Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/BB_6ZMpUzvKO3bwXt3qAkA6MAkA.roa
File: BB_6ZMpUzvKO3bwXt3qAkA6MAkA.roa (raw, json)
Hash identifier: jT48WGvH0HIenXMlt9oRDptrNcGKb//mdMqNgQvWdeU=
Subject key identifier: 04:1F:FA:64:CA:54:CE:F2:8E:DD:BC:17:B7:7A:80:90:0E:8C:02:40
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 0BD9079E
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/BB_6ZMpUzvKO3bwXt3qAkA6MAkA.roa
Signing time: Tue 22 Feb 2022 12:05:47 +0000
ROA not before: Tue 22 Feb 2022 12:05:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3225
IP address blocks: 91.140.220.0/22 maxlen: 22
91.140.224.0/24 maxlen: 24
91.140.224.0/22 maxlen: 22
91.140.233.0/24 maxlen: 24
91.140.228.0/22 maxlen: 22
91.140.234.0/24 maxlen: 24
91.140.238.0/24 maxlen: 24
91.140.239.0/24 maxlen: 24
91.140.236.0/24 maxlen: 24
91.140.237.0/24 maxlen: 24
91.140.242.0/24 maxlen: 24
91.140.244.0/22 maxlen: 22
91.140.246.0/24 maxlen: 24
91.140.248.0/24 maxlen: 24
91.140.249.0/24 maxlen: 24
91.140.248.0/22 maxlen: 22
91.140.252.0/24 maxlen: 24
91.140.252.0/22 maxlen: 22
91.140.255.0/24 maxlen: 24
91.140.164.0/22 maxlen: 22
185.16.4.0/22 maxlen: 22
91.140.160.0/22 maxlen: 22
91.140.172.0/22 maxlen: 22
94.187.224.0/19 maxlen: 19
91.140.180.0/22 maxlen: 22
94.187.224.0/22 maxlen: 22
91.140.192.0/22 maxlen: 22
94.187.232.0/22 maxlen: 22
91.140.188.0/22 maxlen: 22
94.187.228.0/22 maxlen: 22
94.187.236.0/22 maxlen: 22
91.140.196.0/22 maxlen: 22
94.187.240.0/22 maxlen: 22
91.140.203.0/24 maxlen: 24
94.187.244.0/22 maxlen: 22
91.140.204.0/22 maxlen: 22
91.140.202.0/24 maxlen: 24
91.140.212.0/22 maxlen: 22
94.187.252.0/22 maxlen: 22
94.187.248.0/22 maxlen: 22
91.140.208.0/22 maxlen: 22
91.140.128.0/22 maxlen: 22
91.140.128.0/17 maxlen: 17
91.140.132.0/22 maxlen: 22
91.140.136.0/22 maxlen: 22
91.140.152.0/22 maxlen: 22
91.140.148.0/24 maxlen: 24
91.140.148.0/22 maxlen: 22
194.54.248.0/22 maxlen: 22
194.54.252.0/22 maxlen: 22
194.54.192.0/22 maxlen: 22
194.54.194.0/23 maxlen: 23
194.54.196.0/22 maxlen: 22
194.54.204.0/22 maxlen: 22
194.54.208.0/22 maxlen: 22
194.54.212.0/22 maxlen: 22
194.54.216.0/22 maxlen: 22
194.54.220.0/22 maxlen: 22
194.54.224.0/22 maxlen: 22
194.54.232.0/22 maxlen: 22
194.54.228.0/22 maxlen: 22
194.54.236.0/22 maxlen: 22
194.54.240.0/22 maxlen: 22
2a01:7780::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198772638 (0xbd9079e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: Feb 22 12:05:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=041ffa64ca54cef28eddbc17b77a80900e8c0240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:18:6e:32:91:15:b7:f8:0b:4c:d2:e9:b1:
34:8c:17:ff:f3:c9:65:74:8f:72:e2:78:47:a7:9c:
3d:b5:37:27:c6:f7:fb:d1:d7:65:ec:c9:d7:a6:5b:
c2:08:a1:76:c1:c6:4d:17:eb:97:5b:ba:61:de:90:
f6:86:a4:89:1d:6d:b4:11:f4:9a:22:85:c7:31:8e:
30:da:5c:b5:31:b8:4c:b7:3c:5e:37:c1:a9:d4:6b:
b9:bb:6b:42:f8:27:f6:93:be:7d:85:ee:68:68:83:
ba:40:e9:73:41:41:63:59:e0:fb:22:13:06:26:be:
1c:5f:96:db:13:56:e4:12:8a:7c:1c:f2:bb:9d:a2:
c1:49:3b:ef:28:8c:cd:d5:68:ca:22:44:97:fa:5a:
4b:cb:06:12:08:3f:2d:a9:0a:db:29:32:49:ee:0f:
bc:86:a9:93:ac:8b:73:30:86:eb:c0:c4:c8:34:fd:
b8:ce:46:4f:d5:2c:f8:eb:1a:fb:08:d3:eb:e7:46:
