Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/AkyI0M1OxKLWQxwaCDvKw-3pd34.roa
File: AkyI0M1OxKLWQxwaCDvKw-3pd34.roa (raw, json)
Hash identifier: hZpBli/QtG2jSlZWq9RnWtdnMDQajpE9JRDgMGCiT+E=
Subject key identifier: 02:4C:88:D0:CD:4E:C4:A2:D6:43:1C:1A:08:3B:CA:C3:ED:E9:77:7E
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0183425B81BF6CCF0F748DCF5B129AA9FA39
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/AkyI0M1OxKLWQxwaCDvKw-3pd34.roa
Signing time: Thu 15 Sep 2022 18:13:56 +0000
ROA not before: Thu 15 Sep 2022 18:13:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 45.83.148.0/22 maxlen: 24
2.56.172.0/22 maxlen: 24
95.214.248.0/22 maxlen: 24
2.56.176.0/22 maxlen: 24
194.33.36.0/22 maxlen: 24
2.56.116.0/22 maxlen: 24
2.56.124.0/22 maxlen: 24
2.56.120.0/22 maxlen: 24
45.83.116.0/22 maxlen: 24
45.83.128.0/22 maxlen: 24
45.83.140.0/22 maxlen: 24
185.161.70.0/23 maxlen: 24
185.161.69.0/24 maxlen: 24
185.106.96.0/22 maxlen: 24
139.28.232.0/22 maxlen: 24
45.15.124.0/22 maxlen: 24
45.86.64.0/22 maxlen: 24
45.86.60.0/22 maxlen: 24
45.15.128.0/22 maxlen: 24
45.86.68.0/22 maxlen: 24
45.15.144.0/22 maxlen: 24
45.15.140.0/22 maxlen: 24
45.86.76.0/22 maxlen: 24
45.86.72.0/22 maxlen: 24
45.92.160.0/22 maxlen: 24
45.92.164.0/22 maxlen: 24
45.92.192.0/22 maxlen: 24
45.89.96.0/22 maxlen: 24
45.89.104.0/22 maxlen: 24
45.89.100.0/22 maxlen: 24
45.89.108.0/22 maxlen: 24
45.9.12.0/22 maxlen: 24
171.22.136.0/22 maxlen: 24
45.9.16.0/22 maxlen: 24
45.12.112.0/22 maxlen: 24
45.12.108.0/22 maxlen: 24
45.12.128.0/22 maxlen: 24
45.12.132.0/22 maxlen: 24
45.12.134.0/24 maxlen: 24
194.76.136.0/22 maxlen: 24
45.12.136.0/22 maxlen: 24
45.12.140.0/22 maxlen: 24
45.12.144.0/22 maxlen: 24
45.83.84.0/22 maxlen: 24
45.12.148.0/22 maxlen: 24
45.15.152.0/22 maxlen: 24
45.82.244.0/22 maxlen: 24
45.82.252.0/22 maxlen: 24
45.82.248.0/22 maxlen: 24
185.153.180.0/22 maxlen: 24
45.15.164.0/22 maxlen: 24
45.15.160.0/22 maxlen: 24
45.15.168.0/22 maxlen: 24
213.59.112.0/20 maxlen: 24
45.89.196.0/22 maxlen: 24
45.15.176.0/22 maxlen: 24
171.22.112.0/22 maxlen: 24
171.22.108.0/22 maxlen: 24
45.83.24.0/22 maxlen: 24
45.15.184.0/22 maxlen: 24
45.83.20.0/22 maxlen: 24
171.22.116.0/22 maxlen: 24
31.12.92.0/22 maxlen: 24
171.22.124.0/22 maxlen: 24
171.22.120.0/22 maxlen: 24
171.22.132.0/22 maxlen: 24
171.22.128.0/22 maxlen: 24
45.88.160.0/22 maxlen: 24
45.88.168.0/22 maxlen: 24
45.88.176.0/22 maxlen: 24
45.88.180.0/22 maxlen: 24
185.149.20.0/22 maxlen: 24
185.203.4.0/22 maxlen: 24
141.98.164.0/22 maxlen: 24
141.98.160.0/22 maxlen: 24
45.88.148.0/22 maxlen: 24
92.118.228.0/22 maxlen: 24
92.118.232.0/22 maxlen: 24
