Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rDjLFQs_eqPUGmDr899LZsfxYtQ.roa
File: rDjLFQs_eqPUGmDr899LZsfxYtQ.roa (raw, json)
Hash identifier: f0TAKcn+rf/DZrQ3Mj4pPJFcWDe/mLZT/8iLMxyE1GU=
Subject key identifier: AC:38:CB:15:0B:3F:7A:A3:D4:1A:60:EB:F3:DF:4B:66:C7:F1:62:D4
Certificate issuer: /CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Certificate serial: 12B0F41A
Authority key identifier: 50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rDjLFQs_eqPUGmDr899LZsfxYtQ.roa
Signing time: Tue 17 May 2022 08:55:29 +0000
ROA not before: Tue 17 May 2022 08:55:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6810
IP address blocks: 147.235.59.0/24 maxlen: 24
147.235.70.0/24 maxlen: 24
147.235.70.0/23 maxlen: 23
147.235.71.0/24 maxlen: 24
147.235.0.0/16 maxlen: 24
147.235.31.0/24 maxlen: 24
147.235.180.0/24 maxlen: 24
147.235.180.0/23 maxlen: 23
147.235.181.0/24 maxlen: 24
147.235.180.0/22 maxlen: 22
147.235.182.0/24 maxlen: 24
147.235.182.0/23 maxlen: 23
147.235.183.0/24 maxlen: 24
147.235.192.0/22 maxlen: 22
147.235.192.0/24 maxlen: 24
147.235.192.0/19 maxlen: 24
147.235.196.0/22 maxlen: 22
147.235.194.0/24 maxlen: 24
147.235.199.0/24 maxlen: 24
147.235.194.0/23 maxlen: 24
147.235.195.0/24 maxlen: 24
147.235.193.0/24 maxlen: 24
147.235.198.0/24 maxlen: 24
147.235.196.0/23 maxlen: 24
147.235.197.0/24 maxlen: 24
147.235.198.0/23 maxlen: 24
147.235.196.0/24 maxlen: 24
147.235.96.0/22 maxlen: 22
147.235.97.0/24 maxlen: 24
147.235.96.0/24 maxlen: 24
147.235.96.0/23 maxlen: 23
147.235.98.0/23 maxlen: 23
147.235.98.0/24 maxlen: 24
147.235.99.0/24 maxlen: 24
147.235.111.0/24 maxlen: 24
147.235.144.0/21 maxlen: 24
149.106.128.0/19 maxlen: 24
149.106.224.0/19 maxlen: 24
147.235.202.0/23 maxlen: 24
147.235.206.0/24 maxlen: 24
147.235.206.0/23 maxlen: 24
147.235.200.0/21 maxlen: 21
147.235.200.0/22 maxlen: 22
147.235.201.0/24 maxlen: 24
147.235.202.0/24 maxlen: 24
147.235.203.0/24 maxlen: 24
147.235.204.0/24 maxlen: 24
147.235.204.0/23 maxlen: 24
147.235.204.0/22 maxlen: 22
147.235.205.0/24 maxlen: 24
147.235.200.0/24 maxlen: 24
147.235.200.0/23 maxlen: 24
147.235.211.0/24 maxlen: 24
147.235.213.0/24 maxlen: 24
147.235.208.0/22 maxlen: 23
147.235.208.0/24 maxlen: 24
147.235.209.0/24 maxlen: 24
147.235.210.0/24 maxlen: 24
147.235.207.0/24 maxlen: 24
147.235.212.0/23 maxlen: 23
147.235.212.0/24 maxlen: 24
