Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/acycK8IiCHtJXdYw5U9QeWRb0b0.roa
File: acycK8IiCHtJXdYw5U9QeWRb0b0.roa (raw, json)
Hash identifier: LDitpJcXj01Bxquv9YDPADUtmA/bpFgYssHwWsngs8o=
Subject key identifier: 69:CC:9C:2B:C2:22:08:7B:49:5D:D6:30:E5:4F:50:79:64:5B:D1:BD
Certificate issuer: /CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Certificate serial: 08C3BF04
Authority key identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/acycK8IiCHtJXdYw5U9QeWRb0b0.roa
Signing time: Wed 16 Feb 2022 10:09:03 +0000
ROA not before: Wed 16 Feb 2022 10:09:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6752
IP address blocks: 80.80.84.0/22 maxlen: 22
80.80.92.0/22 maxlen: 22
185.87.36.0/22 maxlen: 22
185.33.0.0/22 maxlen: 22
194.158.64.0/22 maxlen: 22
194.158.64.0/19 maxlen: 19
194.158.64.0/24 maxlen: 24
194.158.68.0/22 maxlen: 22
194.158.72.0/23 maxlen: 23
194.158.72.0/22 maxlen: 22
194.158.76.0/22 maxlen: 22
185.87.40.0/22 maxlen: 22
185.87.44.0/22 maxlen: 22
188.241.26.0/23 maxlen: 23
91.187.64.0/19 maxlen: 19
91.187.64.0/22 maxlen: 22
91.187.68.0/22 maxlen: 22
91.187.76.0/22 maxlen: 22
91.187.72.0/22 maxlen: 22
91.187.84.0/22 maxlen: 22
91.187.80.0/22 maxlen: 22
91.187.88.0/22 maxlen: 22
89.150.4.0/22 maxlen: 22
89.150.2.0/23 maxlen: 23
89.150.8.0/22 maxlen: 22
89.150.12.0/22 maxlen: 22
91.187.92.0/22 maxlen: 22
185.194.56.0/22 maxlen: 22
46.172.224.0/19 maxlen: 19
46.172.232.0/22 maxlen: 22
185.4.52.0/22 maxlen: 22
185.132.200.0/22 maxlen: 22
109.111.96.0/22 maxlen: 22
109.111.96.0/19 maxlen: 19
109.111.100.0/22 maxlen: 22
109.111.104.0/22 maxlen: 22
109.111.108.0/22 maxlen: 22
109.111.112.0/22 maxlen: 22
109.111.116.0/22 maxlen: 22
85.94.164.0/22 maxlen: 22
109.111.124.0/22 maxlen: 22
109.111.120.0/22 maxlen: 22
85.94.160.0/19 maxlen: 19
85.94.160.0/22 maxlen: 22
85.94.168.0/22 maxlen: 22
85.94.172.0/22 maxlen: 22
85.94.176.0/22 maxlen: 22
85.94.184.0/22 maxlen: 22
85.94.180.0/22 maxlen: 22
194.158.80.0/22 maxlen: 22
194.158.84.0/22 maxlen: 22
194.158.88.0/22 maxlen: 22
194.158.92.0/22 maxlen: 22
85.94.188.0/22 maxlen: 22
46.175.156.0/22 maxlen: 22
2a02:8060::/31 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147046148 (0x8c3bf04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Validity
Not Before: Feb 16 10:09:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69cc9c2bc222087b495dd630e54f5079645bd1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:0e:bd:4a:96:97:08:f8:5d:c3:76:4d:04:
04:f3:be:4a:31:02:28:95:45:da:77:61:dc:79:63:
ee:a4:6d:09:aa:90:df:e1:23:0f:c1:32:1b:da:fa:
f3:25:36:d3:d6:19:ab:aa:1a:bd:9a:70:ab:aa:6e:
a6:e3:f8:a0:e5:37:91:46:78:c3:40:f8:e1:8c:93:
61:0f:5c:14:1c:68:b6:af:59:60:5b:f1:dd:cf:a0:
41:fd:98:bf:51:eb:39:8b:da:4b:bb:1b:8b:8e:b8:
62:39:f5:8e:2a:ba:aa:22:ba:9d:ad:68:2c:44:b2:
1a:43:bf:96:1c:02:53:58:23:bc:33:0d:c2:fc:81:
b8:98:a5:83:14:f2:06:e5:67:55:4f:ed:53:ff:17:
0a:02:40:2e:22:2f:91:be:40:54:97:34:be:d5:42:
87:d8:c5:5d:a7:93:b3:a6:5b:62:50:63:91:51:de:
4e:8d:47:73:a2:8a:00:92:41:a5:95:81:2a:3a:5e:
36:e8:4c:33:0a:3d:a0:35:49:0f:0f:5b:a1:6a:8a:
e7:eb:47:7f:c0:3f:bb:65:d6:ac:3d:f0:36:50:8c:
1f:16:37:0c:ba:e0:c6:f9:b1:47:94:82:98:bb:d1:
da:27:8f:e5:d7:37:d5:e7:1c:13:ec:b7:25:d2:2f:
b1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CC:9C:2B:C2:22:08:7B:49:5D:D6:30:E5:4F:50:79:64:5B:D1:BD
X509v3 Authority Key Identifier:
keyid:68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/acycK8IiCHtJXdYw5U9QeWRb0b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.224.0/19
46.175.156.0/22
80.80.84.0/22
80.80.92.0/22
85.94.160.0/19
89.150.2.0-89.150.15.255
91.187.64.0/19
109.111.96.0/19
185.4.52.0/22
185.33.0.0/22
185.87.36.0-185.87.47.255
185.132.200.0/22
185.194.56.0/22
188.241.26.0/23
194.158.64.0/19
IPv6:
2a02:8060::/31
Signature Algorithm: sha256WithRSAEncryption
03:3c:04:f6:93:cd:5c:96:11:dd:b9:86:87:81:c3:7c:b0:f1:
29:b3:6e:a7:ce:46:34:25:dc:8f:1d:0e:fd:49:36:a7:42:72:
46:9e:65:34:48:65:e5:f4:cb:64:0b:ec:92:1a:96:b4:5e:e3:
52:48:93:b5:bd:89:6c:73:5b:bd:44:47:ad:83:d4:ea:96:50:
1d:61:30:dd:cb:ed:23:a5:52:fa:98:76:2a:1a:a2:9f:0e:96:
2f:ec:25:95:02:08:46:3d:6d:f6:28:28:ea:d6:f9:4f:80:7e:
5f:98:1b:1f:93:d2:8f:ad:a7:02:29:ce:3b:19:fd:18:18:ee:
ea:df:e7:97:11:34:9e:cd:df:c9:c5:8b:40:ba:75:e5:81:31:
67:dd:09:74:68:04:f8:1b:e9:b4:82:27:82:a1:4d:1f:97:64:
3e:e5:2e:c7:e7:2a:a3:e2:a7:45:2d:e4:9a:2a:b2:9c:ce:49:
f8:db:97:6a:80:71:a3:1a:10:92:7e:56:77:74:3b:5a:b3:f4:
ad:17:35:b6:cd:43:bc:48:96:4e:2e:65:95:0e:84:46:fd:3e:
67:81:2d:96:eb:0c:4d:07:89:b9:26:e3:a4:b8:3b:20:0e:5f:
b2:b8:ce:33:d4:54:ef:e1:be:6e:7a:ef:54:40:14:64:8b:af:
24:04:6e:8e
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgIECMO/BDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ODFjZTRkOTliYThlYmI5MWE3OTRhYmZjYmRkMTViZGUwOWM5OWY4MB4XDTIyMDIx
NjEwMDkwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjljYzljMmJjMjIy
MDg3YjQ5NWRkNjMwZTU0ZjUwNzk2NDViZDFiZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALOODr1KlpcI+F3Ddk0EBPO+SjECKJVF2ndh3Hlj7qRtCaqQ
3+EjD8EyG9r68yU209YZq6oavZpwq6pupuP4oOU3kUZ4w0D44YyTYQ9cFBxotq9Z
YFvx3c+gQf2Yv1HrOYvaS7sbi464Yjn1jiq6qiK6na1oLESyGkO/lhwCU1gjvDMN
wvyBuJilgxTyBuVnVU/tU/8XCgJALiIvkb5AVJc0vtVCh9jFXaeTs6ZbYlBjkVHe
To1Hc6KKAJJBpZWBKjpeNuhMMwo9oDVJDw9boWqK5+tHf8A/u2XWrD3wNlCMHxY3
DLrgxvmxR5SCmLvR2ieP5dc31eccE+y3JdIvsTkCAwEAAaOCAn8wggJ7MB0GA1Ud
DgQWBBRpzJwrwiIIe0ld1jDlT1B5ZFvRvTAfBgNVHSMEGDAWgBRoHOTZm6jruRp5
Sr/L3RW94JyZ+DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FCemsyWnVvNjdrYWVVcV95OTBWdmVDY21mZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmIvNmI5ZWU4LTkyNGItNGEzMS1hNDY0LTlmOTljMTQ3N2ZiZS8x
L2FjeWNLOElpQ0h0SlhkWXc1VTlRZVdSYjBiMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIv
NmI5ZWU4LTkyNGItNGEzMS1hNDY0LTlmOTljMTQ3N2ZiZS8xL2FCemsyWnVvNjdr
YWVVcV95OTBWdmVDY21mZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
lAYIKwYBBQUHAQcBAf8EgYQwgYEwcAQCAAEwagMEBS6s4AMEAi6vnAMEAlBQVAME
AlBQXAMEBVVeoDAMAwQBWZYCAwQEWZYAAwQFW7tAAwQFbW9gAwQCuQQ0AwQCuSEA
MAwDBAK5VyQDBAS5VyADBAK5hMgDBAK5wjgDBAG88RoDBAXCnkAwDQQCAAIwBwMF
ASoCgGAwDQYJKoZIhvcNAQELBQADggEBAAM8BPaTzVyWEd25hoeBw3yw8SmzbqfO
RjQl3I8dDv1JNqdCckaeZTRIZeX0y2QL7JIalrRe41JIk7W9iWxzW71ER62D1OqW
UB1hMN3L7SOlUvqYdioaop8Oli/sJZUCCEY9bfYoKOrW+U+Afl+YGx+T0o+tpwIp
zjsZ/RgY7urf55cRNJ7N38nFi0C6deWBMWfdCXRoBPgb6bSCJ4KhTR+XZD7lLsfn
KqPip0Ut5JoqspzOSfjbl2qAcaMaEJJ+Vnd0O1qz9K0XNbbNQ7xIlk4uZZUOhEb9
PmeBLZbrDE0Hibkm46S4OyAOX7K4zjPUVO/hvm5671RAFGSLryQEbo4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:36 2024 by rpki-client on console-fra.rpki-client.org