Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/ls4VDA01bMklXU3iSYqfP3HgERU.roa
File: ls4VDA01bMklXU3iSYqfP3HgERU.roa (raw, json)
Hash identifier: vN6tkhTWQI8+PkGHqnNEgwZA6qz21tCa2UVN9JcIZAg=
Subject key identifier: 96:CE:15:0C:0D:35:6C:C9:25:5D:4D:E2:49:8A:9F:3F:71:E0:11:15
Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial: 0D86C446
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/ls4VDA01bMklXU3iSYqfP3HgERU.roa
Signing time: Sat 01 Jan 2022 15:01:05 +0000
ROA not before: Sat 01 Jan 2022 15:01:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12880
IP address blocks: 185.105.102.0/23 maxlen: 23
185.105.100.0/23 maxlen: 23
5.232.0.0/13 maxlen: 13
5.239.0.0/16 maxlen: 16
185.72.82.0/24 maxlen: 24
185.72.81.0/24 maxlen: 24
185.72.80.0/24 maxlen: 24
185.72.83.0/24 maxlen: 24
80.210.48.0/20 maxlen: 20
80.210.48.0/22 maxlen: 22
151.235.128.0/18 maxlen: 18
5.232.160.0/20 maxlen: 20
188.209.16.0/21 maxlen: 21
188.209.24.0/22 maxlen: 22
188.209.28.0/23 maxlen: 23
188.209.30.0/23 maxlen: 23
5.74.128.0/17 maxlen: 17
188.215.160.0/20 maxlen: 20
185.18.159.0/24 maxlen: 24
185.18.156.0/24 maxlen: 24
185.18.157.0/24 maxlen: 24
185.18.158.0/24 maxlen: 24
212.33.208.0/23 maxlen: 23
212.33.212.0/23 maxlen: 23
185.111.80.0/24 maxlen: 24
212.33.214.0/23 maxlen: 23
185.111.83.0/24 maxlen: 24
185.111.82.0/24 maxlen: 24
185.111.81.0/24 maxlen: 24
178.236.110.0/24 maxlen: 24
46.100.0.0/16 maxlen: 16
46.100.6.0/23 maxlen: 23
77.81.144.0/21 maxlen: 21
77.81.152.0/21 maxlen: 21
93.118.168.0/21 maxlen: 21
5.239.244.0/23 maxlen: 23
46.100.43.0/24 maxlen: 24
46.100.44.0/24 maxlen: 24
188.212.160.0/19 maxlen: 19
93.118.96.0/19 maxlen: 19
5.238.0.0/16 maxlen: 16
178.236.97.0/24 maxlen: 24
178.236.96.0/24 maxlen: 24
185.88.48.0/22 maxlen: 22
178.236.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226935878 (0xd86c446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Validity
Not Before: Jan 1 15:01:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96ce150c0d356cc9255d4de2498a9f3f71e01115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:81:b9:fa:c2:f6:55:31:88:67:8f:39:8c:
a3:53:a7:9b:75:a5:0b:3c:73:87:5f:16:b3:54:87:
da:74:ac:0b:0d:07:06:71:9f:e4:63:b2:26:8b:82:
2b:a7:eb:0a:fa:3b:7e:a8:50:5b:49:b2:40:25:d7:
c5:91:68:53:d6:c4:76:95:3a:8e:3a:2c:8a:ef:20:
09:2d:31:6a:11:97:5c:d0:a0:da:05:93:6d:91:39:
c3:89:40:7e:e8:7b:e5:4a:d7:42:7d:cb:58:8f:5d:
dc:45:4c:5a:47:93:4f:d4:c1:39:20:ca:9a:4e:79:
84:82:b0:a3:a6:b5:83:7d:4f:55:26:a7:f5:28:50:
67:6f:8e:c4:1b:32:96:bf:a8:bc:14:ec:85:f8:ff:
07:ac:55:19:37:ed:40:78:c3:2f:51:53:e8:e7:38:
9f:05:2c:62:98:50:33:94:2d:bf:4e:7a:ad:ef:58:
fe:63:8c:59:c4:86:3b:05:8a:66:15:5d:32:e3:ee:
77:24:e1:ac:c0:86:98:16:f7:74:28:8a:9d:3a:6d:
d8:fd:2c:4b:f0:96:c3:f5:11:0c:a6:fc:f2:d3:68:
48:6a:9c:51:23:c1:8b:c8:b8:b9:ee:b0:bf:3d:28:
c9:d8:cb:e8:0d:8e:a6:30:7e:6d:42:64:f5:f8:66:
5f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CE:15:0C:0D:35:6C:C9:25:5D:4D:E2:49:8A:9F:3F:71:E0:11:15
X509v3 Authority Key Identifier:
keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/ls4VDA01bMklXU3iSYqfP3HgERU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.74.128.0/17
