Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Z0mItRP7dipikWJTssema1Nr4KQ.roa
File: Z0mItRP7dipikWJTssema1Nr4KQ.roa (raw, json)
Hash identifier: 1kUu+rcLC0pf0BA/GDx7hDCBFt/6yQ/R12+uBFVs1I8=
Subject key identifier: 67:49:88:B5:13:FB:76:2A:62:91:62:53:B2:C7:A6:6B:53:6B:E0:A4
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018414172564A725E0B0E137950A38CA6626
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Z0mItRP7dipikWJTssema1Nr4KQ.roa
Signing time: Wed 26 Oct 2022 11:39:31 +0000
ROA not before: Wed 26 Oct 2022 11:39:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 185.95.102.0/23 maxlen: 24
185.95.101.0/24 maxlen: 24
185.76.240.0/23 maxlen: 24
185.81.174.0/24 maxlen: 24
185.81.184.0/24 maxlen: 24
185.81.187.0/24 maxlen: 24
185.97.3.0/24 maxlen: 24
185.97.1.0/24 maxlen: 24
185.68.246.0/24 maxlen: 24
185.89.43.0/24 maxlen: 24
185.89.42.0/24 maxlen: 24
185.68.247.0/24 maxlen: 24
194.104.10.0/24 maxlen: 24
185.68.184.0/24 maxlen: 24
185.75.134.0/24 maxlen: 24
5.181.169.0/24 maxlen: 24
5.181.168.0/24 maxlen: 24
185.96.80.0/24 maxlen: 24
213.232.122.0/24 maxlen: 24
213.232.120.0/24 maxlen: 24
83.171.226.0/24 maxlen: 24
83.171.224.0/24 maxlen: 24
83.171.227.0/24 maxlen: 24
185.96.38.0/24 maxlen: 24
185.89.104.0/23 maxlen: 24
185.89.108.0/22 maxlen: 24
141.98.87.0/24 maxlen: 24
185.81.172.0/23 maxlen: 24
5.183.255.0/24 maxlen: 24
185.88.38.0/24 maxlen: 24
185.88.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:17:25:64:a7:25:e0:b0:e1:37:95:0a:38:ca:66:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Oct 26 11:39:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=674988b513fb762a62916253b2c7a66b536be0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:40:e8:c8:ad:4e:68:bf:7d:de:d5:bc:cf:
d0:68:54:ff:49:51:f4:4c:63:12:d8:4c:ed:9a:25:
2f:bb:d2:61:9d:02:22:99:70:0c:b4:86:c7:22:cc:
9c:67:4a:be:76:45:a9:22:a4:d0:a8:94:26:bc:b5:
11:22:0d:f6:8f:bc:09:72:85:9e:df:ca:59:cf:c1:
8a:ad:12:f1:73:8e:20:b3:70:87:ce:db:1d:2e:d8:
6a:61:a1:75:b8:65:48:b6:18:73:3f:f4:5f:15:3e:
0c:b2:2f:fb:b2:77:75:46:40:12:4c:37:89:b2:35:
c3:04:12:6a:63:67:aa:04:e9:9a:d7:81:e6:65:c8:
b7:6c:30:29:fc:06:52:b8:fa:fd:17:08:9e:e5:34:
fa:b4:ef:cb:aa:aa:5e:9c:7a:92:db:09:ae:c0:94:
ec:11:38:e9:24:58:27:53:fc:17:b4:50:5d:46:29:
cf:2c:2c:b0:29:1f:0a:7c:1c:99:db:0d:e6:65:a4:
6b:c5:d2:7a:d7:fe:f3:14:30:c2:02:d7:ab:7f:44:
3c:98:92:69:0c:5b:44:a9:d5:d4:a4:0f:e0:40:2f:
35:16:a8:03:a7:b6:b2:59:e8:8e:3c:9b:1c:29:97:
e4:34:a2:46:4b:e7:6e:d2:b9:ce:ef:25:3f:63:a8:
bc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:49:88:B5:13:FB:76:2A:62:91:62:53:B2:C7:A6:6B:53:6B:E0:A4
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Z0mItRP7dipikWJTssema1Nr4KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.168.0/23
5.183.255.0/24
83.171.224.0/24
