Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/57yuQeAvmcQsEZGeRnYv2cXBrcA.roa
File: 57yuQeAvmcQsEZGeRnYv2cXBrcA.roa (raw, json)
Hash identifier: hHNdZlxgQoMjEG31uf4t2WzmP3KEBzenMUIIk+hWYyg=
Subject key identifier: E7:BC:AE:41:E0:2F:99:C4:2C:11:91:9E:46:76:2F:D9:C5:C1:AD:C0
Certificate issuer: /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial: 0677462A
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/57yuQeAvmcQsEZGeRnYv2cXBrcA.roa
Signing time: Fri 18 Feb 2022 21:40:29 +0000
ROA not before: Fri 18 Feb 2022 21:40:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29802
IP address blocks: 149.255.39.0/24 maxlen: 24
45.158.36.0/23 maxlen: 32
37.72.168.0/21 maxlen: 32
37.72.172.0/23 maxlen: 23
37.72.171.0/24 maxlen: 24
37.72.170.0/23 maxlen: 23
37.72.170.0/24 maxlen: 24
37.72.174.0/23 maxlen: 23
194.126.172.0/24 maxlen: 24
194.126.172.0/22 maxlen: 24
194.126.175.0/24 maxlen: 24
194.126.173.0/24 maxlen: 24
94.100.16.0/20 maxlen: 32
94.100.16.0/24 maxlen: 24
94.100.17.0/24 maxlen: 24
94.100.23.0/24 maxlen: 24
94.100.24.0/24 maxlen: 24
94.100.21.0/24 maxlen: 24
94.100.22.0/24 maxlen: 24
94.100.19.0/24 maxlen: 24
94.100.20.0/24 maxlen: 24
94.100.18.0/24 maxlen: 24
94.100.30.0/24 maxlen: 24
94.100.31.0/24 maxlen: 24
94.100.28.0/24 maxlen: 24
94.100.29.0/24 maxlen: 24
94.100.26.0/24 maxlen: 24
94.100.27.0/24 maxlen: 24
94.100.25.0/24 maxlen: 24
217.79.240.0/24 maxlen: 24
217.79.242.0/23 maxlen: 24
217.79.240.0/20 maxlen: 24
149.255.37.0/24 maxlen: 24
149.255.38.0/24 maxlen: 24
149.255.32.0/21 maxlen: 32
149.255.35.0/24 maxlen: 24
149.255.36.0/24 maxlen: 32
89.233.104.0/24 maxlen: 24
89.233.104.0/21 maxlen: 24
89.233.105.0/24 maxlen: 24
89.233.106.0/24 maxlen: 24
89.233.107.0/24 maxlen: 24
46.21.144.0/24 maxlen: 24
46.21.145.0/24 maxlen: 24
46.21.144.0/20 maxlen: 32
46.21.151.0/24 maxlen: 24
46.21.152.0/24 maxlen: 24
46.21.150.0/24 maxlen: 24
46.21.148.0/24 maxlen: 24
46.21.146.0/24 maxlen: 24
46.21.147.0/24 maxlen: 24
46.21.158.0/23 maxlen: 23
46.21.156.0/24 maxlen: 24
46.21.157.0/24 maxlen: 24
46.21.153.0/24 maxlen: 24
195.242.153.0/24 maxlen: 24
2a02:748:f000::/36 maxlen: 36
2a02:748:c000::/35 maxlen: 35
2a02:748::/35 maxlen: 35
2a02:748:e000::/35 maxlen: 35
2a02:748::/32 maxlen: 48
2a0f:5180::/32 maxlen: 32
2a02:748:6000::/48 maxlen: 48
2a0f:5180::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108480042 (0x677462a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Validity
Not Before: Feb 18 21:40:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7bcae41e02f99c42c11919e46762fd9c5c1adc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a3:5e:30:f8:3e:86:c3:0c:36:df:71:71:52:
de:e7:93:16:21:d7:ba:85:ac:e3:c4:62:b8:09:db:
55:cb:d2:b9:c3:70:06:57:6a:70:35:56:62:37:6a:
dd:42:cc:5b:fc:fb:0c:a0:03:c6:8d:69:9b:f2:4e:
a7:83:f3:4f:6f:b5:26:da:fd:2c:ab:c9:01:95:10:
9f:ab:3f:29:ce:f3:95:62:6a:1b:31:a8:e5:43:78:
cb:e9:b5:8f:18:5e:ad:09:84:d1:f7:53:f4:30:95:
cc:9b:1b:de:26:ef:f9:9b:06:31:97:e0:6b:99:80:
ff:c0:c8:48:45:96:27:aa:ef:35:3b:4a:7c:d0:9a:
54:a2:fb:ae:71:8e:f3:cb:1f:e4:30:48:8f:bd:3a:
cc:65:5a:f2:84:78:a6:74:9a:b2:8a:2a:55:57:30:
2e:93:04:d8:d4:ec:bc:d0:94:75:3c:05:73:a6:67:
67:6d:58:a6:f0:02:b7:83:8b:e2:30:42:4d:37:f9:
14:56:2b:2d:56:dc:bd:70:60:10:91:c8:a4:c1:b1:
ff:cf:99:ed:49:e4:9e:cb:49:7b:b6:00:81:4b:3a:
aa:19:82:f7:5e:50:40:a0:56:00:08:fa:77:ea:0e:
2e:fa:fb:8a:5e:f9:94:17:aa:c1:99:3d:87:27:07:
1d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BC:AE:41:E0:2F:99:C4:2C:11:91:9E:46:76:2F:D9:C5:C1:AD:C0
X509v3 Authority Key Identifier:
keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/57yuQeAvmcQsEZGeRnYv2cXBrcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.168.0/21
45.158.36.0/23
46.21.144.0/20
89.233.104.0/21
94.100.16.0/20
149.255.32.0/21
194.126.172.0/22
195.242.153.0/24
217.79.240.0/20
IPv6:
2a02:748::/32
2a0f:5180::/29
Signature Algorithm: sha256WithRSAEncryption
b1:7b:67:ca:ee:85:01:24:65:4a:df:84:c6:d3:3d:9f:9e:07:
a4:fd:92:6d:c4:ed:9b:08:c6:f2:50:51:a5:1b:cc:6d:b0:5c:
8c:e1:16:b6:37:e1:26:5d:75:d5:c1:10:e3:44:4f:09:e1:20:
ad:64:2d:23:47:0b:ca:66:77:f6:1b:48:ea:21:6e:fd:24:e0:
3f:69:7d:38:45:07:9f:5e:df:ce:84:ab:2e:2e:30:a0:1a:23:
ba:49:f9:e4:04:2c:c0:65:cb:59:c6:9f:41:b9:42:d9:2f:2d:
d2:73:0d:c5:d6:a9:dd:d9:5b:d7:42:9e:2e:ef:8e:a3:11:85:
d7:cf:5d:34:3d:1b:1d:14:ac:16:4f:1f:9e:b8:6b:2a:d0:6c:
87:2f:b4:21:f1:34:b2:0f:54:3d:f5:78:85:de:59:54:e1:75:
f0:d2:38:87:37:32:8f:8b:d3:4f:f0:dc:f5:40:41:e3:d5:7e:
2f:29:e8:31:16:59:f2:98:f0:8c:94:3c:7e:32:6e:55:45:09:
14:47:9c:56:58:16:a0:03:25:b3:27:0e:a3:02:c0:28:95:ae:
62:6e:ed:05:2f:38:0a:57:b1:05:6e:0b:94:c7:b5:c3:2b:6f:
3f:1f:d4:e8:7c:3a:d1:ba:fc:fc:09:b5:2d:b6:cd:43:06:bd:
3e:96:da:06
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIEBndGKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZDIzZjRjYjRiYWI1YzEwODAxYTc3MDY1OGRmODkxY2ZiOGM2OGM2MB4XDTIyMDIx
ODIxNDAyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTdiY2FlNDFlMDJm
OTljNDJjMTE5MTllNDY3NjJmZDljNWMxYWRjMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOajXjD4PobDDDbfcXFS3ueTFiHXuoWs48RiuAnbVcvSucNw
BldqcDVWYjdq3ULMW/z7DKADxo1pm/JOp4PzT2+1Jtr9LKvJAZUQn6s/Kc7zlWJq
GzGo5UN4y+m1jxherQmE0fdT9DCVzJsb3ibv+ZsGMZfga5mA/8DISEWWJ6rvNTtK
fNCaVKL7rnGO88sf5DBIj706zGVa8oR4pnSasooqVVcwLpME2NTsvNCUdTwFc6Zn
Z21YpvACt4OL4jBCTTf5FFYrLVbcvXBgEJHIpMGx/8+Z7UnknstJe7YAgUs6qhmC
915QQKBWAAj6d+oOLvr7il75lBeqwZk9hycHHY8CAwEAAaOCAk8wggJLMB0GA1Ud
DgQWBBTnvK5B4C+ZxCwRkZ5Gdi/ZxcGtwDAfBgNVHSMEGDAWgBSdI/TLS6tcEIAa
dwZY34kc+4xoxjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25TUDB5MHVyWEJDQUduY0dXTi1KSFB1TWFNWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWEvNGVjYTRkLTNhMmUtNGE4NC1hNzg5LTAxNTc3YTkyN2ZhOS8x
LzU3eXVRZUF2bWNRc0VaR2VSbll2MmNYQnJjQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEv
NGVjYTRkLTNhMmUtNGE4NC1hNzg5LTAxNTc3YTkyN2ZhOS8xL25TUDB5MHVyWEJD
QUduY0dXTi1KSFB1TWFNWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBl
BggrBgEFBQcBBwEB/wRWMFQwPAQCAAEwNgMEAyVIqAMEAS2eJAMEBC4VkAMEA1np
aAMEBF5kEAMEA5X/IAMEAsJ+rAMEAMPymQMEBNlP8DAUBAIAAjAOAwUAKgIHSAMF
AyoPUYAwDQYJKoZIhvcNAQELBQADggEBALF7Z8ruhQEkZUrfhMbTPZ+eB6T9km3E
7ZsIxvJQUaUbzG2wXIzhFrY34SZdddXBEONETwnhIK1kLSNHC8pmd/YbSOohbv0k
4D9pfThFB59e386Eqy4uMKAaI7pJ+eQELMBly1nGn0G5QtkvLdJzDcXWqd3ZW9dC
ni7vjqMRhdfPXTQ9Gx0UrBZPH564ayrQbIcvtCHxNLIPVD31eIXeWVThdfDSOIc3
Mo+L00/w3PVAQePVfi8p6DEWWfKY8IyUPH4yblVFCRRHnFZYFqADJbMnDqMCwCiV
rmJu7QUvOApXsQVuC5THtcMrbz8f1Oh8OtG6/PwJtS22zUMGvT6W2gY=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:26 2025 by rpki-client