Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/_x64O04gG2_V-SoUtEHT8yemwT8.roa
File: _x64O04gG2_V-SoUtEHT8yemwT8.roa (raw, json)
Hash identifier: AM0H0ND7liMWPu2ZaQycCb0hArSY8SpRLgdjWbz4410=
Subject key identifier: FF:1E:B8:3B:4E:20:1B:6F:D5:F9:2A:14:B4:41:D3:F3:27:A6:C1:3F
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1DDFFC3E
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/_x64O04gG2_V-SoUtEHT8yemwT8.roa
Signing time: Thu 30 Jun 2022 12:51:02 +0000
ROA not before: Thu 30 Jun 2022 12:51:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50835
IP address blocks: 91.193.30.0/23 maxlen: 23
81.161.48.0/22 maxlen: 22
194.33.64.0/23 maxlen: 23
91.246.192.0/22 maxlen: 24
77.36.57.0/24 maxlen: 24
176.113.180.0/22 maxlen: 22
77.36.60.0/24 maxlen: 24
77.36.65.0/24 maxlen: 24
176.118.202.0/23 maxlen: 23
91.246.203.0/24 maxlen: 24
176.118.204.0/23 maxlen: 24
176.110.112.0/23 maxlen: 23
91.246.217.0/24 maxlen: 24
81.161.8.0/22 maxlen: 22
192.162.184.0/23 maxlen: 23
37.97.120.0/24 maxlen: 24
37.97.121.0/24 maxlen: 24
91.232.56.0/23 maxlen: 23
193.36.220.0/22 maxlen: 22
194.33.66.0/23 maxlen: 23
64.43.120.0/22 maxlen: 24
91.233.200.0/24 maxlen: 24
176.115.236.0/22 maxlen: 24
193.36.203.0/24 maxlen: 24
109.207.129.0/24 maxlen: 24
109.207.130.0/24 maxlen: 24
109.207.132.0/24 maxlen: 24
176.96.94.0/24 maxlen: 24
91.229.18.0/23 maxlen: 23
91.200.132.0/24 maxlen: 24
91.200.134.0/23 maxlen: 23
176.121.108.0/23 maxlen: 24
176.121.110.0/23 maxlen: 24
176.116.228.0/24 maxlen: 24
91.238.39.0/24 maxlen: 24
91.239.222.0/23 maxlen: 23
176.116.236.0/24 maxlen: 24
91.239.226.0/24 maxlen: 24
91.224.212.0/24 maxlen: 24
91.232.226.0/24 maxlen: 24
46.173.248.0/22 maxlen: 24
91.236.76.0/24 maxlen: 24
46.173.254.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501218366 (0x1ddffc3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jun 30 12:51:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff1eb83b4e201b6fd5f92a14b441d3f327a6c13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fe:54:d8:62:ad:2d:62:1a:c9:4a:bc:27:59:
35:66:a0:e6:87:c4:38:08:45:c8:72:05:e6:c6:0b:
0a:b9:f3:7d:9d:73:0c:2a:15:a5:26:69:17:80:50:
90:dd:80:7b:9e:c8:f6:ff:0c:a0:0b:28:c4:11:d0:
a6:79:62:4f:08:57:d7:96:9d:cc:a4:f3:98:7e:f7:
56:a7:ff:b0:47:0e:dd:62:eb:16:7e:7a:d3:70:47:
71:aa:1d:23:c8:52:3f:e3:de:fa:e5:09:80:d8:6d:
54:f9:50:d4:54:8f:93:17:1b:cb:07:e8:8b:d1:ce:
83:20:a5:e7:78:03:61:09:ec:fc:f0:93:4b:98:12:
bc:f7:cb:ca:04:ec:72:2c:da:da:24:9c:4c:40:a4:
ea:4e:a8:46:58:8b:25:b9:ad:9e:ba:bf:91:e7:24:
b7:5f:a3:ec:5e:0a:52:ef:b6:2f:28:16:d9:9a:f0:
23:90:8c:3e:c2:25:cd:8e:18:41:33:12:87:67:78:
3d:d0:41:a9:a1:ce:1b:06:98:c5:99:92:39:bf:df:
94:50:03:45:7b:a3:b9:aa:09:4d:c4:a0:3a:c9:5e:
3d:15:00:d8:de:e6:08:b8:bf:c6:50:c4:c0:0b:19:
84:89:fa:17:c4:ce:f2:5d:85:41:35:e8:29:df:34:
e5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1E:B8:3B:4E:20:1B:6F:D5:F9:2A:14:B4:41:D3:F3:27:A6:C1:3F
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/_x64O04gG2_V-SoUtEHT8yemwT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.120.0/23
46.173.248.0/22
46.173.254.0/23
64.43.120.0/22
77.36.57.0/24
77.36.60.0/24
77.36.65.0/24
81.161.8.0/22
81.161.48.0/22
91.193.30.0/23
91.200.132.0/24
91.200.134.0/23
91.224.212.0/24
91.229.18.0/23
91.232.56.0/23
