Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/13JJ8fCfNvki2i6M8Q-GjxREz5I.roa
File: 13JJ8fCfNvki2i6M8Q-GjxREz5I.roa (raw, json)
Hash identifier: zKhHwvIKNLwzCaUQEb4D59aKTaVPM9X8A3S87+VVMxI=
Subject key identifier: D7:72:49:F1:F0:9F:36:F9:22:DA:2E:8C:F1:0F:86:8F:14:44:CF:92
Certificate issuer: /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Certificate serial: 1BF69212
Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/13JJ8fCfNvki2i6M8Q-GjxREz5I.roa
Signing time: Thu 03 Feb 2022 22:14:09 +0000
ROA not before: Thu 03 Feb 2022 22:14:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8685
IP address blocks: 212.2.192.0/19 maxlen: 24
212.2.192.0/21 maxlen: 21
212.2.192.0/24 maxlen: 24
212.2.194.0/24 maxlen: 24
212.2.193.0/24 maxlen: 24
212.2.199.0/24 maxlen: 24
212.2.198.0/24 maxlen: 24
212.2.197.0/24 maxlen: 24
212.2.196.0/24 maxlen: 24
212.2.195.0/24 maxlen: 24
212.2.206.0/24 maxlen: 24
212.2.204.0/22 maxlen: 22
212.2.205.0/24 maxlen: 24
212.2.204.0/23 maxlen: 23
212.2.204.0/24 maxlen: 24
212.2.213.0/24 maxlen: 24
212.2.212.0/24 maxlen: 24
212.2.212.0/23 maxlen: 23
212.2.211.0/24 maxlen: 24
212.2.210.0/24 maxlen: 24
212.2.209.0/24 maxlen: 24
212.2.208.0/24 maxlen: 24
212.2.216.0/21 maxlen: 21
212.2.217.0/24 maxlen: 24
212.2.215.0/24 maxlen: 24
212.2.222.0/24 maxlen: 24
82.151.131.0/24 maxlen: 24
82.151.128.0/19 maxlen: 24
82.151.128.0/20 maxlen: 20
82.151.132.0/24 maxlen: 24
82.151.138.0/24 maxlen: 24
82.151.134.0/24 maxlen: 24
82.151.133.0/24 maxlen: 24
82.151.144.0/20 maxlen: 20
82.151.144.0/24 maxlen: 24
82.151.143.0/24 maxlen: 24
82.151.142.0/24 maxlen: 24
82.151.140.0/24 maxlen: 24
185.58.244.0/22 maxlen: 24
94.102.64.0/20 maxlen: 24
94.102.64.0/21 maxlen: 21
94.102.70.0/23 maxlen: 24
94.102.72.0/21 maxlen: 24
94.102.76.0/24 maxlen: 24
212.58.31.0/24 maxlen: 24
212.58.28.0/24 maxlen: 24
81.21.174.0/24 maxlen: 24
81.21.166.0/24 maxlen: 24
81.21.161.0/24 maxlen: 24
81.21.160.0/20 maxlen: 24
81.21.160.0/21 maxlen: 21
81.21.170.0/24 maxlen: 24
81.21.169.0/24 maxlen: 24
81.21.168.0/21 maxlen: 24
81.21.167.0/24 maxlen: 24
82.151.154.0/23 maxlen: 24
212.58.0.0/19 maxlen: 24
212.58.0.0/24 maxlen: 24
212.58.0.0/21 maxlen: 21
212.58.8.0/21 maxlen: 24
212.58.16.0/24 maxlen: 24
212.58.16.0/21 maxlen: 24
212.58.13.0/24 maxlen: 24
212.58.24.0/21 maxlen: 24
212.58.18.0/24 maxlen: 24
213.155.96.0/19 maxlen: 24
213.155.96.0/21 maxlen: 21
213.155.104.0/21 maxlen: 24
213.155.103.0/24 maxlen: 24
213.155.99.0/24 maxlen: 24
213.155.112.0/21 maxlen: 24
213.155.124.0/22 maxlen: 24
213.155.122.0/23 maxlen: 24
213.155.121.0/24 maxlen: 24
213.155.120.0/23 maxlen: 24
2a02:480::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469144082 (0x1bf69212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Validity
Not Before: Feb 3 22:14:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d77249f1f09f36f922da2e8cf10f868f1444cf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:d7:ef:10:29:00:92:55:c8:c3:62:b9:cd:
65:4d:82:d6:06:c0:fe:82:94:9e:91:19:c5:4a:c5:
c2:8c:a7:fb:94:93:3d:64:8c:3c:14:db:5b:87:b9:
9f:4b:49:65:0f:14:2c:36:c4:d6:8d:3c:03:be:2f:
38:ef:38:e8:18:db:ac:4b:e1:1c:2c:84:c4:ee:4f:
0d:da:47:a8:ac:b5:4b:a7:7e:1b:09:97:f4:09:30:
96:42:f8:d9:ba:b9:18:81:87:fa:1e:ed:b6:01:7d:
24:46:da:29:d2:95:f7:4c:71:5b:e7:10:23:56:fe:
f0:8a:a3:58:83:7c:c7:0e:39:75:8a:71:b4:99:83:
21:ec:36:12:a4:db:84:9d:23:ad:b5:41:f5:10:5c:
