Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/Ie3mfZA79D1xWeufLRou-vZaeBM.roa
File: Ie3mfZA79D1xWeufLRou-vZaeBM.roa (raw, json)
Hash identifier: DExztwOAKLoFt3yd+x29D43iurGgZSiaLzJbhE3CVW8=
Subject key identifier: 21:ED:E6:7D:90:3B:F4:3D:71:59:EB:9F:2D:1A:2E:FA:F6:5A:78:13
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 0183B14435FA9C1FD4FC642459099A5B6F71
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/Ie3mfZA79D1xWeufLRou-vZaeBM.roa
Signing time: Fri 07 Oct 2022 07:06:20 +0000
ROA not before: Fri 07 Oct 2022 07:06:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44092
IP address blocks: 185.191.105.0/24 maxlen: 24
185.191.104.0/24 maxlen: 24
185.191.106.0/24 maxlen: 24
185.191.107.0/24 maxlen: 24
188.191.56.0/22 maxlen: 24
188.191.56.0/24 maxlen: 24
188.191.57.0/24 maxlen: 24
188.191.58.0/24 maxlen: 24
188.191.59.0/24 maxlen: 24
185.56.156.0/22 maxlen: 24
185.215.144.0/24 maxlen: 24
77.242.130.0/24 maxlen: 24
77.242.128.0/24 maxlen: 24
77.242.129.0/24 maxlen: 24
77.242.128.0/20 maxlen: 24
185.215.145.0/24 maxlen: 24
77.242.131.0/24 maxlen: 24
77.242.132.0/24 maxlen: 24
185.248.227.0/24 maxlen: 24
45.145.201.0/24 maxlen: 24
45.145.202.0/24 maxlen: 24
45.145.200.0/24 maxlen: 24
45.145.203.0/24 maxlen: 24
89.37.71.0/24 maxlen: 24
89.37.70.0/24 maxlen: 24
89.37.70.0/23 maxlen: 24
77.242.134.0/24 maxlen: 24
77.242.133.0/24 maxlen: 24
185.215.147.0/24 maxlen: 24
185.215.146.0/24 maxlen: 24
77.242.137.0/24 maxlen: 24
77.242.135.0/24 maxlen: 24
77.242.136.0/24 maxlen: 24
77.242.138.0/24 maxlen: 24
77.242.139.0/24 maxlen: 24
77.242.140.0/24 maxlen: 24
77.242.141.0/24 maxlen: 24
77.242.143.0/24 maxlen: 24
77.242.142.0/24 maxlen: 24
185.171.232.0/24 maxlen: 24
185.171.233.0/24 maxlen: 24
185.171.235.0/24 maxlen: 24
185.171.234.0/24 maxlen: 24
185.219.117.0/24 maxlen: 24
185.219.118.0/24 maxlen: 24
185.219.116.0/24 maxlen: 24
185.219.119.0/24 maxlen: 24
2a02:53e0::/32 maxlen: 32
2a0b:7b80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b1:44:35:fa:9c:1f:d4:fc:64:24:59:09:9a:5b:6f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Oct 7 07:06:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21ede67d903bf43d7159eb9f2d1a2efaf65a7813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:df:1d:ad:81:39:9d:73:3b:8e:19:13:35:
f9:0c:16:9a:c1:29:0a:85:33:2b:62:1f:0c:0e:e0:
44:4b:84:78:2e:3c:d0:fc:39:3c:45:1e:f8:db:b8:
c3:2d:98:c2:37:ee:b3:37:29:93:9b:18:fc:0f:87:
a0:93:89:3e:b0:19:67:f3:81:11:66:75:f6:d7:f9:
1d:a5:57:f3:68:c4:89:a4:4d:85:11:ff:20:5f:b4:
4d:e4:2f:a7:2c:93:1e:89:c7:41:32:18:50:ba:37:
62:f7:c1:5d:16:78:88:62:3b:dd:aa:6b:0e:00:a5:
e2:bd:39:d6:e7:fa:9b:8f:e9:5a:26:ef:31:27:fa:
ff:07:fa:19:7e:93:89:36:b8:03:e8:dd:b7:cc:b6:
af:2b:6e:5c:42:5e:74:f8:04:60:10:ca:da:8e:8f:
90:90:80:03:39:30:67:b0:07:89:81:c9:14:7d:d5:
22:5d:e9:3f:4c:68:8f:eb:5e:64:4c:78:db:4a:6c:
8d:d0:5f:97:90:5b:b5:7b:86:dd:54:ac:35:aa:36:
a2:63:ce:c5:7f:bd:a4:64:1e:1a:dd:e3:8c:42:bc:
1b:55:b4:48:4b:37:64:d3:28:78:59:fb:90:4a:25:
