Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/SrEnhiUosWeH1oM30ZoAuNquiLY.roa
File: SrEnhiUosWeH1oM30ZoAuNquiLY.roa (raw, json)
Hash identifier: FqsVwLXvpnkT+BNT6h8C820lobD8lQGFJSAAiUcACeA=
Subject key identifier: 4A:B1:27:86:25:28:B1:67:87:D6:83:37:D1:9A:00:B8:DA:AE:88:B6
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 267739DB
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/SrEnhiUosWeH1oM30ZoAuNquiLY.roa
Signing time: Fri 27 May 2022 07:57:13 +0000
ROA not before: Fri 27 May 2022 07:57:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47583
IP address blocks: 45.93.136.0/22 maxlen: 22
45.87.80.0/22 maxlen: 22
194.11.214.0/23 maxlen: 23
212.1.212.0/24 maxlen: 24
212.1.212.0/22 maxlen: 22
212.1.211.0/24 maxlen: 24
212.1.210.0/24 maxlen: 24
212.1.208.0/24 maxlen: 24
212.1.208.0/21 maxlen: 21
212.1.215.0/24 maxlen: 24
195.110.58.0/23 maxlen: 23
31.170.165.0/24 maxlen: 24
31.170.160.0/22 maxlen: 22
31.170.164.0/23 maxlen: 23
31.170.164.0/24 maxlen: 24
31.170.166.0/23 maxlen: 23
153.92.4.0/23 maxlen: 23
153.92.3.0/24 maxlen: 24
153.92.2.0/24 maxlen: 24
153.92.1.0/24 maxlen: 24
153.92.7.0/24 maxlen: 24
153.92.6.0/23 maxlen: 23
153.92.6.0/24 maxlen: 24
153.92.11.0/24 maxlen: 24
153.92.10.0/24 maxlen: 24
153.92.9.0/24 maxlen: 24
153.92.8.0/21 maxlen: 21
153.92.8.0/24 maxlen: 24
31.220.17.0/24 maxlen: 24
31.220.16.0/24 maxlen: 24
153.92.15.0/24 maxlen: 24
153.92.14.0/24 maxlen: 24
153.92.13.0/24 maxlen: 24
153.92.12.0/24 maxlen: 24
31.220.20.0/23 maxlen: 23
31.220.23.0/24 maxlen: 24
185.28.23.0/24 maxlen: 24
31.220.22.0/24 maxlen: 24
185.28.22.0/24 maxlen: 24
31.220.21.0/24 maxlen: 24
31.220.19.0/24 maxlen: 24
31.220.18.0/24 maxlen: 24
185.28.21.0/24 maxlen: 24
31.220.20.0/24 maxlen: 24
185.28.20.0/24 maxlen: 24
31.220.48.0/20 maxlen: 20
31.220.108.0/24 maxlen: 24
31.220.107.0/24 maxlen: 24
31.220.106.0/24 maxlen: 24
31.220.111.0/24 maxlen: 24
31.220.110.0/24 maxlen: 24
31.220.109.0/24 maxlen: 24
194.11.154.0/23 maxlen: 23
31.220.105.0/24 maxlen: 24
31.220.104.0/24 maxlen: 24
93.188.160.0/21 maxlen: 21
45.13.132.0/23 maxlen: 23
45.13.134.0/23 maxlen: 23
2.57.90.0/24 maxlen: 24
2.57.88.0/23 maxlen: 23
2.57.91.0/24 maxlen: 24
156.67.208.0/20 maxlen: 20
45.13.252.0/23 maxlen: 23
45.13.254.0/23 maxlen: 23
2a02:4780::/48 maxlen: 48
2a02:4780:11::/48 maxlen: 48
2a02:4780:14::/48 maxlen: 48
2a02:4780:a::/48 maxlen: 48
2a02:4780:e::/48 maxlen: 48
2a02:4780:b::/48 maxlen: 48
