Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/s3YEdsc9JJ6b46ROxvljzQ_R0Wg.roa
File: s3YEdsc9JJ6b46ROxvljzQ_R0Wg.roa (raw, json)
Hash identifier: AAQ9gX3FYh9+3kmt19QUOiSIG3OHZxCyod+/8vSjAZo=
Subject key identifier: B3:76:04:76:C7:3D:24:9E:9B:E3:A4:4E:C6:F9:63:CD:0F:D1:D1:68
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 018529EDC25F2151D45BBCDB2F703CA369B4
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/s3YEdsc9JJ6b46ROxvljzQ_R0Wg.roa
Signing time: Mon 19 Dec 2022 10:28:45 +0000
ROA not before: Mon 19 Dec 2022 10:28:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49367
IP address blocks: 89.43.52.0/24 maxlen: 24
188.215.7.0/24 maxlen: 24
188.215.6.0/23 maxlen: 23
188.215.6.0/24 maxlen: 24
85.204.255.0/24 maxlen: 24
89.34.236.0/23 maxlen: 23
89.34.239.0/24 maxlen: 24
188.208.16.0/23 maxlen: 23
89.43.34.0/23 maxlen: 23
94.176.212.0/24 maxlen: 24
89.39.254.0/24 maxlen: 24
86.107.110.0/24 maxlen: 24
185.184.240.0/22 maxlen: 22
188.211.248.0/24 maxlen: 24
94.177.48.0/23 maxlen: 23
193.239.140.0/23 maxlen: 23
91.212.52.0/24 maxlen: 24
188.240.229.0/24 maxlen: 24
188.240.228.0/23 maxlen: 23
37.156.174.0/24 maxlen: 24
188.240.228.0/24 maxlen: 24
89.40.142.0/23 maxlen: 23
45.86.144.0/22 maxlen: 22
91.229.186.0/24 maxlen: 24
45.83.56.0/22 maxlen: 22
93.113.145.0/24 maxlen: 24
93.113.144.0/21 maxlen: 21
93.113.144.0/22 maxlen: 22
93.113.144.0/24 maxlen: 24
93.113.147.0/24 maxlen: 24
93.113.146.0/24 maxlen: 24
93.113.149.0/24 maxlen: 24
93.113.148.0/24 maxlen: 24
93.113.150.0/24 maxlen: 24
93.113.151.0/24 maxlen: 24
89.42.134.0/24 maxlen: 24
89.40.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:ed:c2:5f:21:51:d4:5b:bc:db:2f:70:3c:a3:69:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Dec 19 10:28:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3760476c73d249e9be3a44ec6f963cd0fd1d168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:04:e9:65:86:e6:62:94:6b:6e:2f:35:de:96:
cb:94:2f:df:fe:9a:5b:c0:1e:22:fb:61:9a:ae:ee:
60:66:e5:68:41:54:f4:b8:2f:1b:67:eb:65:9f:9a:
04:de:bb:4e:ec:d0:e1:2a:5e:ce:84:73:9f:99:44:
94:35:4e:de:f4:4a:52:9f:07:51:e9:fe:ce:3f:67:
bb:43:53:44:41:e1:e7:04:4d:36:4e:a3:a6:b9:d6:
49:f1:4f:47:69:30:4a:7f:c9:36:c5:ef:6a:3e:59:
dd:2c:49:65:a5:7e:02:85:65:46:6a:02:91:d8:d2:
a8:d3:02:28:50:ac:82:a8:f7:1c:1c:53:6d:93:dd:
83:56:5f:1f:f7:23:4b:df:32:dc:81:f6:36:ce:18:
4c:5f:fe:86:41:9b:e0:97:86:ec:6f:9a:84:01:46:
bd:0b:50:a1:ae:d2:41:4f:fc:b4:e2:c4:d2:aa:d6:
65:ff:f2:87:f0:73:cb:4b:e8:c3:36:77:af:38:eb:
3c:ac:87:51:87:48:4b:b9:46:8a:ae:24:50:e3:26:
66:e1:be:fb:4a:99:60:73:a9:0a:45:10:b6:9a:50:
ef:57:a3:06:a8:b1:cb:d5:f2:c7:7d:4a:4a:ea:e4:
35:ee:aa:d9:87:4b:fe:85:a7:d1:50:7e:b4:2b:a5:
eb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:76:04:76:C7:3D:24:9E:9B:E3:A4:4E:C6:F9:63:CD:0F:D1:D1:68
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/s3YEdsc9JJ6b46ROxvljzQ_R0Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.174.0/24
