Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/zV0lV0Waf0DPCVjmCjyd6dPby3s.roa
File: zV0lV0Waf0DPCVjmCjyd6dPby3s.roa (raw, json)
Hash identifier: o70l4p6cA5REuF/y9rPONJ08kwhRnqRyIVK6+v1y08U=
Subject key identifier: CD:5D:25:57:45:9A:7F:40:CF:09:58:E6:0A:3C:9D:E9:D3:DB:CB:7B
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 0182D0CFCD92B5E8E64E9F31F6D206E36DD7
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/zV0lV0Waf0DPCVjmCjyd6dPby3s.roa
Signing time: Wed 24 Aug 2022 17:04:15 +0000
ROA not before: Wed 24 Aug 2022 17:04:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 5.157.192.0/22 maxlen: 22
5.157.196.0/22 maxlen: 22
5.157.200.0/21 maxlen: 21
5.157.208.0/21 maxlen: 21
5.157.216.0/22 maxlen: 24
5.157.220.0/22 maxlen: 24
178.157.120.0/22 maxlen: 22
5.157.132.0/22 maxlen: 22
5.157.152.0/21 maxlen: 21
5.157.160.0/22 maxlen: 22
5.157.168.0/22 maxlen: 24
5.157.172.0/22 maxlen: 24
5.157.232.0/21 maxlen: 21
5.157.228.0/22 maxlen: 22
5.157.248.0/21 maxlen: 21
188.119.168.0/21 maxlen: 21
188.119.184.0/22 maxlen: 22
188.119.182.0/23 maxlen: 23
188.119.180.0/23 maxlen: 23
188.119.188.0/22 maxlen: 24
178.157.68.0/22 maxlen: 22
178.157.94.0/24 maxlen: 24
178.157.101.0/24 maxlen: 24
178.157.112.0/21 maxlen: 21
185.76.61.0/24 maxlen: 24
185.76.63.0/24 maxlen: 24
188.74.248.0/21 maxlen: 21
37.35.48.0/22 maxlen: 22
37.35.52.0/24 maxlen: 24
188.119.128.0/20 maxlen: 24
188.74.192.0/21 maxlen: 21
188.74.200.0/21 maxlen: 21
62.216.72.0/24 maxlen: 24
62.216.73.0/24 maxlen: 24
62.216.74.0/24 maxlen: 24
62.216.75.0/24 maxlen: 24
188.74.212.0/22 maxlen: 22
62.216.72.0/22 maxlen: 22
62.216.80.0/24 maxlen: 24
62.216.84.0/22 maxlen: 22
62.216.80.0/22 maxlen: 22
62.216.81.0/24 maxlen: 24
62.216.82.0/24 maxlen: 24
62.216.83.0/24 maxlen: 24
62.216.84.0/24 maxlen: 24
62.216.85.0/24 maxlen: 24
188.74.216.0/21 maxlen: 21
62.216.88.0/22 maxlen: 22
188.74.224.0/21 maxlen: 21
62.216.86.0/24 maxlen: 24
62.216.87.0/24 maxlen: 24
62.216.88.0/24 maxlen: 24
62.216.89.0/24 maxlen: 24
62.216.90.0/24 maxlen: 24
62.216.91.0/24 maxlen: 24
188.74.232.0/21 maxlen: 21
62.216.92.0/24 maxlen: 24
62.216.93.0/24 maxlen: 24
62.216.94.0/24 maxlen: 24
62.216.95.0/24 maxlen: 24
188.74.144.0/22 maxlen: 22
188.74.148.0/22 maxlen: 22
188.74.160.0/21 maxlen: 21
188.74.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d0:cf:cd:92:b5:e8:e6:4e:9f:31:f6:d2:06:e3:6d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Aug 24 17:04:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd5d2557459a7f40cf0958e60a3c9de9d3dbcb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:99:8a:e5:06:ce:c0:df:7f:aa:01:4b:19:11:
ee:e9:73:77:f1:52:e1:47:f1:1d:3d:66:a8:8a:1b:
ce:5d:06:8b:01:ba:67:d1:39:81:71:0f:5c:c0:9f:
b8:1d:cd:25:8e:bc:0b:e0:06:fa:bb:5c:f0:6e:68:
9c:ed:cd:3c:06:cc:9a:29:ac:2c:6b:de:10:46:a9:
54:e0:1e:52:24:cb:55:59:00:12:78:24:cf:dd:a9:
a8:7d:6e:33:8e:e4:28:1d:b0:0a:61:bb:96:88:97:
9b:dd:f6:1f:13:85:92:9d:a2:5c:4b:3c:9a:f0:3f:
ea:04:2e:72:d0:c9:b1:f4:22:a2:6d:58:0a:23:47:
8e:41:1f:e3:5c:98:e5:d3:40:d0:ee:91:e0:9c:82:
74:b9:5d:48:c0:94:35:d1:8e:2a:9f:8e:da:36:04:
1d:88:f6:f2:ed:91:07:5d:92:0b:b1:28:15:e6:a2:
d4:1c:f2:67:5f:70:2a:ca:e8:c2:6b:f1:d7:47:6e:
e8:c3:f8:84:55:c5:7e:23:ba:19:39:e6:30:28:02:
37:a9:4a:1e:28:05:6f:a7:c2:04:e1:c4:44:eb:6c:
ff:a3:b0:c7:d5:88:2b:5c:66:1d:43:25:15:53:88:
ab:a2:a1:0e:49:85:47:64:7e:77:fb:77:57:ea:5d:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5D:25:57:45:9A:7F:40:CF:09:58:E6:0A:3C:9D:E9:D3:DB:CB:7B
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/zV0lV0Waf0DPCVjmCjyd6dPby3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.132.0/22
5.157.152.0-5.157.163.255
5.157.168.0/21
5.157.192.0/19
5.157.228.0-5.157.239.255
5.157.248.0/21
37.35.48.0-37.35.52.255
62.216.72.0/22
62.216.80.0/20
178.157.68.0/22
178.157.94.0/24
178.157.101.0/24
178.157.112.0-178.157.123.255
185.76.61.0/24
185.76.63.0/24
188.74.144.0/21
188.74.160.0/21
188.74.184.0/22
188.74.192.0/20
188.74.212.0-188.74.239.255
188.74.248.0/21
188.119.128.0/20
188.119.168.0/21
188.119.180.0-188.119.191.255
Signature Algorithm: sha256WithRSAEncryption
55:f1:48:dc:85:1e:64:16:89:45:c7:18:ba:25:8e:5c:3e:2d:
aa:76:8c:8f:a9:83:3d:ff:3c:34:0b:fd:e2:46:62:0c:55:75:
34:ae:1f:3c:1b:0b:ee:7c:5b:4b:ac:8e:6e:0a:a6:a3:3e:52:
12:26:f5:aa:67:f7:28:97:f7:e1:2b:0c:37:1a:10:d5:dd:0c:
62:77:74:eb:e1:3e:8a:d8:c5:09:7a:13:76:43:ee:b3:fc:9f:
ea:e2:6e:a2:a5:99:36:2e:8c:14:95:b7:9a:eb:6b:af:e1:03:
9b:f5:d7:11:14:b7:8e:e8:62:8f:f6:37:cc:5b:a2:a9:50:81:
b8:c4:17:66:6f:7c:5e:ec:0c:b7:3b:4f:d6:49:64:df:db:38:
9d:22:da:ac:74:1b:c2:ae:40:77:87:71:07:90:36:7a:33:9d:
df:c2:d5:7a:1b:41:1f:bc:47:79:1d:06:89:ba:34:21:a8:4a:
91:b2:64:f3:0c:7d:08:b3:3f:e0:d2:c0:58:fd:d7:74:96:55:
d5:61:3f:ef:3f:0f:a8:44:78:58:fb:cb:51:61:d1:b7:3a:7c:
9e:77:e7:08:e5:0b:e7:ca:de:7d:9d:20:e3:42:78:71:fc:c4:
e2:f1:d2:70:70:0e:e9:7e:ba:91:2f:5a:d5:5a:ac:ed:cc:05:
c8:a6:9f:6d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgISAYLQz82StejmTp8x9tIG423XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4
ZDFkMjYwHhcNMjIwODI0MTcwNDE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDVkMjU1NzQ1OWE3ZjQwY2YwOTU4ZTYwYTNjOWRlOWQzZGJjYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZmK5QbOwN9/qgFLGRHu6XN38VLh
R/EdPWaoihvOXQaLAbpn0TmBcQ9cwJ+4Hc0ljrwL4Ab6u1zwbmic7c08BsyaKaws
a94QRqlU4B5SJMtVWQASeCTP3amofW4zjuQoHbAKYbuWiJeb3fYfE4WSnaJcSzya
8D/qBC5y0Mmx9CKibVgKI0eOQR/jXJjl00DQ7pHgnIJ0uV1IwJQ10Y4qn47aNgQd
iPby7ZEHXZILsSgV5qLUHPJnX3AqyujCa/HXR27ow/iEVcV+I7oZOeYwKAI3qUoe
KAVvp8IE4cRE62z/o7DH1YgrXGYdQyUVU4iroqEOSYVHZH53+3dX6l3lFQIDAQAB
o4ICyDCCAsQwHQYDVR0OBBYEFM1dJVdFmn9AzwlY5go8nenT28t7MB8GA1UdIwQY
MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt
ZmE5Y2I1MWNkMGYxLzEvelYwbFYwV2FmMERQQ1ZqbUNqeWQ2ZFBieTNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx
LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHdBggrBgEFBQcBBwEB/wSBzTCByjCBxwQCAAEwgcADBAIF
nYQwDAMEAwWdmAMEAgWdoAMEAwWdqAMEBQWdwDAMAwQCBZ3kAwQEBZ3gAwQDBZ34
MAwDBAQlIzADBAAlIzQDBAI+2EgDBAQ+2FADBAKynUQDBACynV4DBACynWUwDAME
BLKdcAMEArKdeAMEALlMPQMEALlMPwMEA7xKkAMEA7xKoAMEArxKuAMEBLxKwDAM
AwQCvErUAwQEvErgAwQDvEr4AwQEvHeAAwQDvHeoMAwDBAK8d7QDBAa8d4AwDQYJ
KoZIhvcNAQELBQADggEBAFXxSNyFHmQWiUXHGLoljlw+Lap2jI+pgz3/PDQL/eJG
YgxVdTSuHzwbC+58W0usjm4KpqM+UhIm9apn9yiX9+ErDDcaENXdDGJ3dOvhPorY
xQl6E3ZD7rP8n+ribqKlmTYujBSVt5rra6/hA5v11xEUt47oYo/2N8xboqlQgbjE
F2ZvfF7sDLc7T9ZJZN/bOJ0i2qx0G8KuQHeHcQeQNnoznd/C1XobQR+8R3kdBom6
NCGoSpGyZPMMfQizP+DSwFj913SWVdVhP+8/D6hEeFj7y1Fh0bc6fJ535wjlC+fK
3n2dIONCeHH8xOLx0nBwDul+upEvWtVarO3MBcimn20=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:50 2024 by rpki-client on console-ams.rpki-client.org