Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/_OY2PddnAO5rBRRVHaqd3bLA7MQ.roa
File: _OY2PddnAO5rBRRVHaqd3bLA7MQ.roa (raw, json)
Hash identifier: sm3FS4JxjMMyUnSMCeNg9MCqiQMVlnzjrxv8RZ3AtFM=
Subject key identifier: FC:E6:36:3D:D7:67:00:EE:6B:05:14:55:1D:AA:9D:DD:B2:C0:EC:C4
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 09911AB9
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/_OY2PddnAO5rBRRVHaqd3bLA7MQ.roa
Signing time: Sat 01 Jan 2022 04:03:24 +0000
ROA not before: Sat 01 Jan 2022 04:03:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60824
IP address blocks: 129.233.192.0/24 maxlen: 24
129.233.194.0/23 maxlen: 23
129.233.193.0/24 maxlen: 24
129.233.196.0/24 maxlen: 24
192.44.7.0/24 maxlen: 24
153.96.60.0/24 maxlen: 24
192.44.14.0/24 maxlen: 24
192.44.16.0/24 maxlen: 24
153.96.70.0/23 maxlen: 23
192.44.22.0/24 maxlen: 24
192.44.19.0/24 maxlen: 24
153.96.72.0/22 maxlen: 22
192.44.27.0/24 maxlen: 24
153.96.88.0/22 maxlen: 22
153.96.28.0/22 maxlen: 22
192.107.236.0/24 maxlen: 24
192.107.235.0/24 maxlen: 24
153.96.32.0/21 maxlen: 21
153.96.204.0/23 maxlen: 23
153.96.206.0/24 maxlen: 24
153.96.114.0/23 maxlen: 23
153.96.128.0/22 maxlen: 22
194.113.96.0/22 maxlen: 22
2a03:db80:4810::/48 maxlen: 48
2a03:db80:4814::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160504505 (0x9911ab9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jan 1 04:03:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fce6363dd76700ee6b0514551daa9dddb2c0ecc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5c:9c:80:51:5a:37:82:e0:d6:c6:d0:58:74:
ea:2e:0b:0d:ca:e5:4e:0b:60:55:2f:c6:4e:4a:be:
44:cb:89:3c:37:4c:2e:c0:1f:cc:dd:22:51:bf:99:
1c:54:2c:c0:0f:a4:8d:ae:6b:bd:ac:10:05:fa:7b:
82:b9:4a:4d:1e:c6:40:be:d8:d4:a6:e3:d4:54:81:
c2:de:59:89:ef:86:d2:db:4e:c9:02:74:51:b2:7e:
10:e1:7e:8d:33:60:ba:1c:46:29:58:9b:69:fc:43:
6e:2d:49:60:39:0d:fa:ad:45:35:f2:57:a2:8f:74:
12:e4:03:bd:ee:b5:34:34:6c:1a:0d:ea:f0:53:88:
fd:9f:a2:63:69:7f:fd:f5:39:fc:9f:86:26:28:08:
6a:42:3f:30:e3:ae:86:86:23:55:ae:98:cd:89:29:
b7:9e:9b:67:88:ee:70:60:2f:d0:02:ae:ec:68:9e:
cb:ae:7a:fe:a5:b5:5c:96:91:86:56:7c:0f:eb:a6:
12:a5:94:a5:2a:c1:fd:1e:1c:fb:8e:1d:f3:0d:32:
5c:a4:e1:9b:11:a5:33:41:86:88:4b:f9:d4:0c:0c:
74:11:0e:9a:fc:9c:39:94:1d:85:a9:c7:ff:de:c2:
fd:4a:fd:3e:09:9c:b8:b3:b5:15:f1:b2:6a:66:06:
e9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E6:36:3D:D7:67:00:EE:6B:05:14:55:1D:AA:9D:DD:B2:C0:EC:C4
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/_OY2PddnAO5rBRRVHaqd3bLA7MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.233.192.0-129.233.196.255
153.96.28.0-153.96.39.255
153.96.60.0/24
153.96.70.0-153.96.75.255
153.96.88.0/22
153.96.114.0/23
153.96.128.0/22
153.96.204.0-153.96.206.255
192.44.7.0/24
192.44.14.0/24
192.44.16.0/24
192.44.19.0/24
192.44.22.0/24
192.44.27.0/24
192.107.235.0-192.107.236.255
