Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/rlcRNaXP_NLDujoAxP90868jXyU.roa
File: rlcRNaXP_NLDujoAxP90868jXyU.roa (raw, json)
Hash identifier: XXYE0AXWXiHZAh/OQi+qP1WHfQvM9i3CocIZT1ESkZQ=
Subject key identifier: AE:57:11:35:A5:CF:FC:D2:C3:BA:3A:00:C4:FF:74:F3:AF:23:5F:25
Certificate issuer: /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial: 0184BDBE88EE20447FB600885C4EF5F09F27
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/rlcRNaXP_NLDujoAxP90868jXyU.roa
Signing time: Mon 28 Nov 2022 10:18:11 +0000
ROA not before: Mon 28 Nov 2022 10:18:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 83.149.64.0/18 maxlen: 18
212.7.208.0/22 maxlen: 22
37.48.64.0/18 maxlen: 18
212.32.224.0/19 maxlen: 19
185.17.184.0/22 maxlen: 22
81.171.0.0/19 maxlen: 19
212.7.192.0/20 maxlen: 20
94.75.192.0/18 maxlen: 18
95.168.160.0/20 maxlen: 20
82.192.64.0/19 maxlen: 19
81.17.51.0/24 maxlen: 24
81.17.49.0/24 maxlen: 24
81.17.47.0/24 maxlen: 24
81.17.55.0/24 maxlen: 24
81.17.54.0/24 maxlen: 24
81.17.53.0/24 maxlen: 24
81.17.52.0/24 maxlen: 24
62.212.64.0/19 maxlen: 19
5.79.64.0/18 maxlen: 18
213.227.128.0/19 maxlen: 19
85.17.0.0/16 maxlen: 16
95.211.0.0/16 maxlen: 16
2001:1af8::/32 maxlen: 32
2001:1af8:8000::/36 maxlen: 36
2001:1af8:8000::/40 maxlen: 40
2001:1af8:8110::/44 maxlen: 44
2001:1af8:8100::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:be:88:ee:20:44:7f:b6:00:88:5c:4e:f5:f0:9f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Validity
Not Before: Nov 28 10:18:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae571135a5cffcd2c3ba3a00c4ff74f3af235f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:d2:a6:21:51:a6:96:9a:e2:dd:8d:31:cb:
6c:4f:5c:68:2d:8b:39:f5:52:a2:f8:dc:b5:f9:e0:
0b:d2:63:24:ff:75:f0:f8:65:a3:c5:07:63:06:0f:
80:9e:c6:c7:91:96:28:e4:3f:d7:e4:8d:e5:cd:28:
6a:0d:2b:36:ba:8b:25:58:d3:8a:e4:67:1b:f5:f1:
2e:4d:68:b0:24:a5:b4:3a:79:e9:ea:8a:06:99:56:
cb:ae:b9:37:b7:01:71:4c:b8:92:b6:64:ce:d4:1f:
81:03:ba:7a:2f:6e:bc:35:5b:b8:0e:4c:c2:82:4b:
25:43:e1:3e:d3:0d:69:54:bc:55:5c:89:d0:7d:6f:
4b:de:32:74:37:ba:2f:d0:bc:6a:5a:aa:72:8b:90:
b0:d4:4e:eb:6b:89:ef:bd:35:bc:02:1c:cb:16:30:
21:32:15:9f:a3:d2:71:3b:a4:30:1a:5b:f9:e7:15:
26:80:b4:c6:dd:16:30:f3:28:cf:bd:48:2d:83:ba:
e6:ed:12:cc:2e:1b:cb:e3:18:a0:81:63:81:ea:0f:
ea:67:4c:b8:17:ca:47:90:3b:d4:e5:b6:ad:df:91:
59:e8:cc:bd:84:8d:ae:00:6b:93:58:6b:18:34:e8:
1d:cc:08:40:87:43:c2:2c:3d:4b:a1:21:6d:59:d6:
2c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:57:11:35:A5:CF:FC:D2:C3:BA:3A:00:C4:FF:74:F3:AF:23:5F:25
X509v3 Authority Key Identifier:
keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/rlcRNaXP_NLDujoAxP90868jXyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.79.64.0/18
37.48.64.0/18
62.212.64.0/19
81.17.47.0/24
81.17.49.0/24
81.17.51.0-81.17.55.255
81.171.0.0/19
82.192.64.0/19
83.149.64.0/18
85.17.0.0/16
94.75.192.0/18