91.232.226.0/24
91.233.200.0/24
91.236.76.0/24
91.238.39.0/24
91.239.222.0/23
91.239.226.0/24
91.246.192.0/22
91.246.203.0/24
91.246.217.0/24
109.207.129.0-109.207.130.255
109.207.132.0/24
176.96.94.0/24
176.110.112.0/23
176.113.180.0/22
176.115.236.0/22
176.116.228.0/24
176.116.236.0/24
176.118.202.0-176.118.205.255
176.121.108.0/22
192.162.184.0/23
193.36.203.0/24
193.36.220.0/22
194.33.64.0/22
Signature Algorithm: sha256WithRSAEncryption
68:f0:0f:87:e0:da:51:5a:87:22:b1:83:a5:05:e2:7e:94:da:
75:8c:f7:5c:97:89:7d:9c:db:cc:12:f5:3e:63:bf:37:66:a6:
a3:e7:3e:c3:6d:40:54:e8:56:cd:68:f2:6c:7c:45:da:dd:a8:
3e:ca:d5:39:eb:85:75:9f:2b:85:bf:4a:f3:05:b6:20:d9:3b:
e1:a8:3a:1b:f1:8d:d8:f1:7b:80:03:0a:af:83:9c:ce:1b:30:
c5:b2:3e:ce:ac:d3:a4:64:4c:19:af:6a:39:2b:10:a4:10:6f:
25:af:0c:a3:c4:6e:42:4d:9b:42:69:dd:b9:85:95:85:d6:29:
3a:fe:f7:3e:97:b3:73:b5:fd:54:c6:07:e6:ae:83:c9:16:5d:
0f:b3:02:a7:7d:d9:41:d9:0b:ba:43:c4:dc:cc:54:ba:f5:5d:
78:f3:b0:28:6e:6b:b6:e6:a9:6c:03:31:95:fb:f1:52:46:02:
05:bf:e6:0e:c1:80:30:1d:5a:43:99:d4:24:db:66:2d:b2:c1:
3a:17:39:49:76:9b:a7:66:4b:4d:40:d0:ee:e6:47:b9:7f:ce:
46:7f:75:b2:d5:53:b1:06:e2:d8:80:27:51:1c:cd:62:63:43:
c6:0a:74:3b:27:f9:cc:5f:4a:9f:a5:90:ef:02:d1:33:b7:ce:
14:41:77:de
-----BEGIN CERTIFICATE-----
MIIF5DCCBMygAwIBAgIEHd/8PjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NDljYmJkNWMyY2Y0MTk1Y2M2ZWM3ZjIxZjYwNzU4MWEwMjI0ZGFhMB4XDTIyMDYz
MDEyNTEwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmYxZWI4M2I0ZTIw
MWI2ZmQ1ZjkyYTE0YjQ0MWQzZjMyN2E2YzEzZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIz+VNhirS1iGslKvCdZNWag5ofEOAhFyHIF5sYLCrnzfZ1z
DCoVpSZpF4BQkN2Ae57I9v8MoAsoxBHQpnliTwhX15adzKTzmH73Vqf/sEcO3WLr
Fn5603BHcaodI8hSP+Pe+uUJgNhtVPlQ1FSPkxcbywfoi9HOgyCl53gDYQns/PCT
S5gSvPfLygTsciza2iScTECk6k6oRliLJbmtnrq/keckt1+j7F4KUu+2LygW2Zrw
I5CMPsIlzY4YQTMSh2d4PdBBqaHOGwaYxZmSOb/flFADRXujuaoJTcSgOslePRUA
2N7mCLi/xlDEwAsZhIn6F8TO8l2FQTXoKd805SkCAwEAAaOCAv4wggL6MB0GA1Ud
DgQWBBT/Hrg7TiAbb9X5KhS0QdPzJ6bBPzAfBgNVHSMEGDAWgBQ0nLvVws9Blcxu
x/IfYHWBoCJNqjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05KeTcxY0xQUVpYTWJzZnlIMkIxZ2FBaVRhby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmQvY2RmNWY2LTJmMTgtNDJjNy05MzBlLWRjMDZkZDgwNTk2MC8x
L194NjRPMDRnRzJfVi1Tb1V0RUhUOHllbXdUOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQv
Y2RmNWY2LTJmMTgtNDJjNy05MzBlLWRjMDZkZDgwNTk2MC8xL05KeTcxY0xQUVpY
TWJzZnlIMkIxZ2FBaVRhby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
ARIGCCsGAQUFBwEHAQH/BIIBATCB/jCB+wQCAAEwgfQDBAElYXgDBAIurfgDBAEu
rf4DBAJAK3gDBABNJDkDBABNJDwDBABNJEEDBAJRoQgDBAJRoTADBAFbwR4DBABb
yIQDBAFbyIYDBABb4NQDBAFb5RIDBAFb6DgDBABb6OIDBABb6cgDBABb7EwDBABb
7icDBAFb794DBABb7+IDBAJb9sADBABb9ssDBABb9tkwDAMEAG3PgQMEAG3PggME
AG3PhAMEALBgXgMEAbBucAMEArBxtAMEArBz7AMEALB05AMEALB07DAMAwQBsHbK
AwQBsHbMAwQCsHlsAwQBwKK4AwQAwSTLAwQCwSTcAwQCwiFAMA0GCSqGSIb3DQEB
CwUAA4IBAQBo8A+H4NpRWocisYOlBeJ+lNp1jPdcl4l9nNvMEvU+Y783Zqaj5z7D
bUBU6FbNaPJsfEXa3ag+ytU564V1nyuFv0rzBbYg2TvhqDob8Y3Y8XuAAwqvg5zO
GzDFsj7OrNOkZEwZr2o5KxCkEG8lrwyjxG5CTZtCad25hZWF1ik6/vc+l7Nztf1U
xgfmroPJFl0PswKnfdlB2Qu6Q8TczFS69V1487Aobmu25qlsAzGV+/FSRgIFv+YO
wYAwHVpDmdQk22YtssE6FzlJdpunZktNQNDu5ke5f85Gf3Wy1VOxBuLYgCdRHM1i
Y0PGCnQ7J/nMX0qfpZDvAtEzt84UQXfe
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org