Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/yCKPltQUInPrm5FM_ZEHrlvoUYA.roa
File: yCKPltQUInPrm5FM_ZEHrlvoUYA.roa (raw, json)
Hash identifier: A0h9bgUW/P3plFxw1M+FL/4BmEuLUlMfeNFJSwTBb7k=
Subject key identifier: C8:22:8F:96:D4:14:22:73:EB:9B:91:4C:FD:91:07:AE:5B:E8:51:80
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 03FC845E
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/yCKPltQUInPrm5FM_ZEHrlvoUYA.roa
Signing time: Thu 02 Jun 2022 11:41:27 +0000
ROA not before: Thu 02 Jun 2022 11:41:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43160
IP address blocks: 185.44.233.0/24 maxlen: 24
185.44.232.0/22 maxlen: 24
185.44.234.0/23 maxlen: 24
212.63.116.0/22 maxlen: 24
212.63.118.0/24 maxlen: 24
212.63.123.0/24 maxlen: 24
212.63.119.0/24 maxlen: 24
212.63.120.0/24 maxlen: 24
212.63.122.0/24 maxlen: 24
185.162.172.0/23 maxlen: 24
195.82.104.0/24 maxlen: 24
185.94.48.0/22 maxlen: 24
195.82.106.0/24 maxlen: 24
185.196.202.0/23 maxlen: 24
185.196.202.0/24 maxlen: 24
185.196.203.0/24 maxlen: 24
85.217.135.0/24 maxlen: 24
85.217.137.0/24 maxlen: 24
85.217.136.0/24 maxlen: 24
85.217.139.0/24 maxlen: 24
85.217.138.0/24 maxlen: 24
85.217.143.0/24 maxlen: 24
85.217.141.0/24 maxlen: 24
85.217.142.0/24 maxlen: 24
85.217.146.0/24 maxlen: 24
85.217.151.0/24 maxlen: 24
85.217.150.0/24 maxlen: 24
85.217.152.0/24 maxlen: 24
85.217.158.0/24 maxlen: 24
85.217.157.0/24 maxlen: 24
85.217.159.0/24 maxlen: 24
85.217.153.0/24 maxlen: 24
85.217.155.0/24 maxlen: 24
85.217.154.0/24 maxlen: 24
185.130.24.0/22 maxlen: 24
185.130.24.0/23 maxlen: 24
88.98.96.0/20 maxlen: 24
88.98.96.0/23 maxlen: 24
88.98.98.0/24 maxlen: 24
88.98.100.0/22 maxlen: 24
88.98.99.0/24 maxlen: 24
88.98.104.0/23 maxlen: 24
88.98.106.0/23 maxlen: 24
88.98.108.0/23 maxlen: 24
88.98.111.0/24 maxlen: 24
88.98.110.0/24 maxlen: 24
185.130.26.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66880606 (0x3fc845e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jun 2 11:41:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8228f96d4142273eb9b914cfd9107ae5be85180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2b:c0:53:34:1c:64:21:30:04:c6:3a:9b:1c:
e8:0f:72:0b:25:fb:ef:ff:1b:1e:b0:f6:35:a6:97:
00:b0:99:2d:10:14:a3:3d:ae:9e:30:8e:47:f7:ec:
46:f6:84:ce:e2:98:42:6b:c6:3d:7e:2e:eb:55:b8:
f4:85:bd:63:fa:65:b8:cc:b2:7f:01:21:37:b8:a0:
71:db:44:1a:c2:fb:b4:95:6b:51:58:1f:3b:82:c6:
ff:8b:18:45:3b:f3:fe:3e:4a:d9:62:7c:1b:27:bd:
35:5d:e7:63:f6:3f:c9:6a:64:af:36:f8:8b:07:18:
8b:f3:51:db:48:46:c2:4e:40:82:67:c6:5f:ee:18:
51:ef:4b:dc:7d:91:7c:74:de:d4:67:8d:bf:1f:15:
19:c2:24:28:f3:7b:3b:77:c1:a1:e1:3a:9a:a0:21:
39:96:a5:de:c8:ae:6a:9c:64:89:ac:d6:50:14:81:
b2:59:05:e3:9f:b1:5f:df:79:05:3c:03:0c:1b:1a:
8b:d4:1b:0d:bc:9d:59:5a:da:85:20:87:33:ca:67:
d0:8e:d7:12:23:0c:8c:ef:ce:73:14:5d:0f:ae:67:
02:ad:74:33:6b:23:ea:fe:33:2f:4b:de:40:75:b7:
09:10:ef:fb:b8:ef:b8:db:4c:bc:58:d9:b3:29:23:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:22:8F:96:D4:14:22:73:EB:9B:91:4C:FD:91:07:AE:5B:E8:51:80
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/yCKPltQUInPrm5FM_ZEHrlvoUYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.135.0-85.217.139.255