2a02:4780:1::/48 maxlen: 48
2a02:4780:4::/48 maxlen: 48
2a02:4780:8::/48 maxlen: 48
2a02:4780:12::/48 maxlen: 48
2a02:4780:f::/48 maxlen: 48
2a02:4780:5::/48 maxlen: 48
2a02:4780:13::/48 maxlen: 48
2a02:4780:9::/48 maxlen: 48
2a02:4780:c::/48 maxlen: 48
2a02:4780:2::/48 maxlen: 48
2a02:4780:10::/48 maxlen: 48
2a02:4780:6::/48 maxlen: 48
2a02:4780:3::/48 maxlen: 48
2a02:4780:d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 645347803 (0x267739db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: May 27 07:57:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ab127862528b16787d68337d19a00b8daae88b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:75:cc:fd:4f:71:85:87:b4:7a:65:95:e9:c2:
21:4f:20:c1:f7:80:fb:f3:fe:f7:1a:66:2b:21:fd:
0a:2b:04:0c:4a:94:3c:d5:2c:4a:ce:fc:a1:e4:05:
82:67:bc:df:48:94:0f:85:30:65:2d:c1:65:90:fa:
3a:c7:96:4b:e0:2f:ee:bf:bc:a2:87:93:53:cb:a5:
29:ec:a5:07:ca:b0:4c:96:ca:f0:4d:8f:2c:8b:bc:
e9:87:74:b7:61:cf:fb:ac:7c:16:3a:c3:a7:13:eb:
3f:7e:89:ae:37:6f:db:1d:57:cd:af:48:4c:24:35:
2a:07:0c:2e:aa:bf:c1:d7:de:cd:65:6c:88:5e:af:
35:2f:74:05:f5:56:62:3f:05:28:6a:2d:9e:d8:d0:
1d:97:27:70:08:b9:1f:d9:2a:59:ce:ac:d5:a0:c8:
fd:63:7f:be:2d:20:40:8c:5b:a7:b7:36:1a:54:f2:
71:18:cb:fe:76:1d:66:d8:1b:87:17:4b:51:d9:c3:
11:2c:3b:25:bd:6d:f1:9b:37:e2:db:8f:51:f9:c3:
b8:5f:14:84:2f:c5:b3:b0:a8:43:48:20:fb:5b:cb:
f3:fb:f8:b7:3f:9d:d0:7a:e0:4c:94:55:b0:14:3f:
56:b2:97:2b:61:c5:d4:40:26:44:6a:d2:5b:65:7c:
a8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B1:27:86:25:28:B1:67:87:D6:83:37:D1:9A:00:B8:DA:AE:88:B6
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/SrEnhiUosWeH1oM30ZoAuNquiLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.88.0/22
31.170.160.0/21
31.220.16.0/21
31.220.48.0/20
31.220.104.0/21
45.13.132.0/22
45.13.252.0/22
45.87.80.0/22
45.93.136.0/22
93.188.160.0/21
153.92.1.0-153.92.15.255
156.67.208.0/20
185.28.20.0/22
194.11.154.0/23
194.11.214.0/23
195.110.58.0/23
212.1.208.0/21
IPv6:
2a02:4780::-2a02:4780:6:ffff:ffff:ffff:ffff:ffff
2a02:4780:8::-2a02:4780:14:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
82:9e:06:70:1a:de:7f:8e:85:01:2c:04:00:a4:fc:36:6a:73:
9b:37:4b:39:1a:a1:28:79:f8:1d:22:02:cd:64:5c:0a:69:26:
e6:6d:be:2f:b0:2c:8d:88:b0:f2:a0:99:c3:02:6b:78:4b:69:
57:fc:44:ea:52:34:01:3e:16:0e:1a:c1:a4:c4:f0:75:6a:3e:
6a:2a:5d:6b:2c:0d:e9:52:dd:1c:c0:f3:96:f1:14:56:ba:4e:
28:f8:72:a9:9f:7b:4f:12:15:55:e1:aa:76:14:d5:40:85:dd:
