Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/4sYKVqaxJs2eDJ7ksHsop2nVh9Q.roa
File: 4sYKVqaxJs2eDJ7ksHsop2nVh9Q.roa (raw, json)
Hash identifier: VXqRR/nJTJ6F1Pk6dKzbM1ZXsGeSw2zJBrjstLYvjPM=
Subject key identifier: E2:C6:0A:56:A6:B1:26:CD:9E:0C:9E:E4:B0:7B:28:A7:69:D5:87:D4
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01820AC3A5627F0CB8CF5EC2CB1A770C2F27
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/4sYKVqaxJs2eDJ7ksHsop2nVh9Q.roa
Signing time: Sun 17 Jul 2022 06:06:10 +0000
ROA not before: Sun 17 Jul 2022 06:06:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209641
IP address blocks: 45.133.245.0/24 maxlen: 24
185.5.248.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
5.252.116.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
139.28.220.0/24 maxlen: 24
139.28.221.0/24 maxlen: 24
5.180.139.0/24 maxlen: 24
5.180.137.0/24 maxlen: 24
5.180.138.0/24 maxlen: 24
5.180.136.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
95.214.10.0/24 maxlen: 24
95.214.8.0/24 maxlen: 24
95.214.11.0/24 maxlen: 24
95.214.9.0/24 maxlen: 24
195.66.87.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
185.105.119.0/24 maxlen: 24
94.142.139.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
185.125.216.0/22 maxlen: 22
185.105.118.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.58.205.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.207.0/24 maxlen: 24
45.89.64.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.228.0/22 maxlen: 22
185.125.228.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.196.0/22 maxlen: 22
194.67.194.0/23 maxlen: 23
194.67.193.0/24 maxlen: 24
193.124.176.0/21 maxlen: 21
193.124.176.0/20 maxlen: 20
193.124.184.0/21 maxlen: 21
45.128.176.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.177.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
195.47.250.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.202.0/24 maxlen: 24
194.67.200.0/23 maxlen: 23
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
46.17.106.0/24 maxlen: 24
2a0a:9300::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:0a:c3:a5:62:7f:0c:b8:cf:5e:c2:cb:1a:77:0c:2f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 17 06:06:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2c60a56a6b126cd9e0c9ee4b07b28a769d587d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:e9:75:53:f6:73:00:4f:1d:0c:57:79:c4:
50:6b:7b:7e:79:9f:c2:9e:b6:c2:bc:10:72:60:a5:
ba:a2:79:ac:fa:df:14:b7:e8:3b:28:5a:17:fa:f3:
e6:2d:02:87:14:4b:3b:ea:c2:68:d5:3d:15:3c:1d:
4a:2c:f8:66:5d:90:6f:06:42:78:32:da:55:be:b4:
3f:e5:3d:cc:0d:e7:0d:c8:8c:5b:53:68:9e:d7:01:
cf:1a:ae:af:f7:9b:d6:7c:fd:8b:b2:c0:87:51:94:
37:a8:44:12:ab:62:f4:24:c8:4d:0a:fc:63:1a:33:
c9:81:50:83:99:a6:ce:b6:3a:5a:2e:fb:1d:c5:ae:
8f:bb:29:a1:c5:03:84:89:a7:6f:b1:24:fe:01:3a:
91:b6:ff:85:ee:41:e4:b2:27:09:3c:eb:d4:7c:e6:
07:a4:11:63:9d:ea:84:a8:55:63:64:e0:b3:27:fd:
c2:2a:87:eb:7a:3a:d0:ca:1e:86:24:3c:14:cd:b8:
69:82:d1:5c:20:c1:8c:5f:5a:12:98:92:a7:b5:a7:
e5:3a:2c:1f:56:91:30:10:89:09:ac:8f:84:ea:d6:
6e:42:58:d3:bb:d3:96:1a:be:77:58:ce:a3:19:e9:
26:d0:d0:b1:3b:0f:81:d1:11:cb:ab:98:25:7b:fd:
c2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C6:0A:56:A6:B1:26:CD:9E:0C:9E:E4:B0:7B:28:A7:69:D5:87:D4
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/4sYKVqaxJs2eDJ7ksHsop2nVh9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.0/22
5.252.116.0/24
45.89.64.0/24
45.89.66.0/23
45.128.176.0/22
45.133.245.0/24
46.17.106.0/24
91.217.80.0/24
94.142.136.0/21
95.214.8.0/22
139.28.220.0/23
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/22
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
193.124.176.0/20
194.67.192.0/19
195.47.250.0/24
195.66.87.0/24
IPv6:
2a0a:9300::/48
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
Signature Algorithm: sha256WithRSAEncryption
bb:cd:6c:39:b2:19:8e:e1:d1:d4:d4:32:a4:71:5f:2b:37:cd:
b5:a2:f1:f2:22:f1:fb:51:df:cb:2b:ff:9a:8f:70:09:7b:7a:
14:8a:7f:e8:10:4c:1f:24:08:bf:48:f5:be:e6:d6:5d:6a:af:
e0:86:c9:9b:c9:1a:5d:56:4a:4d:29:dd:3c:f6:55:87:7f:17:
c7:17:0f:9c:18:e8:65:e1:26:27:d8:47:85:22:4b:ee:89:04:
9e:9e:14:27:93:fb:6c:d3:5a:25:69:b6:3c:69:c5:8e:f0:db:
b5:43:f5:20:ef:6c:30:0c:9d:8f:0d:66:6c:85:8a:2d:c1:bd:
45:ab:e6:71:69:8f:76:9d:35:0a:5b:3a:72:4e:33:07:97:79:
4a:1e:19:61:8b:af:a5:21:e9:51:b0:e8:c8:6d:c5:c1:75:8a:
83:c2:65:a7:bf:7e:3f:17:38:4f:2c:af:5b:ce:0c:5e:a3:b7:
87:33:22:23:1e:80:1f:0f:36:cc:c3:39:51:6a:24:c4:a2:de:
33:83:b6:2b:6a:ac:e2:7b:6d:55:4f:fa:58:96:da:90:2b:c9:
c1:01:9e:ad:f0:a8:df:74:dc:a5:53:e0:2c:60:d9:76:2f:b1:
cc:88:ed:52:df:e1:19:7d:7a:42:4e:f5:c1:eb:2c:f5:b4:ac:
53:fc:0f:cc
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgISAYIKw6Vifwy4z17Cyxp3DC8nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjIwNzE3MDYwNjEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmM2MGE1NmE2YjEyNmNkOWUwYzllZTRiMDdiMjhhNzY5ZDU4N2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnirpdVP2cwBPHQxXecRQa3t+eZ/C
nrbCvBByYKW6onms+t8Ut+g7KFoX+vPmLQKHFEs76sJo1T0VPB1KLPhmXZBvBkJ4
MtpVvrQ/5T3MDecNyIxbU2ie1wHPGq6v95vWfP2LssCHUZQ3qEQSq2L0JMhNCvxj
GjPJgVCDmabOtjpaLvsdxa6PuymhxQOEiadvsST+ATqRtv+F7kHksicJPOvUfOYH
pBFjneqEqFVjZOCzJ/3CKofrejrQyh6GJDwUzbhpgtFcIMGMX1oSmJKntaflOiwf
VpEwEIkJrI+E6tZuQljTu9OWGr53WM6jGekm0NCxOw+B0RHLq5gle/3CnQIDAQAB
o4ICtjCCArIwHQYDVR0OBBYEFOLGClamsSbNngye5LB7KKdp1YfUMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvNHNZS1ZxYXhKczJlREo3a3NIc29wMm5WaDlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHLBggrBgEFBQcBBwEB/wSBuzCBuDCBiwQCAAEwgYQDBAIF
tIgDBAAF/HQDBAAtWUADBAEtWUIDBAItgLADBAAthfUDBAAuEWoDBABb2VADBANe
jogDBAJf1ggDBAGLHNwDBAK5BfgDBAK5OswDBAK5VzADBAK5aXQDBAK5dZgDBAK5
fdgDBAK5feQDBATBfLADBAXCQ8ADBADDL/oDBADDQlcwKAQCAAIwIgMHACoKkwAA
ADAQAwUAKgqTAQMHACoKkwEAAgMFACoKkwIwDQYJKoZIhvcNAQELBQADggEBALvN
bDmyGY7h0dTUMqRxXys3zbWi8fIi8ftR38sr/5qPcAl7ehSKf+gQTB8kCL9I9b7m
1l1qr+CGyZvJGl1WSk0p3Tz2VYd/F8cXD5wY6GXhJifYR4UiS+6JBJ6eFCeT+2zT
WiVptjxpxY7w27VD9SDvbDAMnY8NZmyFii3BvUWr5nFpj3adNQpbOnJOMweXeUoe
GWGLr6Uh6VGw6MhtxcF1ioPCZae/fj8XOE8sr1vODF6jt4czIiMegB8PNszDOVFq
JMSi3jODtitqrOJ7bVVP+liW2pArycEBnq3wqN903KVT4Cxg2XYvscyI7VLf4Rl9
ekJO9cHrLPW0rFP8D8w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org