Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/d_SCWPHbiZuPI0E1sqgI6-7axbA.roa
File: d_SCWPHbiZuPI0E1sqgI6-7axbA.roa (raw, json)
Hash identifier: KPyXIpu/UfQ/stngnEu/Jm2ACSZELfJbQ+9YUwddR8w=
Subject key identifier: 77:F4:82:58:F1:DB:89:9B:8F:23:41:35:B2:A8:08:EB:EE:DA:C5:B0
Certificate issuer: /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Certificate serial: 10B58B32
Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/d_SCWPHbiZuPI0E1sqgI6-7axbA.roa
Signing time: Tue 14 Jun 2022 09:18:00 +0000
ROA not before: Tue 14 Jun 2022 09:18:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35506
IP address blocks: 84.205.192.0/24 maxlen: 24
84.205.192.0/21 maxlen: 21
84.205.192.0/22 maxlen: 22
84.205.192.0/20 maxlen: 20
84.205.193.0/24 maxlen: 24
84.205.194.0/24 maxlen: 24
84.205.195.0/24 maxlen: 24
84.205.196.0/24 maxlen: 24
84.205.197.0/24 maxlen: 24
84.205.198.0/24 maxlen: 24
84.205.199.0/24 maxlen: 24
84.205.196.0/22 maxlen: 22
84.205.200.0/22 maxlen: 22
84.205.204.0/22 maxlen: 22
84.205.200.0/24 maxlen: 24
84.205.200.0/21 maxlen: 21
84.205.201.0/24 maxlen: 24
84.205.202.0/24 maxlen: 24
84.205.203.0/24 maxlen: 24
84.205.204.0/24 maxlen: 24
84.205.205.0/24 maxlen: 24
84.205.206.0/24 maxlen: 24
84.205.207.0/24 maxlen: 24
84.205.212.0/24 maxlen: 24
84.205.212.0/23 maxlen: 23
84.205.213.0/24 maxlen: 24
84.205.215.0/24 maxlen: 24
84.205.216.0/24 maxlen: 24
84.205.217.0/24 maxlen: 24
84.205.218.0/24 maxlen: 24
84.205.219.0/24 maxlen: 24
84.205.214.0/24 maxlen: 24
84.205.225.0/24 maxlen: 24
84.205.221.0/24 maxlen: 24
84.205.220.0/24 maxlen: 24
84.205.222.0/24 maxlen: 24
84.205.222.0/23 maxlen: 23
84.205.223.0/24 maxlen: 24
84.205.224.0/24 maxlen: 24
84.205.224.0/20 maxlen: 20
84.205.224.0/21 maxlen: 21
84.205.226.0/24 maxlen: 24
84.205.224.0/22 maxlen: 22
84.205.232.0/22 maxlen: 22
84.205.232.0/21 maxlen: 21
84.205.227.0/24 maxlen: 24
84.205.228.0/24 maxlen: 24
84.205.228.0/22 maxlen: 22
84.205.229.0/24 maxlen: 24
84.205.230.0/24 maxlen: 24
84.205.231.0/24 maxlen: 24
84.205.232.0/24 maxlen: 24
84.205.233.0/24 maxlen: 24
84.205.240.0/22 maxlen: 22
84.205.234.0/24 maxlen: 24
84.205.236.0/22 maxlen: 22
84.205.235.0/24 maxlen: 24
84.205.236.0/24 maxlen: 24
84.205.237.0/24 maxlen: 24
84.205.238.0/24 maxlen: 24
84.205.239.0/24 maxlen: 24
84.205.240.0/23 maxlen: 23
84.205.240.0/24 maxlen: 24
84.205.240.0/21 maxlen: 21
84.205.244.0/24 maxlen: 24
84.205.243.0/24 maxlen: 24
84.205.242.0/23 maxlen: 23
84.205.244.0/23 maxlen: 23
84.205.245.0/24 maxlen: 24
84.205.246.0/23 maxlen: 23
84.205.246.0/24 maxlen: 24
84.205.244.0/22 maxlen: 22
84.205.241.0/24 maxlen: 24
84.205.242.0/24 maxlen: 24
84.205.248.0/23 maxlen: 23
84.205.247.0/24 maxlen: 24
84.205.248.0/24 maxlen: 24
84.205.249.0/24 maxlen: 24
84.205.250.0/23 maxlen: 23
84.205.250.0/24 maxlen: 24
84.205.251.0/24 maxlen: 24
84.205.252.0/23 maxlen: 23
84.205.248.0/22 maxlen: 22
84.205.254.0/24 maxlen: 24
84.205.254.0/23 maxlen: 23
84.205.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280333106 (0x10b58b32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Validity
Not Before: Jun 14 09:18:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77f48258f1db899b8f234135b2a808ebeedac5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:53:50:77:d8:e9:74:90:85:15:16:02:d5:e6:
7d:3c:e1:55:b5:9b:9d:46:dc:f0:d5:ab:be:b0:ca:
eb:47:4a:4b:44:b5:60:92:8e:bd:fb:9f:ca:64:e7:
2e:05:28:36:dc:01:20:28:96:6d:d1:1a:00:5a:d5:
bb:0f:a7:23:7e:dd:33:42:e8:07:7f:ce:3d:f8:fb:
