Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/2t80TOsoic9kGzLe1XpAejb7qno.roa
File: 2t80TOsoic9kGzLe1XpAejb7qno.roa (raw, json)
Hash identifier: 93mpKHCvCiFp0aaFCgLuf6UEIT9MUUEhk5VqIffHrYM=
Subject key identifier: DA:DF:34:4C:EB:28:89:CF:64:1B:32:DE:D5:7A:40:7A:36:FB:AA:7A
Certificate issuer: /CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Certificate serial: 0184A3D1093DB3971A1B0773254F3F9C2AB3
Authority key identifier: 17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/2t80TOsoic9kGzLe1XpAejb7qno.roa
Signing time: Wed 23 Nov 2022 09:28:15 +0000
ROA not before: Wed 23 Nov 2022 09:28:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15685
IP address blocks: 82.208.56.0/24 maxlen: 24
82.208.58.0/24 maxlen: 24
82.208.60.0/24 maxlen: 24
82.208.60.0/22 maxlen: 22
109.123.202.0/23 maxlen: 24
109.123.205.0/24 maxlen: 24
82.208.4.0/22 maxlen: 22
109.123.206.0/23 maxlen: 24
82.208.8.0/22 maxlen: 22
109.123.208.0/22 maxlen: 24
82.208.14.0/24 maxlen: 24
109.123.216.0/21 maxlen: 24
82.208.16.0/23 maxlen: 23
82.208.17.0/24 maxlen: 24
82.208.16.0/24 maxlen: 24
109.123.214.0/23 maxlen: 24
82.208.12.0/24 maxlen: 24
82.208.18.0/24 maxlen: 24
82.208.28.0/23 maxlen: 23
82.208.26.0/23 maxlen: 23
82.208.32.0/22 maxlen: 22
82.208.44.0/24 maxlen: 24
82.208.39.0/24 maxlen: 24
82.208.40.0/23 maxlen: 23
82.208.50.0/24 maxlen: 24
82.208.46.0/23 maxlen: 23
82.208.48.0/23 maxlen: 23
217.11.254.0/24 maxlen: 24
217.11.224.0/23 maxlen: 23
217.11.230.0/24 maxlen: 24
217.11.232.0/23 maxlen: 23
217.11.227.0/24 maxlen: 24
217.11.228.0/23 maxlen: 23
217.11.236.0/24 maxlen: 24
217.11.235.0/24 maxlen: 24
217.11.246.0/23 maxlen: 23
217.11.242.0/23 maxlen: 23
217.11.251.0/24 maxlen: 24
217.11.248.0/23 maxlen: 23
109.123.192.0/21 maxlen: 24
81.0.217.0/24 maxlen: 24
81.0.214.0/24 maxlen: 24
81.0.226.0/24 maxlen: 24
81.0.225.0/24 maxlen: 24
81.0.230.0/23 maxlen: 23
77.78.96.0/20 maxlen: 20
81.0.232.0/21 maxlen: 21
77.78.94.0/23 maxlen: 23
81.0.228.0/24 maxlen: 24
81.0.240.0/22 maxlen: 22
77.78.112.0/21 maxlen: 21
81.0.250.0/24 maxlen: 24
77.78.123.0/24 maxlen: 24
77.78.124.0/22 maxlen: 22
81.0.254.0/23 maxlen: 23
85.239.227.0/24 maxlen: 24
81.0.192.0/22 maxlen: 22
81.0.199.0/24 maxlen: 24
81.0.206.0/23 maxlen: 23
77.78.76.0/22 maxlen: 22
85.239.252.0/23 maxlen: 23
81.0.208.0/23 maxlen: 23
81.0.212.0/23 maxlen: 23
2001:1528::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a3:d1:09:3d:b3:97:1a:1b:07:73:25:4f:3f:9c:2a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Validity
