Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/VuY2PKk0pBwS1zyzGcTM6BSxGnc.roa
File: VuY2PKk0pBwS1zyzGcTM6BSxGnc.roa (raw, json)
Hash identifier: ZpwLE3DyygPH7xOSobmODz284A61WBarPmpYFsIIMY8=
Subject key identifier: 56:E6:36:3C:A9:34:A4:1C:12:D7:3C:B3:19:C4:CC:E8:14:B1:1A:77
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 1575A60D
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/VuY2PKk0pBwS1zyzGcTM6BSxGnc.roa
Signing time: Tue 21 Jun 2022 17:05:05 +0000
ROA not before: Tue 21 Jun 2022 17:05:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 194.50.188.0/23 maxlen: 23
194.50.206.0/23 maxlen: 23
195.138.96.0/19 maxlen: 24
194.50.200.0/23 maxlen: 23
2.57.152.0/22 maxlen: 22
2.59.204.0/22 maxlen: 22
91.214.200.0/22 maxlen: 22
45.128.20.0/22 maxlen: 22
194.50.184.0/23 maxlen: 23
91.242.81.0/24 maxlen: 24
194.35.52.0/22 maxlen: 22
95.214.152.0/22 maxlen: 22
91.242.105.0/24 maxlen: 24
91.242.100.0/23 maxlen: 23
91.242.108.0/22 maxlen: 22
91.242.107.0/24 maxlen: 24
45.150.168.0/22 maxlen: 22
91.242.120.0/21 maxlen: 21
45.15.244.0/22 maxlen: 22
2.56.0.0/22 maxlen: 22
185.173.244.0/22 maxlen: 24
91.242.64.0/22 maxlen: 22
2.57.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360031757 (0x1575a60d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jun 21 17:05:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56e6363ca934a41c12d73cb319c4cce814b11a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b8:df:6a:96:e8:9c:3a:77:8c:b3:7f:64:36:
fc:a6:e1:ea:76:63:53:be:ed:1c:dd:68:5f:63:2d:
d0:14:53:fe:c1:d8:1d:10:ee:2c:0b:37:2d:9a:eb:
eb:0b:95:10:50:20:b1:8c:52:60:96:23:5a:31:38:
d8:7e:8f:1f:f3:e6:4a:bd:60:dd:86:b3:48:73:fe:
d8:64:08:14:63:86:ac:44:44:17:c4:14:8b:46:07:
04:2a:68:88:bc:de:68:d5:4e:a9:29:4f:da:aa:9e:
6e:9c:ae:02:07:61:2b:19:93:c5:37:07:19:09:11:
a6:d5:25:7a:e3:2d:c8:90:0f:64:ec:35:91:fc:65:
3f:99:45:40:ce:bd:f4:64:9d:88:88:92:e6:49:7b:
37:aa:17:09:10:53:b5:d4:84:6f:e7:51:0f:5c:53:
5a:54:c7:5c:a5:11:e7:1d:7c:64:b5:75:8a:e5:03:
84:1c:f5:47:6c:9d:73:e1:0c:bb:59:e4:44:b3:95:
7f:5c:9c:d8:32:5f:0b:e4:49:43:e0:6a:57:3c:3b:
14:88:41:90:bb:ae:b7:80:18:ed:7a:c9:a2:d3:0d:
99:94:63:dc:23:66:9c:89:56:12:ce:52:36:a3:67:
5e:c0:ca:03:ad:94:01:7f:d2:89:cc:95:f6:24:c3:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E6:36:3C:A9:34:A4:1C:12:D7:3C:B3:19:C4:CC:E8:14:B1:1A:77
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/VuY2PKk0pBwS1zyzGcTM6BSxGnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.0.0/22
2.57.152.0/22
2.57.212.0/22
2.59.204.0/22
45.15.244.0/22
45.128.20.0/22
45.150.168.0/22
91.214.200.0/22
91.242.64.0/22
91.242.81.0/24
91.242.100.0/23
91.242.105.0/24
91.242.107.0-91.242.111.255
91.242.120.0/21
95.214.152.0/22
185.173.244.0/22
194.35.52.0/22
194.50.184.0/23
194.50.188.0/23
194.50.200.0/23