ba:c0:3e:25:89:07:a4:b7:03:5c:d0:91:14:01:8c:
9c:42:64:09:25:a7:91:a8:ce:43:86:aa:c3:76:e7:
f5:0d:43:18:b5:3b:f0:fd:35:0a:83:64:10:c3:92:
5b:bf:b4:3f:60:f8:3f:cd:f5:50:15:82:2c:ee:a6:
26:05:8f:7d:97:d6:20:c8:3b:63:55:32:6e:07:93:
09:18:a9:33:2c:87:a1:5b:a1:11:a7:c7:fa:b9:f0:
08:17:64:11:12:e6:28:0f:0a:8a:21:c2:15:3e:49:
0f:5f:e9:29:07:a4:5a:e8:97:3d:ef:07:94:62:76:
45:85:6d:9a:3f:3e:4a:aa:e7:ea:a0:b8:60:77:3c:
fc:b2:4a:76:75:ba:35:cd:85:44:dd:4a:4a:4d:67:
96:29:04:c3:a4:c6:61:4d:98:3a:66:88:b6:28:bf:
3b:80:05:e2:e2:3f:60:55:35:23:b8:cc:37:c2:ae:
5f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F4:82:58:F1:DB:89:9B:8F:23:41:35:B2:A8:08:EB:EE:DA:C5:B0
X509v3 Authority Key Identifier:
keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/d_SCWPHbiZuPI0E1sqgI6-7axbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.192.0/20
84.205.212.0-84.205.255.255
Signature Algorithm: sha256WithRSAEncryption
35:d0:21:f3:dc:32:da:5e:1a:ed:ee:3f:6f:36:29:16:90:de:
84:17:a6:d8:66:ed:9d:e8:95:e6:fc:89:48:6b:9e:0d:4d:69:
84:39:d3:bd:5d:75:2a:80:7c:f9:10:7c:88:2c:a8:19:81:ae:
72:94:53:b7:77:1a:23:84:a7:8b:a8:f0:30:a7:cd:07:79:2a:
b4:42:9f:29:e5:63:e9:7c:e4:ff:b9:db:b4:eb:a6:4f:55:d3:
c9:c3:c4:f9:41:a5:1e:1d:54:e0:23:d8:88:2c:66:11:97:35:
6c:cd:d5:87:20:f6:51:01:e2:e6:93:9c:15:56:ac:26:9e:08:
3a:ff:07:bd:f3:81:ff:55:a1:47:ad:b0:d7:2b:13:52:55:d0:
cb:20:dd:33:d8:f5:62:f0:d6:27:45:c4:2b:33:a8:96:8b:cb:
da:8e:83:9c:cf:91:c7:16:8d:c5:d6:a3:56:f2:72:0b:8d:cb:
ec:f4:5e:73:2e:5e:ce:00:51:17:1b:2a:fd:8e:22:06:7d:8d:
75:39:35:0a:6e:01:56:bc:46:ca:c9:6b:b6:f7:f2:a3:2a:63:
7b:ae:9a:79:14:f5:41:a8:7f:8a:95:c7:1c:00:e8:65:5c:34:
96:c4:57:09:3e:c0:d0:34:bf:ed:df:9f:97:38:4f:24:78:38:
ee:40:55:39
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIEELWLMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NWNjODgwZjBhMTJjN2I5NGY3MWQ5YjJlNWIwMjhhNzBkMWZhMzRhMB4XDTIyMDYx
NDA5MTgwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzdmNDgyNThmMWRi
ODk5YjhmMjM0MTM1YjJhODA4ZWJlZWRhYzViMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOFTUHfY6XSQhRUWAtXmfTzhVbWbnUbc8NWrvrDK60dKS0S1
YJKOvfufymTnLgUoNtwBICiWbdEaAFrVuw+nI37dM0LoB3/OPfj7usA+JYkHpLcD
XNCRFAGMnEJkCSWnkajOQ4aqw3bn9Q1DGLU78P01CoNkEMOSW7+0P2D4P831UBWC
LO6mJgWPfZfWIMg7Y1UybgeTCRipMyyHoVuhEafH+rnwCBdkERLmKA8KiiHCFT5J
D1/pKQekWuiXPe8HlGJ2RYVtmj8+Sqrn6qC4YHc8/LJKdnW6Nc2FRN1KSk1nlikE
w6TGYU2YOmaItii/O4AF4uI/YFU1I7jMN8KuXz8CAwEAAaOCAhYwggISMB0GA1Ud
DgQWBBR39IJY8duJm48jQTWyqAjr7trFsDAfBgNVHSMEGDAWgBQVzIgPChLHuU9x
2bLlsCinDR+jSjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZjeUlEd29TeDdsUGNkbXk1YkFvcHcwZm8wby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzYvNTk4NmYxLTg2M2YtNGVlYy04NTUxLTBhOGZlNjQzNGJmOC8x
L2RfU0NXUEhiaVp1UEkwRTFzcWdJNi03YXhiQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYv
NTk4NmYxLTg2M2YtNGVlYy04NTUxLTBhOGZlNjQzNGJmOC8xL0ZjeUlEd29TeDds
UGNkbXk1YkFvcHcwZm8wby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAs
BggrBgEFBQcBBwEB/wQdMBswGQQCAAEwEwMEBFTNwDALAwQCVM3UAwMBVMwwDQYJ
KoZIhvcNAQELBQADggEBADXQIfPcMtpeGu3uP282KRaQ3oQXpthm7Z3oleb8iUhr
ng1NaYQ5071ddSqAfPkQfIgsqBmBrnKUU7d3GiOEp4uo8DCnzQd5KrRCnynlY+l8
5P+527Trpk9V08nDxPlBpR4dVOAj2IgsZhGXNWzN1Ycg9lEB4uaTnBVWrCaeCDr/
B73zgf9VoUetsNcrE1JV0Msg3TPY9WLw1idFxCszqJaLy9qOg5zPkccWjcXWo1by
cguNy+z0XnMuXs4AURcbKv2OIgZ9jXU5NQpuAVa8RsrJa7b38qMqY3uumnkU9UGo
f4qVxxwA6GVcNJbEVwk+wNA0v+3fn5c4TyR4OO5AVTk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:29 2023 by rpki-client on console-fra.rpki-client.org