Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/_SnuG0BUdTItD-sUrpyb-XkFrNM.roa
File: _SnuG0BUdTItD-sUrpyb-XkFrNM.roa (raw, json)
Hash identifier: ZmenixYD+jLqRLTyf/s4bry2EKyIu1/eUAp2ler3N00=
Subject key identifier: FD:29:EE:1B:40:54:75:32:2D:0F:EB:14:AE:9C:9B:F9:79:05:AC:D3
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 018557F571E6F6D651853FB85BA001F61A53
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/_SnuG0BUdTItD-sUrpyb-XkFrNM.roa
Signing time: Wed 28 Dec 2022 08:59:41 +0000
ROA not before: Wed 28 Dec 2022 08:59:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49367
IP address blocks: 89.43.52.0/24 maxlen: 24
188.215.7.0/24 maxlen: 24
188.215.6.0/23 maxlen: 23
188.215.6.0/24 maxlen: 24
85.204.255.0/24 maxlen: 24
89.34.236.0/23 maxlen: 23
89.34.239.0/24 maxlen: 24
188.208.16.0/23 maxlen: 23
89.43.35.0/24 maxlen: 24
94.176.212.0/24 maxlen: 24
89.39.254.0/24 maxlen: 24
86.107.110.0/24 maxlen: 24
185.184.240.0/22 maxlen: 22
188.211.248.0/24 maxlen: 24
94.177.48.0/23 maxlen: 23
193.239.140.0/23 maxlen: 23
91.212.52.0/24 maxlen: 24
188.240.229.0/24 maxlen: 24
188.240.228.0/23 maxlen: 23
37.156.174.0/24 maxlen: 24
188.240.228.0/24 maxlen: 24
89.40.142.0/23 maxlen: 23
45.86.144.0/22 maxlen: 22
91.229.186.0/24 maxlen: 24
45.83.56.0/22 maxlen: 22
93.113.145.0/24 maxlen: 24
93.113.144.0/21 maxlen: 21
93.113.144.0/22 maxlen: 22
93.113.144.0/24 maxlen: 24
93.113.149.0/24 maxlen: 24
93.113.148.0/24 maxlen: 24
93.113.150.0/24 maxlen: 24
93.113.151.0/24 maxlen: 24
93.113.147.0/24 maxlen: 24
93.113.146.0/24 maxlen: 24
89.42.134.0/24 maxlen: 24
89.40.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:57:f5:71:e6:f6:d6:51:85:3f:b8:5b:a0:01:f6:1a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Dec 28 08:59:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd29ee1b405475322d0feb14ae9c9bf97905acd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:f4:70:d6:12:6f:d6:06:02:3a:88:c0:cc:
2c:3e:d2:b7:6a:68:71:eb:51:69:1d:ac:b4:34:1f:
cc:64:fe:17:1b:4e:7e:7a:cb:23:dd:27:c9:da:b5:
db:c9:00:7e:8d:fc:98:f3:09:e8:d1:07:45:3a:8e:
03:92:ca:03:73:9b:ec:f5:69:05:04:7c:82:be:b0:
90:42:cf:5f:0b:37:7c:b9:9f:bf:0f:d3:b3:72:32:
42:71:19:5e:08:f8:00:ff:78:a5:2e:9a:dc:99:da:
4c:6e:dd:f7:c6:08:44:4f:cb:92:1b:78:a8:54:e8:
0b:55:0c:6f:3a:ca:f3:62:11:b2:9e:9c:58:f2:c5:
d2:9a:ab:18:57:cb:09:1e:1a:28:ac:67:5e:48:02:
a3:88:7a:64:af:31:b1:0a:ba:47:07:97:32:ff:91:
02:32:74:86:05:04:87:ea:93:21:97:ee:0e:60:33:
e8:7f:a8:86:fe:cf:d7:f7:d2:77:c1:b7:27:06:73:
a2:6d:33:42:68:7d:0f:45:5f:b5:cc:11:25:bd:ca:
81:7f:09:37:8d:d5:6d:69:17:6e:0e:a5:f1:8f:6e:
a6:7d:1d:56:5b:14:d7:62:96:27:83:8d:91:07:de:
60:5d:0b:3c:53:49:2c:43:b7:ea:6b:a7:be:0b:62:
1b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:29:EE:1B:40:54:75:32:2D:0F:EB:14:AE:9C:9B:F9:79:05:AC:D3
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/_SnuG0BUdTItD-sUrpyb-XkFrNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.174.0/24
