Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/kZtH-udSvUhdIlMc4jDPccfyLvA.roa
File: kZtH-udSvUhdIlMc4jDPccfyLvA.roa (raw, json)
Hash identifier: i/xLzFDb6AyCyP4LISLnpLiFTh7iO9i4e3j+u/3Tt2g=
Subject key identifier: 91:9B:47:FA:E7:52:BD:48:5D:22:53:1C:E2:30:CF:71:C7:F2:2E:F0
Certificate issuer: /CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Certificate serial: 1502CAA4
Authority key identifier: 01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/kZtH-udSvUhdIlMc4jDPccfyLvA.roa
Signing time: Sat 01 Jan 2022 16:02:51 +0000
ROA not before: Sat 01 Jan 2022 16:02:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33915
IP address blocks: 94.208.0.0/13 maxlen: 13
83.80.0.0/13 maxlen: 13
213.73.128.0/17 maxlen: 17
213.73.128.0/18 maxlen: 18
80.114.0.0/18 maxlen: 18
80.114.0.0/17 maxlen: 17
212.127.128.0/18 maxlen: 18
212.127.128.0/17 maxlen: 17
83.80.0.0/14 maxlen: 14
94.208.0.0/14 maxlen: 14
85.147.128.0/17 maxlen: 17
217.101.0.0/17 maxlen: 17
82.74.0.0/15 maxlen: 15
217.101.0.0/16 maxlen: 16
213.73.192.0/18 maxlen: 18
80.114.64.0/18 maxlen: 18
212.127.192.0/18 maxlen: 18
89.220.192.0/18 maxlen: 18
212.120.64.0/19 maxlen: 19
212.120.64.0/18 maxlen: 18
212.120.96.0/19 maxlen: 19
217.120.0.0/15 maxlen: 15
85.147.0.0/17 maxlen: 17
85.147.0.0/16 maxlen: 16
217.120.0.0/14 maxlen: 14
217.105.128.0/19 maxlen: 19
217.105.128.0/18 maxlen: 18
80.112.64.0/18 maxlen: 18
217.105.160.0/19 maxlen: 19
217.105.64.0/18 maxlen: 18
80.112.0.0/18 maxlen: 18
80.112.0.0/17 maxlen: 17
62.145.192.0/18 maxlen: 18
217.105.96.0/19 maxlen: 19
89.220.128.0/18 maxlen: 18
89.220.128.0/17 maxlen: 17
84.106.0.0/15 maxlen: 15
82.72.0.0/15 maxlen: 15
82.72.0.0/14 maxlen: 14
82.151.160.0/20 maxlen: 20
82.151.160.0/19 maxlen: 19
82.151.176.0/20 maxlen: 20
84.24.0.0/13 maxlen: 13
217.105.64.0/19 maxlen: 19
213.51.0.0/16 maxlen: 16
84.24.0.0/14 maxlen: 14
212.204.160.0/19 maxlen: 19
217.104.64.0/18 maxlen: 18
217.63.224.0/19 maxlen: 19
94.212.0.0/14 maxlen: 14
83.84.0.0/14 maxlen: 14
217.104.0.0/18 maxlen: 18
217.104.0.0/17 maxlen: 17
84.104.0.0/15 maxlen: 15
84.104.0.0/14 maxlen: 14
217.63.192.0/19 maxlen: 19
217.63.192.0/18 maxlen: 18
82.217.128.0/17 maxlen: 17
217.102.192.0/20 maxlen: 20
217.102.192.0/19 maxlen: 19
217.102.208.0/20 maxlen: 20
217.62.128.0/17 maxlen: 17
217.63.0.0/19 maxlen: 19
217.63.0.0/18 maxlen: 18
212.204.128.0/19 maxlen: 19
212.204.128.0/18 maxlen: 18
217.63.32.0/19 maxlen: 19
80.115.160.0/19 maxlen: 19
84.28.0.0/14 maxlen: 14
80.115.128.0/18 maxlen: 18
80.115.128.0/19 maxlen: 19
217.102.160.0/19 maxlen: 19
217.62.0.0/17 maxlen: 17
217.62.0.0/16 maxlen: 16
82.217.0.0/17 maxlen: 17
82.217.0.0/16 maxlen: 16
