Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/xgAPbmbFP454xKjiGZbR5aVAWPE.roa
File: xgAPbmbFP454xKjiGZbR5aVAWPE.roa (raw, json)
Hash identifier: t9caiX1pWD798dPcuRmUNsfkHwjV8Dw8J0cgzohf1Tg=
Subject key identifier: C6:00:0F:6E:66:C5:3F:8E:78:C4:A8:E2:19:96:D1:E5:A5:40:58:F1
Certificate issuer: /CN=e5503498ff185d0c607353f43f55e911f62a6802
Certificate serial: 36284553
Authority key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/xgAPbmbFP454xKjiGZbR5aVAWPE.roa
Signing time: Wed 18 May 2022 10:47:17 +0000
ROA not before: Wed 18 May 2022 10:47:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15943
IP address blocks: 149.233.128.0/17 maxlen: 24
84.242.16.0/20 maxlen: 24
185.82.16.0/22 maxlen: 24
213.21.32.0/20 maxlen: 24
149.249.16.0/20 maxlen: 24
185.29.240.0/22 maxlen: 24
216.83.208.0/20 maxlen: 24
192.119.48.0/20 maxlen: 24
192.196.192.0/20 maxlen: 24
185.232.32.0/22 maxlen: 24
185.220.216.0/22 maxlen: 24
176.109.192.0/20 maxlen: 20
95.163.160.0/20 maxlen: 24
185.23.224.0/22 maxlen: 24
185.215.236.0/22 maxlen: 24
81.25.160.0/20 maxlen: 24
149.224.0.0/16 maxlen: 24
94.72.128.0/21 maxlen: 21
46.22.0.0/20 maxlen: 24
95.81.0.0/19 maxlen: 24
149.249.248.0/22 maxlen: 24
193.218.16.0/20 maxlen: 24
212.127.32.0/19 maxlen: 19
213.209.64.0/18 maxlen: 24
195.123.96.0/20 maxlen: 24
134.101.128.0/17 maxlen: 24
188.136.224.0/19 maxlen: 24
31.29.32.0/19 maxlen: 24
84.46.0.0/17 maxlen: 24
46.59.128.0/17 maxlen: 24
31.172.104.0/21 maxlen: 24
2a04:4540::/29 maxlen: 29
2a02:2028::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 908608851 (0x36284553)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5503498ff185d0c607353f43f55e911f62a6802
Validity
Not Before: May 18 10:47:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6000f6e66c53f8e78c4a8e21996d1e5a54058f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:8a:5a:b1:8b:21:e4:94:6d:33:cc:71:ce:
65:b4:80:73:43:f0:53:c8:cc:76:79:7f:9e:3f:d3:
7d:e5:c0:84:d5:ce:aa:20:3d:41:d6:a0:e5:fb:1c:
67:cb:d3:6a:af:1d:a9:93:b1:cd:29:b6:15:f8:2f:
b1:fa:37:8b:8a:3e:d1:fa:22:6d:d1:a3:3f:37:ec:
29:be:40:af:5f:ff:33:d4:4b:93:58:4f:6b:bb:81:
5e:66:07:08:79:16:5a:13:bb:8b:b6:d7:f8:52:44:
4d:89:31:fc:8a:dd:a6:fe:0e:76:4d:b5:00:d3:6f:
fe:2c:02:c7:64:a9:c4:d0:7d:5f:1e:7e:e0:fb:d7:
67:a4:45:d0:d4:31:fa:aa:38:56:ba:2a:27:4b:1f:
59:31:86:22:c9:ee:ec:b8:1d:de:ff:95:4c:f0:c6:
92:fd:7e:a0:15:2d:2c:27:76:4a:e4:02:2a:03:e7:
03:a4:73:2e:36:e0:5e:70:5e:01:f5:62:89:34:0a:
12:3e:5c:56:e1:43:7c:ae:dd:84:91:8d:6b:72:90:
ff:de:c0:9a:cd:1d:3d:fd:3f:e6:1f:7b:26:73:3f:
ce:e1:6a:61:8d:80:c6:49:f5:38:a4:dc:b1:69:ae:
6f:4f:88:2d:73:4e:75:3e:c3:43:18:ad:bf:c4:00:
c6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:00:0F:6E:66:C5:3F:8E:78:C4:A8:E2:19:96:D1:E5:A5:40:58:F1
X509v3 Authority Key Identifier:
keyid:E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/xgAPbmbFP454xKjiGZbR5aVAWPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.29.32.0/19
31.172.104.0/21
46.22.0.0/20
46.59.128.0/17
81.25.160.0/20
84.46.0.0/17
84.242.16.0/20
94.72.128.0/21
95.81.0.0/19
95.163.160.0/20
134.101.128.0/17
149.224.0.0/16
149.233.128.0/17
149.249.16.0/20
149.249.248.0/22
