Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/ACA56xxDgWQt6emgHig8mbO1JwE.roa
File: ACA56xxDgWQt6emgHig8mbO1JwE.roa (raw, json)
Hash identifier: gntvopL6ltFXEccTWkscyLpod5KOGxlWp/PQe97qUUQ=
Subject key identifier: 00:20:39:EB:1C:43:81:64:2D:E9:E9:A0:1E:28:3C:99:B3:B5:27:01
Certificate issuer: /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial: 0428E46E
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/ACA56xxDgWQt6emgHig8mbO1JwE.roa
Signing time: Mon 07 Feb 2022 13:25:49 +0000
ROA not before: Mon 07 Feb 2022 13:25:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8362
IP address blocks: 79.141.192.0/24 maxlen: 24
79.141.193.0/24 maxlen: 24
79.141.197.0/24 maxlen: 24
195.146.224.0/20 maxlen: 20
37.220.48.0/20 maxlen: 20
213.151.176.0/20 maxlen: 20
185.9.96.0/22 maxlen: 22
62.64.32.0/19 maxlen: 19
5.158.240.0/20 maxlen: 20
46.162.128.0/18 maxlen: 18
195.146.240.0/20 maxlen: 20
185.72.248.0/22 maxlen: 22
2a01:8e80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69788782 (0x428e46e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Validity
Not Before: Feb 7 13:25:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=002039eb1c4381642de9e9a01e283c99b3b52701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5b:34:d9:b2:8c:d7:44:d6:cd:28:ca:b7:fa:
35:d3:b5:12:d0:8c:b4:bb:bf:0a:44:49:af:33:5f:
ae:c0:9b:b1:26:66:4e:cf:4c:43:a9:25:6d:ec:82:
1a:84:da:40:1b:1d:34:16:95:a7:45:db:18:cf:48:
84:aa:c5:f5:41:38:a1:2e:75:50:00:27:18:c0:16:
b6:d2:54:4a:1c:14:c5:03:4b:bf:94:b0:1e:aa:41:
4e:49:4d:ed:d5:9c:6f:7d:88:6f:71:e3:4c:89:44:
7f:6b:4b:61:b2:a9:ad:96:8a:dc:a2:6b:2b:39:2e:
9e:f7:47:f1:d6:f7:0d:98:9b:01:09:d4:81:d1:cb:
e1:af:8d:07:17:4e:67:0e:97:ff:ad:76:27:44:50:
b5:08:a0:1c:24:72:6c:e8:7c:73:41:5d:a3:72:f5:
b7:c7:d4:fe:25:2d:65:33:76:ab:c2:e1:93:68:5f:
bd:1b:a5:80:22:2d:68:89:93:bc:ad:51:c8:8c:f1:
67:03:bb:73:99:9f:5a:5e:14:39:f9:b2:90:fd:fb:
b0:d0:07:58:af:db:56:34:b0:b9:c0:56:11:bf:96:
4f:a3:04:47:7e:19:7f:db:7d:cd:b4:e6:33:4c:8a:
69:80:65:60:d8:67:7a:62:4c:35:07:d7:a1:ba:92:
da:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:20:39:EB:1C:43:81:64:2D:E9:E9:A0:1E:28:3C:99:B3:B5:27:01
X509v3 Authority Key Identifier:
keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/ACA56xxDgWQt6emgHig8mbO1JwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.240.0/20
37.220.48.0/20
46.162.128.0/18
62.64.32.0/19
79.141.192.0/23
79.141.197.0/24
185.9.96.0/22
185.72.248.0/22
195.146.224.0/19
213.151.176.0/20
IPv6:
2a01:8e80::/29
Signature Algorithm: sha256WithRSAEncryption
8f:ba:94:2b:81:b5:f3:28:c0:c2:b8:27:d2:e8:6d:32:0e:d1:
32:fd:c1:62:b3:f1:5e:fe:56:6d:53:ba:40:63:fe:11:01:2e:
73:9d:bf:14:71:5f:a5:84:2b:23:ed:4d:43:23:e6:6c:39:cf:
ab:b6:bc:74:b2:fd:c7:e9:c6:51:93:9d:4d:51:1c:8d:e5:e8:
24:50:73:db:d7:22:2e:4c:0b:d0:cb:31:a2:03:55:81:63:4f:
ab:5e:0d:69:bb:1b:d9:9c:1b:1e:5b:b5:b3:7a:5e:b3:8d:fa:
48:c8:09:4e:94:64:cd:70:29:19:ce:66:45:65:03:a5:8d:c0:
66:0c:fe:e4:8b:a1:7e:a7:3f:14:23:ab:46:cd:e4:a5:46:73:
81:af:1c:1e:16:f9:7f:9c:91:a6:24:00:44:dd:89:9f:4c:4f:
d3:4e:d8:cd:ce:e7:b0:c7:ad:29:4c:c1:9e:09:6f:9c:1a:87:
10:3d:49:9e:b3:e0:1f:94:1e:07:3b:7b:ad:0a:9c:bf:fc:cd:
3b:73:71:de:9a:0e:2a:d8:02:42:6d:4b:ba:23:51:8e:68:2c:
c6:75:ff:bb:6f:5d:84:e6:81:7a:ff:74:ab:bf:08:3e:be:e9:
af:78:e1:c1:f1:71:57:02:22:b5:20:99:7b:d3:c6:41:b7:d6:
28:5a:a6:84
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIEBCjkbjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ODEyZTQ5MWFhYTY1NWI2MzI0ZGJjYzBjZmYwMGE4ZDYzMTkxMDc2MB4XDTIyMDIw
NzEzMjU0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDAyMDM5ZWIxYzQz
ODE2NDJkZTllOWEwMWUyODNjOTliM2I1MjcwMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJlbNNmyjNdE1s0oyrf6NdO1EtCMtLu/CkRJrzNfrsCbsSZm
Ts9MQ6klbeyCGoTaQBsdNBaVp0XbGM9IhKrF9UE4oS51UAAnGMAWttJUShwUxQNL
v5SwHqpBTklN7dWcb32Ib3HjTIlEf2tLYbKprZaK3KJrKzkunvdH8db3DZibAQnU
gdHL4a+NBxdOZw6X/612J0RQtQigHCRybOh8c0Fdo3L1t8fU/iUtZTN2q8Lhk2hf
vRulgCItaImTvK1RyIzxZwO7c5mfWl4UOfmykP37sNAHWK/bVjSwucBWEb+WT6ME
R34Zf9t9zbTmM0yKaYBlYNhnemJMNQfXobqS2kMCAwEAAaOCAk4wggJKMB0GA1Ud
DgQWBBQAIDnrHEOBZC3p6aAeKDyZs7UnATAfBgNVHSMEGDAWgBSYEuSRqqZVtjJN
vMDP8AqNYxkQdjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21CTGtrYXFtVmJZeVRiekF6X0FLaldNWkVIWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTYvMGU3ZWQzLTQ4Y2ItNGFmZS04ZDE1LWRmZmUxN2YzZGI1NC8x
L0FDQTU2eHhEZ1dRdDZlbWdIaWc4bWJPMUp3RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYv
MGU3ZWQzLTQ4Y2ItNGFmZS04ZDE1LWRmZmUxN2YzZGI1NC8xL21CTGtrYXFtVmJZ
eVRiekF6X0FLaldNWkVIWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBk
BggrBgEFBQcBBwEB/wRVMFMwQgQCAAEwPAMEBAWe8AMEBCXcMAMEBi6igAMEBT5A
IAMEAU+NwAMEAE+NxQMEArkJYAMEArlI+AMEBcOS4AMEBNWXsDANBAIAAjAHAwUD
KgGOgDANBgkqhkiG9w0BAQsFAAOCAQEAj7qUK4G18yjAwrgn0uhtMg7RMv3BYrPx
Xv5WbVO6QGP+EQEuc52/FHFfpYQrI+1NQyPmbDnPq7a8dLL9x+nGUZOdTVEcjeXo
JFBz29ciLkwL0MsxogNVgWNPq14Nabsb2ZwbHlu1s3pes436SMgJTpRkzXApGc5m
RWUDpY3AZgz+5Iuhfqc/FCOrRs3kpUZzga8cHhb5f5yRpiQARN2Jn0xP007Yzc7n
sMetKUzBnglvnBqHED1JnrPgH5QeBzt7rQqcv/zNO3Nx3poOKtgCQm1LuiNRjmgs
xnX/u29dhOaBev90q78IPr7pr3jhwfFxVwIitSCZe9PGQbfWKFqmhA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:16 2024 by rpki-client on console-fra.rpki-client.org