Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/KtrLUtvyiHGGgta2WvCJgJt-uTg.roa
File: KtrLUtvyiHGGgta2WvCJgJt-uTg.roa (raw, json)
Hash identifier: RN1iTfQxfux9oB9gxr019clImsWtzDgnickFCCU5DhM=
Subject key identifier: 2A:DA:CB:52:DB:F2:88:71:86:82:D6:B6:5A:F0:89:80:9B:7E:B9:38
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 0540127D
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/KtrLUtvyiHGGgta2WvCJgJt-uTg.roa
Signing time: Sat 28 May 2022 16:53:13 +0000
ROA not before: Sat 28 May 2022 16:53:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 5.157.192.0/22 maxlen: 22
5.157.196.0/22 maxlen: 22
5.157.200.0/21 maxlen: 21
5.157.208.0/21 maxlen: 21
5.157.216.0/22 maxlen: 24
5.157.220.0/22 maxlen: 24
178.157.120.0/22 maxlen: 22
5.157.132.0/22 maxlen: 22
5.157.152.0/21 maxlen: 21
5.157.160.0/22 maxlen: 22
5.157.168.0/22 maxlen: 24
5.157.172.0/22 maxlen: 24
5.157.232.0/21 maxlen: 21
5.157.228.0/22 maxlen: 22
5.157.248.0/21 maxlen: 21
188.119.168.0/21 maxlen: 21
188.119.184.0/22 maxlen: 22
188.119.182.0/23 maxlen: 23
188.119.180.0/23 maxlen: 23
188.119.188.0/24 maxlen: 24
188.119.189.0/24 maxlen: 24
188.119.190.0/24 maxlen: 24
188.119.191.0/24 maxlen: 24
178.157.68.0/22 maxlen: 22
178.157.94.0/24 maxlen: 24
178.157.101.0/24 maxlen: 24
178.157.112.0/21 maxlen: 21
185.76.62.0/23 maxlen: 23
185.76.60.0/23 maxlen: 23
188.74.248.0/21 maxlen: 21
37.35.48.0/22 maxlen: 22
37.35.52.0/24 maxlen: 24
188.119.128.0/20 maxlen: 24
188.74.192.0/21 maxlen: 21
188.74.200.0/21 maxlen: 21
62.216.72.0/24 maxlen: 24
62.216.73.0/24 maxlen: 24
62.216.74.0/24 maxlen: 24
62.216.75.0/24 maxlen: 24
188.74.212.0/22 maxlen: 22
62.216.72.0/22 maxlen: 22
62.216.80.0/24 maxlen: 24
62.216.84.0/22 maxlen: 22
62.216.80.0/22 maxlen: 22
62.216.81.0/24 maxlen: 24
62.216.82.0/24 maxlen: 24
62.216.83.0/24 maxlen: 24
62.216.84.0/24 maxlen: 24
62.216.85.0/24 maxlen: 24
188.74.216.0/21 maxlen: 21
188.74.224.0/21 maxlen: 21
62.216.88.0/22 maxlen: 22
62.216.86.0/24 maxlen: 24
62.216.87.0/24 maxlen: 24
62.216.88.0/24 maxlen: 24
62.216.89.0/24 maxlen: 24
62.216.90.0/24 maxlen: 24
62.216.91.0/24 maxlen: 24
188.74.232.0/21 maxlen: 21
62.216.92.0/24 maxlen: 24
62.216.93.0/24 maxlen: 24
62.216.94.0/24 maxlen: 24
62.216.95.0/24 maxlen: 24
188.74.144.0/22 maxlen: 22
188.74.148.0/22 maxlen: 22
