Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/Em_Hv0Uy4pRn8VPXDl8l-6XX0Uk.roa
File: Em_Hv0Uy4pRn8VPXDl8l-6XX0Uk.roa (raw, json)
Hash identifier: N4H7o39uUnNLx7ARx7plfnDqo43WcWRlur3jsa+E9bU=
Subject key identifier: 12:6F:C7:BF:45:32:E2:94:67:F1:53:D7:0E:5F:25:FB:A5:D7:D1:49
Certificate issuer: /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial: 44CCF472
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/Em_Hv0Uy4pRn8VPXDl8l-6XX0Uk.roa
Signing time: Wed 26 Jan 2022 10:36:21 +0000
ROA not before: Wed 26 Jan 2022 10:36:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51430
IP address blocks: 128.127.104.0/23 maxlen: 23
128.127.108.0/24 maxlen: 24
128.127.110.0/23 maxlen: 23
128.127.109.0/24 maxlen: 24
128.127.106.0/23 maxlen: 23
37.46.112.0/24 maxlen: 24
37.46.117.0/24 maxlen: 24
37.46.118.0/23 maxlen: 23
37.46.114.0/24 maxlen: 24
37.46.113.0/24 maxlen: 24
37.46.116.0/24 maxlen: 24
37.46.115.0/24 maxlen: 24
37.46.124.0/22 maxlen: 22
37.46.121.0/24 maxlen: 24
37.46.120.0/24 maxlen: 24
37.46.123.0/24 maxlen: 24
37.46.122.0/24 maxlen: 24
91.214.44.0/24 maxlen: 24
91.214.47.0/24 maxlen: 24
213.5.64.0/21 maxlen: 21
185.2.31.0/24 maxlen: 24
185.2.29.0/24 maxlen: 24
185.2.28.0/24 maxlen: 24
185.2.30.0/24 maxlen: 24
79.142.79.0/24 maxlen: 24
31.3.152.0/22 maxlen: 22
31.3.158.0/23 maxlen: 23
31.3.157.0/24 maxlen: 24
31.3.156.0/24 maxlen: 24
185.7.35.0/24 maxlen: 24
185.7.34.0/24 maxlen: 24
185.7.32.0/24 maxlen: 24
185.7.33.0/24 maxlen: 24
185.10.56.0/22 maxlen: 22
79.142.64.0/22 maxlen: 24
79.142.71.0/24 maxlen: 24
79.142.69.0/24 maxlen: 24
79.142.68.0/24 maxlen: 24
79.142.70.0/24 maxlen: 24
79.142.78.0/24 maxlen: 24
79.142.76.0/23 maxlen: 23
79.142.72.0/24 maxlen: 24
79.142.74.0/23 maxlen: 23
79.142.73.0/24 maxlen: 24
2a00:7143:101::/48 maxlen: 48
2a00:7145:c1::/48 maxlen: 48
2a00:7147:e3::/48 maxlen: 48
2a00:7147:e6::/48 maxlen: 48
2a00:7143::/32 maxlen: 32
2a00:7145:b1::/48 maxlen: 48
2a00:7145:c2::/48 maxlen: 48
2a00:7147:e9::/48 maxlen: 48
2a00:7147:22::/48 maxlen: 48
2a00:7147:e2::/48 maxlen: 48
2a00:7147:e5::/48 maxlen: 48
2a00:7140::/32 maxlen: 32
2a00:7146::/48 maxlen: 48
2a00:7145::/48 maxlen: 48
2a00:7147:e8::/48 maxlen: 48
2a00:7142::/32 maxlen: 32
2a00:7147:e1::/48 maxlen: 48
2a00:7147:e10::/48 maxlen: 48
2a00:7147:e4::/48 maxlen: 48
2a00:7144::/32 maxlen: 32