5.232.0.0/13
46.100.0.0/16
77.81.144.0/20
80.210.48.0/20
93.118.96.0/19
93.118.168.0/21
151.235.128.0/18
178.236.96.0/23
178.236.104.0/24
178.236.110.0/24
185.18.156.0/22
185.72.80.0/22
185.88.48.0/22
185.105.100.0/22
185.111.80.0/22
188.209.16.0/20
188.212.160.0/19
188.215.160.0/20
212.33.208.0/23
212.33.212.0/22
Signature Algorithm: sha256WithRSAEncryption
06:1e:af:ce:73:da:86:6c:cf:ff:a3:e9:a1:1e:f2:44:4c:5d:
a8:c4:f1:c2:0d:79:d6:c8:4e:6b:8b:7e:bd:8d:61:f3:c5:00:
4a:4f:d2:d5:34:7c:5e:33:56:c4:0c:bf:33:b7:a1:97:5f:ac:
81:41:ba:45:47:cd:bb:fc:2c:43:5b:d6:cc:80:aa:3a:ee:f9:
89:6e:c2:3f:4e:1e:e4:0a:ec:8d:8e:bb:f8:c5:b8:61:16:83:
8c:3f:a6:fb:16:1a:4e:29:9d:85:83:89:03:5a:3b:8c:b1:fa:
a0:91:60:c8:96:23:66:9d:6d:6e:12:a0:db:4a:73:0b:5a:54:
f7:55:32:53:53:4b:5a:d0:5a:22:32:44:72:d0:ad:9f:c8:94:
40:00:e3:55:9f:ea:de:e0:42:3f:89:69:e7:b6:2c:4a:7f:f3:
04:6f:a6:72:b8:30:2a:bb:11:2a:6c:5f:d3:38:e6:19:93:00:
00:8b:1a:1e:40:72:e0:57:c8:7f:85:f0:4f:00:11:90:7f:91:
af:a0:94:da:b9:fc:fb:de:6c:f7:e4:5e:99:f4:e1:86:a7:dd:
46:3f:08:17:d6:dd:1d:a0:a0:a6:74:30:94:d4:94:2d:e1:ad:
3b:2d:af:df:36:cd:c2:61:3b:e8:76:91:7a:c2:08:0c:8c:8b:
f9:14:d8:85
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgIEDYbERjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZjMwMzBhNGI2N2Y5NWMyZmVkOTAyZDU2NjU3ZmFhMjQ5NGI1MTI5MB4XDTIyMDEw
MTE1MDEwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTZjZTE1MGMwZDM1
NmNjOTI1NWQ0ZGUyNDk4YTlmM2Y3MWUwMTExNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMK6gbn6wvZVMYhnjzmMo1Onm3WlCzxzh18Ws1SH2nSsCw0H
BnGf5GOyJouCK6frCvo7fqhQW0myQCXXxZFoU9bEdpU6jjosiu8gCS0xahGXXNCg
2gWTbZE5w4lAfuh75UrXQn3LWI9d3EVMWkeTT9TBOSDKmk55hIKwo6a1g31PVSan
9ShQZ2+OxBsylr+ovBTshfj/B6xVGTftQHjDL1FT6Oc4nwUsYphQM5Qtv056re9Y
/mOMWcSGOwWKZhVdMuPudyThrMCGmBb3dCiKnTpt2P0sS/CWw/URDKb88tNoSGqc
USPBi8i4ue6wvz0oydjL6A2OpjB+bUJk9fhmX4kCAwEAAaOCAoMwggJ/MB0GA1Ud
DgQWBBSWzhUMDTVsySVdTeJJip8/ceARFTAfBgNVHSMEGDAWgBRvMDCktn+Vwv7Z
AtVmV/qiSUtRKTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2J6QXdwTFpfbGNMLTJRTFZabGY2b2tsTFVTay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTcvMmI5OWEzLWRkNWYtNGZmZS04MmVmLWJmM2IyMWEyNzBmMi8x
L2xzNFZEQTAxYk1rbFhVM2lTWXFmUDNIZ0VSVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcv
MmI5OWEzLWRkNWYtNGZmZS04MmVmLWJmM2IyMWEyNzBmMi8xL2J6QXdwTFpfbGNM
LTJRTFZabGY2b2tsTFVTay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
mAYIKwYBBQUHAQcBAf8EgYgwgYUwgYIEAgABMHwDBAcFSoADAwMF6AMDAC5kAwQE
TVGQAwQEUNIwAwQFXXZgAwQDXXaoAwQGl+uAAwQBsuxgAwQAsuxoAwQAsuxuAwQC
uRKcAwQCuUhQAwQCuVgwAwQCuWlkAwQCuW9QAwQEvNEQAwQFvNSgAwQEvNegAwQB
1CHQAwQC1CHUMA0GCSqGSIb3DQEBCwUAA4IBAQAGHq/Oc9qGbM//o+mhHvJETF2o
xPHCDXnWyE5ri369jWHzxQBKT9LVNHxeM1bEDL8zt6GXX6yBQbpFR827/CxDW9bM
gKo67vmJbsI/Th7kCuyNjrv4xbhhFoOMP6b7FhpOKZ2Fg4kDWjuMsfqgkWDIliNm
nW1uEqDbSnMLWlT3VTJTU0ta0FoiMkRy0K2fyJRAAONVn+re4EI/iWnntixKf/ME
b6ZyuDAquxEqbF/TOOYZkwAAixoeQHLgV8h/hfBPABGQf5GvoJTaufz73mz35F6Z
9OGGp91GPwgX1t0doKCmdDCU1JQt4a07La/fNs3CYTvodpF6wggMjIv5FNiF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:43 2024 by rpki-client on console-fra.rpki-client.org