194.113.96.0/22
IPv6:
2a03:db80:4810::/48
2a03:db80:4814::/48
Signature Algorithm: sha256WithRSAEncryption
93:c8:f7:e9:8a:83:57:13:5a:77:5d:7d:37:d1:67:7f:97:b6:
73:ec:fa:0b:8c:f3:4c:ce:49:3e:3b:13:a1:da:35:16:23:c2:
32:cf:25:80:a5:06:83:d7:6e:f3:15:11:ec:cc:d1:50:32:3c:
fb:52:aa:72:d4:4d:3b:2c:d2:c0:ee:4a:ed:12:f6:37:2f:51:
d7:2c:c9:41:41:2f:b4:e4:88:64:d3:62:cb:1d:5e:93:32:5e:
48:11:5e:ff:93:30:71:4c:fb:03:8f:1d:ed:74:a7:31:ef:89:
4e:6a:80:f6:05:1c:5b:77:1f:99:64:27:29:1d:89:f1:b5:87:
eb:10:07:6e:f1:11:e3:df:5d:6a:c6:11:f4:b3:fa:a4:0e:f6:
c5:85:c8:e0:02:a8:16:68:08:23:09:12:d6:d0:80:32:15:8e:
6d:ab:2e:08:72:34:56:9d:7a:cd:21:9d:14:da:85:8b:9f:ec:
b8:17:d2:7a:15:3a:2b:87:1b:de:e9:cc:b8:9c:f7:14:8b:1c:
1f:fc:af:16:54:6e:b1:95:2c:44:cc:c1:04:3d:36:80:93:8f:
98:e4:84:ba:5f:67:ce:89:f6:74:79:fb:33:3b:bd:55:ea:c3:
fa:f0:ce:f1:37:18:2a:e6:7d:f2:aa:d2:69:ec:55:ff:a4:fc:
8e:61:8b:78
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIECZEauTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NmE3NTgyNmU5OTEyMjVhNDI5ZmY4YTFlN2ZmZGM4MDQ2NjQyMGRmMB4XDTIyMDEw
MTA0MDMyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmNlNjM2M2RkNzY3
MDBlZTZiMDUxNDU1MWRhYTlkZGRiMmMwZWNjNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKdcnIBRWjeC4NbG0Fh06i4LDcrlTgtgVS/GTkq+RMuJPDdM
LsAfzN0iUb+ZHFQswA+kja5rvawQBfp7grlKTR7GQL7Y1Kbj1FSBwt5Zie+G0ttO
yQJ0UbJ+EOF+jTNguhxGKVibafxDbi1JYDkN+q1FNfJXoo90EuQDve61NDRsGg3q
8FOI/Z+iY2l//fU5/J+GJigIakI/MOOuhoYjVa6YzYkpt56bZ4jucGAv0AKu7Gie
y656/qW1XJaRhlZ8D+umEqWUpSrB/R4c+44d8w0yXKThmxGlM0GGiEv51AwMdBEO
mvycOZQdhanH/97C/Ur9PgmcuLO1FfGyamYG6cUCAwEAAaOCAqowggKmMB0GA1Ud
DgQWBBT85jY912cA7msFFFUdqp3dssDsxDAfBgNVHSMEGDAWgBR2p1gm6ZEiWkKf
+KHn/9yARmQg3zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RxZFlKdW1SSWxwQ25faWg1X19jZ0Vaa0lOOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDkvMWQzM2NhLThkMWMtNDljMC1iZTk3LWFkOGZiZWFhOGRkOS8x
L19PWTJQZGRuQU81ckJSUlZIYXFkM2JMQTdNUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkv
MWQzM2NhLThkMWMtNDljMC1iZTk3LWFkOGZiZWFhOGRkOS8xL2RxZFlKdW1SSWxw
Q25faWg1X19jZ0Vaa0lOOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
vwYIKwYBBQUHAQcBAf8Ega8wgawwgY8EAgABMIGIMAwDBAaB6cADBACB6cQwDAME
AplgHAMEA5lgIAMEAJlgPDAMAwQBmWBGAwQCmWBIAwQCmWBYAwQBmWByAwQCmWCA
MAwDBAKZYMwDBACZYM4DBADALAcDBADALA4DBADALBADBADALBMDBADALBYDBADA
LBswDAMEAMBr6wMEAMBr7AMEAsJxYDAYBAIAAjASAwcAKgPbgEgQAwcAKgPbgEgU
MA0GCSqGSIb3DQEBCwUAA4IBAQCTyPfpioNXE1p3XX030Wd/l7Zz7PoLjPNMzkk+
OxOh2jUWI8IyzyWApQaD127zFRHszNFQMjz7Uqpy1E07LNLA7krtEvY3L1HXLMlB
QS+05Ihk02LLHV6TMl5IEV7/kzBxTPsDjx3tdKcx74lOaoD2BRxbdx+ZZCcpHYnx
tYfrEAdu8RHj311qxhH0s/qkDvbFhcjgAqgWaAgjCRLW0IAyFY5tqy4IcjRWnXrN
IZ0U2oWLn+y4F9J6FTorhxve6cy4nPcUixwf/K8WVG6xlSxEzMEEPTaAk4+Y5IS6
X2fOifZ0efszO71V6sP68M7xNxgq5n3yqtJp7FX/pPyOYYt4
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:43 2024 by rpki-client on console-ams.rpki-client.org