Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/e9VjMTg-pZPN5vOVPV0yzFXz7RE.roa
File: e9VjMTg-pZPN5vOVPV0yzFXz7RE.roa (raw, json)
Hash identifier: hBL2xHTyU/6UF/taRg44hvw+TIh69cVqloxcsQoignE=
Subject key identifier: 7B:D5:63:31:38:3E:A5:93:CD:E6:F3:95:3D:5D:32:CC:55:F3:ED:11
Certificate issuer: /CN=2875f185823dbc6a82d105b3ca16077db5729377
Certificate serial: 33F20552
Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/e9VjMTg-pZPN5vOVPV0yzFXz7RE.roa
Signing time: Sat 01 Jan 2022 06:02:40 +0000
ROA not before: Sat 01 Jan 2022 06:02:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 185.60.4.0/24 maxlen: 24
185.60.5.0/24 maxlen: 24
185.60.6.0/24 maxlen: 24
185.60.7.0/24 maxlen: 24
195.206.186.0/24 maxlen: 24
195.206.184.0/24 maxlen: 24
195.206.185.0/24 maxlen: 24
195.206.187.0/24 maxlen: 24
195.206.188.0/24 maxlen: 24
195.206.189.0/24 maxlen: 24
195.206.190.0/24 maxlen: 24
195.206.191.0/24 maxlen: 24
185.91.43.0/24 maxlen: 24
185.91.40.0/24 maxlen: 24
185.91.41.0/24 maxlen: 24
185.91.42.0/24 maxlen: 24
185.86.23.0/24 maxlen: 24
185.86.20.0/24 maxlen: 24
185.86.21.0/24 maxlen: 24
185.86.22.0/24 maxlen: 24
185.2.79.0/24 maxlen: 24
185.34.80.0/24 maxlen: 24
185.34.81.0/24 maxlen: 24
185.34.82.0/24 maxlen: 24
185.34.83.0/24 maxlen: 24
185.61.88.0/24 maxlen: 24
185.61.89.0/24 maxlen: 24
185.61.90.0/24 maxlen: 24
185.61.91.0/24 maxlen: 24
37.157.48.0/24 maxlen: 24
37.157.49.0/24 maxlen: 24
37.157.50.0/24 maxlen: 24
37.157.51.0/24 maxlen: 24
37.157.52.0/24 maxlen: 24
37.157.53.0/24 maxlen: 24
37.157.54.0/24 maxlen: 24
37.157.55.0/24 maxlen: 24
185.2.76.0/24 maxlen: 24
185.2.77.0/24 maxlen: 24
185.2.78.0/24 maxlen: 24
2a00:b840::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 871499090 (0x33f20552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377
Validity
Not Before: Jan 1 06:02:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bd56331383ea593cde6f3953d5d32cc55f3ed11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fd:4a:aa:9a:96:64:c7:4f:13:30:89:e4:a0:
5a:a8:54:7b:da:e1:fe:13:57:9b:6f:d8:f3:66:9e:
56:62:b4:2a:67:d2:58:85:69:34:e9:e9:4a:48:9e:
c4:6d:84:8c:27:a2:5f:25:b7:1d:6c:62:7c:f1:f7:
04:16:2d:63:f7:4d:d6:f0:70:96:81:09:08:74:36:
6e:88:c0:81:22:c4:4d:fc:87:e3:8c:d6:39:d8:87:
a2:7b:d3:08:50:0b:86:a8:2b:65:f1:c2:3d:fb:35:
90:23:6a:cf:03:75:c4:ef:cd:4d:0b:b2:42:10:82:
ea:3f:18:5d:e2:10:a3:a7:7f:72:80:54:09:9e:77:
11:cc:6b:5b:b7:f1:f2:92:05:67:ea:e8:23:37:b6:
9b:1b:c6:33:78:88:f1:ea:65:ef:9b:f9:dd:ad:2c:
f3:a0:54:8d:60:04:81:1e:6c:81:a0:f0:1e:9b:71:
f2:3e:4a:40:c5:86:3c:e1:2d:48:4c:22:0c:d1:a9:
7f:36:41:12:7c:48:4b:8b:ea:5f:3e:2b:d5:35:90:
15:96:47:98:41:90:00:b6:21:19:66:97:cf:f1:28:
01:a3:32:b8:cf:94:2c:24:ea:77:65:45:fe:bc:2c:
05:fc:59:d4:92:62:68:25:58:9b:52:b7:a3:94:3c:
59:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D5:63:31:38:3E:A5:93:CD:E6:F3:95:3D:5D:32:CC:55:F3:ED:11
X509v3 Authority Key Identifier:
keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/e9VjMTg-pZPN5vOVPV0yzFXz7RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.48.0/21
185.2.76.0/22
185.34.80.0/22
185.60.4.0/22
185.61.88.0/22
185.86.20.0/22
185.91.40.0/22
195.206.184.0/21
IPv6:
2a00:b840::/29
Signature Algorithm: sha256WithRSAEncryption
93:10:7c:4e:27:53:d4:db:10:02:e7:1f:a8:b4:2d:33:e7:74:
85:ed:fe:3a:e9:1c:3f:b4:c5:01:11:39:ed:0a:41:b3:16:fa:
d6:87:1f:3f:8e:d0:35:d1:c9:39:d9:6b:9a:24:e3:7d:f6:c4:
82:81:a1:a7:dd:b9:c3:80:3b:e7:c6:d3:5f:a3:5f:1f:5f:6b:
3a:b9:fa:95:11:2a:5a:d8:6e:af:cf:a0:da:85:93:c4:f5:a8:
f7:9a:78:54:a6:12:ae:9b:89:4b:3d:f2:7a:be:fa:d1:11:af:
80:d5:fb:27:dd:ef:8a:d2:a3:f7:c6:35:00:a1:05:aa:6e:0d:
ea:e4:dc:fc:a2:f5:37:33:9e:85:32:b0:e7:2b:f2:83:cf:ce:
b9:5f:2f:a6:ce:b6:8b:18:12:09:cb:a0:9b:1f:7a:14:6b:28:
e8:e9:8f:55:ee:42:91:ec:d6:94:17:41:e1:9f:45:6c:47:20:
ba:82:22:d9:c5:90:9c:8f:ae:05:38:ce:ca:5d:37:55:90:62:
b9:40:70:da:1f:3b:5b:23:c7:c5:74:8c:a9:37:a0:2a:aa:11:
4f:5f:b8:a5:d9:bd:f0:9a:24:43:5e:71:9f:b7:79:32:59:a6:
ac:39:c2:69:a3:69:aa:39:18:76:63:9d:c3:8f:ee:18:ee:48:
24:04:b0:71
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIEM/IFUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ODc1ZjE4NTgyM2RiYzZhODJkMTA1YjNjYTE2MDc3ZGI1NzI5Mzc3MB4XDTIyMDEw
MTA2MDI0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2JkNTYzMzEzODNl
YTU5M2NkZTZmMzk1M2Q1ZDMyY2M1NWYzZWQxMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOn9SqqalmTHTxMwieSgWqhUe9rh/hNXm2/Y82aeVmK0KmfS
WIVpNOnpSkiexG2EjCeiXyW3HWxifPH3BBYtY/dN1vBwloEJCHQ2bojAgSLETfyH
44zWOdiHonvTCFALhqgrZfHCPfs1kCNqzwN1xO/NTQuyQhCC6j8YXeIQo6d/coBU
CZ53EcxrW7fx8pIFZ+roIze2mxvGM3iI8epl75v53a0s86BUjWAEgR5sgaDwHptx
8j5KQMWGPOEtSEwiDNGpfzZBEnxIS4vqXz4r1TWQFZZHmEGQALYhGWaXz/EoAaMy
uM+ULCTqd2VF/rwsBfxZ1JJiaCVYm1K3o5Q8WYUCAwEAAaOCAkIwggI+MB0GA1Ud
DgQWBBR71WMxOD6lk83m85U9XTLMVfPtETAfBgNVHSMEGDAWgBQodfGFgj28aoLR
BbPKFgd9tXKTdzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tIWHhoWUk5dkdxQzBRV3p5aFlIZmJWeWszYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWYvYTA0ZGE2LTk4ODctNDJhNS04ZWQ3LTk0ZTVkNDljYzYyOC8x
L2U5VmpNVGctcFpQTjV2T1ZQVjB5ekZYejdSRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYv
YTA0ZGE2LTk4ODctNDJhNS04ZWQ3LTk0ZTVkNDljYzYyOC8xL0tIWHhoWUk5dkdx
QzBRV3p5aFlIZmJWeWszYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBY
BggrBgEFBQcBBwEB/wRJMEcwNgQCAAEwMAMEAyWdMAMEArkCTAMEArkiUAMEArk8
BAMEArk9WAMEArlWFAMEArlbKAMEA8POuDANBAIAAjAHAwUDKgC4QDANBgkqhkiG
9w0BAQsFAAOCAQEAkxB8TidT1NsQAucfqLQtM+d0he3+OukcP7TFARE57QpBsxb6
1ocfP47QNdHJOdlrmiTjffbEgoGhp925w4A758bTX6NfH19rOrn6lREqWthur8+g
2oWTxPWo95p4VKYSrpuJSz3yer760RGvgNX7J93vitKj98Y1AKEFqm4N6uTc/KL1
NzOehTKw5yvyg8/OuV8vps62ixgSCcugmx96FGso6OmPVe5CkezWlBdB4Z9FbEcg
uoIi2cWQnI+uBTjOyl03VZBiuUBw2h87WyPHxXSMqTegKqoRT1+4pdm98JokQ15x
n7d5MlmmrDnCaaNpqjkYdmOdw4/uGO5IJASwcQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:08 2023 by rpki-client on console-fra.rpki-client.org