73:21:a6:3a:9e:a1:9a:20:b8:88:29:b1:c1:ea:b1:
c7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:ED:E6:7D:90:3B:F4:3D:71:59:EB:9F:2D:1A:2E:FA:F6:5A:78:13
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/Ie3mfZA79D1xWeufLRou-vZaeBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.200.0/22
77.242.128.0/20
89.37.70.0/23
185.56.156.0/22
185.171.232.0/22
185.191.104.0/22
185.215.144.0/22
185.219.116.0/22
185.248.227.0/24
188.191.56.0/22
IPv6:
2a02:53e0::/32
2a0b:7b80::/29
Signature Algorithm: sha256WithRSAEncryption
c1:15:22:3a:08:2b:93:11:8d:59:51:80:e3:bc:55:8b:40:52:
50:79:f4:83:85:2c:3b:c9:0e:bf:81:ee:22:13:3b:98:53:fa:
50:d4:f1:9c:de:e6:61:85:32:88:f1:e0:7b:2c:bf:2a:2d:7c:
1a:99:c2:33:f0:e8:5a:a5:89:89:e9:83:ee:69:92:0b:92:71:
5d:b1:91:5f:76:04:59:4b:6e:87:9a:e9:f4:61:ec:23:7a:81:
0a:94:7b:12:f1:64:ee:00:d6:f3:74:95:d6:e4:c3:2d:1d:90:
0e:e7:29:b9:16:e1:6f:ab:45:67:af:13:62:ab:a0:38:0e:89:
d3:ff:1f:8b:a6:d9:a0:ab:26:cb:93:dc:e2:8a:a7:70:5d:38:
22:18:d1:8c:2e:ad:36:19:82:81:27:5e:4f:ad:5e:4f:d6:af:
1d:c8:a5:e1:5a:09:cf:43:54:8a:34:a1:ba:d9:2a:75:df:12:
29:fe:26:49:92:bd:92:a6:1d:c5:94:0a:67:7e:ac:af:ae:91:
fc:ff:2e:9a:28:10:b9:b2:7c:2b:08:ca:56:38:a7:f3:89:8f:
db:a5:ae:4a:fa:b6:06:03:d1:51:10:39:a4:5a:75:91:1d:e6:
92:1f:8b:a9:6d:6a:59:1e:a9:12:88:cb:17:d2:ef:ae:7c:3e:
a3:a0:8b:60
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgISAYOxRDX6nB/U/GQkWQmaW29xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWFhZGM1NjhmNmM5MjhmZDc2NGQ0MjFkNDJjNzFjZjU3
OTE5NTQwHhcNMjIxMDA3MDcwNjIwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWVkZTY3ZDkwM2JmNDNkNzE1OWViOWYyZDFhMmVmYWY2NWE3ODEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1LfHa2BOZ1zO44ZEzX5DBaawSkK
hTMrYh8MDuBES4R4LjzQ/Dk8RR7427jDLZjCN+6zNymTmxj8D4egk4k+sBln84ER
ZnX21/kdpVfzaMSJpE2FEf8gX7RN5C+nLJMeicdBMhhQujdi98FdFniIYjvdqmsO
AKXivTnW5/qbj+laJu8xJ/r/B/oZfpOJNrgD6N23zLavK25cQl50+ARgEMrajo+Q
kIADOTBnsAeJgckUfdUiXek/TGiP615kTHjbSmyN0F+XkFu1e4bdVKw1qjaiY87F
f72kZB4a3eOMQrwbVbRISzdk0yh4WfuQSiVzIaY6nqGaILiIKbHB6rHHBQIDAQAB
o4ICVTCCAlEwHQYDVR0OBBYEFCHt5n2QO/Q9cVnrny0aLvr2WngTMB8GA1UdIwQY
MBaAFIWqrcVo9sko/XZNQh1Cxxz1eRlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMt
NDVlYTM4ZGEyMjE4LzEvSWUzbWZaQTc5RDF4V2V1ZkxSb3UtdlphZUJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMtNDVlYTM4ZGEyMjE4
LzEvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBCBAIAATA8AwQCLZHIAwQE
TfKAAwQBWSVGAwQCuTicAwQCuavoAwQCub9oAwQCudeQAwQCudt0AwQAufjjAwQC
vL84MBQEAgACMA4DBQAqAlPgAwUDKgt7gDANBgkqhkiG9w0BAQsFAAOCAQEAwRUi
OggrkxGNWVGA47xVi0BSUHn0g4UsO8kOv4HuIhM7mFP6UNTxnN7mYYUyiPHgeyy/
Ki18GpnCM/DoWqWJiemD7mmSC5JxXbGRX3YEWUtuh5rp9GHsI3qBCpR7EvFk7gDW
83SV1uTDLR2QDucpuRbhb6tFZ68TYqugOA6J0/8fi6bZoKsmy5Pc4oqncF04IhjR
jC6tNhmCgSdeT61eT9avHcil4VoJz0NUijShutkqdd8SKf4mSZK9kqYdxZQKZ36s
r66R/P8umigQubJ8KwjKVjin84mP26WuSvq2BgPRURA5pFp1kR3mkh+LqW1qWR6p
EojLF9Lvrnw+o6CLYA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:29 2024 by rpki-client on console-ams.rpki-client.org