Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/Xbzh7hIqsDxp00NLl0rEL-Nsf-U.roa
File: Xbzh7hIqsDxp00NLl0rEL-Nsf-U.roa (raw, json)
Hash identifier: 2vY+27dTeU5ZUKq1BYwgghMrQDCtTP6d1p2dE9TTbYk=
Subject key identifier: 5D:BC:E1:EE:12:2A:B0:3C:69:D3:43:4B:97:4A:C4:2F:E3:6C:7F:E5
Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial: 15854D8C
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/Xbzh7hIqsDxp00NLl0rEL-Nsf-U.roa
Signing time: Sat 01 Jan 2022 14:59:13 +0000
ROA not before: Sat 01 Jan 2022 14:59:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35244
IP address blocks: 95.157.0.0/18 maxlen: 18
195.234.128.0/24 maxlen: 24
46.128.0.0/16 maxlen: 16
83.243.112.0/21 maxlen: 21
194.105.96.0/21 maxlen: 21
193.25.118.0/23 maxlen: 23
109.125.64.0/18 maxlen: 18
77.47.0.0/17 maxlen: 17
195.46.44.0/22 maxlen: 22
85.233.32.0/19 maxlen: 19
185.169.204.0/22 maxlen: 22
88.215.64.0/18 maxlen: 18
2a02:2455::/33 maxlen: 33
2001:4c50::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361057676 (0x15854d8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Validity
Not Before: Jan 1 14:59:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dbce1ee122ab03c69d3434b974ac42fe36c7fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:09:4a:20:59:41:8d:94:6c:23:81:3a:aa:
20:81:92:7b:fa:92:67:14:d5:14:91:69:75:b7:de:
66:e0:9c:7c:5f:c5:e3:cb:8c:85:1c:cc:27:bf:56:
a1:97:7a:a0:2b:96:15:a6:91:4f:e6:b8:01:ff:94:
e1:b3:46:fc:3a:28:29:39:ab:6b:09:f9:d4:f3:06:
ec:77:d1:e1:17:74:06:7f:c3:83:03:a0:e6:5c:e5:
1d:3c:c5:0e:ff:02:68:dc:74:f2:1f:6b:38:e6:aa:
60:de:93:55:71:b7:80:05:37:bc:bd:7e:04:da:18:
a2:44:1f:70:e7:6d:ca:7a:a5:d7:1e:80:9a:53:a1:
d7:90:ed:85:2a:2b:d5:c8:58:2a:64:17:a4:8c:58:
49:84:d6:af:a1:44:53:f4:f3:b1:a4:a0:f5:1b:6a:
0c:f8:1c:a8:d7:ad:28:e9:d0:d7:04:e2:d6:38:69:
13:b4:f3:58:0b:e6:9d:3b:d4:e4:13:22:66:c3:81:
69:e1:65:e4:9f:ec:bb:58:e9:b9:55:f1:76:5c:5f:
b1:cf:3c:d2:a3:bb:76:3a:b2:d8:9b:99:2a:db:02:
a9:7b:09:80:9f:06:0a:23:71:5d:90:5e:f8:58:18:
05:82:28:29:3c:4d:0f:0d:ec:1a:0a:02:31:ce:bb:
28:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BC:E1:EE:12:2A:B0:3C:69:D3:43:4B:97:4A:C4:2F:E3:6C:7F:E5
X509v3 Authority Key Identifier:
keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/Xbzh7hIqsDxp00NLl0rEL-Nsf-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.128.0.0/16
77.47.0.0/17
83.243.112.0/21
85.233.32.0/19
88.215.64.0/18
95.157.0.0/18
109.125.64.0/18
185.169.204.0/22
193.25.118.0/23
194.105.96.0/21
195.46.44.0/22
195.234.128.0/24
IPv6:
2001:4c50::/32
2a02:2455::/33
Signature Algorithm: sha256WithRSAEncryption
34:e8:bb:c7:ac:07:12:df:45:05:3d:c1:54:d8:2a:e0:cb:f5:
58:ed:34:f6:8d:29:21:23:e6:bd:90:59:64:3d:8b:4a:69:cf:
36:a4:03:46:bd:92:e3:78:87:9a:9c:02:40:bd:7c:59:2b:55:
0f:71:1b:31:e7:1c:9f:46:38:6e:2e:c0:9b:ed:69:0a:59:b1:
44:aa:a7:d2:b2:fc:0d:6b:d7:2f:31:f8:6e:05:66:86:81:70:
b7:e8:a6:66:bb:ff:1e:3e:71:0f:c7:0f:16:db:9d:40:cb:42:
43:d0:33:15:63:53:6b:75:e4:e4:31:1a:5f:60:b9:57:09:31:
8e:13:50:3f:27:98:50:be:26:a4:2e:9e:03:af:a3:1f:36:e1:
40:b9:eb:c6:cd:45:f5:9d:70:f9:42:b6:ca:a9:92:fa:1a:95:
25:e9:b7:df:b7:31:ce:a3:d1:9a:04:8c:6a:e9:2f:6c:03:37:
21:59:9d:b9:ff:4d:f6:16:e3:bd:be:00:b3:1f:37:b4:5a:ab:
87:bc:7e:91:3b:16:e4:23:82:90:9f:84:f1:a8:6a:66:d7:4f:
df:95:b5:85:5e:cc:79:f0:4c:6e:6c:f6:17:c7:fa:dc:1e:e1:
20:5b:4f:da:0d:4e:91:03:d1:ce:fb:90:5d:70:22:13:95:ad:
1c:a5:d1:29
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIEFYVNjDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NGI3NjlhNTNkZDg2MzUyZDM0NDBmMjIyYmRmOTA3Y2YwOWMyZGJhMB4XDTIyMDEw
MTE0NTkxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWRiY2UxZWUxMjJh
YjAzYzY5ZDM0MzRiOTc0YWM0MmZlMzZjN2ZlNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMCSCUogWUGNlGwjgTqqIIGSe/qSZxTVFJFpdbfeZuCcfF/F
48uMhRzMJ79WoZd6oCuWFaaRT+a4Af+U4bNG/DooKTmrawn51PMG7HfR4Rd0Bn/D
gwOg5lzlHTzFDv8CaNx08h9rOOaqYN6TVXG3gAU3vL1+BNoYokQfcOdtynql1x6A
mlOh15DthSor1chYKmQXpIxYSYTWr6FEU/TzsaSg9RtqDPgcqNetKOnQ1wTi1jhp
E7TzWAvmnTvU5BMiZsOBaeFl5J/su1jpuVXxdlxfsc880qO7djqy2JuZKtsCqXsJ
gJ8GCiNxXZBe+FgYBYIoKTxNDw3sGgoCMc67KPcCAwEAAaOCAmEwggJdMB0GA1Ud
DgQWBBRdvOHuEiqwPGnTQ0uXSsQv42x/5TAfBgNVHSMEGDAWgBT0t2mlPdhjUtNE
DyIr35B88JwtujAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzlMZHBwVDNZWTFMVFJBOGlLOS1RZlBDY0xiby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmMvNzBkNTBmLWZmM2MtNGY2My04ZGVjLWQ3YzM2YzI3YzA4Ny8x
L1hiemg3aElxc0R4cDAwTkxsMHJFTC1Oc2YtVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMv
NzBkNTBmLWZmM2MtNGY2My04ZGVjLWQ3YzM2YzI3YzA4Ny8xLzlMZHBwVDNZWTFM
VFJBOGlLOS1RZlBDY0xiby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB3
BggrBgEFBQcBBwEB/wRoMGYwTQQCAAEwRwMDAC6AAwQHTS8AAwQDU/NwAwQFVekg
AwQGWNdAAwQGX50AAwQGbX1AAwQCuanMAwQBwRl2AwQDwmlgAwQCwy4sAwQAw+qA
MBUEAgACMA8DBQAgAUxQAwYHKgIkVQAwDQYJKoZIhvcNAQELBQADggEBADTou8es
BxLfRQU9wVTYKuDL9VjtNPaNKSEj5r2QWWQ9i0ppzzakA0a9kuN4h5qcAkC9fFkr
VQ9xGzHnHJ9GOG4uwJvtaQpZsUSqp9Ky/A1r1y8x+G4FZoaBcLfopma7/x4+cQ/H
DxbbnUDLQkPQMxVjU2t15OQxGl9guVcJMY4TUD8nmFC+JqQungOvox824UC568bN
RfWdcPlCtsqpkvoalSXpt9+3Mc6j0ZoEjGrpL2wDNyFZnbn/TfYW472+ALMfN7Ra
q4e8fpE7FuQjgpCfhPGoambXT9+VtYVezHnwTG5s9hfH+twe4SBbT9oNTpED0c77
kF1wIhOVrRyl0Sk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:42 2024 by rpki-client on console-fra.rpki-client.org