45.83.56.0/22
45.86.144.0/22
85.204.255.0/24
86.107.110.0/24
89.34.236.0/23
89.34.239.0/24
89.39.254.0/24
89.40.142.0/23
89.40.227.0/24
89.42.134.0/24
89.43.34.0/23
89.43.52.0/24
91.212.52.0/24
91.229.186.0/24
93.113.144.0/21
94.176.212.0/24
94.177.48.0/23
185.184.240.0/22
188.208.16.0/23
188.211.248.0/24
188.215.6.0/23
188.240.228.0/23
193.239.140.0/23
Signature Algorithm: sha256WithRSAEncryption
19:75:70:55:3b:98:3d:ce:7c:a5:2b:d9:a5:b4:fd:ab:94:d0:
91:3f:f9:9c:da:a8:a1:11:c8:df:a5:8a:c1:f6:57:11:e6:ab:
87:73:81:e3:36:e0:6a:d1:27:51:e5:b7:21:84:3f:df:82:7b:
87:ff:0a:d4:5e:54:46:82:51:58:4b:e3:a1:eb:22:76:87:64:
d6:9f:ec:77:5c:c2:7a:88:1e:95:ad:aa:ba:6c:9d:6a:7d:73:
96:88:c3:34:b4:7f:09:a1:f4:38:be:63:af:a5:df:43:34:e4:
0f:f5:5f:82:a1:31:61:fa:21:3e:ba:cd:e2:5d:c0:d2:4d:56:
3e:75:84:fe:db:72:08:5b:04:28:63:8e:3f:3c:3f:11:05:50:
6e:25:1f:8e:0e:7b:1c:35:17:95:dd:8b:9e:a3:63:dd:57:0e:
06:21:c8:26:24:53:99:c6:77:95:29:6f:d4:7e:00:ff:cc:bc:
d9:37:e6:7f:47:23:1c:dd:3f:1e:cc:ef:0b:b5:4e:b4:28:80:
ed:78:27:1a:8d:14:06:76:c2:a8:9d:8b:26:2c:99:ed:47:1b:
5b:ff:91:f8:36:a3:75:94:65:e9:f4:bd:78:4c:ab:8a:df:3b:
15:62:ee:80:61:61:b8:d1:8d:94:f9:d7:f4:29:18:69:28:0f:
62:0d:6a:23
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgISAYUp7cJfIVHUW7zbL3A8o2m0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3
NjA1MTkwHhcNMjIxMjE5MTAyODQ1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzc2MDQ3NmM3M2QyNDllOWJlM2E0NGVjNmY5NjNjZDBmZDFkMTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQTpZYbmYpRrbi813pbLlC/f/ppb
wB4i+2Garu5gZuVoQVT0uC8bZ+tln5oE3rtO7NDhKl7OhHOfmUSUNU7e9EpSnwdR
6f7OP2e7Q1NEQeHnBE02TqOmudZJ8U9HaTBKf8k2xe9qPlndLEllpX4ChWVGagKR
2NKo0wIoUKyCqPccHFNtk92DVl8f9yNL3zLcgfY2zhhMX/6GQZvgl4bsb5qEAUa9
C1ChrtJBT/y04sTSqtZl//KH8HPLS+jDNnevOOs8rIdRh0hLuUaKriRQ4yZm4b77
Splgc6kKRRC2mlDvV6MGqLHL1fLHfUpK6uQ17qrZh0v+hafRUH60K6XrfwIDAQAB
o4ICmDCCApQwHQYDVR0OBBYEFLN2BHbHPSSem+OkTsb5Y80P0dFoMB8GA1UdIwQY
MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt
NzQwOGViOGJjNTg2LzEvczNZRWRzYzlKSjZiNDZST3h2bGp6UV9SMFdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2
LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBAAl
nK4DBAItUzgDBAItVpADBABVzP8DBABWa24DBAFZIuwDBABZIu8DBABZJ/4DBAFZ
KI4DBABZKOMDBABZKoYDBAFZKyIDBABZKzQDBABb1DQDBABb5boDBANdcZADBABe
sNQDBAFesTADBAK5uPADBAG80BADBAC80/gDBAG81wYDBAG88OQDBAHB74wwDQYJ
KoZIhvcNAQELBQADggEBABl1cFU7mD3OfKUr2aW0/auU0JE/+ZzaqKERyN+lisH2
VxHmq4dzgeM24GrRJ1HltyGEP9+Ce4f/CtReVEaCUVhL46HrInaHZNaf7HdcwnqI
HpWtqrpsnWp9c5aIwzS0fwmh9Di+Y6+l30M05A/1X4KhMWH6IT66zeJdwNJNVj51
hP7bcghbBChjjj88PxEFUG4lH44Oexw1F5Xdi56jY91XDgYhyCYkU5nGd5Upb9R+
AP/MvNk35n9HIxzdPx7M7wu1TrQogO14JxqNFAZ2wqidiyYsme1HG1v/kfg2o3WU
Zen0vXhMq4rfOxVi7oBhYbjRjZT51/QpGGkoD2INaiM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:06 2024 by rpki-client on console-ams.rpki-client.org