:0b:cf:9e:f4:2a:cf:28:c7:70:75:
d0:6a:ae:be:e8:83:fa:e2:e8:e3:a0:3e:b2:b7:1f:
ad:ff:e8:9d:7c:44:d4:1c:f5:06:ff:3e:1b:2d:c0:
e4:2c:bf:76:d8:18:b5:69:be:d0:4a:72:3e:ab:41:
4d:03:b8:a1:0e:9c:3f:74:01:1b:3e:51:75:37:59:
61:e5:2d:44:47:51:d9:af:04:6d:7d:f1:64:f8:80:
e7:19:da:e1:2e:45:85:2b:68:aa:8a:d5:51:be:c0:
d7:1a:9a:bd:b7:ef:9c:02:f1:ab:ab:92:32:2a:88:
c1:20:74:1a:a3:8a:5b:a5:9f:b8:af:7b:ab:c7:43:
24:e5:3c:b7:65:9b:18:eb:d3:dc:0a:c9:7a:72:bf:
ca:35:46:fb:6f:6f:06:30:f7:66:e5:81:fd:7e:f4:
44:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C0:88:05:6E:8C:28:D6:87:B3:6E:B8:59:5A:FE:1F:43:2E:EE:3B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/cMCIBW6MKNaHs264WVr-H0Mu7js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.13.191.0/24
45.81.112.0/22
45.88.136.0/23
45.88.139.0/24
45.132.181.0/24
45.144.212.0/22
45.151.2.0/24
77.83.37.0-77.83.39.255
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.41.0/24
193.57.43.0/24
194.15.52.0/23
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.190.0/24
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
17:3c:44:fb:d2:06:9e:a3:d0:43:fa:f4:8a:ab:65:7d:13:85:
d4:c2:da:b7:76:17:27:de:90:ed:08:46:01:d5:76:62:ba:50:
59:05:e1:cb:5d:15:d5:ed:41:4e:a0:90:52:e6:1e:b0:ac:cc:
df:0d:c4:36:74:9f:cb:1d:b5:f0:1b:2d:0d:06:b3:f6:49:d8:
28:a2:d6:6b:2c:6a:25:90:bb:24:69:7f:7c:cd:f7:8a:33:d0:
6f:65:2d:55:c8:87:2c:00:96:21:30:6e:6f:64:86:0f:fd:a1:
ad:10:ef:f7:76:a0:3b:10:d4:b1:19:65:6f:77:05:61:eb:46:
5c:7a:a4:1b:26:e5:47:78:c4:5f:4b:99:28:80:58:30:50:e4:
7a:21:42:05:9e:ab:7c:71:d3:76:1b:ce:9b:02:a2:39:e6:2c:
33:c1:0a:18:58:a4:53:57:df:0b:89:ef:e5:6e:20:f9:2a:99:
7f:87:08:b3:8c:c3:3c:48:6c:bc:53:9f:fa:fd:b4:43:7e:94:
33:26:9c:a2:6a:a7:78:0b:7e:70:a4:f6:be:43:22:88:7e:6b:
6e:df:ab:bd:60:dc:f2:62:32:20:88:8e:a8:ab:5c:9c:58:c2:
f8:d4:4a:5c:33:2c:a2:8e:ff:a4:f4:a0:f8:fe:7c:de:56:65:
2b:17:b8:71
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgISAYPB0qPd8qXOkgjD+Y7ackR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjIxMDEwMTIxNTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGMwODgwNTZlOGMyOGQ2ODdiMzZlYjg1OTVhZmUxZjQzMmVlZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0cJ8wToRJoCmMM89HBm6sok+dEe
xAaukS4kxM2Rhmdx5bvOUhHEPBACklHJ9ygAC8MRLoDFxc5TQmAg2Y8t22OcKi4q
cTrb3+bk8aE1yuTZ3FhV3UZ0d0e6MasPJgvPnvQqzyjHcHXQaq6+6IP64ujjoD6y
tx+t/+idfETUHPUG/z4bLcDkLL922Bi1ab7QSnI+q0FNA7ihDpw/dAEbPlF1N1lh
5S1ER1HZrwRtffFk+IDnGdrhLkWFK2iqitVRvsDXGpq9t++cAvGrq5IyKojBIHQa
o4pbpZ+4r3urx0Mk5Ty3ZZsY69PcCsl6cr/KNUb7b28GMPdm5YH9fvRE1QIDAQAB
o4ICvzCCArswHQYDVR0OBBYEFHDAiAVujCjWh7NuuFla/h9DLu47MB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvY01DSUJXNk1LTmFIczI2NFdWci1IME11N2pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHUBggrBgEFBQcBBwEB/wSBxDCBwTCBkwQCAAEwgYwDBAAF
tVcDBAAtCR0DBAAtDb8DBAItUXADBAEtWIgDBAAtWIsDBAAthLUDBAItkNQDBAAt
lwIwDAMEAE1TJQMEA01TIAMEAlXReAMEAbkr+AMEALkr+wMEAbnIPgMEAsEe8AME
AME5KQMEAME5KwMEAcIPNAMEAsLyYAMEAMM+GAMEAsOxXAMEAMPTvjApBAIAAjAj
AwUAKgFxIAMFAyoHkgADBQMqDKWAAwUDKhDfwAMFAyoRBYAwDQYJKoZIhvcNAQEL
BQADggEBABc8RPvSBp6j0EP69IqrZX0ThdTC2rd2FyfekO0IRgHVdmK6UFkF4ctd
FdXtQU6gkFLmHrCszN8NxDZ0n8sdtfAbLQ0Gs/ZJ2Cii1mssaiWQuyRpf3zN94oz
0G9lLVXIhywAliEwbm9khg/9oa0Q7/d2oDsQ1LEZZW93BWHrRlx6pBsm5Ud4xF9L
mSiAWDBQ5HohQgWeq3xx03YbzpsCojnmLDPBChhYpFNX3wuJ7+VuIPkqmX+HCLOM
wzxIbLxTn/r9tEN+lDMmnKJqp3gLfnCk9r5DIoh+a27fq71g3PJiMiCIjqirXJxY
wvjUSlwzLKKO/6T0oPj+fN5WZSsXuHE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org