147.235.212.0/22 maxlen: 23
147.235.215.0/24 maxlen: 24
147.235.216.0/24 maxlen: 24
147.235.216.0/22 maxlen: 23
147.235.214.0/24 maxlen: 24
147.235.218.0/23 maxlen: 23
147.235.218.0/24 maxlen: 24
147.235.219.0/24 maxlen: 24
147.235.216.0/21 maxlen: 21
147.235.217.0/24 maxlen: 24
147.235.222.0/23 maxlen: 23
147.235.222.0/24 maxlen: 24
147.235.220.0/22 maxlen: 22
147.235.223.0/24 maxlen: 24
147.235.220.0/24 maxlen: 24
147.235.220.0/23 maxlen: 23
147.235.221.0/24 maxlen: 24
147.235.226.0/24 maxlen: 24
147.235.228.0/22 maxlen: 24
2a06:c701::/32 maxlen: 32
2a06:c701:1000::/36 maxlen: 36
2a06:c700:2000::/36 maxlen: 36
2a06:c700::/32 maxlen: 48
2a06:c700::/44 maxlen: 44
2a06:c700::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313586714 (0x12b0f41a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Validity
Not Before: May 17 08:55:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac38cb150b3f7aa3d41a60ebf3df4b66c7f162d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:38:24:fc:72:30:86:7e:9e:31:e0:fc:74:
9a:33:5e:bc:96:92:93:0d:7e:f4:8d:32:e5:d5:87:
b5:7b:00:cd:5a:59:ca:ee:e7:96:91:54:68:7d:4c:
58:dd:82:c2:04:2f:85:de:de:d2:9e:e2:fd:1e:80:
08:a2:f6:07:c2:70:00:01:8b:41:ee:3e:d8:00:cb:
e2:58:bf:46:73:0c:9b:5b:15:2a:34:fc:90:86:7d:
12:5b:ff:b0:21:85:4e:4e:c1:2b:17:03:76:09:95:
2c:8d:12:a2:70:e6:f7:d0:27:db:aa:b5:35:64:81:
55:0b:b4:98:0b:94:dc:14:66:76:4f:0e:22:bc:a9:
e8:5f:e5:da:10:d2:b0:6d:80:fd:84:f9:b9:67:53:
cf:f0:e2:02:37:8c:28:29:3b:26:9c:7e:8a:97:6a:
6b:57:52:ee:46:68:81:6c:a2:40:7a:f8:53:d5:43:
0e:bc:6d:54:1e:bc:b3:42:eb:1f:5a:a8:3a:45:3a:
00:3b:53:36:9d:fb:32:d4:f9:7c:33:75:f3:5b:88:
6a:a9:46:a7:52:04:dc:27:fe:48:ac:fb:13:5d:ce:
eb:9a:94:2b:ca:16:57:94:f3:17:c8:c2:b5:ae:15:
fb:80:f6:ec:d5:90:d5:ba:2b:4b:50:89:cb:40:b3:
d3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:38:CB:15:0B:3F:7A:A3:D4:1A:60:EB:F3:DF:4B:66:C7:F1:62:D4
X509v3 Authority Key Identifier:
keyid:50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rDjLFQs_eqPUGmDr899LZsfxYtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.235.0.0/16
149.106.128.0/19
149.106.224.0/19
IPv6:
2a06:c700::/29
Signature Algorithm: sha256WithRSAEncryption
5b:dd:f6:96:d3:1e:dc:39:4a:2e:03:a6:6d:20:ee:f3:be:26:
e8:89:6e:37:f4:6b:48:3d:f5:0d:af:26:f5:40:48:46:e8:30:
64:c2:41:fe:ba:4f:d7:27:55:64:4e:5c:3d:de:36:ce:a5:09:
fe:e6:1e:14:4b:14:d4:b3:30:68:db:42:2d:86:95:f8:f0:db:
e0:be:f8:24:91:2d:d1:11:f2:1c:a3:bf:46:9f:70:44:e9:d7:
36:61:52:e8:5b:66:f8:a4:ff:b9:3a:25:31:f9:cf:0c:1f:94:
71:92:da:3e:32:ee:11:1c:a4:99:9d:6c:73:2b:ea:37:b4:3d:
a0:75:5e:02:20:c0:77:b9:08:46:00:7f:f7:5e:86:f3:c4:35:
74:6d:7c:cd:70:51:e8:dc:04:07:e1:d6:80:5a:6b:36:12:b6:
5e:16:38:f4:d3:19:bf:15:8e:0f:2d:f6:da:8b:1a:d7:7d:b2:
a7:57:bd:20:e9:bf:4c:f6:5a:56:71:25:b4:b5:24:8d:66:45:
53:dc:0e:0a:1a:45:5b:1b:3f:78:c2:4c:b0:25:6c:06:22:aa:
df:e2:69:5d:60:35:ea:b3:8d:c6:34:f2:ee:3f:28:ba:9e:a9:
80:41:3f:b5:ef:ed:43:e0:26:f6:98:c4:aa:1c:b8:20:08:c2:
9b:59:73:77
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEErD0GjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MDc0MTE1OGYzZWQ2NWJlZTFiZGUxMmYzNGY4OTVhZmIwZGQ1MGQ1MB4XDTIyMDUx
NzA4NTUyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWMzOGNiMTUwYjNm
N2FhM2Q0MWE2MGViZjNkZjRiNjZjN2YxNjJkNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALjFOCT8cjCGfp4x4Px0mjNevJaSkw1+9I0y5dWHtXsAzVpZ
yu7nlpFUaH1MWN2CwgQvhd7e0p7i/R6ACKL2B8JwAAGLQe4+2ADL4li/RnMMm1sV
KjT8kIZ9Elv/sCGFTk7BKxcDdgmVLI0SonDm99An26q1NWSBVQu0mAuU3BRmdk8O
Iryp6F/l2hDSsG2A/YT5uWdTz/DiAjeMKCk7Jpx+ipdqa1dS7kZogWyiQHr4U9VD
DrxtVB68s0LrH1qoOkU6ADtTNp37MtT5fDN181uIaqlGp1IE3Cf+SKz7E13O65qU
K8oWV5TzF8jCta4V+4D27NWQ1borS1CJy0Cz070CAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBSsOMsVCz96o9QaYOvz30tmx/Fi1DAfBgNVHSMEGDAWgBRQdBFY8+1lvuG9
4S80+JWvsN1Q1TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VIUVJXUFB0WmI3aHZlRXZOUGlWcjdEZFVOVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjkvNzM5YjgxLTNjZDMtNDY5Yy1iOTU0LTM1NTNiNGVkNjc5NC8x
L3JEakxGUXNfZXFQVUdtRHI4OTlMWnNmeFl0US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkv
NzM5YjgxLTNjZDMtNDY5Yy1iOTU0LTM1NTNiNGVkNjc5NC8xL1VIUVJXUFB0WmI3
aHZlRXZOUGlWcjdEZFVOVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwFwQCAAEwEQMDAJPrAwQFlWqAAwQFlWrgMA0EAgAC
MAcDBQMqBscAMA0GCSqGSIb3DQEBCwUAA4IBAQBb3faW0x7cOUouA6ZtIO7zvibo
iW439GtIPfUNryb1QEhG6DBkwkH+uk/XJ1VkTlw93jbOpQn+5h4USxTUszBo20It
hpX48NvgvvgkkS3REfIco79Gn3BE6dc2YVLoW2b4pP+5OiUx+c8MH5Rxkto+Mu4R
HKSZnWxzK+o3tD2gdV4CIMB3uQhGAH/3XobzxDV0bXzNcFHo3AQH4daAWms2ErZe
Fjj00xm/FY4PLfbaixrXfbKnV70g6b9M9lpWcSW0tSSNZkVT3A4KGkVbGz94wkyw
JWwGIqrf4mldYDXqs43GNPLuPyi6nqmAQT+17+1D4Cb2mMSqHLggCMKbWXN3
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:48:38 2025 by rpki-client