176.109.192.0/20
185.23.224.0/22
185.29.240.0/22
185.82.16.0/22
185.215.236.0/22
185.220.216.0/22
185.232.32.0/22
188.136.224.0/19
192.119.48.0/20
192.196.192.0/20
193.218.16.0/20
195.123.96.0/20
212.127.32.0/19
213.21.32.0/20
213.209.64.0/18
216.83.208.0/20
IPv6:
2a02:2028::/32
2a04:4540::/29
Signature Algorithm: sha256WithRSAEncryption
42:3c:f7:9f:cc:57:d4:f1:8f:27:d5:1b:d9:6c:f8:bc:8a:24:
0f:48:19:cb:49:47:36:e6:63:08:b3:5e:7f:60:94:21:5a:01:
91:95:ec:81:f9:f0:75:59:ba:53:45:70:99:ca:4b:7a:fe:68:
84:9d:c2:d0:b0:7f:c5:b7:4b:0c:13:60:5d:c6:5d:b9:9f:4f:
24:23:5b:af:a1:97:ee:4d:bd:e0:f7:0b:e3:d6:00:1c:c3:d2:
35:ad:10:eb:2f:df:7d:67:5a:63:b7:4a:df:1d:4e:c5:1f:67:
97:1d:75:f2:97:37:9f:71:dc:9d:33:df:c3:b6:c5:e8:69:e8:
31:1a:b2:6b:39:df:e2:55:70:5a:44:2e:24:bb:75:50:23:96:
04:61:fa:80:c5:80:ee:97:0b:b1:90:20:aa:1a:a1:7f:11:a6:
0a:72:88:e4:85:1b:ab:bc:c9:24:9a:6c:6d:a6:36:92:d8:ca:
f1:b8:46:ff:46:7e:9e:a7:d4:f0:a7:61:9b:51:3d:1e:81:d0:
c9:9c:f5:85:a9:87:5d:a6:9e:d9:87:ca:64:d9:ee:59:ca:22:
86:ac:a1:55:a7:c1:ea:c6:99:1b:27:50:77:fe:ae:13:1b:c4:
4c:96:0d:80:41:f5:df:3c:dd:d2:10:de:7a:d3:8a:38:bf:db:
40:f8:7e:23
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIENihFUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NTUwMzQ5OGZmMTg1ZDBjNjA3MzUzZjQzZjU1ZTkxMWY2MmE2ODAyMB4XDTIyMDUx
ODEwNDcxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzYwMDBmNmU2NmM1
M2Y4ZTc4YzRhOGUyMTk5NmQxZTVhNTQwNThmMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANQHilqxiyHklG0zzHHOZbSAc0PwU8jMdnl/nj/TfeXAhNXO
qiA9Qdag5fscZ8vTaq8dqZOxzSm2Ffgvsfo3i4o+0foibdGjPzfsKb5Ar1//M9RL
k1hPa7uBXmYHCHkWWhO7i7bX+FJETYkx/Irdpv4Odk21ANNv/iwCx2SpxNB9Xx5+
4PvXZ6RF0NQx+qo4VroqJ0sfWTGGIsnu7Lgd3v+VTPDGkv1+oBUtLCd2SuQCKgPn
A6RzLjbgXnBeAfViiTQKEj5cVuFDfK7dhJGNa3KQ/97Ams0dPf0/5h97JnM/zuFq
YY2Axkn1OKTcsWmub0+ILXNOdT7DQxitv8QAxrMCAwEAAaOCAtcwggLTMB0GA1Ud
DgQWBBTGAA9uZsU/jnjEqOIZltHlpUBY8TAfBgNVHSMEGDAWgBTlUDSY/xhdDGBz
U/Q/VekR9ipoAjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVWQTBtUDhZWFF4Z2MxUDBQMVhwRWZZcWFBSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzQvOTdiMGJjLWY0ZjgtNGY5MC04NTU0LTFlMjc5ZjdiNjAyMy8x
L3hnQVBibWJGUDQ1NHhLamlHWmJSNWFWQVdQRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQv
OTdiMGJjLWY0ZjgtNGY5MC04NTU0LTFlMjc5ZjdiNjAyMy8xLzVWQTBtUDhZWFF4
Z2MxUDBQMVhwRWZZcWFBSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
7AYIKwYBBQUHAQcBAf8EgdwwgdkwgcAEAgABMIG5AwQFHx0gAwQDH6xoAwQELhYA
AwQHLjuAAwQEURmgAwQHVC4AAwQEVPIQAwQDXkiAAwQFX1EAAwQEX6OgAwQHhmWA
AwMAleADBAeV6YADBASV+RADBAKV+fgDBASwbcADBAK5F+ADBAK5HfADBAK5UhAD
BAK51+wDBAK53NgDBAK56CADBAW8iOADBATAdzADBATAxMADBATB2hADBATDe2AD
BAXUfyADBATVFSADBAbV0UADBATYU9AwFAQCAAIwDgMFACoCICgDBQMqBEVAMA0G
CSqGSIb3DQEBCwUAA4IBAQBCPPefzFfU8Y8n1RvZbPi8iiQPSBnLSUc25mMIs15/
YJQhWgGRleyB+fB1WbpTRXCZykt6/miEncLQsH/Ft0sME2Bdxl25n08kI1uvoZfu
Tb3g9wvj1gAcw9I1rRDrL999Z1pjt0rfHU7FH2eXHXXylzefcdydM9/DtsXoaegx
GrJrOd/iVXBaRC4ku3VQI5YEYfqAxYDulwuxkCCqGqF/EaYKcojkhRurvMkkmmxt
pjaS2MrxuEb/Rn6ep9Twp2GbUT0egdDJnPWFqYddpp7Zh8pk2e5ZyiKGrKFVp8Hq
xpkbJ1B3/q4TG8RMlg2AQfXfPN3SEN5604o4v9tA+H4j
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:37 2023 by rpki-client on console-ams.rpki-client.org