e3:14:ce:df:1b:80:30:43:41:90:3c:16:b4:f7:12:
53:ff:43:b1:9d:40:77:21:53:db:2b:15:d7:51:59:
d4:0d:a3:e5:61:e1:42:9e:07:b2:91:6e:fd:34:55:
8c:92:cf:46:41:bc:8a:c2:a4:fe:9f:2c:d7:95:32:
bf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1F:FA:64:CA:54:CE:F2:8E:DD:BC:17:B7:7A:80:90:0E:8C:02:40
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/BB_6ZMpUzvKO3bwXt3qAkA6MAkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.140.128.0/17
94.187.224.0/19
185.16.4.0/22
194.54.192.0/21
194.54.204.0-194.54.243.255
194.54.248.0/21
IPv6:
2a01:7780::/32
Signature Algorithm: sha256WithRSAEncryption
2b:10:28:03:b6:6f:96:06:5c:ee:3d:33:37:ad:07:0a:80:88:
03:8e:17:7d:43:9a:d4:45:07:31:31:10:8b:4d:05:e1:c0:15:
6e:97:e1:b5:40:0c:65:53:da:40:d5:a8:ac:03:dc:e5:91:c1:
8d:99:87:34:ea:b4:2c:b3:34:b1:02:d5:2a:98:54:37:74:1c:
4a:6c:10:fb:30:36:93:72:9f:a0:d5:59:34:8a:42:ae:16:b2:
5b:e0:bc:4e:50:60:a0:0c:bc:7c:a2:34:b1:58:35:3e:f7:87:
5b:75:e8:ff:d6:d8:86:58:f1:5c:a0:10:36:4b:7a:60:12:1d:
1e:88:e3:e4:bf:63:59:02:d9:2b:47:a8:00:ef:31:b2:89:03:
e2:98:da:cd:3e:49:97:96:c3:ec:de:34:3e:2f:51:b3:37:28:
e1:b8:44:3b:95:01:a4:0b:28:5c:e2:f4:bd:d3:c4:27:b1:03:
85:92:36:68:3b:df:8a:cb:f2:26:90:91:40:f4:0e:00:10:4a:
c9:d1:18:57:19:a6:52:fa:21:c7:0b:d3:84:e6:3d:63:17:da:
1d:7b:f1:8a:b8:48:37:f2:40:f0:18:99:f0:fd:95:be:f0:7b:
ab:86:56:99:50:90:5b:14:03:f4:a0:3d:3e:9d:c4:ba:37:a6:
fc:3a:fe:38
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIEC9kHnjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MzdmN2RiMDMzMzE0YzQ3M2NkYTE5NGUwZGY3OWYxYzM3NWRhM2Y0MB4XDTIyMDIy
MjEyMDU0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDQxZmZhNjRjYTU0
Y2VmMjhlZGRiYzE3Yjc3YTgwOTAwZThjMDI0MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMDSGG4ykRW3+AtM0umxNIwX//PJZXSPcuJ4R6ecPbU3J8b3
+9HXZezJ16ZbwgihdsHGTRfrl1u6Yd6Q9oakiR1ttBH0miKFxzGOMNpctTG4TLc8
XjfBqdRrubtrQvgn9pO+fYXuaGiDukDpc0FBY1ng+yITBia+HF+W2xNW5BKKfBzy
u52iwUk77yiMzdVoyiJEl/paS8sGEgg/LakK2ykySe4PvIapk6yLczCG68DEyDT9
uM5GT9Us+Osa+wjT6+dG4xTO3xuAMENBkDwWtPcSU/9DsZ1AdyFT2ysV11FZ1A2j
5WHhQp4HspFu/TRVjJLPRkG8isKk/p8s15Uyv5UCAwEAAaOCAj4wggI6MB0GA1Ud
DgQWBBQEH/pkylTO8o7dvBe3eoCQDowCQDAfBgNVHSMEGDAWgBQjf32wMzFMRzza
GU4N958cN12j9DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0kzOTlzRE14VEVjODJobE9EZmVmSERkZG9fUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODgvZWVmNTU3LTBlMTAtNDBjZS1hNDhmLWVlMDYwMzk0OWY5My8x
L0JCXzZaTXBVenZLTzNid1h0M3FBa0E2TUFrQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgv
ZWVmNTU3LTBlMTAtNDBjZS1hNDhmLWVlMDYwMzk0OWY5My8xL0kzOTlzRE14VEVj
ODJobE9EZmVmSERkZG9fUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBU
BggrBgEFBQcBBwEB/wRFMEMwMgQCAAEwLAMEB1uMgAMEBV674AMEArkQBAMEA8I2
wDAMAwQCwjbMAwQCwjbwAwQDwjb4MA0EAgACMAcDBQAqAXeAMA0GCSqGSIb3DQEB
CwUAA4IBAQArECgDtm+WBlzuPTM3rQcKgIgDjhd9Q5rURQcxMRCLTQXhwBVul+G1
QAxlU9pA1aisA9zlkcGNmYc06rQsszSxAtUqmFQ3dBxKbBD7MDaTcp+g1Vk0ikKu
FrJb4LxOUGCgDLx8ojSxWDU+94dbdej/1tiGWPFcoBA2S3pgEh0eiOPkv2NZAtkr
R6gA7zGyiQPimNrNPkmXlsPs3jQ+L1GzNyjhuEQ7lQGkCyhc4vS908QnsQOFkjZo
O9+Ky/ImkJFA9A4AEErJ0RhXGaZS+iHHC9OE5j1jF9ode/GKuEg38kDwGJnw/ZW+
8HurhlaZUJBbFAP0oD0+ncS6N6b8Ov44
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:58 2024 by rpki-client on console-ams.rpki-client.org