95.168.160.0/20
95.211.0.0/16
185.17.184.0/22
212.7.192.0-212.7.211.255
212.32.224.0/19
213.227.128.0/19
IPv6:
2001:1af8::/32
Signature Algorithm: sha256WithRSAEncryption
52:d2:87:22:0c:ff:e6:d5:dd:67:16:f7:93:07:f0:68:46:1d:
93:5e:30:b9:1f:f1:e4:d3:6a:48:e1:ef:f6:74:95:1c:d6:8d:
dc:c6:54:63:78:f4:43:ed:35:26:4c:0b:42:12:a2:b5:aa:1a:
4f:0e:75:88:10:e9:bc:79:cf:26:09:d9:55:fd:a7:50:67:ab:
df:26:65:da:cd:f4:89:f0:1d:68:9a:f6:3f:d7:6b:bf:f4:d5:
f4:4e:f3:aa:29:3b:0c:68:87:0d:37:46:2b:5f:26:8e:a5:0f:
9a:6c:71:47:42:12:37:87:21:a3:82:2c:de:8d:dc:cb:ed:25:
08:be:de:4d:f3:6d:a8:5d:a1:e5:e9:e3:30:f9:54:b9:60:86:
de:9a:10:64:ff:bc:c4:8a:ca:91:1a:d7:70:61:ef:31:d1:ee:
04:ec:c0:c2:42:d1:84:cc:86:cc:4b:e3:1b:67:8f:15:38:03:
77:c2:e9:fb:fe:f5:8f:da:f9:8a:88:5e:93:e2:7b:5f:df:92:
02:ed:96:5b:ca:23:30:43:9b:a6:a7:f8:2b:26:1a:38:dc:bd:
56:7b:7e:28:ba:06:47:5c:67:52:cc:d6:58:5e:96:5d:46:ae:
f1:e9:0f:ee:39:92:f4:ec:05:6a:b9:d4:87:77:d1:dc:90:0e:
90:1e:41:62
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgISAYS9vojuIER/tgCIXE718J8nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDczMDRjMWI1OWRjMjI3MzFiYjUzZWZmNWE4NGVkOWEz
MDYxNGMwHhcNMjIxMTI4MTAxODExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTU3MTEzNWE1Y2ZmY2QyYzNiYTNhMDBjNGZmNzRmM2FmMjM1ZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdTSpiFRppaa4t2NMctsT1xoLYs5
9VKi+Ny1+eAL0mMk/3Xw+GWjxQdjBg+AnsbHkZYo5D/X5I3lzShqDSs2uoslWNOK
5Gcb9fEuTWiwJKW0Onnp6ooGmVbLrrk3twFxTLiStmTO1B+BA7p6L268NVu4DkzC
gkslQ+E+0w1pVLxVXInQfW9L3jJ0N7ov0LxqWqpyi5Cw1E7ra4nvvTW8AhzLFjAh
MhWfo9JxO6QwGlv55xUmgLTG3RYw8yjPvUgtg7rm7RLMLhvL4xiggWOB6g/qZ0y4
F8pHkDvU5bat35FZ6My9hI2uAGuTWGsYNOgdzAhAh0PCLD1LoSFtWdYsOQIDAQAB
o4ICiTCCAoUwHQYDVR0OBBYEFK5XETWlz/zSw7o6AMT/dPOvI18lMB8GA1UdIwQY
MBaAFCfXMEwbWdwicxu1Pv9ahO2aMGFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjljd1RCdFozQ0p6RzdVLV8xcUU3Wm93WVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jMTNlMTItZTUwZC00MzM4LThhMmYt
ZmZmYjVhNGU3NjJhLzEvcmxjUk5hWFBfTkxEdWpvQXhQOTA4NjhqWHlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9jMTNlMTItZTUwZC00MzM4LThhMmYtZmZmYjVhNGU3NjJh
LzEvSjljd1RCdFozQ0p6RzdVLV8xcUU3Wm93WVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGeBggrBgEFBQcBBwEB/wSBjjCBizB6BAIAATB0AwQGBU9A
AwQGJTBAAwQFPtRAAwQAUREvAwQAURExMAwDBABRETMDBANRETADBAVRqwADBAVS
wEADBAZTlUADAwBVEQMEBl5LwAMEBF+ooAMDAF/TAwQCuRG4MAwDBAbUB8ADBALU
B9ADBAXUIOADBAXV44AwDQQCAAIwBwMFACABGvgwDQYJKoZIhvcNAQELBQADggEB
AFLShyIM/+bV3WcW95MH8GhGHZNeMLkf8eTTakjh7/Z0lRzWjdzGVGN49EPtNSZM
C0ISorWqGk8OdYgQ6bx5zyYJ2VX9p1Bnq98mZdrN9InwHWia9j/Xa7/01fRO86op
Owxohw03RitfJo6lD5pscUdCEjeHIaOCLN6N3MvtJQi+3k3zbahdoeXp4zD5VLlg
ht6aEGT/vMSKypEa13Bh7zHR7gTswMJC0YTMhsxL4xtnjxU4A3fC6fv+9Y/a+YqI
XpPie1/fkgLtllvKIzBDm6an+CsmGjjcvVZ7fii6BkdcZ1LM1lhell1GrvHpD+45
kvTsBWq51Id30dyQDpAeQWI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:50 2024 by rpki-client on console-ams.rpki-client.org