Not Before: Nov 23 09:28:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dadf344ceb2889cf641b32ded57a407a36fbaa7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6d:16:be:94:9d:51:e1:f0:7b:41:63:66:06:
f3:97:4a:b2:ff:ec:f4:9f:9a:ce:b5:f8:ed:80:6d:
f0:16:d6:24:9c:d0:c5:24:0c:88:dc:80:9f:89:50:
39:6b:7f:b2:a1:e2:cd:c6:c0:47:67:09:49:e2:9e:
aa:bf:3e:08:f6:ce:9c:91:9f:86:78:85:2c:b4:a3:
e5:da:fa:b8:58:15:aa:d3:52:0d:01:7f:0b:25:7d:
2a:77:9e:53:b9:e7:9d:28:3c:c4:84:df:a3:f1:8b:
2f:a2:fb:8c:0e:b1:11:80:5c:5c:6f:0c:de:d5:ab:
ed:ee:e5:3d:de:07:03:3c:17:26:13:22:f6:c3:2e:
d6:e9:ce:ac:03:dd:27:b1:4e:22:25:2c:c4:d2:92:
af:3a:66:b5:23:61:fe:26:b3:20:2d:0d:b3:0b:78:
37:89:a8:c9:8c:0e:9c:05:c4:14:90:b5:e2:f4:53:
4b:4a:73:35:ca:b2:4d:54:25:53:93:20:cb:8a:7b:
81:40:9d:36:d5:d6:54:50:95:e0:fd:3a:17:9e:e9:
67:ef:88:70:62:cf:1c:27:7a:61:28:a1:bd:51:a7:
da:ad:8c:b6:db:36:1e:f2:d5:c4:d9:29:7b:c7:54:
c7:89:55:0e:eb:c7:d4:09:9d:5d:c4:d7:d0:97:d2:
90:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DF:34:4C:EB:28:89:CF:64:1B:32:DE:D5:7A:40:7A:36:FB:AA:7A
X509v3 Authority Key Identifier:
keyid:17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/2t80TOsoic9kGzLe1XpAejb7qno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.76.0/22
77.78.94.0-77.78.119.255
77.78.123.0-77.78.127.255
81.0.192.0/22
81.0.199.0/24
81.0.206.0-81.0.209.255
81.0.212.0-81.0.214.255
81.0.217.0/24
81.0.225.0-81.0.226.255
81.0.228.0/24
81.0.230.0-81.0.243.255
81.0.250.0/24
81.0.254.0/23
82.208.4.0-82.208.12.255
82.208.14.0/24
82.208.16.0-82.208.18.255
82.208.26.0-82.208.29.255
82.208.32.0/22
82.208.39.0-82.208.41.255
82.208.44.0/24
82.208.46.0-82.208.50.255
82.208.56.0/24
82.208.58.0/24
82.208.60.0/22
85.239.227.0/24
85.239.252.0/23
109.123.192.0/21
109.123.202.0/23
109.123.205.0-109.123.211.255
109.123.214.0-109.123.223.255
217.11.224.0/23
217.11.227.0-217.11.230.255
217.11.232.0/23
217.11.235.0-217.11.236.255
217.11.242.0/23
217.11.246.0-217.11.249.255
217.11.251.0/24
217.11.254.0/24
IPv6:
2001:1528::/32
Signature Algorithm: sha256WithRSAEncryption
44:90:a8:ff:df:13:7b:de:c0:7e:82:96:62:47:90:65:14:44:
68:c9:3d:da:a7:78:09:27:5a:13:e3:6d:a6:58:58:f4:9f:ea:
69:e4:b9:af:88:a3:23:25:ee:dc:d9:27:d7:08:f2:aa:d2:b9:
1e:cd:b5:48:78:99:47:2e:dd:1a:21:55:0c:fe:8a:03:72:5f:
eb:19:07:f3:a5:cc:cd:43:d7:4c:f6:98:13:2d:73:7b:fe:57:
cf:67:ea:0c:0f:61:bc:d9:3c:a8:1b:df:3d:35:45:49:95:56:
63:69:72:06:99:a4:4c:67:45:62:02:43:2c:18:8c:88:24:5b:
2d:c0:bb:ca:5c:51:45:21:b4:ee:04:94:4f:77:54:72:0c:c7:
90:e7:3f:a7:9f:86:4a:ba:44:46:59:5d:ba:ae:9f:2b:cc:96:
6e:28:bc:f1:83:74:9e:b3:5a:49:45:5b:88:5f:20:39:1c:77:
6b:8b:bf:71:1a:6b:7d:ce:e5:d2:44:e5:3b:c3:cb:33:88:11:
c3:fa:03:47:7f:5a:3c:81:b1:fe:ab:1a:f2:74:38:99:d3:68:
3d:f5:5e:72:c6:b3:7f:41:82:52:09:6a:3b:63:4b:81:26:53:
35:83:91:4f:a5:5b:f5:b8:8e:4b:7d:da:1b:7c:e6:ee:73:9c:
2c:d3:d4:c8
-----BEGIN CERTIFICATE-----
MIIGdDCCBVygAwIBAgISAYSj0Qk9s5caGwdzJU8/nCqzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NDg0N2Y4NjY3ZDUyZmEyY2Y5Y2Y5YWZjYzQzYTA3OTE1
NTc1Y2EwHhcNMjIxMTIzMDkyODE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWRmMzQ0Y2ViMjg4OWNmNjQxYjMyZGVkNTdhNDA3YTM2ZmJhYTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm0WvpSdUeHwe0FjZgbzl0qy/+z0
n5rOtfjtgG3wFtYknNDFJAyI3ICfiVA5a3+yoeLNxsBHZwlJ4p6qvz4I9s6ckZ+G
eIUstKPl2vq4WBWq01INAX8LJX0qd55TueedKDzEhN+j8YsvovuMDrERgFxcbwze
1avt7uU93gcDPBcmEyL2wy7W6c6sA90nsU4iJSzE0pKvOma1I2H+JrMgLQ2zC3g3
iajJjA6cBcQUkLXi9FNLSnM1yrJNVCVTkyDLinuBQJ021dZUUJXg/ToXnuln74hw
Ys8cJ3phKKG9UafarYy22zYe8tXE2Sl7x1THiVUO68fUCZ1dxNfQl9KQcQIDAQAB
o4IDgDCCA3wwHQYDVR0OBBYEFNrfNEzrKInPZBsy3tV6QHo2+6p6MB8GA1UdIwQY
MBaAFBdIR/hmfVL6LPnPmvzEOgeRVXXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjBoSC1HWjlVdm9zLWMtYV9NUTZCNUZWZGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83MmNjNGEtMmQ5Yy00ODA4LTgyM2Ut
MTQ1NGZmZTYxODJjLzEvMnQ4MFRPc29pYzlrR3pMZTFYcEFlamI3cW5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83MmNjNGEtMmQ5Yy00ODA4LTgyM2UtMTQ1NGZmZTYxODJj
LzEvRjBoSC1HWjlVdm9zLWMtYV9NUTZCNUZWZGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBlAYIKwYBBQUHAQcBAf8EggGDMIIBfzCCAWwEAgABMIIB
ZAMEAk1OTDAMAwQBTU5eAwQDTU5wMAwDBABNTnsDBAdNTgADBAJRAMADBABRAMcw
DAMEAVEAzgMEAVEA0DAMAwQCUQDUAwQAUQDWAwQAUQDZMAwDBABRAOEDBABRAOID
BABRAOQwDAMEAVEA5gMEAlEA8AMEAFEA+gMEAVEA/jAMAwQCUtAEAwQAUtAMAwQA
UtAOMAwDBARS0BADBABS0BIwDAMEAVLQGgMEAVLQHAMEAlLQIDAMAwQAUtAnAwQB
UtAoAwQAUtAsMAwDBAFS0C4DBABS0DIDBABS0DgDBABS0DoDBAJS0DwDBABV7+MD
BAFV7/wDBANte8ADBAFte8owDAMEAG17zQMEAm170DAMAwQBbXvWAwQFbXvAAwQB
2QvgMAwDBADZC+MDBADZC+YDBAHZC+gwDAMEANkL6wMEANkL7AMEAdkL8jAMAwQB
2Qv2AwQB2Qv4AwQA2Qv7AwQA2Qv+MA0EAgACMAcDBQAgARUoMA0GCSqGSIb3DQEB
CwUAA4IBAQBEkKj/3xN73sB+gpZiR5BlFERoyT3ap3gJJ1oT422mWFj0n+pp5Lmv
iKMjJe7c2SfXCPKq0rkezbVIeJlHLt0aIVUM/ooDcl/rGQfzpczNQ9dM9pgTLXN7
/lfPZ+oMD2G82TyoG989NUVJlVZjaXIGmaRMZ0ViAkMsGIyIJFstwLvKXFFFIbTu
BJRPd1RyDMeQ5z+nn4ZKukRGWV26rp8rzJZuKLzxg3Ses1pJRVuIXyA5HHdri79x
Gmt9zuXSROU7w8sziBHD+gNHf1o8gbH+qxrydDiZ02g99V5yxrN/QYJSCWo7Y0uB
JlM1g5FPpVv1uI5LfdobfObuc5ws09TI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:40 2024 by rpki-client on console-fra.rpki-client.org