83.171.226.0/23
141.98.87.0/24
185.68.184.0/24
185.68.246.0/23
185.75.134.0/24
185.76.240.0/23
185.81.172.0-185.81.174.255
185.81.184.0/24
185.81.187.0/24
185.88.36.0/24
185.88.38.0/24
185.89.42.0/23
185.89.104.0/23
185.89.108.0/22
185.95.101.0-185.95.103.255
185.96.38.0/24
185.96.80.0/24
185.97.1.0/24
185.97.3.0/24
194.104.10.0/24
213.232.120.0/24
213.232.122.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:e8:97:74:40:7b:1c:7a:85:f5:ac:36:20:bf:ec:d0:3f:6b:
ed:6d:01:52:d2:2e:28:0c:a6:12:39:78:0f:40:35:4c:20:05:
13:27:11:4b:e8:36:6e:bf:04:66:d8:5d:9d:be:b9:d6:b2:67:
c0:ca:b4:28:49:c0:96:2a:73:42:23:27:10:00:ce:47:bd:7e:
49:32:5f:ab:f5:02:56:62:2a:3f:3c:37:f6:6a:53:12:bb:58:
a1:db:9e:ac:da:47:1b:71:94:ae:8d:fc:96:a1:15:eb:d3:f8:
2f:91:ea:bb:18:c1:3f:93:08:b9:08:6d:83:9f:df:84:da:7b:
e8:68:53:15:5c:0a:08:92:c3:94:66:b6:ad:11:81:0e:e6:70:
e7:b1:9e:4e:75:f8:8c:ba:1a:4b:75:ed:74:f5:f3:6e:8f:1e:
0d:68:cc:c6:f7:7a:a0:7b:2a:66:cc:ee:6f:94:5a:be:e6:21:
41:7e:97:7b:8c:38:fb:81:87:6f:41:a5:dc:59:b8:39:94:4d:
de:a6:7b:2e:a8:16:31:69:2f:77:c4:70:61:da:d3:4e:f7:4b:
d7:7f:96:d2:55:97:de:b3:49:72:19:5a:09:3f:b4:fd:76:26:
f8:0e:ab:ed:0f:00:29:76:1b:27:4b:f0:44:b9:5b:7f:72:9f:
00:47:0f:61
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAYQUFyVkpyXgsOE3lQo4ymYmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjIxMDI2MTEzOTMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzQ5ODhiNTEzZmI3NjJhNjI5MTYyNTNiMmM3YTY2YjUzNmJlMGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIxA6MitTmi/fd7VvM/QaFT/SVH0
TGMS2EztmiUvu9JhnQIimXAMtIbHIsycZ0q+dkWpIqTQqJQmvLURIg32j7wJcoWe
38pZz8GKrRLxc44gs3CHztsdLthqYaF1uGVIthhzP/RfFT4Msi/7snd1RkASTDeJ
sjXDBBJqY2eqBOma14HmZci3bDAp/AZSuPr9Fwie5TT6tO/LqqpenHqS2wmuwJTs
ETjpJFgnU/wXtFBdRinPLCywKR8KfByZ2w3mZaRrxdJ61/7zFDDCAterf0Q8mJJp
DFtEqdXUpA/gQC81FqgDp7ayWeiOPJscKZfkNKJGS+du0rnO7yU/Y6i84wIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFGdJiLUT+3YqYpFiU7LHpmtTa+CkMB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvWjBtSXRSUDdkaXBpa1dKVHNzZW1hMU5yNEtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHDBggrBgEFBQcBBwEB/wSBszCBsDCBrQQCAAEwgaYDBAEF
tagDBAAFt/8DBABTq+ADBAFTq+IDBACNYlcDBAC5RLgDBAG5RPYDBAC5S4YDBAG5
TPAwDAMEArlRrAMEALlRrgMEALlRuAMEALlRuwMEALlYJAMEALlYJgMEAblZKgME
AblZaAMEArlZbDAMAwQAuV9lAwQDuV9gAwQAuWAmAwQAuWBQAwQAuWEBAwQAuWED
AwQAwmgKAwQA1eh4AwQA1eh6MA0GCSqGSIb3DQEBCwUAA4IBAQB/6Jd0QHsceoX1
rDYgv+zQP2vtbQFS0i4oDKYSOXgPQDVMIAUTJxFL6DZuvwRm2F2dvrnWsmfAyrQo
ScCWKnNCIycQAM5HvX5JMl+r9QJWYio/PDf2alMSu1ih256s2kcbcZSujfyWoRXr
0/gvkeq7GME/kwi5CG2Dn9+E2nvoaFMVXAoIksOUZratEYEO5nDnsZ5OdfiMuhpL
de109fNujx4NaMzG93qgeypmzO5vlFq+5iFBfpd7jDj7gYdvQaXcWbg5lE3epnsu
qBYxaS93xHBh2tNO90vXf5bSVZfes0lyGVoJP7T9dib4DqvtDwApdhsnS/BEuVt/
cp8ARw9h
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org