d0:ca:7d:bc:73:6b:70:7d:68:de:fd:ce:91:a2:a9:
9c:0f:3d:15:35:79:fb:8f:64:2d:bf:ae:84:0c:ef:
92:f9:bd:5a:33:7f:71:ae:82:b8:f4:8a:a6:b3:c2:
37:e1:f5:5e:75:ad:75:85:ca:ed:fb:a2:25:93:1c:
14:49:93:07:e1:73:a0:a5:4e:4c:b0:42:3c:4d:52:
d3:ea:34:a6:26:2f:a5:59:cc:15:5c:14:9a:1e:f8:
c9:f2:f5:6d:fb:43:df:36:98:0a:42:9d:57:16:9b:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:72:49:F1:F0:9F:36:F9:22:DA:2E:8C:F1:0F:86:8F:14:44:CF:92
X509v3 Authority Key Identifier:
keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/13JJ8fCfNvki2i6M8Q-GjxREz5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.160.0/20
82.151.128.0/19
94.102.64.0/20
185.58.244.0/22
212.2.192.0/19
212.58.0.0/19
213.155.96.0/19
IPv6:
2a02:480::/32
Signature Algorithm: sha256WithRSAEncryption
80:ac:65:e3:ee:8b:11:bd:78:35:56:f7:9f:72:58:fa:89:05:
45:d3:63:1a:58:4b:20:cf:b9:76:1d:e5:49:5f:c4:e3:07:fc:
0a:cc:ba:2d:48:c7:61:d3:58:ef:b6:39:ba:8f:f9:e0:7c:20:
22:ca:d6:a1:fd:f2:30:c1:f5:82:e6:13:96:3f:b1:5e:36:a5:
3d:a6:fc:e6:7f:4c:d9:98:0e:db:18:f2:e1:d8:65:c0:2e:02:
7e:78:4f:05:10:0b:b5:33:8e:94:3f:ce:fc:0c:91:1f:bb:3c:
08:40:75:ff:8e:9b:d6:b2:7d:40:6c:15:72:40:67:5d:2f:eb:
54:e6:26:7e:d4:c0:03:f7:56:0f:0c:86:08:d5:e3:18:a7:3d:
5f:1f:73:1f:bf:64:23:b1:da:ed:1b:f7:19:ac:ed:84:58:17:
f8:b3:59:cb:4d:c4:c3:56:6f:cf:57:02:f9:c5:a6:c7:72:52:
d5:df:97:91:b8:82:97:73:96:fe:49:89:3f:18:82:be:a9:52:
80:ab:b8:9b:a1:97:57:f5:3f:c4:74:55:ef:ed:ca:05:85:85:
83:e8:9a:8a:b2:97:62:c8:3c:f6:4e:a2:c9:fd:c7:b0:7b:3a:
bb:6d:ca:94:f8:2a:bf:62:4d:e5:f6:7c:96:25:57:fd:d5:42:
74:be:05:0c
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIEG/aSEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MDc0ZGI5NjQwMmZmNWNmMTg3NTY0NTYwZWE4ZjEzZWVlYjVmZmViMB4XDTIyMDIw
MzIyMTQwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDc3MjQ5ZjFmMDlm
MzZmOTIyZGEyZThjZjEwZjg2OGYxNDQ0Y2Y5MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKHX1+8QKQCSVcjDYrnNZU2C1gbA/oKUnpEZxUrFwoyn+5ST
PWSMPBTbW4e5n0tJZQ8ULDbE1o08A74vOO846BjbrEvhHCyExO5PDdpHqKy1S6d+
GwmX9AkwlkL42bq5GIGH+h7ttgF9JEbaKdKV90xxW+cQI1b+8IqjWIN8xw45dYpx
tJmDIew2EqTbhJ0jrbVB9RBc0Mp9vHNrcH1o3v3OkaKpnA89FTV5+49kLb+uhAzv
kvm9WjN/ca6CuPSKprPCN+H1XnWtdYXK7fuiJZMcFEmTB+FzoKVOTLBCPE1S0+o0
piYvpVnMFVwUmh74yfL1bftD3zaYCkKdVxabEJsCAwEAAaOCAjwwggI4MB0GA1Ud
DgQWBBTXcknx8J82+SLaLozxD4aPFETPkjAfBgNVHSMEGDAWgBQQdNuWQC/1zxh1
ZFYOqPE+7rX/6zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VIVGJsa0F2OWM4WWRXUldEcWp4UHU2MV8tcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDMvMWUxZDY5LTBiZmQtNDBhZi04OGIxLWFiNDBiNThhMjg5Mi8x
LzEzSko4ZkNmTnZraTJpNk04US1HanhSRXo1SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMv
MWUxZDY5LTBiZmQtNDBhZi04OGIxLWFiNDBiNThhMjg5Mi8xL0VIVGJsa0F2OWM4
WWRXUldEcWp4UHU2MV8tcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBS
BggrBgEFBQcBBwEB/wRDMEEwMAQCAAEwKgMEBFEVoAMEBVKXgAMEBF5mQAMEArk6
9AMEBdQCwAMEBdQ6AAMEBdWbYDANBAIAAjAHAwUAKgIEgDANBgkqhkiG9w0BAQsF
AAOCAQEAgKxl4+6LEb14NVb3n3JY+okFRdNjGlhLIM+5dh3lSV/E4wf8Csy6LUjH
YdNY77Y5uo/54HwgIsrWof3yMMH1guYTlj+xXjalPab85n9M2ZgO2xjy4dhlwC4C
fnhPBRALtTOOlD/O/AyRH7s8CEB1/46b1rJ9QGwVckBnXS/rVOYmftTAA/dWDwyG
CNXjGKc9Xx9zH79kI7Ha7Rv3GazthFgX+LNZy03Ew1Zvz1cC+cWmx3JS1d+XkbiC
l3OW/kmJPxiCvqlSgKu4m6GXV/U/xHRV7+3KBYWFg+iairKXYsg89k6iyf3HsHs6
u23KlPgqv2JN5fZ8liVX/dVCdL4FDA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:11 2023 by rpki-client on console-fra.rpki-client.org