Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/5Y_aNa-3mSAVLER5LM329jlB1m4.roa
File: 5Y_aNa-3mSAVLER5LM329jlB1m4.roa (raw, json)
Hash identifier: FmqgRu5t2krhItHQdDjs7okteWv2QFCRU5hq8iaTriM=
Subject key identifier: E5:8F:DA:35:AF:B7:99:20:15:2C:44:79:2C:CD:F6:F6:39:41:D6:6E
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 03F3FABD
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/5Y_aNa-3mSAVLER5LM329jlB1m4.roa
Signing time: Wed 01 Jun 2022 14:21:21 +0000
ROA not before: Wed 01 Jun 2022 14:21:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.134.40.0/22 maxlen: 24
212.63.118.0/24 maxlen: 24
212.63.117.0/24 maxlen: 24
212.63.116.0/24 maxlen: 24
212.63.116.0/22 maxlen: 24
212.63.121.0/24 maxlen: 24
212.63.123.0/24 maxlen: 24
212.63.122.0/24 maxlen: 24
193.32.236.0/22 maxlen: 24
45.90.52.0/22 maxlen: 24
185.94.48.0/22 maxlen: 24
91.245.200.0/21 maxlen: 24
185.93.232.0/22 maxlen: 24
185.131.12.0/22 maxlen: 22
85.217.132.0/24 maxlen: 24
85.217.129.0/24 maxlen: 24
85.217.139.0/24 maxlen: 24
85.217.138.0/24 maxlen: 24
85.217.137.0/24 maxlen: 24
85.217.136.0/24 maxlen: 24
85.217.135.0/24 maxlen: 24
85.217.134.0/24 maxlen: 24
85.217.133.0/24 maxlen: 24
85.217.141.0/24 maxlen: 24
85.217.143.0/24 maxlen: 24
85.217.142.0/24 maxlen: 24
85.217.152.0/24 maxlen: 24
85.217.151.0/24 maxlen: 24
85.217.150.0/24 maxlen: 24
85.217.147.0/24 maxlen: 24
85.217.146.0/24 maxlen: 24
85.217.155.0/24 maxlen: 24
85.217.154.0/24 maxlen: 24
85.217.153.0/24 maxlen: 24
85.217.159.0/24 maxlen: 24
85.217.158.0/24 maxlen: 24
85.217.157.0/24 maxlen: 24
85.217.156.0/24 maxlen: 24
185.130.24.0/23 maxlen: 24
194.49.0.0/22 maxlen: 24
185.130.26.0/23 maxlen: 24
188.241.96.0/21 maxlen: 24
45.157.56.0/22 maxlen: 24
185.234.184.0/24 maxlen: 24
185.234.186.0/23 maxlen: 23
185.234.185.0/24 maxlen: 24
185.44.233.0/24 maxlen: 24
185.44.234.0/23 maxlen: 24
185.176.84.0/22 maxlen: 24
79.142.184.0/22 maxlen: 24
185.51.108.0/22 maxlen: 24
185.162.172.0/23 maxlen: 24
185.162.175.0/24 maxlen: 24
185.162.174.0/24 maxlen: 24
195.82.105.0/24 maxlen: 24
195.82.104.0/24 maxlen: 24
195.82.106.0/24 maxlen: 24
195.82.124.0/24 maxlen: 24
185.216.216.0/22 maxlen: 22
185.216.218.0/23 maxlen: 23
185.216.217.0/24 maxlen: 24
139.28.76.0/22 maxlen: 22
185.196.203.0/24 maxlen: 24
185.196.202.0/24 maxlen: 24
185.196.200.0/23 maxlen: 24
5.226.16.0/20 maxlen: 24
91.242.144.0/22 maxlen: 24
185.202.188.0/22 maxlen: 24
88.98.98.0/24 maxlen: 24
88.98.96.0/20 maxlen: 24
88.98.96.0/23 maxlen: 23
