Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/G0F80wQ3zsB1VAmEdA_cCusZWOQ.roa
File: G0F80wQ3zsB1VAmEdA_cCusZWOQ.roa (raw, json)
Hash identifier: FdkAvXMyGWeDfgKjj4nADmjb0+B1bHU/NCC+4HQq9IQ=
Subject key identifier: 1B:41:7C:D3:04:37:CE:C0:75:54:09:84:74:0F:DC:0A:EB:19:58:E4
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 1B87C1B8
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/G0F80wQ3zsB1VAmEdA_cCusZWOQ.roa
Signing time: Wed 19 Jan 2022 11:40:53 +0000
ROA not before: Wed 19 Jan 2022 11:40:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30781
IP address blocks: 185.61.184.0/22 maxlen: 24
185.61.184.0/21 maxlen: 24
185.53.80.0/22 maxlen: 24
185.61.188.0/22 maxlen: 24
31.172.232.0/21 maxlen: 24
31.172.238.0/24 maxlen: 24
185.78.156.0/22 maxlen: 24
185.92.36.0/22 maxlen: 24
212.114.16.0/20 maxlen: 24
31.7.248.0/21 maxlen: 24
46.22.192.0/20 maxlen: 24
193.189.124.0/23 maxlen: 24
45.80.8.0/22 maxlen: 24
45.80.20.0/22 maxlen: 24
45.80.24.0/22 maxlen: 24
45.80.32.0/22 maxlen: 24
46.255.200.0/21 maxlen: 24
95.178.88.0/22 maxlen: 24
185.114.100.0/22 maxlen: 24
77.72.88.0/21 maxlen: 24
94.100.160.0/20 maxlen: 24
37.110.192.0/21 maxlen: 24
37.61.240.0/21 maxlen: 24
193.151.84.0/24 maxlen: 24
85.31.192.0/19 maxlen: 24
193.151.87.0/24 maxlen: 24
37.26.184.0/21 maxlen: 24
5.226.0.0/21 maxlen: 24
194.116.142.0/23 maxlen: 24
185.209.52.0/22 maxlen: 24
185.15.140.0/22 maxlen: 24
185.62.184.0/22 maxlen: 24
195.234.35.0/24 maxlen: 24
95.143.64.0/20 maxlen: 24
176.241.120.0/21 maxlen: 24
77.246.80.0/20 maxlen: 24
130.180.208.0/20 maxlen: 24
78.153.224.0/19 maxlen: 24
2a0b:41c0::/29 maxlen: 48
2a05:6e00::/29 maxlen: 48
2a03:bdc0::/32 maxlen: 48
2a00:68c0::/32 maxlen: 48
2a04:cc00::/29 maxlen: 48
2a02:398::/32 maxlen: 48
2a01:240::/32 maxlen: 48
2a01:290::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 461881784 (0x1b87c1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 19 11:40:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b417cd30437cec075540984740fdc0aeb1958e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:c1:4a:fb:3b:59:6b:ca:2c:42:0b:5c:27:
b9:d5:66:cd:cd:d5:59:2e:36:da:f9:b1:99:ff:e4:
e5:81:87:ea:6b:ff:19:06:97:2d:5c:77:75:2d:30:
55:00:c8:52:3b:85:19:40:c8:2a:29:d7:10:6c:4a:
fc:d2:08:1f:02:38:3d:9f:78:ad:5a:23:c8:75:08:
b9:24:6b:54:7a:12:0d:63:e7:6f:de:a8:82:b5:17:
54:c5:31:1e:89:25:cf:4f:de:35:b6:7a:cf:ab:df:
e2:98:c4:e8:76:0d:1d:99:50:3a:2c:d5:8b:06:4c:
ea:4d:4b:2e:66:bf:35:ce:75:c5:18:56:cf:fa:6b:
49:cc:c2:24:1a:cd:f8:1b:8a:5b:9b:d4:8e:c9:d1:
51:b7:db:40:9b:f8:d2:65:b0:38:d0:21:f9:39:3f:
57:c1:90:ea:fd:18:4d:e2:be:44:a6:32:2b:4b:d7:
50:f7:22:70:6c:35:dd:0c:1e:df:21:2e:f2:0f:5b:
9a:65:c3:2e:40:0f:27:67:9d:9e:55:13:d6:6e:be:
91:f5:a0:b5:80:92:cf:70:cb:7b:7a:1e:31:83:98:
03:d9:3d:3b:46:ea:8b:49:a5:ee:ed:b2:a3:f4:cc:
11:86:2a:0e:cb:a7:b6:d2:48:65:27:13:46:3a:cc:
fb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:41:7C:D3:04:37:CE:C0:75:54:09:84:74:0F:DC:0A:EB:19:58:E4
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/G0F80wQ3zsB1VAmEdA_cCusZWOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.0.0/21
31.7.248.0/21
31.172.232.0/21
37.26.184.0/21
37.61.240.0/21
37.110.192.0/21
45.80.8.0/22
45.80.20.0-45.80.27.255
45.80.32.0/22
46.22.192.0/20
46.255.200.0/21
77.72.88.0/21
77.246.80.0/20
78.153.224.0/19
85.31.192.0/19
94.100.160.0/20
95.143.64.0/20
