Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/4Cn1lQ-3m11Nc5uFCHV92UKtjQw.roa
File: 4Cn1lQ-3m11Nc5uFCHV92UKtjQw.roa (raw, json)
Hash identifier: EIfcKWWU/73WYuLjndDwVhM4ucfNQeB2a3U1LgI/UPY=
Subject key identifier: E0:29:F5:95:0F:B7:9B:5D:4D:73:9B:85:08:75:7D:D9:42:AD:8D:0C
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 03C04335
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/4Cn1lQ-3m11Nc5uFCHV92UKtjQw.roa
Signing time: Sat 01 Jan 2022 03:53:22 +0000
ROA not before: Sat 01 Jan 2022 03:53:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25447
IP address blocks: 85.13.0.0/18 maxlen: 18
85.13.2.0/24 maxlen: 24
85.13.8.0/24 maxlen: 24
62.93.120.0/21 maxlen: 21
176.61.160.0/19 maxlen: 19
188.117.192.0/18 maxlen: 18
188.117.200.0/22 maxlen: 22
188.117.208.0/22 maxlen: 22
188.117.220.0/22 maxlen: 22
85.13.14.0/24 maxlen: 24
85.13.16.0/24 maxlen: 24
217.16.112.0/20 maxlen: 20
217.16.114.0/24 maxlen: 24
217.16.113.0/24 maxlen: 24
217.16.124.0/24 maxlen: 24
217.16.127.0/24 maxlen: 24
82.192.0.0/19 maxlen: 19
82.192.0.0/23 maxlen: 23
82.192.5.0/24 maxlen: 24
82.192.6.0/24 maxlen: 24
188.117.240.0/20 maxlen: 20
82.192.18.0/24 maxlen: 24
62.93.68.0/24 maxlen: 24
62.93.76.0/24 maxlen: 24
62.93.74.0/24 maxlen: 24
62.93.73.0/24 maxlen: 24
62.93.88.0/24 maxlen: 24
62.93.96.0/20 maxlen: 20
62.93.96.0/21 maxlen: 21
62.93.104.0/21 maxlen: 21
62.93.112.0/22 maxlen: 22
217.199.83.0/24 maxlen: 24
217.199.80.0/20 maxlen: 20
62.93.64.0/19 maxlen: 19
217.199.90.0/24 maxlen: 24
2a03:4e47::/32 maxlen: 32
2a03:4e40::/29 maxlen: 29
2a03:4e40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62931765 (0x3c04335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: Jan 1 03:53:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e029f5950fb79b5d4d739b8508757dd942ad8d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:09:c7:25:ac:a2:f6:91:f9:99:0b:93:d0:
e1:7e:fb:f7:09:f9:94:58:ff:34:78:78:c4:fd:4f:
64:64:5e:50:f5:0e:ae:e7:21:b8:ff:bc:f7:88:8d:
c1:90:d2:64:41:60:93:a0:c1:e3:e5:e7:72:d8:1e:
1b:ff:31:84:72:01:37:7a:59:11:95:9c:2b:c5:3c:
7e:01:e7:cb:ca:96:0e:f8:61:01:e6:ab:18:e3:36:
1d:84:78:b8:a7:5a:41:4c:71:67:79:38:b4:ca:ec:
11:9e:3b:03:27:e2:fb:35:b7:3f:d4:b5:be:9b:b1:
45:d3:18:80:84:31:fa:a3:1f:c4:f2:f6:3c:47:da:
09:25:cc:0d:da:f8:fa:b2:68:3b:c8:5b:e0:f2:5a:
f2:b2:35:4d:fe:a0:22:c3:1a:17:57:a6:93:ff:41:
dc:4c:b0:d7:8b:9d:e2:54:5d:81:02:d6:b0:8d:13:
96:6c:31:ef:91:55:31:cb:c4:9c:d7:3a:22:29:0a:
25:d1:c4:77:e8:6e:94:7f:ad:ad:47:cc:dc:b7:d4:
88:02:27:cc:1e:b5:e6:3a:cf:01:26:bc:86:9d:1b:
1c:e4:fd:cc:65:ee:94:66:70:ec:bd:9b:e6:52:67:
dd:7d:43:10:0d:eb:a2:93:5c:57:ed:26:9d:84:4e:
76:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:29:F5:95:0F:B7:9B:5D:4D:73:9B:85:08:75:7D:D9:42:AD:8D:0C
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/4Cn1lQ-3m11Nc5uFCHV92UKtjQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.64.0-62.93.115.255