85.217.141.0-85.217.143.255
85.217.146.0/24
85.217.150.0-85.217.155.255
85.217.157.0-85.217.159.255
88.98.96.0/20
185.44.232.0/22
185.94.48.0/22
185.130.24.0/22
185.162.172.0/23
185.196.202.0/23
195.82.104.0/24
195.82.106.0/24
212.63.116.0-212.63.120.255
212.63.122.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:61:ee:42:ea:92:f6:a2:e9:40:15:e9:13:53:7e:3c:e1:57:
0d:5d:71:81:59:87:c0:3b:03:2a:fd:5f:48:87:21:8e:0c:18:
2e:2d:81:e7:d1:33:4f:14:6b:f3:f3:f0:c4:ae:1f:de:e1:64:
1e:db:24:c0:f1:c8:48:a6:cf:b6:83:ac:97:75:80:ab:11:c5:
bf:87:6b:58:db:cd:26:4c:ee:16:d3:5b:ed:99:0a:25:6a:fa:
17:47:a2:5a:c9:b3:2b:40:02:c4:92:5a:6d:9f:ea:d3:55:00:
51:4d:90:48:57:5a:fa:5d:df:df:23:1b:ec:4a:30:6b:01:1a:
13:c1:b5:de:e4:c3:fd:66:0d:5c:8b:c9:97:16:99:ca:09:04:
29:62:53:4b:9c:9d:c9:1b:5c:f8:6f:d0:90:44:2b:2d:2c:3d:
25:2b:5d:d4:4f:88:40:50:cb:78:5a:6c:67:f4:24:0f:ff:84:
d8:b3:be:e7:e6:9a:94:4a:dd:16:6e:41:00:db:18:89:c3:75:
18:bd:4e:28:b1:58:43:46:33:54:ea:3c:05:13:fb:b3:40:ef:
22:14:12:0d:2e:24:e5:9d:2a:ed:0b:ec:d6:66:dc:62:47:05:
4d:ba:2b:92:76:4f:b0:db:a0:5f:68:b1:95:0e:2d:27:7e:e4:
89:bf:ac:1d
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIEA/yEXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NDc1ZmIwOTM0Y2Y2YTU4ZGNjZWYxMTA4NzVkYmU1ZTNlOGI2Yjc1MB4XDTIyMDYw
MjExNDEyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzgyMjhmOTZkNDE0
MjI3M2ViOWI5MTRjZmQ5MTA3YWU1YmU4NTE4MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO0rwFM0HGQhMATGOpsc6A9yCyX77/8bHrD2NaaXALCZLRAU
oz2unjCOR/fsRvaEzuKYQmvGPX4u61W49IW9Y/pluMyyfwEhN7igcdtEGsL7tJVr
UVgfO4LG/4sYRTvz/j5K2WJ8Gye9NV3nY/Y/yWpkrzb4iwcYi/NR20hGwk5AgmfG
X+4YUe9L3H2RfHTe1GeNvx8VGcIkKPN7O3fBoeE6mqAhOZal3siuapxkiazWUBSB
slkF45+xX995BTwDDBsai9QbDbydWVrahSCHM8pn0I7XEiMMjO/OcxRdD65nAq10
M2sj6v4zL0veQHW3CRDv+7jvuNtMvFjZsykjTGsCAwEAAaOCAoowggKGMB0GA1Ud
DgQWBBTIIo+W1BQic+ubkUz9kQeuW+hRgDAfBgNVHSMEGDAWgBTUdfsJNM9qWNzO
8RCHXb5ePotrdTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFIWDdDVFRQYWxqY3p2RVFoMTItWGo2TGEzVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzgvYmZmNGFhLTRmMDctNDEyOS04YWQ2LWM3OTE0YWI2NDI3My8x
L3lDS1BsdFFVSW5Qcm01Rk1fWkVIcmx2b1VZQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgv
YmZmNGFhLTRmMDctNDEyOS04YWQ2LWM3OTE0YWI2NDI3My8xLzFIWDdDVFRQYWxq
Y3p2RVFoMTItWGo2TGEzVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
nwYIKwYBBQUHAQcBAf8EgY8wgYwwgYkEAgABMIGCMAwDBABV2YcDBAJV2YgwDAME
AFXZjQMEBFXZgAMEAFXZkjAMAwQBVdmWAwQCVdmYMAwDBABV2Z0DBAVV2YADBARY
YmADBAK5LOgDBAK5XjADBAK5ghgDBAG5oqwDBAG5xMoDBADDUmgDBADDUmowDAME
AtQ/dAMEANQ/eAMEAdQ/ejANBgkqhkiG9w0BAQsFAAOCAQEAjWHuQuqS9qLpQBXp
E1N+POFXDV1xgVmHwDsDKv1fSIchjgwYLi2B59EzTxRr8/PwxK4f3uFkHtskwPHI
SKbPtoOsl3WAqxHFv4drWNvNJkzuFtNb7ZkKJWr6F0eiWsmzK0ACxJJabZ/q01UA
UU2QSFda+l3f3yMb7EowawEaE8G13uTD/WYNXIvJlxaZygkEKWJTS5ydyRtc+G/Q
kEQrLSw9JStd1E+IQFDLeFpsZ/QkD/+E2LO+5+aalErdFm5BANsYicN1GL1OKLFY
Q0YzVOo8BRP7s0DvIhQSDS4k5Z0q7Qvs1mbcYkcFTborknZPsNugX2ixlQ4tJ37k
ib+sHQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:51 2024 by rpki-client on console-ams.rpki-client.org