Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/nxkxs9qvHcQoBReMjpYdKYuYpjs.roa
File: nxkxs9qvHcQoBReMjpYdKYuYpjs.roa (raw, json)
Hash identifier: s5AKfS/jEcNFCVEOCwGMjPSSTD0fKQrYi8mL1OuS+v0=
Subject key identifier: 9F:19:31:B3:DA:AF:1D:C4:28:05:17:8C:8E:96:1D:29:8B:98:A6:3B
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 0183CC24A30E0530BE44595EF46B13F98AB8
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/nxkxs9qvHcQoBReMjpYdKYuYpjs.roa
Signing time: Wed 12 Oct 2022 12:21:36 +0000
ROA not before: Wed 12 Oct 2022 12:21:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3267
IP address blocks: 82.137.137.0/24 maxlen: 24
86.110.96.0/19 maxlen: 19
86.110.96.0/22 maxlen: 22
193.27.214.0/24 maxlen: 24
193.27.214.0/23 maxlen: 23
194.85.32.0/20 maxlen: 20
86.110.101.0/24 maxlen: 24
86.110.102.0/24 maxlen: 24
86.110.103.0/24 maxlen: 24
82.179.128.0/17 maxlen: 17
86.110.112.0/20 maxlen: 20
194.85.174.0/23 maxlen: 23
82.137.176.0/22 maxlen: 22
82.137.184.0/22 maxlen: 22
82.137.180.0/22 maxlen: 22
82.137.188.0/22 maxlen: 22
80.250.164.0/22 maxlen: 22
80.250.160.0/19 maxlen: 19
80.250.162.0/24 maxlen: 24
80.250.163.0/24 maxlen: 24
80.250.160.0/23 maxlen: 23
80.250.172.0/23 maxlen: 23
80.250.168.0/22 maxlen: 22
80.250.168.0/24 maxlen: 24
80.250.169.0/24 maxlen: 24
80.250.170.0/23 maxlen: 23
80.250.176.0/20 maxlen: 20
80.250.175.0/24 maxlen: 24
194.85.160.0/21 maxlen: 21
194.85.168.0/22 maxlen: 22
194.190.241.0/24 maxlen: 24
194.190.242.0/23 maxlen: 23
194.190.244.0/22 maxlen: 22
194.190.248.0/21 maxlen: 21
82.179.64.0/18 maxlen: 18
85.142.64.0/24 maxlen: 24
85.142.78.0/24 maxlen: 24
194.190.224.0/21 maxlen: 21
194.190.224.0/19 maxlen: 19
194.190.224.0/20 maxlen: 20
194.190.232.0/22 maxlen: 22
82.179.32.0/19 maxlen: 19
194.190.239.0/24 maxlen: 24
194.190.240.0/24 maxlen: 24
194.190.236.0/23 maxlen: 23
194.190.238.0/24 maxlen: 24
2a07:a6c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cc:24:a3:0e:05:30:be:44:59:5e:f4:6b:13:f9:8a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Oct 12 12:21:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f1931b3daaf1dc42805178c8e961d298b98a63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a6:c9:d5:18:41:c7:5d:fc:8d:8f:6f:6a:fa:
1f:92:72:25:a6:23:61:81:93:f3:68:ba:33:19:14:
ad:00:ff:f0:07:e5:2c:f9:ab:54:1a:40:85:e3:dc:
66:61:55:48:7a:b9:f8:74:b4:e0:8d:42:1f:0f:a2:
e1:0d:66:cb:cc:88:cd:23:17:59:7a:27:d5:0c:fd:
a6:54:d8:da:70:81:1f:57:4c:78:72:47:f1:71:e1:
cf:7e:76:47:5a:de:57:98:88:22:fd:e1:82:7a:f4:
1e:ba:fe:82:de:1f:28:df:ee:7c:52:36:d5:83:32:
24:f1:0b:58:fc:55:67:b8:c3:ae:e5:8b:7c:b1:d8:
ea:be:d7:65:6f:4c:6b:58:91:9f:be:51:81:90:ed:
f6:fa:b0:3d:b1:d4:0f:4b:9f:d1:2c:7e:d3:95:9f:
ed:a8:f9:fe:26:a7:dd:9b:0c:94:65:11:ee:16:51:
d0:a7:93:aa:62:1c:c9:2a:2c:85:d5:47:dd:24:6f:
78:d3:4f:19:4a:86:4e:41:f2:65:d7:e6:ab:f9:13:
d5:2a:da:c2:b8:5c:91:ad:59:99:28:b2:2b:b0:9f:
4a:e3:c5:43:39:b6:04:d1:82:78:aa:f1:3a:77:a4:
c4:0d:58:c1:c7:62:a5:8b:87:0c:a4:6f:f2:22:48:
19:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:19:31:B3:DA:AF:1D:C4:28:05:17:8C:8E:96:1D:29:8B:98:A6:3B
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/nxkxs9qvHcQoBReMjpYdKYuYpjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.160.0/19
82.137.137.0/24
82.137.176.0/20
82.179.32.0-82.179.255.255
85.142.64.0/24
85.142.78.0/24
86.110.96.0/19
193.27.214.0/23
194.85.32.0/20
194.85.160.0-194.85.171.255
194.85.174.0/23
194.190.224.0/19
IPv6:
2a07:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
72:65:da:46:db:53:3b:96:17:8b:a6:d0:cf:a8:50:ef:80:0f:
e4:f3:b7:76:a4:29:b5:d4:05:db:37:48:94:a0:28:42:b8:df:
88:91:a8:fb:c7:26:a3:b7:2d:89:53:da:d3:cd:e0:c2:54:16:
6f:9d:1b:ce:43:53:fb:83:4e:26:1c:f9:98:a4:22:cf:e0:3c:
df:21:40:cb:9f:1b:6c:c4:9b:09:a8:40:97:b8:1f:43:f6:8e:
6e:3c:57:d3:ef:59:f0:2c:23:e0:3b:56:46:51:fb:e2:79:b8:
af:f5:a6:47:a2:7d:f2:f0:af:18:45:11:1c:5b:f9:4b:db:f4:
a1:60:ac:23:4d:cd:3e:bf:f6:53:2e:e9:6d:5f:6e:cf:a9:a8:
d1:41:79:b4:44:60:fe:fa:5d:24:4f:94:20:41:50:95:5f:ae:
d3:14:b3:5e:d1:e9:85:e6:53:2b:d4:cb:cf:c1:c1:fa:60:a1:
09:8f:07:6d:33:e5:81:72:f5:72:6e:89:21:8d:98:2c:18:60:
3a:25:27:d8:e0:ec:0b:5d:50:80:cf:f5:ee:cd:46:25:d2:ee:
76:2c:e4:ad:ae:5d:55:d9:71:f8:da:28:a9:ac:9d:78:27:40:
fe:05:82:21:01:25:7b:81:cf:7b:3f:ea:c2:ba:ac:8b:5d:78:
ca:26:e5:c1
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAYPMJKMOBTC+RFle9GsT+Yq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl
MmM2ODUwHhcNMjIxMDEyMTIyMTM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjE5MzFiM2RhYWYxZGM0MjgwNTE3OGM4ZTk2MWQyOThiOThhNjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqbJ1RhBx138jY9vavofknIlpiNh
gZPzaLozGRStAP/wB+Us+atUGkCF49xmYVVIern4dLTgjUIfD6LhDWbLzIjNIxdZ
eifVDP2mVNjacIEfV0x4ckfxceHPfnZHWt5XmIgi/eGCevQeuv6C3h8o3+58UjbV
gzIk8QtY/FVnuMOu5Yt8sdjqvtdlb0xrWJGfvlGBkO32+rA9sdQPS5/RLH7TlZ/t
qPn+JqfdmwyUZRHuFlHQp5OqYhzJKiyF1UfdJG94008ZSoZOQfJl1+ar+RPVKtrC
uFyRrVmZKLIrsJ9K48VDObYE0YJ4qvE6d6TEDVjBx2Kli4cMpG/yIkgZ0QIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFJ8ZMbParx3EKAUXjI6WHSmLmKY7MB8GA1UdIwQY
MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt
NDBkOTViZDMzZmNiLzEvbnhreHM5cXZIY1FvQlJlTWpwWWRLWXVZcGpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi
LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBdBAIAATBXAwQFUPqgAwQA
UomJAwQEUomwMAsDBAVSsyADAwJSsAMEAFWOQAMEAFWOTgMEBVZuYAMEAcEb1gME
BMJVIDAMAwQFwlWgAwQCwlWoAwQBwlWuAwQFwr7gMA0EAgACMAcDBQMqB6bAMA0G
CSqGSIb3DQEBCwUAA4IBAQByZdpG21M7lheLptDPqFDvgA/k87d2pCm11AXbN0iU
oChCuN+Ikaj7xyajty2JU9rTzeDCVBZvnRvOQ1P7g04mHPmYpCLP4DzfIUDLnxts
xJsJqECXuB9D9o5uPFfT71nwLCPgO1ZGUfviebiv9aZHon3y8K8YRREcW/lL2/Sh
YKwjTc0+v/ZTLultX27PqajRQXm0RGD++l0kT5QgQVCVX67TFLNe0emF5lMr1MvP
wcH6YKEJjwdtM+WBcvVybokhjZgsGGA6JSfY4OwLXVCAz/XuzUYl0u52LOStrl1V
2XH42iiprJ14J0D+BYIhASV7gc97P+rCuqyLXXjKJuXB
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org