Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/8KIaT3ylXknTzgB8XzACtz1Wgj4.roa
File: 8KIaT3ylXknTzgB8XzACtz1Wgj4.roa (raw, json)
Hash identifier: C8LB87mInPtt0vPhqWTts9X8Kx2xXagrXWg9fC9d7pQ=
Subject key identifier: F0:A2:1A:4F:7C:A5:5E:49:D3:CE:00:7C:5F:30:02:B7:3D:56:82:3E
Certificate issuer: /CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Certificate serial: 089C92F9
Authority key identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/8KIaT3ylXknTzgB8XzACtz1Wgj4.roa
Signing time: Fri 04 Feb 2022 10:38:15 +0000
ROA not before: Fri 04 Feb 2022 10:38:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6752
IP address blocks: 80.80.84.0/22 maxlen: 22
80.80.92.0/22 maxlen: 22
185.87.36.0/22 maxlen: 22
185.33.0.0/22 maxlen: 22
194.158.64.0/22 maxlen: 22
194.158.64.0/19 maxlen: 19
194.158.64.0/24 maxlen: 24
194.158.68.0/22 maxlen: 22
194.158.72.0/23 maxlen: 23
194.158.72.0/22 maxlen: 22
194.158.76.0/22 maxlen: 22
185.87.40.0/22 maxlen: 22
185.87.44.0/22 maxlen: 22
188.241.26.0/23 maxlen: 23
91.187.64.0/19 maxlen: 19
91.187.64.0/22 maxlen: 22
91.187.68.0/22 maxlen: 22
91.187.76.0/22 maxlen: 22
91.187.72.0/22 maxlen: 22
91.187.84.0/22 maxlen: 22
91.187.80.0/22 maxlen: 22
91.187.88.0/22 maxlen: 22
89.150.4.0/22 maxlen: 22
89.150.2.0/23 maxlen: 23
89.150.8.0/22 maxlen: 22
89.150.12.0/22 maxlen: 22
91.187.92.0/22 maxlen: 22
185.194.56.0/22 maxlen: 22
46.172.224.0/19 maxlen: 19
46.172.232.0/22 maxlen: 22
185.4.52.0/22 maxlen: 22
185.132.200.0/22 maxlen: 22
109.111.96.0/22 maxlen: 22
109.111.96.0/19 maxlen: 19
109.111.100.0/22 maxlen: 22
109.111.104.0/22 maxlen: 22
109.111.108.0/22 maxlen: 22
109.111.112.0/22 maxlen: 22
109.111.116.0/22 maxlen: 22
85.94.164.0/22 maxlen: 22
109.111.124.0/22 maxlen: 22
109.111.120.0/22 maxlen: 22
85.94.160.0/19 maxlen: 19
85.94.160.0/22 maxlen: 22
85.94.168.0/22 maxlen: 22
85.94.172.0/22 maxlen: 22
85.94.176.0/22 maxlen: 22
85.94.184.0/22 maxlen: 22
85.94.180.0/22 maxlen: 22
194.158.80.0/22 maxlen: 22
194.158.84.0/22 maxlen: 22
194.158.88.0/22 maxlen: 22
194.158.92.0/22 maxlen: 22
85.94.188.0/22 maxlen: 22
46.175.156.0/22 maxlen: 22
2a02:8060::/31 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144478969 (0x89c92f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Validity
Not Before: Feb 4 10:38:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0a21a4f7ca55e49d3ce007c5f3002b73d56823e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:20:54:38:9a:b0:bc:52:a3:50:1b:35:55:
5b:c4:68:22:01:ab:ee:f1:42:06:eb:5e:63:cf:c3:
a6:90:80:eb:64:cc:13:ec:52:71:5c:82:f3:b4:1f:
22:87:7b:a8:87:68:60:81:06:ef:db:f1:fb:20:e4:
fe:a1:4c:25:25:b9:e1:f5:50:34:44:b0:c3:48:ae:
db:81:13:04:7f:cf:6f:6c:3b:8e:4d:7e:7d:e2:97:
a6:e9:f8:17:2c:99:1b:ea:2a:06:8a:20:c3:20:6e:
f6:4b:b9:d9:ad:a5:66:4f:29:c9:b0:58:c3:45:15:
e9:5f:29:de:61:52:13:8a:4f:99:e9:1e:9a:45:c6:
21:20:e6:7e:b4:a2:9c:a7:96:3d:2c:46:67:08:fc:
53:aa:b3:02:d5:28:99:a8:a6:50:0e:9c:a5:69:7f:
c9:f9:ef:9a:85:ac:81:26:22:79:2b:34:47:3f:e6:
20:dc:6e:b5:d8:d6:e7:16:49:be:1f:5b:ec:73:7b:
c5:21:c3:0e:8b:f8:75:02:27:5b:c3:7b:7c:83:40:
ea:09:db:16:7d:ba:8d:eb:7c:6f:59:28:89:dd:a8:
28:b9:39:df:8e:02:f5:71:df:94:71:b7:c7:a0:51:
5f:fb:5d:85:06:87:b4:4f:ff:7d:69:0a:4c:67:29:
6a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A2:1A:4F:7C:A5:5E:49:D3:CE:00:7C:5F:30:02:B7:3D:56:82:3E
X509v3 Authority Key Identifier:
keyid:68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/8KIaT3ylXknTzgB8XzACtz1Wgj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.224.0/19
46.175.156.0/22
80.80.84.0/22
80.80.92.0/22
85.94.160.0/19
89.150.2.0-89.150.15.255
91.187.64.0/19
109.111.96.0/19
185.4.52.0/22
185.33.0.0/22
185.87.36.0-185.87.47.255
185.132.200.0/22
185.194.56.0/22
188.241.26.0/23
194.158.64.0/19
IPv6:
2a02:8060::/31
Signature Algorithm: sha256WithRSAEncryption
05:f7:b0:04:e9:82:3a:e6:2d:0b:36:d7:03:8c:de:88:49:83:
59:73:c1:f8:43:17:20:b0:e6:c1:90:97:2e:91:7f:cd:69:7d:
46:52:08:64:a7:4b:cb:60:b3:35:d0:21:be:c5:0b:3b:80:0e:
a6:10:22:d4:10:a7:54:f8:14:3b:2d:e2:0d:98:9a:81:85:4e:
7a:2c:d3:cb:b1:a0:c4:76:8c:2d:ce:8f:44:1b:17:47:21:46:
fa:74:2b:82:02:39:f1:10:b3:c0:0c:39:e5:2b:ee:cb:20:12:
d0:7e:95:d2:34:f9:0b:08:48:19:19:24:6e:c4:4f:cb:38:11:
37:4f:66:82:67:f4:8e:86:c0:6e:94:37:f7:27:2f:56:12:d8:
62:b5:e6:27:49:90:14:88:a5:b6:07:4c:2e:cb:e8:5c:04:ce:
c8:7b:35:ef:77:76:ec:79:21:0d:19:59:8a:55:f6:21:55:ce:
aa:85:00:68:1f:f6:65:38:3e:dc:01:c8:a6:24:d3:32:9a:1a:
20:19:3d:b3:13:7f:0c:01:eb:f6:92:71:5a:28:25:dd:f5:d7:
5f:f3:97:b3:a6:cf:d2:dc:81:86:0a:73:78:34:ad:41:8f:bb:
68:46:4e:0f:b7:ad:45:ef:cf:6c:be:d8:d2:b7:47:90:bd:7e:
bb:c7:c3:63
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgIECJyS+TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ODFjZTRkOTliYThlYmI5MWE3OTRhYmZjYmRkMTViZGUwOWM5OWY4MB4XDTIyMDIw
NDEwMzgxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjBhMjFhNGY3Y2E1
NWU0OWQzY2UwMDdjNWYzMDAyYjczZDU2ODIzZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALO8IFQ4mrC8UqNQGzVVW8RoIgGr7vFCButeY8/DppCA62TM
E+xScVyC87QfIod7qIdoYIEG79vx+yDk/qFMJSW54fVQNESww0iu24ETBH/Pb2w7
jk1+feKXpun4FyyZG+oqBoogwyBu9ku52a2lZk8pybBYw0UV6V8p3mFSE4pPmeke
mkXGISDmfrSinKeWPSxGZwj8U6qzAtUomaimUA6cpWl/yfnvmoWsgSYieSs0Rz/m
INxutdjW5xZJvh9b7HN7xSHDDov4dQInW8N7fINA6gnbFn26jet8b1koid2oKLk5
344C9XHflHG3x6BRX/tdhQaHtE//fWkKTGcpal8CAwEAAaOCAn8wggJ7MB0GA1Ud
DgQWBBTwohpPfKVeSdPOAHxfMAK3PVaCPjAfBgNVHSMEGDAWgBRoHOTZm6jruRp5
Sr/L3RW94JyZ+DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FCemsyWnVvNjdrYWVVcV95OTBWdmVDY21mZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmIvNmI5ZWU4LTkyNGItNGEzMS1hNDY0LTlmOTljMTQ3N2ZiZS8x
LzhLSWFUM3lsWGtuVHpnQjhYekFDdHoxV2dqNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIv
NmI5ZWU4LTkyNGItNGEzMS1hNDY0LTlmOTljMTQ3N2ZiZS8xL2FCemsyWnVvNjdr
YWVVcV95OTBWdmVDY21mZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
lAYIKwYBBQUHAQcBAf8EgYQwgYEwcAQCAAEwagMEBS6s4AMEAi6vnAMEAlBQVAME
AlBQXAMEBVVeoDAMAwQBWZYCAwQEWZYAAwQFW7tAAwQFbW9gAwQCuQQ0AwQCuSEA
MAwDBAK5VyQDBAS5VyADBAK5hMgDBAK5wjgDBAG88RoDBAXCnkAwDQQCAAIwBwMF
ASoCgGAwDQYJKoZIhvcNAQELBQADggEBAAX3sATpgjrmLQs21wOM3ohJg1lzwfhD
FyCw5sGQly6Rf81pfUZSCGSnS8tgszXQIb7FCzuADqYQItQQp1T4FDst4g2YmoGF
Tnos08uxoMR2jC3Oj0QbF0chRvp0K4ICOfEQs8AMOeUr7ssgEtB+ldI0+QsISBkZ
JG7ET8s4ETdPZoJn9I6GwG6UN/cnL1YS2GK15idJkBSIpbYHTC7L6FwEzsh7Ne93
dux5IQ0ZWYpV9iFVzqqFAGgf9mU4PtwByKYk0zKaGiAZPbMTfwwB6/aScVooJd31
11/zl7Omz9LcgYYKc3g0rUGPu2hGTg+3rUXvz2y+2NK3R5C9frvHw2M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:56 2024 by rpki-client on console-ams.rpki-client.org