45.83.56.0/22
45.86.144.0/22
85.204.255.0/24
86.107.110.0/24
89.34.236.0/23
89.34.239.0/24
89.39.254.0/24
89.40.142.0/23
89.40.227.0/24
89.42.134.0/24
89.43.35.0/24
89.43.52.0/24
91.212.52.0/24
91.229.186.0/24
93.113.144.0/21
94.176.212.0/24
94.177.48.0/23
185.184.240.0/22
188.208.16.0/23
188.211.248.0/24
188.215.6.0/23
188.240.228.0/23
193.239.140.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:83:c8:b0:85:f7:76:1f:8b:3a:83:d0:31:6f:a9:ca:66:72:
19:de:0d:bf:bc:59:0e:b8:99:ba:a1:b1:07:2c:37:31:dd:33:
0d:e8:66:b8:40:05:01:91:3b:43:f4:9b:83:f0:ce:6e:ef:5b:
e2:d9:13:58:80:00:3e:4c:16:b2:a2:0f:54:d1:3f:8e:f9:0c:
ef:56:5d:98:76:ba:bf:fd:33:9f:08:85:43:cd:ed:ba:17:1a:
44:ce:c0:33:90:0d:a2:bf:af:2a:22:e1:47:43:78:87:d5:a3:
ff:8a:2d:af:da:fc:66:3b:13:36:46:2b:7e:f7:bc:ae:3e:42:
1f:fe:fe:cf:cb:ee:df:9c:af:14:19:14:5f:e3:ba:9a:0a:cc:
15:bc:31:03:c5:ce:c0:36:e6:55:cd:ea:24:61:0d:d0:8d:a2:
81:3f:33:08:c1:3c:56:db:f0:b5:4e:96:61:8b:85:e6:05:3c:
ee:68:4c:dd:36:c8:cc:64:2c:ad:10:91:79:53:4d:81:5d:c8:
b8:5f:91:c8:96:36:57:21:25:bc:ed:8a:d8:79:d0:ac:fd:00:
f4:e9:8c:5d:91:c5:de:d5:9c:35:f4:41:0f:48:e7:b9:2e:86:
de:a3:02:2e:ea:72:a2:a7:24:cd:0b:94:32:74:33:ec:e3:47:
fd:80:a1:dc
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgISAYVX9XHm9tZRhT+4W6AB9hpTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3
NjA1MTkwHhcNMjIxMjI4MDg1OTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDI5ZWUxYjQwNTQ3NTMyMmQwZmViMTRhZTljOWJmOTc5MDVhY2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuz0cNYSb9YGAjqIwMwsPtK3amhx
61FpHay0NB/MZP4XG05+essj3SfJ2rXbyQB+jfyY8wno0QdFOo4DksoDc5vs9WkF
BHyCvrCQQs9fCzd8uZ+/D9OzcjJCcRleCPgA/3ilLprcmdpMbt33xghET8uSG3io
VOgLVQxvOsrzYhGynpxY8sXSmqsYV8sJHhoorGdeSAKjiHpkrzGxCrpHB5cy/5EC
MnSGBQSH6pMhl+4OYDPof6iG/s/X99J3wbcnBnOibTNCaH0PRV+1zBElvcqBfwk3
jdVtaRduDqXxj26mfR1WWxTXYpYng42RB95gXQs8U0ksQ7fqa6e+C2Ib5wIDAQAB
o4ICmDCCApQwHQYDVR0OBBYEFP0p7htAVHUyLQ/rFK6cm/l5BazTMB8GA1UdIwQY
MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt
NzQwOGViOGJjNTg2LzEvX1NudUcwQlVkVEl0RC1zVXJweWItWGtGck5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2
LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBAAl
nK4DBAItUzgDBAItVpADBABVzP8DBABWa24DBAFZIuwDBABZIu8DBABZJ/4DBAFZ
KI4DBABZKOMDBABZKoYDBABZKyMDBABZKzQDBABb1DQDBABb5boDBANdcZADBABe
sNQDBAFesTADBAK5uPADBAG80BADBAC80/gDBAG81wYDBAG88OQDBAHB74wwDQYJ
KoZIhvcNAQELBQADggEBAMqDyLCF93YfizqD0DFvqcpmchneDb+8WQ64mbqhsQcs
NzHdMw3oZrhABQGRO0P0m4Pwzm7vW+LZE1iAAD5MFrKiD1TRP475DO9WXZh2ur/9
M58IhUPN7boXGkTOwDOQDaK/ryoi4UdDeIfVo/+KLa/a/GY7EzZGK373vK4+Qh/+
/s/L7t+crxQZFF/jupoKzBW8MQPFzsA25lXN6iRhDdCNooE/MwjBPFbb8LVOlmGL
heYFPO5oTN02yMxkLK0QkXlTTYFdyLhfkciWNlchJbztith50Kz9APTpjF2Rxd7V
nDX0QQ9I57kuht6jAi7qcqKnJM0LlDJ0M+zjR/2Aodw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:48 2023 by rpki-client on console-ams.rpki-client.org