88.98.104.0/23 maxlen: 24
88.98.100.0/22 maxlen: 24
88.98.99.0/24 maxlen: 24
88.98.111.0/24 maxlen: 24
88.98.110.0/24 maxlen: 24
88.98.108.0/22 maxlen: 24
88.98.106.0/23 maxlen: 24
88.98.112.0/20 maxlen: 24
141.98.52.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66321085 (0x3f3fabd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jun 1 14:21:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e58fda35afb79920152c44792ccdf6f63941d66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:47:65:42:c1:44:d0:a4:90:1e:4c:cb:ff:
70:c1:d5:c8:01:d9:c3:b9:71:45:90:70:48:b5:b2:
cf:ea:d3:f8:61:ac:fc:57:6d:7f:72:b2:58:12:5a:
cd:19:b8:a0:8b:70:d6:e9:06:ff:85:d5:43:80:5c:
f1:d7:71:64:bc:4f:b5:ff:c9:90:f0:85:ca:14:63:
c2:7b:8d:6c:28:7b:08:7a:d7:d3:f3:c3:88:79:21:
88:06:f1:10:b2:7f:36:b1:3b:fb:f5:3e:4a:e2:73:
05:3f:ae:6b:ab:3b:42:2d:17:bb:1d:19:db:63:2d:
c7:73:d9:4c:d1:8a:e6:ab:50:cb:c6:e8:21:83:0f:
5b:96:3d:e6:0d:5e:cc:ab:e7:99:58:78:75:70:61:
87:9b:d6:58:ba:a6:03:5d:79:de:74:39:3d:be:40:
32:8f:42:26:83:dc:50:de:ff:54:43:fb:6e:ec:f5:
80:13:4d:e0:fc:cd:bd:0f:f3:c4:37:5c:d3:73:83:
d2:c6:d9:ae:cb:a1:43:3e:6d:e8:a8:9e:e7:ba:e6:
82:c9:9d:d5:d9:7e:47:1a:b2:fa:16:2c:91:21:73:
98:9d:05:9b:a7:84:07:0d:5b:2a:44:23:b8:cd:72:
a0:3e:62:07:71:57:49:66:54:97:86:2a:73:ce:1f:
c5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8F:DA:35:AF:B7:99:20:15:2C:44:79:2C:CD:F6:F6:39:41:D6:6E
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/5Y_aNa-3mSAVLER5LM329jlB1m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.16.0/20
45.90.52.0/22
45.157.56.0/22
79.142.184.0/22
85.217.129.0/24
85.217.132.0-85.217.139.255
85.217.141.0-85.217.143.255
85.217.146.0/23
85.217.150.0-85.217.159.255
88.98.96.0/19
91.242.144.0/22
91.245.200.0/21
139.28.76.0/22
141.98.52.0/22
185.44.233.0-185.44.235.255
185.51.108.0/22
185.93.232.0/22
185.94.48.0/22
185.130.24.0/22
185.131.12.0/22
185.134.40.0/22
185.162.172.0/22
185.176.84.0/22
185.196.200.0/22
185.202.188.0/22
185.216.216.0/22
185.234.184.0/22
188.241.96.0/21
193.32.236.0/22
194.49.0.0/22
195.82.104.0-195.82.106.255
195.82.124.0/24
212.63.116.0/22
212.63.121.0-212.63.123.255
Signature Algorithm: sha256WithRSAEncryption
b8:14:d6:9b:c8:c2:25:6e:db:c1:99:3b:74:c2:dd:69:15:ff:
89:21:2b:bf:d2:dc:ed:71:03:ae:7c:2b:b5:f0:59:2b:dd:aa:
33:db:1f:71:d6:d3:ba:8f:8a:d6:93:74:79:09:b2:de:36:b6:
b8:9e:fa:32:26:cd:ba:66:58:79:fc:ab:e2:a3:01:5b:79:82:
19:81:78:22:1a:1d:e6:eb:74:50:60:b4:f4:9b:cc:7c:90:67:
f6:63:f0:4b:ed:19:9a:cb:da:c3:8d:67:44:06:fe:db:82:1f:
00:cc:5e:4b:7f:3d:eb:85:e8:86:dd:ba:af:a5:dc:5d:be:ec:
c2:bc:6a:f1:26:7c:ed:51:6d:07:a5:c3:fa:31:78:83:59:85:
fb:f0:80:79:d2:c0:70:e4:97:1a:b4:71:55:1d:aa:79:fc:56:
eb:87:96:ca:9a:d0:4c:4b:29:7e:22:56:a7:fc:d2:25:ae:a0:
ba:5f:cc:f5:47:0e:b5:68:65:1b:35:8a:44:1b:e1:a6:97:e1:
78:2e:61:fa:ee:70:2c:22:9c:d5:63:50:d1:29:89:c1:c3:ee:
33:f2:68:89:9c:fe:da:ce:fa:91:f1:f8:f7:60:f4:3e:ac:ba:
c1:e9:1e:8f:60:80:9c:68:a6:16:2b:b7:9b:9a:06:28:8c:48:
d5:ff:dd:3d
-----BEGIN CERTIFICATE-----
MIIF7jCCBNagAwIBAgIEA/P6vTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NDc1ZmIwOTM0Y2Y2YTU4ZGNjZWYxMTA4NzVkYmU1ZTNlOGI2Yjc1MB4XDTIyMDYw
MTE0MjEyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTU4ZmRhMzVhZmI3
OTkyMDE1MmM0NDc5MmNjZGY2ZjYzOTQxZDY2ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKshR2VCwUTQpJAeTMv/cMHVyAHZw7lxRZBwSLWyz+rT+GGs
/Fdtf3KyWBJazRm4oItw1ukG/4XVQ4Bc8ddxZLxPtf/JkPCFyhRjwnuNbCh7CHrX
0/PDiHkhiAbxELJ/NrE7+/U+SuJzBT+ua6s7Qi0Xux0Z22Mtx3PZTNGK5qtQy8bo
IYMPW5Y95g1ezKvnmVh4dXBhh5vWWLqmA1153nQ5Pb5AMo9CJoPcUN7/VEP7buz1
gBNN4PzNvQ/zxDdc03OD0sbZrsuhQz5t6Kie57rmgsmd1dl+Rxqy+hYskSFzmJ0F
m6eEBw1bKkQjuM1yoD5iB3FXSWZUl4Yqc84fxYsCAwEAAaOCAwgwggMEMB0GA1Ud
DgQWBBTlj9o1r7eZIBUsRHkszfb2OUHWbjAfBgNVHSMEGDAWgBTUdfsJNM9qWNzO
8RCHXb5ePotrdTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFIWDdDVFRQYWxqY3p2RVFoMTItWGo2TGEzVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzgvYmZmNGFhLTRmMDctNDEyOS04YWQ2LWM3OTE0YWI2NDI3My8x
LzVZX2FOYS0zbVNBVkxFUjVMTTMyOWpsQjFtNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgv
YmZmNGFhLTRmMDctNDEyOS04YWQ2LWM3OTE0YWI2NDI3My8xLzFIWDdDVFRQYWxq
Y3p2RVFoMTItWGo2TGEzVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
ARwGCCsGAQUFBwEHAQH/BIIBCzCCAQcwggEDBAIAATCB/AMEBAXiEAMEAi1aNAME
Ai2dOAMEAk+OuAMEAFXZgTAMAwQCVdmEAwQCVdmIMAwDBABV2Y0DBARV2YADBAFV
2ZIwDAMEAVXZlgMEBVXZgAMEBVhiYAMEAlvykAMEA1v1yAMEAoscTAMEAo1iNDAM
AwQAuSzpAwQCuSzoAwQCuTNsAwQCuV3oAwQCuV4wAwQCuYIYAwQCuYMMAwQCuYYo
AwQCuaKsAwQCubBUAwQCucTIAwQCucq8AwQCudjYAwQCueq4AwQDvPFgAwQCwSDs
AwQCwjEAMAwDBAPDUmgDBADDUmoDBADDUnwDBALUP3QwDAMEANQ/eQMEAtQ/eDAN
BgkqhkiG9w0BAQsFAAOCAQEAuBTWm8jCJW7bwZk7dMLdaRX/iSErv9Lc7XEDrnwr
tfBZK92qM9sfcdbTuo+K1pN0eQmy3ja2uJ76MibNumZYefyr4qMBW3mCGYF4Ihod
5ut0UGC09JvMfJBn9mPwS+0Zmsvaw41nRAb+24IfAMxeS38964Xoht26r6XcXb7s
wrxq8SZ87VFtB6XD+jF4g1mF+/CAedLAcOSXGrRxVR2qefxW64eWyprQTEspfiJW
p/zSJa6gul/M9UcOtWhlGzWKRBvhppfheC5h+u5wLCKc1WNQ0SmJwcPuM/JoiZz+
2s76kfH492D0Pqy6wekej2CAnGimFiu3m5oGKIxI1f/dPQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org