Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/2q5Y-Ao4bvo_U3oPuyajiLnGZWk.roa
File: 2q5Y-Ao4bvo_U3oPuyajiLnGZWk.roa (raw, json)
Hash identifier: x3kB+ujJNAdFTVbdjgj2kUKNJe2C9Hu6nhPQ4+DBh3k=
Subject key identifier: DA:AE:58:F8:0A:38:6E:FA:3F:53:7A:0F:BB:26:A3:88:B9:C6:65:69
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01847658FDFB235AB5D4C65456078A568289
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/2q5Y-Ao4bvo_U3oPuyajiLnGZWk.roa
Signing time: Mon 14 Nov 2022 13:34:14 +0000
ROA not before: Mon 14 Nov 2022 13:34:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8263
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
78.25.64.0/18 maxlen: 24
62.64.0.0/19 maxlen: 24
178.176.224.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.226.0/24 maxlen: 24
178.176.225.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:58:fd:fb:23:5a:b5:d4:c6:54:56:07:8a:56:82:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 14 13:34:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=daae58f80a386efa3f537a0fbb26a388b9c66569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:19:20:6d:e4:19:da:25:5e:c9:78:1f:e9:
c4:71:2a:bd:df:7f:e2:63:b3:c0:39:2c:2c:57:f2:
cd:92:f5:54:77:52:a0:2d:c5:3f:ba:a6:c0:45:bb:
94:62:c4:cd:90:4e:63:3f:4e:76:96:fa:e5:de:d8:
1f:66:55:08:0d:5b:2c:2b:20:ee:c1:e2:ad:ef:a6:
91:97:05:42:07:1a:67:1f:a9:31:48:c3:19:a5:84:
3e:8c:7a:00:06:91:8b:6d:46:fc:a7:01:13:3f:12:
48:16:81:10:13:9a:fc:b9:45:1b:b7:21:97:fc:12:
03:4c:74:bf:3e:f1:55:44:c7:8c:56:b3:4f:0d:1d:
52:b4:4d:87:57:71:e9:89:8e:3d:ce:4a:7f:2e:82:
c0:04:3c:14:db:fd:3e:4e:9d:23:d9:ed:f6:c7:31:
75:2c:29:a6:0f:32:7b:98:16:ec:f2:2b:33:df:1f:
67:c2:fd:3e:f8:2e:67:32:c6:25:d7:14:5e:24:59:
05:cf:d1:03:d2:17:35:48:df:00:d5:b8:08:1e:0b:
72:91:f1:9b:90:76:ef:9b:d8:c7:3b:a5:02:eb:26:
94:5c:95:ce:6f:aa:4d:6d:10:8d:2a:76:1a:0e:3c:
5b:fc:f7:7a:ce:34:9b:1a:ea:42:82:31:4b:3a:0c:
69:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AE:58:F8:0A:38:6E:FA:3F:53:7A:0F:BB:26:A3:88:B9:C6:65:69
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/2q5Y-Ao4bvo_U3oPuyajiLnGZWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.224.0-178.176.226.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
42:0f:fb:57:cd:e8:a1:57:71:98:0d:16:6c:af:0f:0a:e3:76:
f4:c8:79:67:23:bc:27:d5:c5:0e:44:71:c4:49:ef:be:5f:a6:
61:e6:3a:9a:a0:5c:76:c9:a7:cc:86:5f:c5:49:91:56:7a:52:
95:25:b9:5c:35:f3:a7:7b:85:3d:d5:6c:28:4e:67:50:4d:d6:
a5:5b:20:ad:49:a5:01:b0:5b:96:03:02:91:78:51:47:dd:43:
5f:2f:04:69:8d:7a:f1:d1:e8:24:28:ce:e6:30:ac:b5:c3:c6:
85:b2:7b:b8:de:98:82:56:43:5c:c3:96:ee:2c:a0:87:7a:e5:
ef:40:df:11:04:d4:a3:82:9b:7e:27:0a:d3:a8:6b:ea:19:67:
5d:06:47:08:a6:cd:c3:f7:76:4a:76:ff:2c:a0:df:a8:4d:e5:
ff:c5:f2:1e:37:26:1f:fa:88:55:0f:ca:5c:7e:4e:1c:6c:87:
fd:e3:19:76:64:14:34:e0:f6:f2:c8:c8:45:f0:67:54:fc:b7:
38:aa:05:2e:30:25:9e:1f:f2:ab:8d:59:a2:bd:0a:1c:2c:be:
c4:a2:56:de:f4:9d:a7:04:f7:7c:9d:28:10:49:f2:92:40:ee:
69:a8:74:65:ac:f1:39:04:24:c8:8a:1a:c7:d8:09:e0:97:8d:
e7:0f:9a:22
-----BEGIN CERTIFICATE-----
MIIF/DCCBOSgAwIBAgISAYR2WP37I1q11MZUVgeKVoKJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMTE0MTMzNDE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWFlNThmODBhMzg2ZWZhM2Y1MzdhMGZiYjI2YTM4OGI5YzY2NTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq54ZIG3kGdolXsl4H+nEcSq933/i
Y7PAOSwsV/LNkvVUd1KgLcU/uqbARbuUYsTNkE5jP052lvrl3tgfZlUIDVssKyDu
weKt76aRlwVCBxpnH6kxSMMZpYQ+jHoABpGLbUb8pwETPxJIFoEQE5r8uUUbtyGX
/BIDTHS/PvFVRMeMVrNPDR1StE2HV3HpiY49zkp/LoLABDwU2/0+Tp0j2e32xzF1
LCmmDzJ7mBbs8isz3x9nwv0++C5nMsYl1xReJFkFz9ED0hc1SN8A1bgIHgtykfGb
kHbvm9jHO6UC6yaUXJXOb6pNbRCNKnYaDjxb/Pd6zjSbGupCgjFLOgxpLQIDAQAB
o4IDCDCCAwQwHQYDVR0OBBYEFNquWPgKOG76P1N6D7smo4i5xmVpMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvMnE1WS1BbzRidm9fVTNvUHV5YWppTG5HWldrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBHAYIKwYBBQUHAQcBAf8EggELMIIBBzCCAQMEAgABMIH8
AwQDLujIAwQFPkAAAwQFTemgAwQGThlAAwQCTilkAwQDT6sIAwQEUPewAwQEURiA
AwQGU6nAAwQFU97AAwQHU+WAAwQHVRqAAwQFVm3AAwQCW8HUAwQHXZmAAwQHXhmA
AwQHX4kAAwQEbUpwAwQGbXxAAwMAbbwDBAaAzEADBAOyF5AwDAMEBbKw4AMEALKw
4gMEArkDIAMEArnSjAMEA7xeqAMDALyiAwQCwcnkAwQFwwWAAwQFwxBgAwQBw050
AwQAw5VvAwQFw+ZAAwQF1A6gAwQF1CxAAwQF1EVgAwQF1HegAwQF1ZqgAwQF1agg
AwQG1fNAAwQE2XNQMA0GCSqGSIb3DQEBCwUAA4IBAQBCD/tXzeihV3GYDRZsrw8K
43b0yHlnI7wn1cUORHHESe++X6Zh5jqaoFx2yafMhl/FSZFWelKVJblcNfOne4U9
1WwoTmdQTdalWyCtSaUBsFuWAwKReFFH3UNfLwRpjXrx0egkKM7mMKy1w8aFsnu4
3piCVkNcw5buLKCHeuXvQN8RBNSjgpt+JwrTqGvqGWddBkcIps3D93ZKdv8soN+o
TeX/xfIeNyYf+ohVD8pcfk4cbIf94xl2ZBQ04PbyyMhF8GdU/Lc4qgUuMCWeH/Kr
jVmivQocLL7Eolbe9J2nBPd8nSgQSfKSQO5pqHRlrPE5BCTIihrH2Angl43nD5oi
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:24 2024 by rpki-client on console-fra.rpki-client.org