Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5fMcFacVk8mPZ15KPvPgxDGGgCg.roa
File: 5fMcFacVk8mPZ15KPvPgxDGGgCg.roa (raw, json)
Hash identifier: /0OZmBkX8ELnmtIowPoD6rytFHRvHi+TMvBL5KA86FA=
Subject key identifier: E5:F3:1C:15:A7:15:93:C9:8F:67:5E:4A:3E:F3:E0:C4:31:86:80:28
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 01845B32C0A28D7444722638CC724E7D85C4
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5fMcFacVk8mPZ15KPvPgxDGGgCg.roa
Signing time: Wed 09 Nov 2022 07:02:43 +0000
ROA not before: Wed 09 Nov 2022 07:02:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48728
IP address blocks: 80.76.165.0/24 maxlen: 24
80.76.164.0/24 maxlen: 24
80.76.160.0/21 maxlen: 21
80.76.162.0/24 maxlen: 24
80.76.160.0/20 maxlen: 20
80.76.161.0/24 maxlen: 24
80.76.163.0/24 maxlen: 24
80.76.172.0/24 maxlen: 24
80.76.171.0/24 maxlen: 24
80.76.168.0/21 maxlen: 21
80.76.170.0/24 maxlen: 24
80.76.174.0/24 maxlen: 24
80.76.173.0/24 maxlen: 24
80.76.175.0/24 maxlen: 24
103.23.124.0/24 maxlen: 24
103.23.124.0/22 maxlen: 22
103.23.125.0/24 maxlen: 24
103.23.126.0/24 maxlen: 24
103.23.127.0/24 maxlen: 24
212.70.96.0/24 maxlen: 24
212.70.96.0/19 maxlen: 19
212.70.98.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.104.0/24 maxlen: 24
212.70.99.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.108.0/24 maxlen: 24
212.70.110.0/24 maxlen: 24
212.70.112.0/24 maxlen: 24
212.70.111.0/24 maxlen: 24
212.70.107.0/24 maxlen: 24
212.70.106.0/24 maxlen: 24
212.70.114.0/24 maxlen: 24
212.70.113.0/24 maxlen: 24
212.70.116.0/24 maxlen: 24
212.70.115.0/24 maxlen: 24
212.70.117.0/24 maxlen: 24
212.70.118.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.125.0/24 maxlen: 24
212.70.119.0/24 maxlen: 24
212.70.121.0/24 maxlen: 24
212.70.126.0/24 maxlen: 24
212.70.127.0/24 maxlen: 24
31.11.48.0/21 maxlen: 21
37.186.37.0/24 maxlen: 24
37.186.38.0/24 maxlen: 24
37.186.32.0/24 maxlen: 24
37.186.34.0/24 maxlen: 24
37.186.32.0/19 maxlen: 19
37.186.33.0/24 maxlen: 24
37.186.36.0/24 maxlen: 24
37.186.35.0/24 maxlen: 24
37.186.44.0/24 maxlen: 24
37.186.39.0/24 maxlen: 24
37.186.41.0/24 maxlen: 24
37.186.40.0/24 maxlen: 24
37.186.43.0/24 maxlen: 24
37.186.42.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
37.186.50.0/24 maxlen: 24
37.186.46.0/24 maxlen: 24
37.186.45.0/24 maxlen: 24
37.186.48.0/24 maxlen: 24
37.186.47.0/24 maxlen: 24
37.186.49.0/24 maxlen: 24
37.186.58.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.53.0/24 maxlen: 24
37.186.52.0/24 maxlen: 24
37.186.55.0/24 maxlen: 24
37.186.54.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.60.0/24 maxlen: 24
37.186.59.0/24 maxlen: 24
37.186.62.0/24 maxlen: 24
37.186.61.0/24 maxlen: 24
37.186.63.0/24 maxlen: 24
185.247.88.0/22 maxlen: 22
103.17.1.0/24 maxlen: 24
103.17.0.0/22 maxlen: 22
103.17.0.0/24 maxlen: 24
103.17.3.0/24 maxlen: 24
103.17.2.0/24 maxlen: 24
2a04:7f80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:32:c0:a2:8d:74:44:72:26:38:cc:72:4e:7d:85:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Nov 9 07:02:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5f31c15a71593c98f675e4a3ef3e0c431868028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:e5:de:8b:18:53:49:c4:04:6f:ce:f4:5b:
6a:0d:7c:2e:26:01:9a:58:ff:c4:7d:ec:ea:dc:c9:
f1:4c:b0:63:dd:e2:d4:7a:48:39:12:12:58:ee:96:
9c:d7:91:50:da:ff:33:61:62:fc:cb:2e:b1:f1:0b:
6d:78:de:f8:a2:39:ff:25:ee:fc:73:57:9e:c1:0c:
fe:9a:a6:8b:f6:21:d3:52:c3:6c:9a:f7:a4:a8:d9:
ed:b5:ad:42:a2:bd:58:1f:79:94:9b:1f:33:c7:bc:
18:a3:dd:0d:0c:bf:fc:e3:89:98:56:a1:69:37:03:
7d:4e:34:c6:7d:57:f5:15:86:fa:49:98:11:d3:0f:
02:4b:bb:6d:85:a0:01:04:ef:3d:bd:4b:9c:cf:1a:
e2:32:f0:2a:ce:60:1e:50:96:29:ed:eb:02:40:65:
2b:f9:9d:db:29:38:bb:17:27:f4:ff:68:9e:48:b6:
27:f6:ef:87:32:e1:cf:d5:58:8a:a2:58:c2:69:d6:
a6:40:d9:bc:a7:ec:01:c7:57:d1:2a:e5:d3:a1:6d:
4b:4b:86:da:ca:12:a5:0c:1c:c8:d8:9c:ab:c6:05:
73:c8:45:ed:f7:6c:1d:00:a0:f6:93:da:4c:2c:08:
10:05:87:1d:81:96:35:b6:8f:4a:60:80:4c:ad:b9:
c9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F3:1C:15:A7:15:93:C9:8F:67:5E:4A:3E:F3:E0:C4:31:86:80:28
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5fMcFacVk8mPZ15KPvPgxDGGgCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.32.0/19
80.76.160.0/20
103.17.0.0/22
103.23.124.0/22
185.247.88.0/22
212.70.96.0/19
IPv6:
2a04:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
8d:8b:9e:da:9d:24:81:51:54:6f:c2:12:fd:e0:54:58:82:e0:
24:c0:30:30:8c:4a:d4:df:bb:ea:53:9b:65:14:5d:35:84:ee:
99:f2:e8:a9:67:f4:8e:ef:20:1f:12:9c:f9:56:98:0c:1c:9d:
21:84:73:c4:c0:c9:37:83:78:7f:31:62:f1:3f:01:ab:c1:67:
87:5c:2a:2d:80:08:ef:51:8e:76:a6:16:ac:e9:b5:8e:39:f7:
7a:aa:c5:92:ba:53:0f:60:75:74:50:39:7a:0d:fc:f6:58:f1:
74:2f:d8:fa:da:0f:7f:03:42:06:81:48:99:44:63:c1:bb:3e:
7e:d7:ee:4a:06:a4:db:9c:35:44:b2:db:83:23:f4:8e:14:33:
3a:4c:11:f4:58:cf:14:db:4a:16:f5:f4:1f:3c:47:88:f0:69:
fd:9e:f3:b1:a4:9e:6c:b7:33:09:df:60:66:78:5a:a2:2a:2b:
9c:17:fc:48:2c:9d:29:92:0a:11:a8:06:86:72:c4:d8:08:d1:
cc:c1:30:3e:e9:be:e8:cb:d4:a9:a1:f2:41:47:47:e3:50:15:
dc:f5:60:de:24:15:d0:4a:8d:e6:e7:dd:94:b1:25:1a:f6:96:
85:f0:03:5d:e4:2b:38:49:1a:48:d7:35:67:cf:5b:97:69:39:
55:fa:74:75
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAYRbMsCijXREciY4zHJOfYXEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTkzMDg3NDJlN2ViNjY1MDYyMTlkODI5ZDg2MTg1ODk5
YTFlMzQwHhcNMjIxMTA5MDcwMjQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWYzMWMxNWE3MTU5M2M5OGY2NzVlNGEzZWYzZTBjNDMxODY4MDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR7l3osYU0nEBG/O9FtqDXwuJgGa
WP/Efezq3MnxTLBj3eLUekg5EhJY7pac15FQ2v8zYWL8yy6x8QtteN74ojn/Je78
c1eewQz+mqaL9iHTUsNsmvekqNntta1Cor1YH3mUmx8zx7wYo90NDL/844mYVqFp
NwN9TjTGfVf1FYb6SZgR0w8CS7tthaABBO89vUuczxriMvAqzmAeUJYp7esCQGUr
+Z3bKTi7Fyf0/2ieSLYn9u+HMuHP1ViKoljCadamQNm8p+wBx1fRKuXToW1LS4ba
yhKlDBzI2JyrxgVzyEXt92wdAKD2k9pMLAgQBYcdgZY1to9KYIBMrbnJ6wIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFOXzHBWnFZPJj2deSj7z4MQxhoAoMB8GA1UdIwQY
MBaAFOSpMIdC5+tmUGIZ2CnYYYWJmh40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYt
ZWM1Yjg4ZDAxMzhhLzEvNWZNY0ZhY1ZrOG1QWjE1S1B2UGd4REdHZ0NnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYtZWM1Yjg4ZDAxMzhh
LzEvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQDHwswAwQF
JbogAwQEUEygAwQCZxEAAwQCZxd8AwQCufdYAwQF1EZgMA0EAgACMAcDBQMqBH+A
MA0GCSqGSIb3DQEBCwUAA4IBAQCNi57anSSBUVRvwhL94FRYguAkwDAwjErU37vq
U5tlFF01hO6Z8uipZ/SO7yAfEpz5VpgMHJ0hhHPEwMk3g3h/MWLxPwGrwWeHXCot
gAjvUY52phas6bWOOfd6qsWSulMPYHV0UDl6Dfz2WPF0L9j62g9/A0IGgUiZRGPB
uz5+1+5KBqTbnDVEstuDI/SOFDM6TBH0WM8U20oW9fQfPEeI8Gn9nvOxpJ5stzMJ
32BmeFqiKiucF/xILJ0pkgoRqAaGcsTYCNHMwTA+6b7oy9SpofJBR0fjUBXc9WDe
JBXQSo3m592UsSUa9paF8ANd5Cs4SRpI1zVnz1uXaTlV+nR1
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:41 2023 by rpki-client on console-fra.rpki-client.org