2a00:7147:e7::/48 maxlen: 48
2a00:7147:b1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1154282610 (0x44ccf472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
Validity
Not Before: Jan 26 10:36:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=126fc7bf4532e29467f153d70e5f25fba5d7d149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:d9:af:0c:e1:68:62:de:3b:9d:1b:d5:5b:
61:4e:4f:5c:44:1a:df:57:88:db:85:48:5e:34:84:
24:1e:78:49:dc:b0:b1:c0:fe:a1:a8:41:0b:79:c9:
c1:18:8e:6f:e0:20:66:1b:fc:4b:3b:1d:4c:97:cc:
cf:e1:ef:c3:51:bb:de:0a:64:69:e2:bd:3e:4e:a9:
fb:cf:ee:f1:6c:5e:33:4e:21:e7:b5:ce:7a:54:de:
89:35:8b:34:f9:14:05:f4:71:74:16:4d:fc:eb:15:
6e:cd:b7:ba:5f:2d:2b:07:66:14:78:12:0b:59:e8:
73:8e:b0:8e:c7:cb:1f:27:d8:74:16:89:0a:60:8a:
0c:de:e0:b6:a3:6e:6f:f6:50:54:0d:bf:35:39:c2:
61:12:2a:fb:23:1f:de:80:d1:2c:92:ce:74:01:0f:
f5:79:b5:d2:0d:72:31:0c:c7:f7:e6:e9:24:c2:7a:
86:5c:88:89:97:e7:cf:4d:c9:14:b5:60:ca:7a:97:
33:ab:ba:93:15:ac:82:c9:d7:f0:f9:0e:44:5e:72:
56:c8:e9:e2:3a:c0:27:50:cb:27:8e:f4:c3:45:11:
9b:74:94:6d:3f:3c:42:03:b9:7c:7c:e3:6f:ff:19:
7f:c2:c6:60:2c:d1:65:9c:4b:67:85:9a:bb:b4:e0:
ef:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6F:C7:BF:45:32:E2:94:67:F1:53:D7:0E:5F:25:FB:A5:D7:D1:49
X509v3 Authority Key Identifier:
keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/Em_Hv0Uy4pRn8VPXDl8l-6XX0Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.152.0/21
37.46.112.0/20
79.142.64.0/20
91.214.44.0/24
91.214.47.0/24
128.127.104.0/21
185.2.28.0/22
185.7.32.0/22
185.10.56.0/22
213.5.64.0/21
IPv6:
2a00:7140::/32
2a00:7142::-2a00:7145:0:ffff:ffff:ffff:ffff:ffff
2a00:7145:b1::/48
2a00:7145:c1::-2a00:7145:c2:ffff:ffff:ffff:ffff:ffff
2a00:7146::/48
2a00:7147:22::/48
2a00:7147:b1::/48
2a00:7147:e1::-2a00:7147:e9:ffff:ffff:ffff:ffff:ffff
2a00:7147:e10::/48
Signature Algorithm: sha256WithRSAEncryption
5b:f7:71:2e:cc:fc:fb:7f:b7:d4:52:2c:e7:1e:e7:3e:b6:40:
c6:23:ce:3c:34:32:ca:59:6c:6a:57:31:9d:30:23:8c:bd:11:
11:d5:ed:46:15:f5:fd:fe:23:79:7d:9c:70:74:54:91:3c:a2:
20:e1:4b:1b:6d:99:55:b9:df:ee:67:28:0b:f2:52:4e:25:7c:
de:4c:6c:ed:d6:7a:84:a8:e6:f0:b2:4d:cb:d1:5c:65:93:65:
f4:32:59:56:f9:2d:03:40:b1:30:27:c6:cb:25:01:3e:e0:21:
b8:a4:22:00:39:90:45:2a:30:ed:01:51:92:d5:02:3a:4e:85:
88:45:4c:32:e6:ab:3c:64:ff:4d:7e:a0:3e:81:1e:25:5e:e8:
b6:e1:54:12:2b:b7:6e:ae:56:d7:f9:51:ff:00:08:af:f9:5b:
d2:11:90:76:87:25:8a:89:91:8d:0f:b9:55:7d:af:e8:97:ce:
78:38:8e:37:a4:25:e6:f4:55:e3:ed:1d:79:20:b8:da:ec:ce:
50:09:81:ad:cd:43:7e:60:9f:71:02:75:3e:fb:7d:db:ef:54:
0e:bf:f3:df:a2:f2:18:63:d2:02:d9:65:f5:ee:2a:47:f0:68:
2e:89:6e:26:56:1c:c3:3c:74:79:6d:b9:40:64:26:52:91:cc:
cb:89:45:97
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIERMz0cjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
Yjc5YzI2ZjMxNTc1MzQ1MTU5Yzg0MGVkMjc4YTg3OGE5MjU2NjE1MB4XDTIyMDEy
NjEwMzYyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTI2ZmM3YmY0NTMy
ZTI5NDY3ZjE1M2Q3MGU1ZjI1ZmJhNWQ3ZDE0OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALBH2a8M4Whi3judG9VbYU5PXEQa31eI24VIXjSEJB54Sdyw
scD+oahBC3nJwRiOb+AgZhv8SzsdTJfMz+Hvw1G73gpkaeK9Pk6p+8/u8WxeM04h
57XOelTeiTWLNPkUBfRxdBZN/OsVbs23ul8tKwdmFHgSC1noc46wjsfLHyfYdBaJ
CmCKDN7gtqNub/ZQVA2/NTnCYRIq+yMf3oDRLJLOdAEP9Xm10g1yMQzH9+bpJMJ6
hlyIiZfnz03JFLVgynqXM6u6kxWsgsnX8PkORF5yVsjp4jrAJ1DLJ470w0URm3SU
bT88QgO5fHzjb/8Zf8LGYCzRZZxLZ4Wau7Tg7ykCAwEAAaOCArowggK2MB0GA1Ud
DgQWBBQSb8e/RTLilGfxU9cOXyX7pdfRSTAfBgNVHSMEGDAWgBT7ecJvMVdTRRWc
hA7SeKh4qSVmFTAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtM25DYnpGWFUwVVZuSVFPMG5pb2VLa2xaaFUuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzgwLzEyZDY5MS0zN2E0LTRiMTUtYTdlYS1iZDM3ZGEwZTQ0N2Mv
MS9FbV9IdjBVeTRwUm44VlBYRGw4bC02WFgwVWsucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgw
LzEyZDY5MS0zN2E0LTRiMTUtYTdlYS1iZDM3ZGEwZTQ0N2MvMS8xLTNuQ2J6RlhV
MFVWbklRTzBuaW9lS2tsWmhVLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIHNBggrBgEFBQcBBwEB/wSBvTCBujBCBAIAATA8AwQDHwOYAwQEJS5wAwQET45A
AwQAW9YsAwQAW9YvAwQDgH9oAwQCuQIcAwQCuQcgAwQCuQo4AwQD1QVAMHQEAgAC
MG4DBQAqAHFAMBADBQEqAHFCAwcAKgBxRQAAAwcAKgBxRQCxMBIDBwAqAHFFAMED
BwAqAHFFAMIDBwAqAHFGAAADBwAqAHFHACIDBwAqAHFHALEwEgMHACoAcUcA4QMH
ASoAcUcA6AMHACoAcUcOEDANBgkqhkiG9w0BAQsFAAOCAQEAW/dxLsz8+3+31FIs
5x7nPrZAxiPOPDQyyllsalcxnTAjjL0REdXtRhX1/f4jeX2ccHRUkTyiIOFLG22Z
Vbnf7mcoC/JSTiV83kxs7dZ6hKjm8LJNy9FcZZNl9DJZVvktA0CxMCfGyyUBPuAh
uKQiADmQRSow7QFRktUCOk6FiEVMMuarPGT/TX6gPoEeJV7otuFUEiu3bq5W1/lR
/wAIr/lb0hGQdocliomRjQ+5VX2v6JfOeDiON6Ql5vRV4+0deSC42uzOUAmBrc1D
fmCfcQJ1Pvt92+9UDr/z36LyGGPSAtll9e4qR/BoLoluJlYcwzx0eW25QGQmUpHM
y4lFlw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:12 2023 by rpki-client on console-ams.rpki-client.org