188.74.160.0/21 maxlen: 21
188.74.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88085117 (0x540127d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: May 28 16:53:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2adacb52dbf288718682d6b65af089809b7eb938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:02:d9:fb:1d:25:42:8e:87:24:9b:f7:5b:95:
74:6f:c1:e7:18:ee:96:3c:c4:b3:75:14:68:e1:27:
9a:7f:a5:b5:00:0f:de:69:35:9c:be:e2:45:14:fd:
d3:1b:2c:74:83:ed:03:78:8e:85:3d:3f:57:8b:cb:
eb:41:cd:4c:e4:05:dc:db:ee:42:79:c3:80:26:34:
54:27:35:53:9d:15:ed:9b:77:17:92:95:16:d5:f7:
1a:c8:18:af:69:0a:d9:86:aa:ef:35:d2:05:28:05:
7c:10:27:89:3f:67:6d:0b:0d:eb:74:fd:80:5c:aa:
2b:86:70:8b:d4:fd:3f:23:ed:39:d6:79:4e:51:2b:
07:1f:06:d5:07:f0:8a:28:e9:bd:83:63:ee:f6:8e:
41:3b:82:65:80:77:d2:3e:54:b1:88:ef:5f:ac:be:
76:78:87:1e:16:ec:91:4c:a9:3e:21:37:1f:5d:56:
cc:d3:4b:d3:ca:6e:69:b4:e3:3a:78:b5:82:4a:76:
77:78:b4:f1:ea:32:af:a8:96:b6:90:28:1e:40:f2:
90:4d:9b:a5:0c:92:e9:8a:f2:4d:79:f4:84:46:33:
d9:e4:0e:7a:ec:40:63:e6:e2:3e:34:f2:80:28:a0:
f6:27:94:83:2b:73:02:97:7e:59:1f:77:75:4b:e9:
e7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DA:CB:52:DB:F2:88:71:86:82:D6:B6:5A:F0:89:80:9B:7E:B9:38
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/KtrLUtvyiHGGgta2WvCJgJt-uTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.132.0/22
5.157.152.0-5.157.163.255
5.157.168.0/21
5.157.192.0/19
5.157.228.0-5.157.239.255
5.157.248.0/21
37.35.48.0-37.35.52.255
62.216.72.0/22
62.216.80.0/20
178.157.68.0/22
178.157.94.0/24
178.157.101.0/24
178.157.112.0-178.157.123.255
185.76.60.0/22
188.74.144.0/21
188.74.160.0/21
188.74.184.0/22
188.74.192.0/20
188.74.212.0-188.74.239.255
188.74.248.0/21
188.119.128.0/20
188.119.168.0/21
188.119.180.0-188.119.191.255
Signature Algorithm: sha256WithRSAEncryption
54:c9:30:3e:e3:e5:24:ee:51:ee:5a:20:da:53:ca:7d:16:92:
83:84:1e:b9:4a:4c:1e:e8:d1:a8:98:c4:a7:42:0f:56:d4:a3:
85:d4:cf:43:d5:69:43:e4:90:c6:39:9b:e7:a9:2d:c8:d2:17:
4e:83:2f:6a:a9:71:b9:7b:ae:7b:26:4c:95:2a:ea:5a:5b:6c:
4a:70:ae:e3:a8:d8:e1:b3:92:5c:26:4a:67:99:90:80:b3:76:
39:f1:de:57:98:d5:0e:d3:b3:32:0a:f5:45:e9:0e:8b:46:72:
b5:49:e9:19:ba:56:3e:02:a1:b4:30:4a:8d:2d:26:e4:76:a4:
86:0b:41:c2:6f:69:76:64:b7:42:68:a6:88:e5:49:d5:61:d0:
4f:af:c1:aa:7f:68:21:15:aa:3f:90:f7:3c:50:e3:ac:1b:fd:
e1:d6:04:ce:4d:e0:f5:fb:77:bd:97:82:fb:91:36:c9:cf:79:
66:e2:31:1a:94:8f:5d:01:8f:6a:eb:7e:6f:19:53:73:ce:f5:
b1:b6:37:11:c6:47:12:6c:81:10:8d:67:35:dc:65:0c:77:be:
56:7f:23:09:d3:e1:0d:98:d1:1e:f9:77:e6:35:c1:78:ae:44:
e6:54:20:c2:98:28:06:48:2c:b8:56:74:ba:35:49:4c:83:01:
6f:99:bf:86
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgIEBUASfTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YjIzM2Q3NTUwOGI0ZTg1Y2NjZjQ0MzQ5YTdjYjcwMzE5OGQxZDI2MB4XDTIyMDUy
ODE2NTMxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmFkYWNiNTJkYmYy
ODg3MTg2ODJkNmI2NWFmMDg5ODA5YjdlYjkzODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOYC2fsdJUKOhySb91uVdG/B5xjuljzEs3UUaOEnmn+ltQAP
3mk1nL7iRRT90xssdIPtA3iOhT0/V4vL60HNTOQF3NvuQnnDgCY0VCc1U50V7Zt3
F5KVFtX3GsgYr2kK2Yaq7zXSBSgFfBAniT9nbQsN63T9gFyqK4Zwi9T9PyPtOdZ5
TlErBx8G1QfwiijpvYNj7vaOQTuCZYB30j5UsYjvX6y+dniHHhbskUypPiE3H11W
zNNL08puabTjOni1gkp2d3i08eoyr6iWtpAoHkDykE2bpQyS6YryTXn0hEYz2eQO
euxAY+biPjTygCig9ieUgytzApd+WR93dUvp50sCAwEAAaOCAsIwggK+MB0GA1Ud
DgQWBBQq2stS2/KIcYaC1rZa8ImAm365ODAfBgNVHSMEGDAWgBRrIz11UItOhczP
RDSafLcDGY0dJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2F5TTlkVkNMVG9YTXowUTBtbnkzQXhtTkhTWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTAvOWQ5MTkyLTI3M2MtNGNhOS1iMmJhLWZhOWNiNTFjZDBmMS8x
L0t0ckxVdHZ5aUhHR2d0YTJXdkNKZ0p0LXVUZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAv
OWQ5MTkyLTI3M2MtNGNhOS1iMmJhLWZhOWNiNTFjZDBmMS8xL2F5TTlkVkNMVG9Y
TXowUTBtbnkzQXhtTkhTWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
1wYIKwYBBQUHAQcBAf8EgccwgcQwgcEEAgABMIG6AwQCBZ2EMAwDBAMFnZgDBAIF
naADBAMFnagDBAUFncAwDAMEAgWd5AMEBAWd4AMEAwWd+DAMAwQEJSMwAwQAJSM0
AwQCPthIAwQEPthQAwQCsp1EAwQAsp1eAwQAsp1lMAwDBASynXADBAKynXgDBAK5
TDwDBAO8SpADBAO8SqADBAK8SrgDBAS8SsAwDAMEArxK1AMEBLxK4AMEA7xK+AME
BLx3gAMEA7x3qDAMAwQCvHe0AwQGvHeAMA0GCSqGSIb3DQEBCwUAA4IBAQBUyTA+
4+Uk7lHuWiDaU8p9FpKDhB65Skwe6NGomMSnQg9W1KOF1M9D1WlD5JDGOZvnqS3I
0hdOgy9qqXG5e657JkyVKupaW2xKcK7jqNjhs5JcJkpnmZCAs3Y58d5XmNUO07My
CvVF6Q6LRnK1SekZulY+AqG0MEqNLSbkdqSGC0HCb2l2ZLdCaKaI5UnVYdBPr8Gq
f2ghFao/kPc8UOOsG/3h1gTOTeD1+3e9l4L7kTbJz3lm4jEalI9dAY9q635vGVNz
zvWxtjcRxkcSbIEQjWc13GUMd75WfyMJ0+ENmNEe+XfmNcF4rkTmVCDCmCgGSCy4
VnS6NUlMgwFvmb+G
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:50 2024 by rpki-client on console-ams.rpki-client.org