ae:f7:ec:85:7a:26:24:38:8c:da:e2:b2:d0:5f:00:33:2a:44:
cd:2f:fa:b9:38:30:fe:93:db:3f:91:46:43:6f:4c:3f:ce:b0:
b5:1c:b5:dc:10:d6:3f:3b:4e:6d:f3:7d:d9:2e:a5:2c:5b:7e:
ed:7f:96:77:c0:c5:7a:4b:d8:78:47:76:20:a1:55:41:5e:2e:
45:1a:e9:95:6e:3c:e3:1a:22:13:0a:7b:ef:c7:f4:96:f6:ba:
4d:19:c7:bd:cc:f6:9a:22:2b:ff:ec:3d:f4:84:c7:5c:2c:1d:
4c:0e:a4:f9:8f:35:43:3d:f5:94:17:4b:75:c2:ee:a8:db:31:
98:99:f1:a2:ff:a5:f4:16:4b:3d:19:d9:66:dc:bd:61:fc:ef:
55:87:d3:39
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIEJnc52zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
Zjg2NzU0NTc1OTRkN2U3NDBhYWVlZjJlN2Q3ZWZkMDIyMzljNjE3MB4XDTIyMDUy
NzA3NTcxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGFiMTI3ODYyNTI4
YjE2Nzg3ZDY4MzM3ZDE5YTAwYjhkYWFlODhiNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOJ1zP1PcYWHtHpllenCIU8gwfeA+/P+9xpmKyH9CisEDEqU
PNUsSs78oeQFgme830iUD4UwZS3BZZD6OseWS+Av7r+8ooeTU8ulKeylB8qwTJbK
8E2PLIu86Yd0t2HP+6x8FjrDpxPrP36Jrjdv2x1Xza9ITCQ1KgcMLqq/wdfezWVs
iF6vNS90BfVWYj8FKGotntjQHZcncAi5H9kqWc6s1aDI/WN/vi0gQIxbp7c2GlTy
cRjL/nYdZtgbhxdLUdnDESw7Jb1t8Zs34tuPUfnDuF8UhC/Fs7CoQ0gg+1vL8/v4
tz+d0HrgTJRVsBQ/VrKXK2HF1EAmRGrSW2V8qDECAwEAAaOCAqIwggKeMB0GA1Ud
DgQWBBRKsSeGJSixZ4fWgzfRmgC42q6ItjAfBgNVHSMEGDAWgBQvhnVFdZTX50Cq
7vLn1+/QIjnGFzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0w0WjFSWFdVMS1kQXF1N3k1OWZ2MENJNXhoYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNGNkNGNhLWMxOTUtNGJjNC1iYjlmLTEwMzFhZTFlYjAzMi8x
L1NyRW5oaVVvc1dlSDFvTTMwWm9BdU5xdWlMWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
NGNkNGNhLWMxOTUtNGJjNC1iYjlmLTEwMzFhZTFlYjAzMi8xL0w0WjFSWFdVMS1k
QXF1N3k1OWZ2MENJNXhoYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
twYIKwYBBQUHAQcBAf8EgacwgaQwdAQCAAEwbgMEAgI5WAMEAx+qoAMEAx/cEAME
BB/cMAMEAx/caAMEAi0NhAMEAi0N/AMEAi1XUAMEAi1diAMEA128oDAMAwQAmVwB
AwQEmVwAAwQEnEPQAwQCuRwUAwQBwguaAwQBwgvWAwQBw246AwQD1AHQMCwEAgAC
MCYwEAMFByoCR4ADBwAqAkeAAAYwEgMHAyoCR4AACAMHACoCR4AAFDANBgkqhkiG
9w0BAQsFAAOCAQEAgp4GcBref46FASwEAKT8NmpzmzdLORqhKHn4HSICzWRcCmkm
5m2+L7AsjYiw8qCZwwJreEtpV/xE6lI0AT4WDhrBpMTwdWo+aipdaywN6VLdHMDz
lvEUVrpOKPhyqZ97TxIVVeGqdhTVQIXdrvfshXomJDiM2uKy0F8AMypEzS/6uTgw
/pPbP5FGQ29MP86wtRy13BDWPztObfN92S6lLFt+7X+Wd8DFekvYeEd2IKFVQV4u
RRrplW484xoiEwp778f0lva6TRnHvcz2miIr/+w99ITHXCwdTA6k+Y81Qz31lBdL
dcLuqNsxmJnxov+l9BZLPRnZZty9YfzvVYfTOQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:30 2024 by rpki-client on console-fra.rpki-client.org