Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/7vilq8QodCa-dQjPHU_0q8J0pxY.roa
File: 7vilq8QodCa-dQjPHU_0q8J0pxY.roa (raw, json)
Hash identifier: cTHDoFi750oPYP6gSEFSfhRmK6oihiLslHd731TrUoE=
Subject key identifier: EE:F8:A5:AB:C4:28:74:26:BE:75:08:CF:1D:4F:F4:AB:C2:74:A7:16
Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial: 018571832425AE17D02494EEDE6F56FB5BB7
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/7vilq8QodCa-dQjPHU_0q8J0pxY.roa
Signing time: Mon 02 Jan 2023 08:04:57 +0000
ROA not before: Mon 02 Jan 2023 08:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48159
IP address blocks: 93.117.96.0/20 maxlen: 20
188.211.192.0/19 maxlen: 19
93.117.112.0/20 maxlen: 20
5.233.84.0/24 maxlen: 24
5.233.82.0/23 maxlen: 23
195.181.32.0/20 maxlen: 20
5.233.95.0/24 maxlen: 24
5.233.94.0/24 maxlen: 24
185.105.102.0/23 maxlen: 23
185.105.100.0/23 maxlen: 23
188.211.128.0/19 maxlen: 19
85.204.208.0/20 maxlen: 20
5.232.64.0/18 maxlen: 18
5.233.240.0/20 maxlen: 20
89.35.64.0/21 maxlen: 21
5.239.0.0/16 maxlen: 16
5.235.188.0/22 maxlen: 22
5.235.188.0/23 maxlen: 23
5.235.192.0/19 maxlen: 19
46.100.164.0/22 maxlen: 22
5.236.0.0/18 maxlen: 18
5.232.160.0/20 maxlen: 20
91.92.220.0/22 maxlen: 22
5.239.144.0/20 maxlen: 20
5.234.36.0/22 maxlen: 22
5.234.40.0/21 maxlen: 21
5.232.128.0/19 maxlen: 19
5.235.224.0/19 maxlen: 19
188.215.176.0/20 maxlen: 20
89.40.152.0/21 maxlen: 21
5.239.200.0/21 maxlen: 21
93.88.64.0/21 maxlen: 21
46.100.0.0/16 maxlen: 16
93.88.72.0/23 maxlen: 23
5.239.244.0/23 maxlen: 23
5.236.64.0/19 maxlen: 19
5.239.160.0/20 maxlen: 20
89.37.144.0/23 maxlen: 23
5.239.176.0/22 maxlen: 22
85.204.80.0/20 maxlen: 20
86.104.240.0/21 maxlen: 21
89.40.240.0/20 maxlen: 20
5.238.0.0/16 maxlen: 16
5.236.96.0/21 maxlen: 21
5.239.192.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:24:25:ae:17:d0:24:94:ee:de:6f:56:fb:5b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Validity
Not Before: Jan 2 08:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eef8a5abc4287426be7508cf1d4ff4abc274a716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:1e:da:1f:30:ff:42:56:cc:79:f2:a8:09:
4b:58:fc:5d:cf:7e:a8:7a:85:be:f6:60:dc:1c:78:
a1:a4:7f:dc:44:d8:b0:b6:3a:e2:da:0b:26:1f:93:
41:6a:84:35:aa:23:8a:3c:6f:c5:b5:2c:6a:b7:c2:
38:7e:e4:95:4d:2e:f0:ff:29:df:6d:69:bb:6e:2a:
53:8f:32:7e:b6:a5:78:f0:67:ed:bd:d6:1b:61:54:
40:94:05:14:f6:f6:9f:c1:c3:19:9b:19:38:d7:f6:
bc:74:fd:17:83:d7:98:11:ea:ab:e1:1f:49:14:39:
5b:94:f9:cc:93:21:9c:e7:3b:f4:58:44:56:bc:6e:
7b:55:61:79:14:7e:9f:2f:6f:db:5f:03:77:9a:7d:
b1:bc:70:dc:07:c1:db:c7:ef:52:e2:39:ee:e1:15:
63:ef:cb:43:9f:7e:23:5b:3f:10:4f:3a:10:57:11:
2b:13:4a:83:fa:cb:d1:45:fd:fa:32:95:84:53:64:
da:9b:e8:b3:26:32:9e:f6:97:c0:2f:2c:f0:ed:9e:
0b:7f:dd:91:c1:5c:56:f7:d6:2b:1e:29:79:23:71:
cb:9e:b6:48:77:48:60:bd:d3:4a:2e:6e:47:af:c7:
ae:5d:41:20:49:e2:d3:78:8f:f8:36:2c:4e:9a:bd:
92:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F8:A5:AB:C4:28:74:26:BE:75:08:CF:1D:4F:F4:AB:C2:74:A7:16
X509v3 Authority Key Identifier:
keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/7vilq8QodCa-dQjPHU_0q8J0pxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.232.64.0-5.232.175.255
5.233.82.0-5.233.84.255
5.233.94.0/23
5.233.240.0/20
5.234.36.0-5.234.47.255
5.235.188.0-5.236.103.255
5.238.0.0/15
46.100.0.0/16
85.204.80.0/20
85.204.208.0/20
86.104.240.0/21
89.35.64.0/21
89.37.144.0/23
89.40.152.0/21
89.40.240.0/20
91.92.220.0/22
93.88.64.0-93.88.73.255
93.117.96.0/19
185.105.100.0/22
188.211.128.0/19
188.211.192.0/19
188.215.176.0/20
195.181.32.0/20
Signature Algorithm: sha256WithRSAEncryption
69:98:4c:84:9b:09:ff:95:99:b3:f5:80:a2:7b:22:99:12:11:
11:df:c0:8a:c9:f3:52:d8:94:77:f9:12:79:88:91:e2:b7:24:
1f:bd:a0:ce:06:14:cc:e5:28:a1:ed:93:63:fd:1a:bc:4c:bd:
0f:66:29:0f:32:5e:de:c2:c1:17:56:51:1f:6a:69:ff:f3:b2:
da:24:94:54:23:f6:ab:18:11:9e:13:99:ce:41:49:07:f5:cd:
13:eb:89:87:b7:e6:43:3c:2e:76:9b:2b:c9:04:5d:84:20:b8:
25:60:47:90:5f:58:4a:1f:bd:f6:f2:d4:04:40:04:7c:71:25:
3a:7e:d8:12:fc:50:53:50:a8:a4:58:7a:d2:78:ce:88:1e:9f:
c2:b0:77:ab:16:6c:9d:ab:2d:4f:83:d5:ab:b0:4d:a1:69:51:
0a:77:5d:f1:2d:98:f0:83:52:29:ac:ed:22:2b:71:1f:75:e5:
4b:68:65:f5:08:56:ac:2b:f0:f9:93:1e:9d:28:0e:75:5e:4e:
97:79:f3:e7:2c:73:75:ed:f8:0d:ac:cc:df:39:6b:71:6e:b4:
ee:d5:2c:c2:a7:9b:4a:f9:ff:4b:cc:63:b2:1f:5d:4a:4b:17:
bf:19:ef:9d:75:3d:cf:50:f1:09:c3:0d:19:1f:03:ab:6f:ed:
4e:b0:76:d2
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgISAYVxgyQlrhfQJJTu3m9W+1u3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0
YjUxMjkwHhcNMjMwMTAyMDgwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWY4YTVhYmM0Mjg3NDI2YmU3NTA4Y2YxZDRmZjRhYmMyNzRhNzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCYe2h8w/0JWzHnyqAlLWPxdz36o
eoW+9mDcHHihpH/cRNiwtjri2gsmH5NBaoQ1qiOKPG/FtSxqt8I4fuSVTS7w/ynf
bWm7bipTjzJ+tqV48GftvdYbYVRAlAUU9vafwcMZmxk41/a8dP0Xg9eYEeqr4R9J
FDlblPnMkyGc5zv0WERWvG57VWF5FH6fL2/bXwN3mn2xvHDcB8Hbx+9S4jnu4RVj
78tDn34jWz8QTzoQVxErE0qD+svRRf36MpWEU2Tam+izJjKe9pfALyzw7Z4Lf92R
wVxW99YrHil5I3HLnrZId0hgvdNKLm5Hr8euXUEgSeLTeI/4NixOmr2SAQIDAQAB
o4ICuDCCArQwHQYDVR0OBBYEFO74pavEKHQmvnUIzx1P9KvCdKcWMB8GA1UdIwQY
MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt
YmYzYjIxYTI3MGYyLzEvN3ZpbHE4UW9kQ2EtZFFqUEhVXzBxOEowcHhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy
LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHNBggrBgEFBQcBBwEB/wSBvTCBujCBtwQCAAEwgbAwDAME
BgXoQAMEBAXooDAMAwQBBelSAwQABelUAwQBBeleAwQEBenwMAwDBAIF6iQDBAQF
6iAwDAMEAgXrvAMEAwXsYAMDAQXuAwMALmQDBARVzFADBARVzNADBANWaPADBANZ
I0ADBAFZJZADBANZKJgDBARZKPADBAJbXNwwDAMEBl1YQAMEAV1YSAMEBV11YAME
ArlpZAMEBbzTgAMEBbzTwAMEBLzXsAMEBMO1IDANBgkqhkiG9w0BAQsFAAOCAQEA
aZhMhJsJ/5WZs/WAonsimRIREd/AisnzUtiUd/kSeYiR4rckH72gzgYUzOUooe2T
Y/0avEy9D2YpDzJe3sLBF1ZRH2pp//Oy2iSUVCP2qxgRnhOZzkFJB/XNE+uJh7fm
QzwudpsryQRdhCC4JWBHkF9YSh+99vLUBEAEfHElOn7YEvxQU1CopFh60njOiB6f
wrB3qxZsnastT4PVq7BNoWlRCndd8S2Y8INSKaztIitxH3XlS2hl9QhWrCvw+ZMe
nSgOdV5Ol3nz5yxzde34DazM3zlrcW607tUswqebSvn/S8xjsh9dSksXvxnvnXU9
z1DxCcMNGR8Dq2/tTrB20g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:14 2025 by rpki-client