Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/u0o0kSVyYFNap3r0Y8MhFO2s_yI.roa
File: u0o0kSVyYFNap3r0Y8MhFO2s_yI.roa (raw, json)
Hash identifier: yw+68TyNaZnsSl9/Tc/72gEvkdcfk69npzK2QV51yuc=
Subject key identifier: BB:4A:34:91:25:72:60:53:5A:A7:7A:F4:63:C3:21:14:ED:AC:FF:22
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 0475AD80
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/u0o0kSVyYFNap3r0Y8MhFO2s_yI.roa
Signing time: Sat 01 Jan 2022 08:57:37 +0000
ROA not before: Sat 01 Jan 2022 08:57:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 37.252.3.0/24 maxlen: 24
37.252.14.0/23 maxlen: 23
37.252.13.0/24 maxlen: 24
185.238.170.0/23 maxlen: 23
185.238.168.0/23 maxlen: 23
37.1.200.0/21 maxlen: 21
37.1.216.0/21 maxlen: 21
5.45.72.0/22 maxlen: 22
5.45.76.0/22 maxlen: 22
5.45.84.0/22 maxlen: 22
5.45.88.0/22 maxlen: 22
5.61.48.0/22 maxlen: 22
5.61.56.0/22 maxlen: 22
5.61.52.0/22 maxlen: 22
5.45.64.0/21 maxlen: 21
2a02:c6c3::/32 maxlen: 32
2a02:c6c1:2::/48 maxlen: 48
2a02:c6c2::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74820992 (0x475ad80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 1 08:57:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb4a3491257260535aa77af463c32114edacff22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:63:1a:fd:89:f8:3a:55:b8:6a:a7:7d:f7:9d:
44:96:c7:d5:f8:ac:58:db:08:57:7a:a1:4e:01:ea:
c2:6b:8a:33:61:fa:0c:d6:26:22:76:ab:80:f9:f7:
21:cb:f6:94:26:0d:9e:5e:ab:9f:8b:f7:98:54:66:
da:09:a0:41:40:7d:f8:31:d5:9c:76:9e:a3:fa:db:
46:ce:58:c1:7d:4d:e7:dd:0d:71:f9:99:66:a4:06:
32:41:20:d1:55:98:75:f7:c3:c9:b8:0b:6e:84:95:
aa:cf:65:fb:aa:02:55:1d:3f:e3:bc:b6:0f:4c:60:
1d:f2:46:eb:58:47:ad:8b:4c:3b:42:2e:76:58:2a:
45:6c:ba:cc:4b:bf:bb:20:7a:73:28:16:63:29:d4:
ca:fb:cd:63:67:a8:52:e7:bc:46:14:e1:6b:aa:10:
ed:ed:f9:0a:7d:b8:1f:9e:52:12:30:e6:3c:fb:08:
7b:93:25:1a:b4:89:bf:3b:8b:19:51:b5:7b:d3:3d:
e5:3f:06:0c:1b:01:33:10:43:b4:11:e9:8b:d2:4a:
c4:70:36:e1:6c:8b:01:a7:59:5b:39:28:54:1e:ab:
69:0e:d4:90:70:1b:2e:ec:70:12:3f:bf:2d:9a:78:
83:c0:a1:37:71:e7:d8:43:e1:b5:16:5a:9d:7b:9e:
54:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4A:34:91:25:72:60:53:5A:A7:7A:F4:63:C3:21:14:ED:AC:FF:22
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/u0o0kSVyYFNap3r0Y8MhFO2s_yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.64.0/20
5.45.84.0-5.45.91.255
5.61.48.0-5.61.59.255
37.1.200.0/21
37.1.216.0/21
37.252.3.0/24
37.252.13.0-37.252.15.255
185.238.168.0/22
IPv6:
2a02:c6c1:2::/48
2a02:c6c2::/31
Signature Algorithm: sha256WithRSAEncryption
65:e2:4e:52:ca:b0:dc:58:08:07:9a:b8:01:da:20:c4:5c:63:
c8:ac:3e:36:a1:42:78:95:bc:8e:1f:49:e8:1a:aa:6e:5e:24:
19:7f:67:e5:a9:6c:85:25:36:65:b7:84:82:64:f4:be:9d:83:
5d:d2:e5:8d:a4:f2:0e:8a:e0:f5:6f:5b:f0:27:c7:bb:93:d0:
d7:78:a2:c2:43:a1:79:69:fc:b6:d8:4e:d4:d5:4f:79:00:dd:
d9:5d:8b:97:26:08:e5:06:d7:84:19:d6:11:b7:e5:6e:b7:5d:
c0:92:1e:18:4d:76:92:41:7c:7a:cf:4a:92:95:b3:94:c3:4e:
e4:09:b8:89:6e:8b:26:07:d3:d2:70:46:ed:36:36:45:fd:3d:
e1:4d:43:38:cd:f7:ab:4a:b8:af:53:e4:ce:84:34:ff:99:a3:
be:87:8f:1c:e8:e0:7d:f9:07:cb:d0:d3:87:29:18:c9:94:b7:
66:41:c8:e0:5a:88:01:aa:5f:72:fd:b5:d4:80:86:0f:41:39:
6e:ef:22:80:99:3f:ea:47:2e:78:17:12:3c:f2:a1:0c:a6:6d:
7b:44:8d:60:30:b6:85:b6:ed:3d:ee:81:e7:59:fe:07:de:4f:
8f:6e:77:67:b9:5a:87:12:02:f5:31:b3:18:46:42:e0:ca:e8:
8c:67:e0:d2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIEBHWtgDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZWY1Y2IyZjU5MGQwNDE2NTRmNGRmZGI2MGEyOGY5YTE1NDRmNDQ0MB4XDTIyMDEw
MTA4NTczN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmI0YTM0OTEyNTcy
NjA1MzVhYTc3YWY0NjNjMzIxMTRlZGFjZmYyMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMJjGv2J+DpVuGqnffedRJbH1fisWNsIV3qhTgHqwmuKM2H6
DNYmInargPn3Icv2lCYNnl6rn4v3mFRm2gmgQUB9+DHVnHaeo/rbRs5YwX1N590N
cfmZZqQGMkEg0VWYdffDybgLboSVqs9l+6oCVR0/47y2D0xgHfJG61hHrYtMO0Iu
dlgqRWy6zEu/uyB6cygWYynUyvvNY2eoUue8RhTha6oQ7e35Cn24H55SEjDmPPsI
e5MlGrSJvzuLGVG1e9M95T8GDBsBMxBDtBHpi9JKxHA24WyLAadZWzkoVB6raQ7U
kHAbLuxwEj+/LZp4g8ChN3Hn2EPhtRZanXueVJECAwEAAaOCAmMwggJfMB0GA1Ud
DgQWBBS7SjSRJXJgU1qnevRjwyEU7az/IjAfBgNVHSMEGDAWgBQO9csvWQ0EFlT0
39tgoo+aFUT0RDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0R2WExMMWtOQkJaVTlOX2JZS0tQbWhWRTlFUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODcvMjI2ZjA0LWY3ZGItNDkxYS1iYWZiLWVlNDM1ZDNjZDU4NS8x
L3UwbzBrU1Z5WUZOYXAzcjBZOE1oRk8yc195SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcv
MjI2ZjA0LWY3ZGItNDkxYS1iYWZiLWVlNDM1ZDNjZDU4NS8xL0R2WExMMWtOQkJa
VTlOX2JZS0tQbWhWRTlFUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB5
BggrBgEFBQcBBwEB/wRqMGgwTgQCAAEwSAMEBAUtQDAMAwQCBS1UAwQCBS1YMAwD
BAQFPTADBAIFPTgDBAMlAcgDBAMlAdgDBAAl/AMwDAMEACX8DQMEBCX8AAMEArnu
qDAWBAIAAjAQAwcAKgLGwQACAwUBKgLGwjANBgkqhkiG9w0BAQsFAAOCAQEAZeJO
Usqw3FgIB5q4AdogxFxjyKw+NqFCeJW8jh9J6Bqqbl4kGX9n5alshSU2ZbeEgmT0
vp2DXdLljaTyDorg9W9b8CfHu5PQ13iiwkOheWn8tthO1NVPeQDd2V2LlyYI5QbX
hBnWEbflbrddwJIeGE12kkF8es9KkpWzlMNO5Am4iW6LJgfT0nBG7TY2Rf094U1D
OM33q0q4r1PkzoQ0/5mjvoePHOjgffkHy9DThykYyZS3ZkHI4FqIAapfcv211ICG
D0E5bu8igJk/6kcueBcSPPKhDKZte0SNYDC2hbbtPe6B51n+B95Pj253Z7lahxIC
9TGzGEZC4MrojGfg0g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:35 2023 by rpki-client on console-ams.rpki-client.org