62.93.120.0/21
82.192.0.0/19
85.13.0.0/18
176.61.160.0/19
188.117.192.0/18
217.16.112.0/20
217.199.80.0/20
IPv6:
2a03:4e40::/29
Signature Algorithm: sha256WithRSAEncryption
7d:6f:9d:4a:19:69:89:c9:ca:2f:0d:d6:66:e6:4d:8d:d3:dc:
34:df:2a:9b:7b:a9:b1:07:02:4c:dd:4a:80:f2:b0:c0:be:9f:
22:fd:b7:72:5e:22:7c:bc:d8:66:08:21:a7:a7:81:d5:63:d0:
9b:cb:ee:f8:bf:db:88:44:92:c9:e3:08:ff:63:66:d5:4c:bc:
b7:d5:c5:30:66:66:51:8d:ab:f5:0b:97:4d:20:3e:0f:54:29:
5d:c4:e8:99:1b:a0:ea:d8:bf:7b:f2:8a:2f:16:ec:79:c8:90:
cd:e3:63:9f:1f:e8:74:91:5c:0b:ee:fc:29:f6:15:95:92:31:
d5:4b:88:16:1c:23:be:38:e9:00:cf:49:3e:4b:22:95:b6:1b:
94:c0:02:95:9b:7d:e3:94:db:c3:83:8b:68:27:ad:2b:c7:2d:
55:45:ce:8a:4b:8e:17:37:a8:4b:78:90:02:e1:13:9b:fc:ff:
59:e1:a2:db:67:77:3b:13:64:18:c9:16:21:b4:16:d6:ee:5f:
c3:b7:b7:b7:62:26:26:eb:1e:6a:a7:86:e4:7d:76:e1:2f:5f:
94:44:78:93:23:ce:77:d6:12:29:09:00:eb:f7:20:d9:94:72:
ed:dd:11:56:f9:84:d8:ff:3c:2f:d6:60:02:25:4b:32:f8:2b:
0b:ac:1b:e1
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIEA8BDNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZWFiNTM2NDBiMDkzMTkyNGI3M2Y3NjA5MjU4NDUxNTBhNmNjY2E1MB4XDTIyMDEw
MTAzNTMyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTAyOWY1OTUwZmI3
OWI1ZDRkNzM5Yjg1MDg3NTdkZDk0MmFkOGQwYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMMFCcclrKL2kfmZC5PQ4X779wn5lFj/NHh4xP1PZGReUPUO
ruchuP+894iNwZDSZEFgk6DB4+XnctgeG/8xhHIBN3pZEZWcK8U8fgHny8qWDvhh
AearGOM2HYR4uKdaQUxxZ3k4tMrsEZ47Ayfi+zW3P9S1vpuxRdMYgIQx+qMfxPL2
PEfaCSXMDdr4+rJoO8hb4PJa8rI1Tf6gIsMaF1emk/9B3Eyw14ud4lRdgQLWsI0T
lmwx75FVMcvEnNc6IikKJdHEd+hulH+trUfM3LfUiAInzB615jrPASa8hp0bHOT9
zGXulGZw7L2b5lJn3X1DEA3ropNcV+0mnYROdhkCAwEAAaOCAkowggJGMB0GA1Ud
DgQWBBTgKfWVD7ebXU1zm4UIdX3ZQq2NDDAfBgNVHSMEGDAWgBRuq1NkCwkxkktz
92CSWEUVCmzMpTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JxdFRaQXNKTVpKTGNfZGdrbGhGRlFwc3pLVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmQvMmEzOGU2LTI5NGUtNGZhMy1hNWEwLTUzMDQ2MzIzOTUxZi8x
LzRDbjFsUS0zbTExTmM1dUZDSFY5MlVLdGpRdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQv
MmEzOGU2LTI5NGUtNGZhMy1hNWEwLTUzMDQ2MzIzOTUxZi8xL2JxdFRaQXNKTVpK
TGNfZGdrbGhGRlFwc3pLVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBg
BggrBgEFBQcBBwEB/wRRME8wPgQCAAEwODAMAwQGPl1AAwQCPl1wAwQDPl14AwQF
UsAAAwQGVQ0AAwQFsD2gAwQGvHXAAwQE2RBwAwQE2cdQMA0EAgACMAcDBQMqA05A
MA0GCSqGSIb3DQEBCwUAA4IBAQB9b51KGWmJycovDdZm5k2N09w03yqbe6mxBwJM
3UqA8rDAvp8i/bdyXiJ8vNhmCCGnp4HVY9Cby+74v9uIRJLJ4wj/Y2bVTLy31cUw
ZmZRjav1C5dNID4PVCldxOiZG6Dq2L978oovFux5yJDN42OfH+h0kVwL7vwp9hWV
kjHVS4gWHCO+OOkAz0k+SyKVthuUwAKVm33jlNvDg4toJ60rxy1VRc6KS44XN6hL
eJAC4ROb/P9Z4aLbZ3c7E2QYyRYhtBbW7l/Dt7e3YiYm6x5qp4bkfXbhL1+URHiT
I8531hIpCQDr9yDZlHLt3RFW+YTY/zwv1mACJUsy+CsLrBvh
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:40 2023 by rpki-client on console-ams.rpki-client.org