217.102.128.0/18 maxlen: 18
217.102.128.0/19 maxlen: 19
80.114.192.0/19 maxlen: 19
80.114.192.0/18 maxlen: 18
212.54.32.0/19 maxlen: 19
212.54.32.0/20 maxlen: 20
212.54.48.0/20 maxlen: 20
80.114.224.0/19 maxlen: 19
213.34.96.0/20 maxlen: 20
213.34.96.0/19 maxlen: 19
82.101.192.0/19 maxlen: 19
82.101.192.0/18 maxlen: 18
80.115.64.0/18 maxlen: 18
213.34.112.0/20 maxlen: 20
217.122.0.0/15 maxlen: 15
82.101.224.0/19 maxlen: 19
217.101.128.0/17 maxlen: 17
80.115.0.0/18 maxlen: 18
80.115.0.0/17 maxlen: 17
2001:1c00::/23 maxlen: 23
2001:1c00::/24 maxlen: 24
2001:b88::/33 maxlen: 33
2001:1d00::/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352504484 (0x1502caa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Validity
Not Before: Jan 1 16:02:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=919b47fae752bd485d22531ce230cf71c7f22ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:9f:8f:32:d7:04:c3:53:5b:00:d3:12:91:
d0:8b:f8:cf:73:6a:9e:5a:37:6d:9d:bf:26:cd:93:
87:1d:9b:e7:20:56:99:e0:9f:c7:ca:13:a2:04:29:
f7:fe:41:70:05:49:3b:d0:63:d9:c5:d7:2e:1d:1c:
ec:01:be:a8:5c:4e:dd:3d:10:0b:de:a0:f5:29:40:
63:da:d5:ca:00:03:27:8b:db:d5:26:a4:c3:ed:25:
8b:d0:04:b3:81:91:7e:4e:cd:34:92:a7:ee:4d:54:
53:27:34:5a:72:11:4d:49:b0:35:5d:a3:ce:2e:85:
d5:be:a1:bf:a4:89:a8:53:5e:db:f7:25:a7:e5:ef:
4d:f1:1f:e4:78:81:08:59:69:aa:e1:66:2f:f6:32:
36:05:75:ef:2d:7c:bb:47:87:00:e8:79:a0:86:a5:
be:0d:3b:d9:0c:f6:17:1f:1b:25:cf:79:df:41:5e:
92:2d:15:a6:d7:80:73:2e:76:de:4a:e7:8a:ca:ea:
81:2c:6f:3c:85:95:48:50:b7:55:eb:ac:bf:68:dc:
c2:97:44:1d:16:5f:f7:24:9f:7d:70:ee:c6:7d:51:
ee:19:5b:65:b0:4c:90:5a:db:d5:4c:2f:ff:e2:3c:
e0:99:d2:5c:2e:24:70:e8:24:56:72:c4:d2:93:27:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9B:47:FA:E7:52:BD:48:5D:22:53:1C:E2:30:CF:71:C7:F2:2E:F0
X509v3 Authority Key Identifier:
keyid:01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/kZtH-udSvUhdIlMc4jDPccfyLvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.145.192.0/18
80.112.0.0/17
80.114.0.0/17
80.114.192.0-80.115.191.255
82.72.0.0/14
82.101.192.0/18
82.151.160.0/19
82.217.0.0/16
83.80.0.0/13
84.24.0.0/13
84.104.0.0/14
85.147.0.0/16
89.220.128.0/17
94.208.0.0/13
212.54.32.0/19
212.120.64.0/18
212.127.128.0/17
212.204.128.0/18
213.34.96.0/19
213.51.0.0/16
213.73.128.0/17
217.62.0.0-217.63.63.255
217.63.192.0/18
217.101.0.0/16
217.102.128.0-217.102.223.255
217.104.0.0/17
217.105.64.0-217.105.191.255
217.120.0.0/14
IPv6:
2001:b88::/33
2001:1c00::/23
Signature Algorithm: sha256WithRSAEncryption
6f:fe:8c:ad:76:21:ac:43:3d:4d:40:03:11:b5:67:70:14:b1:
64:1a:5e:48:dc:a3:d6:cf:55:70:b5:4f:69:3f:2a:e6:80:b9:
eb:ca:3c:5f:3b:3f:e1:09:50:3c:4a:f0:44:60:c6:12:b8:e7:
b8:6c:b5:d5:c9:97:c8:d6:8a:30:3f:c8:bd:06:59:1f:7b:a7:
a5:b2:22:24:cb:3d:9f:31:83:f4:57:ba:c1:64:69:d8:41:d8:
37:e1:43:4b:f1:f8:8c:de:33:3a:a5:3a:f8:97:4b:30:49:73:
d4:3b:56:be:34:de:cb:37:f3:4a:86:39:66:d7:df:c3:79:b0:
f7:91:47:e8:05:a9:ab:22:ac:5f:d7:e8:3b:b7:ae:1c:1b:5f:
10:66:ed:dd:16:17:5a:8d:3f:66:37:d8:fd:67:81:63:6f:23:
fd:7b:fb:9b:d9:31:5e:92:cc:9a:e1:07:10:8a:41:05:7f:5a:
90:f2:03:e0:26:14:87:c2:b2:88:e8:15:bc:8a:60:19:9e:2d:
38:96:40:2f:6c:64:da:53:f6:b3:4a:6b:92:cb:8e:31:9c:44:
93:07:b3:e1:b9:b7:e9:6b:e4:05:d4:1c:de:68:3d:88:d9:69:
9d:46:42:1e:69:0d:94:e3:0e:9a:3d:79:62:9f:6f:60:4e:9f:
2e:96:dc:37
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIEFQLKpDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MTk5NjlhYzc1YWJjZDU5NjhmMTg5ZTBkNDVkYmJkYWIyOTgyYmRhMB4XDTIyMDEw
MTE2MDI1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTE5YjQ3ZmFlNzUy
YmQ0ODVkMjI1MzFjZTIzMGNmNzFjN2YyMmVmMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALhqn48y1wTDU1sA0xKR0Iv4z3Nqnlo3bZ2/Js2Thx2b5yBW
meCfx8oTogQp9/5BcAVJO9Bj2cXXLh0c7AG+qFxO3T0QC96g9SlAY9rVygADJ4vb
1Sakw+0li9AEs4GRfk7NNJKn7k1UUyc0WnIRTUmwNV2jzi6F1b6hv6SJqFNe2/cl
p+XvTfEf5HiBCFlpquFmL/YyNgV17y18u0eHAOh5oIalvg072Qz2Fx8bJc9530Fe
ki0VpteAcy523krnisrqgSxvPIWVSFC3Veusv2jcwpdEHRZf9ySffXDuxn1R7hlb
ZbBMkFrb1Uwv/+I84JnSXC4kcOgkVnLE0pMnwG8CAwEAAaOCAtswggLXMB0GA1Ud
DgQWBBSRm0f651K9SF0iUxziMM9xx/Iu8DAfBgNVHSMEGDAWgBQBmWmsdavNWWjx
ieDUXbvaspgr2jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0FabHBySFdyelZsbzhZbmcxRjI3MnJLWUs5by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmYvNmNiMTQ1LWZlNmEtNDViNy04ODVmLTYxZDFmN2ZiMTA0NC8x
L2tadEgtdWRTdlVoZElsTWM0akRQY2NmeUx2QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYv
NmNiMTQ1LWZlNmEtNDViNy04ODVmLTYxZDFmN2ZiMTA0NC8xL0FabHBySFdyelZs
bzhZbmcxRjI3MnJLWUs5by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
8AYIKwYBBQUHAQcBAf8EgeAwgd0wgcQEAgABMIG9AwQGPpHAAwQHUHAAAwQHUHIA
MAwDBAZQcsADBAZQc4ADAwJSSAMEBlJlwAMEBVKXoAMDAFLZAwMDU1ADAwNUGAMD
AlRoAwMAVZMDBAdZ3IADAwNe0AMEBdQ2IAMEBtR4QAMEB9R/gAMEBtTMgAMEBdUi
YAMDANUzAwQH1UmAMAsDAwHZPgMEBtk/AAMEBtk/wAMDANllMAwDBAfZZoADBAXZ
ZsADBAfZaAAwDAMEBtlpQAMEBtlpgAMDAtl4MBQEAgACMA4DBgcgAQuIAAMEASAB
HDANBgkqhkiG9w0BAQsFAAOCAQEAb/6MrXYhrEM9TUADEbVncBSxZBpeSNyj1s9V
cLVPaT8q5oC568o8Xzs/4QlQPErwRGDGErjnuGy11cmXyNaKMD/IvQZZH3unpbIi
JMs9nzGD9Fe6wWRp2EHYN+FDS/H4jN4zOqU6+JdLMElz1DtWvjTeyzfzSoY5Ztff
w3mw95FH6AWpqyKsX9foO7euHBtfEGbt3RYXWo0/ZjfY/WeBY28j/Xv7m9kxXpLM
muEHEIpBBX9akPID4CYUh8KyiOgVvIpgGZ4tOJZAL2xk2lP2s0prksuOMZxEkwez
4bm36WvkBdQc3mg9iNlpnUZCHmkNlOMOmj15Yp9vYE6fLpbcNw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:39 2023 by rpki-client on console-fra.rpki-client.org