Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/VfC0GZMk1GxtZ-Ui1_yPl-08DjU.roa
File: VfC0GZMk1GxtZ-Ui1_yPl-08DjU.roa (raw, json)
Hash identifier: xizY4Osx4dX2eeVCh0OMn1oVVGW/yRmvnY7djWmoark=
Subject key identifier: 55:F0:B4:19:93:24:D4:6C:6D:67:E5:22:D7:FC:8F:97:ED:3C:0E:35
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 09F839E6
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/VfC0GZMk1GxtZ-Ui1_yPl-08DjU.roa
Signing time: Thu 03 Feb 2022 19:46:58 +0000
ROA not before: Thu 03 Feb 2022 19:46:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 85.153.125.0/24 maxlen: 24
85.153.124.0/24 maxlen: 24
85.153.120.0/24 maxlen: 24
85.153.119.0/24 maxlen: 24
85.153.121.0/24 maxlen: 24
85.153.123.0/24 maxlen: 24
85.153.122.0/24 maxlen: 24
85.153.126.0/24 maxlen: 24
85.153.68.0/22 maxlen: 22
85.153.66.0/24 maxlen: 24
85.153.65.0/24 maxlen: 24
85.153.67.0/24 maxlen: 24
85.153.76.0/22 maxlen: 22
85.153.75.0/24 maxlen: 24
85.153.73.0/24 maxlen: 24
85.153.72.0/24 maxlen: 24
85.153.74.0/24 maxlen: 24
85.153.83.0/24 maxlen: 24
85.153.82.0/24 maxlen: 24
85.153.84.0/22 maxlen: 22
85.153.80.0/24 maxlen: 24
85.153.81.0/24 maxlen: 24
85.153.88.0/22 maxlen: 22
85.153.96.0/22 maxlen: 22
85.153.92.0/24 maxlen: 24
85.153.93.0/24 maxlen: 24
85.153.95.0/24 maxlen: 24
85.153.94.0/24 maxlen: 24
85.153.100.0/22 maxlen: 22
85.153.112.0/24 maxlen: 24
85.153.108.0/22 maxlen: 22
85.153.113.0/24 maxlen: 24
85.153.114.0/24 maxlen: 24
85.153.116.0/24 maxlen: 24
85.153.115.0/24 maxlen: 24
85.153.118.0/24 maxlen: 24
85.153.117.0/24 maxlen: 24
85.153.16.0/22 maxlen: 22
85.153.12.0/22 maxlen: 22
85.153.20.0/24 maxlen: 24
85.153.22.0/24 maxlen: 24
85.153.21.0/24 maxlen: 24
85.153.24.0/22 maxlen: 22
85.153.23.0/24 maxlen: 24
85.153.29.0/24 maxlen: 24
85.153.28.0/24 maxlen: 24
85.153.31.0/24 maxlen: 24
85.153.30.0/24 maxlen: 24
85.153.32.0/24 maxlen: 24
85.153.34.0/24 maxlen: 24
85.153.36.0/22 maxlen: 22
85.153.35.0/24 maxlen: 24
85.153.41.0/24 maxlen: 24
85.153.42.0/24 maxlen: 24
85.153.44.0/24 maxlen: 24
85.153.40.0/24 maxlen: 24
85.153.47.0/24 maxlen: 24
85.153.45.0/24 maxlen: 24
85.153.46.0/24 maxlen: 24
85.153.52.0/22 maxlen: 22
85.153.59.0/24 maxlen: 24
85.153.60.0/22 maxlen: 22
85.115.204.0/24 maxlen: 24
85.115.206.0/24 maxlen: 24
85.115.205.0/24 maxlen: 24
85.115.207.0/24 maxlen: 24
85.153.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167262694 (0x9f839e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Feb 3 19:46:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55f0b4199324d46c6d67e522d7fc8f97ed3c0e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b0:4b:84:95:64:f4:56:38:aa:8e:e3:c5:6d:
17:c5:01:00:53:f9:8e:24:30:d5:b6:58:ba:b4:5d:
34:1e:82:da:ac:c6:0d:b1:12:de:7c:65:3e:13:3a:
16:f2:7b:38:9a:91:2b:3c:0b:5f:29:40:2e:12:1b:
2e:ea:98:68:f1:be:47:d7:f5:6f:02:e3:ed:09:c9:
36:e1:55:4a:7c:3c:ee:41:72:24:55:45:02:e9:91:
ad:4d:db:9c:0f:2c:22:42:df:98:44:23:a0:e4:a4:
42:a3:47:0f:e5:82:f6:df:82:d4:df:55:42:f6:52:
a5:15:e5:6d:96:85:8d:ab:56:d6:32:96:d9:4b:18:
7f:f2:88:0b:a9:d2:d7:cf:c4:bb:7e:66:5e:47:98:
44:1c:5e:27:4d:9b:e3:4b:ca:c2:05:de:85:7c:5c:
8c:e0:2a:56:1a:d0:cd:6c:f6:cb:ef:f1:14:f6:f3:
b9:21:3d:fc:c5:56:a2:8b:00:68:b2:f3:a3:a4:4f:
52:fd:8e:82:82:7d:7b:18:b6:ee:ee:c0:71:ab:38:
59:bb:b7:7f:fb:f7:2c:7e:1f:a6:5c:c5:f4:84:e5:
a9:8d:4a:93:58:a6:86:11:05:40:7e:95:8f:00:ec:
6a:d2:fe:35:4c:3c:3c:7f:14:1e:c4:72:cd:e1:d0:
52:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F0:B4:19:93:24:D4:6C:6D:67:E5:22:D7:FC:8F:97:ED:3C:0E:35
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/VfC0GZMk1GxtZ-Ui1_yPl-08DjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.204.0/22
85.153.4.0/24
85.153.12.0-85.153.32.255
85.153.34.0-85.153.42.255
85.153.44.0/22
85.153.52.0/22
85.153.59.0-85.153.63.255
85.153.65.0-85.153.103.255
85.153.108.0-85.153.126.255
Signature Algorithm: sha256WithRSAEncryption
47:0a:73:39:db:0d:9c:d5:7b:e5:90:6d:e4:a2:9f:2c:64:54:
4d:b8:16:0c:16:32:ee:fd:b5:e0:53:ed:5c:fc:ed:66:8a:73:
4e:24:0c:f4:b4:7d:78:0b:10:60:4e:38:29:ea:c1:73:e6:c1:
ab:b4:99:36:39:e1:1b:b1:92:6a:22:00:06:a0:7d:45:38:76:
61:dd:d2:21:17:38:ec:59:5f:17:a5:6b:65:8c:2e:d4:1f:97:
b7:9b:06:34:d3:30:a4:f1:33:cd:33:0a:a6:8e:f7:84:1c:8e:
4f:52:65:3e:18:a8:3c:8e:49:a0:14:8d:6c:34:d9:3a:76:37:
e7:21:3f:98:c6:d0:4a:5f:10:ec:d8:4d:a0:84:69:f6:e2:2d:
09:58:57:27:ac:6a:dc:6c:0d:53:b4:03:8b:aa:8b:97:9d:8e:
32:af:9f:e0:a2:5e:b5:f5:a7:01:3a:0e:e7:24:88:c0:dd:a3:
18:d2:63:98:bf:8e:47:60:38:c8:f5:5b:af:90:a2:0e:9c:1d:
89:c1:c5:61:c0:56:80:3f:d8:c6:5f:7d:7b:df:7f:12:19:6f:
0d:6c:37:05:9a:15:6f:53:e5:2a:14:97:1e:dc:73:62:16:75:
f3:11:1f:6a:0a:fd:35:dd:a9:32:e0:a7:10:f1:fc:ac:e3:c0:
ed:8a:ba:95
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIECfg55jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MWExODVkMGViMGNhNzgxMWM1ODY0MjVkZTBlOTYwZTFjZmViNjFiMB4XDTIyMDIw
MzE5NDY1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTVmMGI0MTk5MzI0
ZDQ2YzZkNjdlNTIyZDdmYzhmOTdlZDNjMGUzNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ2wS4SVZPRWOKqO48VtF8UBAFP5jiQw1bZYurRdNB6C2qzG
DbES3nxlPhM6FvJ7OJqRKzwLXylALhIbLuqYaPG+R9f1bwLj7QnJNuFVSnw87kFy
JFVFAumRrU3bnA8sIkLfmEQjoOSkQqNHD+WC9t+C1N9VQvZSpRXlbZaFjatW1jKW
2UsYf/KIC6nS18/Eu35mXkeYRBxeJ02b40vKwgXehXxcjOAqVhrQzWz2y+/xFPbz
uSE9/MVWoosAaLLzo6RPUv2OgoJ9exi27u7Acas4Wbu3f/v3LH4fplzF9ITlqY1K
k1imhhEFQH6VjwDsatL+NUw8PH8UHsRyzeHQUlMCAwEAAaOCAmEwggJdMB0GA1Ud
DgQWBBRV8LQZkyTUbG1n5SLX/I+X7TwONTAfBgNVHSMEGDAWgBQxoYXQ6wyngRxY
ZCXeDpYOHP62GzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01hR0YwT3NNcDRFY1dHUWwzZzZXRGh6LXRocy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODcvMDgxYzZlLTFkNjUtNGNjZC05NmY1LTFkY2M4NmMxMWU3NC8x
L1ZmQzBHWk1rMUd4dFotVWkxX3lQbC0wOERqVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcv
MDgxYzZlLTFkNjUtNGNjZC05NmY1LTFkY2M4NmMxMWU3NC8xL01hR0YwT3NNcDRF
Y1dHUWwzZzZXRGh6LXRocy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB3
BggrBgEFBQcBBwEB/wRoMGYwZAQCAAEwXgMEAlVzzAMEAFWZBDAMAwQCVZkMAwQA
VZkgMAwDBAFVmSIDBABVmSoDBAJVmSwDBAJVmTQwDAMEAFWZOwMEBlWZADAMAwQA
VZlBAwQDVZlgMAwDBAJVmWwDBABVmX4wDQYJKoZIhvcNAQELBQADggEBAEcKcznb
DZzVe+WQbeSinyxkVE24FgwWMu79teBT7Vz87WaKc04kDPS0fXgLEGBOOCnqwXPm
wau0mTY54RuxkmoiAAagfUU4dmHd0iEXOOxZXxela2WMLtQfl7ebBjTTMKTxM80z
CqaO94Qcjk9SZT4YqDyOSaAUjWw02Tp2N+chP5jG0EpfEOzYTaCEafbiLQlYVyes
atxsDVO0A4uqi5edjjKvn+CiXrX1pwE6DuckiMDdoxjSY5i/jkdgOMj1W6+Qog6c
HYnBxWHAVoA/2MZffXvffxIZbw1sNwWaFW9T5SoUlx7cc2IWdfMRH2oK/TXdqTLg
pxDx/KzjwO2KupU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:57 2023 by rpki-client on console-fra.rpki-client.org