194.50.206.0/23
195.138.96.0/19
Signature Algorithm: sha256WithRSAEncryption
0e:f2:16:10:3f:c2:b3:24:19:6a:c7:0f:33:c7:75:43:95:44:
ad:a3:50:13:c2:e3:66:b6:ba:46:a3:1a:52:47:37:9a:33:37:
53:84:44:1b:3b:70:15:a6:17:fd:7d:3f:71:de:ef:0a:da:ea:
71:f4:29:25:52:5e:51:c9:57:07:4f:37:d1:0d:44:42:bc:59:
9a:87:1d:e1:ec:18:64:34:e0:20:25:58:13:be:43:c6:58:c2:
3c:76:d1:7c:d6:98:f2:10:c6:71:93:eb:e2:19:74:69:60:5f:
f5:21:fb:70:0d:42:81:e5:fd:78:ae:27:2b:6d:a0:df:af:b9:
f4:10:24:33:2c:36:06:70:b4:37:0f:47:be:81:58:1d:07:10:
3b:6b:40:5f:a0:34:b2:c3:00:c9:d4:bf:7d:86:3b:95:91:7e:
9f:90:b8:4d:85:19:04:d8:5f:45:92:0b:15:85:d8:5e:00:3f:
2c:c8:ee:f2:bf:c4:da:47:05:3d:89:3f:55:19:83:5f:9b:e0:
4f:cb:e6:56:cc:42:47:4d:69:a6:6c:dd:f5:bf:13:19:b7:d5:
fa:ab:88:44:90:05:f8:17:67:bf:14:3c:80:42:b2:4f:26:a8:
40:21:0a:ac:a3:85:ca:da:32:51:0b:9f:54:a6:85:bf:e5:73:
df:6d:ae:9f
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIEFXWmDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
YmFiMzA2ODM4NTllYzdlMDIwNmZlOTI2NTM2M2U4ZTM5NzFhOWE4MB4XDTIyMDYy
MTE3MDUwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTZlNjM2M2NhOTM0
YTQxYzEyZDczY2IzMTljNGNjZTgxNGIxMWE3NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJy432qW6Jw6d4yzf2Q2/Kbh6nZjU77tHN1oX2Mt0BRT/sHY
HRDuLAs3LZrr6wuVEFAgsYxSYJYjWjE42H6PH/PmSr1g3YazSHP+2GQIFGOGrERE
F8QUi0YHBCpoiLzeaNVOqSlP2qqebpyuAgdhKxmTxTcHGQkRptUleuMtyJAPZOw1
kfxlP5lFQM699GSdiIiS5kl7N6oXCRBTtdSEb+dRD1xTWlTHXKUR5x18ZLV1iuUD
hBz1R2ydc+EMu1nkRLOVf1yc2DJfC+RJQ+BqVzw7FIhBkLuut4AY7XrJotMNmZRj
3CNmnIlWEs5SNqNnXsDKA62UAX/SicyV9iTDJCMCAwEAAaOCApQwggKQMB0GA1Ud
DgQWBBRW5jY8qTSkHBLXPLMZxMzoFLEadzAfBgNVHSMEGDAWgBSLqzBoOFnsfgIG
/pJlNj6OOXGpqDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2k2c3dhRGhaN0g0Q0J2NlNaVFktampseHFhZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmIvODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4OS8x
L1Z1WTJQS2swcEJ3UzF6eXpHY1RNNkJTeEduYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIv
ODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4OS8xL2k2c3dhRGhaN0g0
Q0J2NlNaVFktampseHFhZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
qQYIKwYBBQUHAQcBAf8EgZkwgZYwgZMEAgABMIGMAwQCAjgAAwQCAjmYAwQCAjnU
AwQCAjvMAwQCLQ/0AwQCLYAUAwQCLZaoAwQCW9bIAwQCW/JAAwQAW/JRAwQBW/Jk
AwQAW/JpMAwDBABb8msDBARb8mADBANb8ngDBAJf1pgDBAK5rfQDBALCIzQDBAHC
MrgDBAHCMrwDBAHCMsgDBAHCMs4DBAXDimAwDQYJKoZIhvcNAQELBQADggEBAA7y
FhA/wrMkGWrHDzPHdUOVRK2jUBPC42a2ukajGlJHN5ozN1OERBs7cBWmF/19P3He
7wra6nH0KSVSXlHJVwdPN9ENREK8WZqHHeHsGGQ04CAlWBO+Q8ZYwjx20XzWmPIQ
xnGT6+IZdGlgX/Uh+3ANQoHl/XiuJyttoN+vufQQJDMsNgZwtDcPR76BWB0HEDtr
QF+gNLLDAMnUv32GO5WRfp+QuE2FGQTYX0WSCxWF2F4APyzI7vK/xNpHBT2JP1UZ
g1+b4E/L5lbMQkdNaaZs3fW/Exm31fqriESQBfgXZ78UPIBCsk8mqEAhCqyjhcra
MlELn1Smhb/lc99trp8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org