92.118.236.0/22 maxlen: 24
185.156.108.0/22 maxlen: 24
185.166.152.0/22 maxlen: 24
45.92.124.0/22 maxlen: 24
185.166.160.0/22 maxlen: 24
45.92.140.0/22 maxlen: 24
92.119.40.0/22 maxlen: 24
45.128.56.0/22 maxlen: 24
45.128.52.0/22 maxlen: 24
45.128.72.0/22 maxlen: 24
45.128.48.0/22 maxlen: 24
141.98.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:42:5b:81:bf:6c:cf:0f:74:8d:cf:5b:12:9a:a9:fa:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 15 18:13:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=024c88d0cd4ec4a2d6431c1a083bcac3ede9777e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:3d:11:37:49:9c:60:a6:1e:f5:d3:3a:c4:
d6:f8:d1:44:5f:90:c5:e1:38:11:7d:e4:46:30:1a:
fa:35:fa:b2:65:d8:12:3f:9b:5c:ee:a0:63:86:66:
b5:4c:ac:bc:5b:9a:67:18:07:68:16:a0:ee:09:bd:
da:96:64:cd:9c:6f:fd:17:7f:98:63:db:b1:c9:06:
bf:bd:6e:58:b2:ab:7b:69:5b:7e:6d:bd:f3:96:29:
3b:7c:d7:40:37:9a:a2:47:27:cd:36:c2:bc:82:14:
2e:fc:52:f8:63:36:91:59:72:d4:1d:7e:8b:e7:99:
9f:dd:34:b7:ac:a0:4f:83:18:19:16:83:4a:d6:05:
08:ce:34:5b:0d:14:97:92:b0:94:64:92:2b:72:eb:
a9:03:1d:26:84:0e:99:26:0d:99:e4:3f:30:b7:b6:
7c:af:ea:09:fc:a5:db:68:c0:df:b4:93:f4:79:57:
a2:4b:22:c9:d7:1d:22:58:79:91:b1:bf:30:11:c6:
05:83:7b:60:ad:0a:3d:b9:c8:42:a9:a8:a7:7a:47:
75:d1:3b:1d:bd:e8:d5:b0:40:ad:df:e6:c4:7b:2d:
fe:41:55:33:66:7f:aa:49:ec:30:db:7a:b6:f8:6a:
97:3d:9e:59:e5:41:10:d5:17:19:97:e6:a3:8d:95:
7b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4C:88:D0:CD:4E:C4:A2:D6:43:1C:1A:08:3B:CA:C3:ED:E9:77:7E
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/AkyI0M1OxKLWQxwaCDvKw-3pd34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.116.0-2.56.127.255
2.56.172.0-2.56.179.255
31.12.92.0/22
45.9.12.0-45.9.19.255
45.12.108.0-45.12.115.255
45.12.128.0-45.12.151.255
45.15.124.0-45.15.131.255
45.15.140.0-45.15.147.255
45.15.152.0/22
45.15.160.0-45.15.171.255
45.15.176.0/22
45.15.184.0/22
45.82.244.0-45.82.255.255
45.83.20.0-45.83.27.255
45.83.84.0/22
45.83.116.0/22
45.83.128.0/22
45.83.140.0/22
45.83.148.0/22
45.86.60.0-45.86.79.255
45.88.148.0/22
45.88.160.0/22
45.88.168.0/22
45.88.176.0/21
45.89.96.0/20
45.89.196.0/22
45.92.124.0/22
45.92.140.0/22
45.92.160.0/21
45.92.192.0/22
45.128.48.0-45.128.59.255
45.128.72.0/22
92.118.228.0-92.118.239.255
92.119.40.0/22
95.214.248.0/22
139.28.232.0/22
141.98.132.0/22
141.98.160.0/21
171.22.108.0-171.22.139.255
185.106.96.0/22
185.149.20.0/22
185.153.180.0/22
185.156.108.0/22
185.161.69.0-185.161.71.255
185.166.152.0/22
185.166.160.0/22
185.203.4.0/22
194.33.36.0/22
194.76.136.0/22
213.59.112.0/20
Signature Algorithm: sha256WithRSAEncryption
91:58:50:67:2d:7d:6c:58:56:33:36:78:93:f0:40:50:c3:e2:
f0:93:a4:bb:9f:27:e6:b1:d0:8b:69:c0:f1:1f:81:97:7e:b7:
88:55:e6:ae:5d:64:fa:97:1d:73:c4:76:13:ac:de:de:6e:c4:
49:7d:d5:db:34:86:c0:7e:28:72:ad:91:98:4f:dd:ce:fd:fe:
39:eb:35:46:38:ba:16:56:33:d5:33:2c:b3:c9:db:d5:9b:ae:
2a:8b:62:31:b6:83:83:de:07:a1:77:b3:c9:8e:90:f3:df:fb:
fd:2c:c2:49:6c:02:c7:53:41:7a:2e:19:d7:03:da:72:09:17:
e2:ed:2f:a5:8f:3b:70:00:03:74:99:f9:15:e8:5a:2e:1a:2d:
1b:c6:6d:94:ae:91:fe:cb:f6:93:fc:0e:37:16:83:bd:6d:fa:
3e:df:ac:23:87:11:78:58:04:15:8a:06:6d:7b:4e:41:e8:4b:
dd:05:3a:94:90:b5:69:d3:4c:d3:7f:0f:fe:1b:fa:b6:58:a6:
8a:e3:f2:47:6e:e1:69:0b:46:0f:e1:31:a6:4d:27:37:8a:a9:
83:bb:44:b8:e9:34:dc:35:c7:af:52:72:14:5b:a7:ad:6e:8a:
f5:27:a1:5b:0c:b8:4e:68:81:88:92:37:a6:f9:6c:6c:0b:f8:
77:5f:52:ad
-----BEGIN CERTIFICATE-----
MIIGpDCCBYygAwIBAgISAYNCW4G/bM8PdI3PWxKaqfo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjIwOTE1MTgxMzU2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjRjODhkMGNkNGVjNGEyZDY0MzFjMWEwODNiY2FjM2VkZTk3NzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGg9ETdJnGCmHvXTOsTW+NFEX5DF
4TgRfeRGMBr6NfqyZdgSP5tc7qBjhma1TKy8W5pnGAdoFqDuCb3almTNnG/9F3+Y
Y9uxyQa/vW5Ysqt7aVt+bb3zlik7fNdAN5qiRyfNNsK8ghQu/FL4YzaRWXLUHX6L
55mf3TS3rKBPgxgZFoNK1gUIzjRbDRSXkrCUZJIrcuupAx0mhA6ZJg2Z5D8wt7Z8
r+oJ/KXbaMDftJP0eVeiSyLJ1x0iWHmRsb8wEcYFg3tgrQo9uchCqainekd10Tsd
vejVsECt3+bEey3+QVUzZn+qSeww23q2+GqXPZ5Z5UEQ1RcZl+ajjZV7/wIDAQAB
o4IDsDCCA6wwHQYDVR0OBBYEFAJMiNDNTsSi1kMcGgg7ysPt6Xd+MB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvQWt5STBNMU94S0xXUXh3YUNEdkt3LTNwZDM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBxAYIKwYBBQUHAQcBAf8EggGzMIIBrzCCAasEAgABMIIB
ozAMAwQCAjh0AwQHAjgAMAwDBAICOKwDBAICOLADBAIfDFwwDAMEAi0JDAMEAi0J
EDAMAwQCLQxsAwQCLQxwMAwDBActDIADBAMtDJAwDAMEAi0PfAMEAi0PgDAMAwQC
LQ+MAwQCLQ+QAwQCLQ+YMAwDBAUtD6ADBAItD6gDBAItD7ADBAItD7gwCwMEAi1S
9AMDAC1SMAwDBAItUxQDBAItUxgDBAItU1QDBAItU3QDBAItU4ADBAItU4wDBAIt
U5QwDAMEAi1WPAMEBC1WQAMEAi1YlAMEAi1YoAMEAi1YqAMEAy1YsAMEBC1ZYAME
Ai1ZxAMEAi1cfAMEAi1cjAMEAy1coAMEAi1cwDAMAwQELYAwAwQCLYA4AwQCLYBI
MAwDBAJcduQDBARcduADBAJcdygDBAJf1vgDBAKLHOgDBAKNYoQDBAONYqAwDAME
AqsWbAMEAqsWiAMEArlqYAMEArmVFAMEArmZtAMEArmcbDAMAwQAuaFFAwQDuaFA
AwQCuaaYAwQCuaagAwQCucsEAwQCwiEkAwQCwkyIAwQE1TtwMA0GCSqGSIb3DQEB
CwUAA4IBAQCRWFBnLX1sWFYzNniT8EBQw+Lwk6S7nyfmsdCLacDxH4GXfreIVeau
XWT6lx1zxHYTrN7ebsRJfdXbNIbAfihyrZGYT93O/f456zVGOLoWVjPVMyyzydvV
m64qi2IxtoOD3gehd7PJjpDz3/v9LMJJbALHU0F6LhnXA9pyCRfi7S+ljztwAAN0
mfkV6FouGi0bxm2UrpH+y/aT/A43FoO9bfo+36wjhxF4WAQVigZte05B6EvdBTqU
kLVp00zTfw/+G/q2WKaK4/JHbuFpC0YP4TGmTSc3iqmDu0S46TTcNcevUnIUW6et
bor1J6FbDLhOaIGIkjem+WxsC/h3X1Kt
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-fra.rpki-client.org