95.178.88.0/22
130.180.208.0/20
176.241.120.0/21
185.15.140.0/22
185.53.80.0/22
185.61.184.0/21
185.62.184.0/22
185.78.156.0/22
185.92.36.0/22
185.114.100.0/22
185.209.52.0/22
193.151.84.0/24
193.151.87.0/24
193.189.124.0/23
194.116.142.0/23
195.234.35.0/24
212.114.16.0/20
IPv6:
2a00:68c0::/32
2a01:240::/32
2a01:290::/32
2a02:398::/32
2a03:bdc0::/32
2a04:cc00::/29
2a05:6e00::/29
2a0b:41c0::/29
Signature Algorithm: sha256WithRSAEncryption
1d:2b:b3:43:fc:bf:e9:65:b2:87:6f:b0:14:70:d1:7d:b5:20:
02:c2:98:f5:c4:a9:2a:61:92:81:be:26:58:bd:84:22:5e:d5:
d1:e2:3c:8d:fc:d7:07:a4:48:51:16:be:be:4b:9c:5c:67:28:
e1:73:66:43:53:c2:40:c1:dd:6b:36:7d:5a:fb:ff:53:ca:3e:
b4:db:af:7e:3d:11:e5:b9:89:b4:51:52:96:fb:63:c9:13:27:
bd:65:10:45:8c:fb:57:65:7c:4a:bf:fa:3b:8a:1a:88:6a:65:
58:4c:a5:f9:5f:a6:f2:d9:94:90:0f:db:69:05:3b:bb:fe:59:
13:92:1d:18:69:24:40:b7:59:34:a6:93:78:44:84:fc:76:8f:
05:08:53:6b:53:8e:aa:91:2d:0d:87:de:ae:26:87:41:65:95:
11:85:4d:05:4d:3c:e3:ce:29:4f:44:e4:5c:b8:8f:f4:c1:09:
96:24:bd:40:f6:2b:b2:b1:ab:ce:e9:47:64:f1:e6:5e:b5:7d:
79:92:69:d9:94:78:df:a7:22:a9:ac:bf:96:a6:a2:68:9a:63:
05:96:bf:98:e1:37:c3:3c:79:c3:c5:01:e9:58:e0:df:f4:26:
f9:69:cf:b5:89:06:05:fe:6d:6f:bb:04:29:7a:0b:15:b5:d6:
43:90:4b:e6
-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgIEG4fBuDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
OTA5ZWUzZDYxODk3NGRhMGNiZDgwNWEyZGE4MDQxMGE0OTg5ODgxMB4XDTIyMDEx
OTExNDA1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWI0MTdjZDMwNDM3
Y2VjMDc1NTQwOTg0NzQwZmRjMGFlYjE5NThlNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALa+wUr7O1lryixCC1wnudVmzc3VWS422vmxmf/k5YGH6mv/
GQaXLVx3dS0wVQDIUjuFGUDIKinXEGxK/NIIHwI4PZ94rVojyHUIuSRrVHoSDWPn
b96ogrUXVMUxHoklz0/eNbZ6z6vf4pjE6HYNHZlQOizViwZM6k1LLma/Nc51xRhW
z/prSczCJBrN+BuKW5vUjsnRUbfbQJv40mWwONAh+Tk/V8GQ6v0YTeK+RKYyK0vX
UPcicGw13Qwe3yEu8g9bmmXDLkAPJ2ednlUT1m6+kfWgtYCSz3DLe3oeMYOYA9k9
O0bqi0ml7u2yo/TMEYYqDsunttJIZScTRjrM+20CAwEAAaOCAx8wggMbMB0GA1Ud
DgQWBBQbQXzTBDfOwHVUCYR0D9wK6xlY5DAfBgNVHSMEGDAWgBTpCe49YYl02gy9
gFotqAQQpJiYgTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZRbnVQV0dKZE5vTXZZQmFMYWdFRUtTWW1JRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWUvMmI1ZjVmLWJiOTYtNGIzMS04YTZhLWRkMTE1ZjllMzMwMS8x
L0cwRjgwd1EzenNCMVZBbUVkQV9jQ3VzWldPUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUv
MmI1ZjVmLWJiOTYtNGIzMS04YTZhLWRkMTE1ZjllMzMwMS8xLzZRbnVQV0dKZE5v
TXZZQmFMYWdFRUtTWW1JRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
ATMGCCsGAQUFBwEHAQH/BIIBIjCCAR4wgdsEAgABMIHUAwQDBeIAAwQDHwf4AwQD
H6zoAwQDJRq4AwQDJT3wAwQDJW7AAwQCLVAIMAwDBAItUBQDBAItUBgDBAItUCAD
BAQuFsADBAMu/8gDBANNSFgDBARN9lADBAVOmeADBAVVH8ADBAReZKADBARfj0AD
BAJfslgDBASCtNADBAOw8XgDBAK5D4wDBAK5NVADBAO5PbgDBAK5PrgDBAK5TpwD
BAK5XCQDBAK5cmQDBAK50TQDBADBl1QDBADBl1cDBAHBvXwDBAHCdI4DBADD6iMD
BATUchAwPgQCAAIwOAMFACoAaMADBQAqAQJAAwUAKgECkAMFACoCA5gDBQAqA73A
AwUDKgTMAAMFAyoFbgADBQMqC0HAMA0GCSqGSIb3DQEBCwUAA4IBAQAdK7ND/L/p
ZbKHb7AUcNF9tSACwpj1xKkqYZKBviZYvYQiXtXR4jyN/NcHpEhRFr6+S5xcZyjh
c2ZDU8JAwd1rNn1a+/9Tyj60269+PRHluYm0UVKW+2PJEye9ZRBFjPtXZXxKv/o7
ihqIamVYTKX5X6by2ZSQD9tpBTu7/lkTkh0YaSRAt1k0ppN4RIT8do8FCFNrU46q
kS0Nh96uJodBZZURhU0FTTzjzilPRORcuI/0wQmWJL1A9iuysavO6Udk8eZetX15
kmnZlHjfpyKprL+WpqJommMFlr+Y4TfDPHnDxQHpWODf9Cb5ac+1iQYF/m1vuwQp
egsVtdZDkEvm
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:17 2024 by rpki-client on console-ams.rpki-client.org