Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/VTivhbr7F9Af68CmW6bqQzm4H6U.roa
File: VTivhbr7F9Af68CmW6bqQzm4H6U.roa (raw, json)
Hash identifier: mKTL+grT+GXwVFWOEeKzYg8Yoh0x344VQYDDYU8Nut4=
Subject key identifier: 55:38:AF:85:BA:FB:17:D0:1F:EB:C0:A6:5B:A6:EA:43:39:B8:1F:A5
Certificate issuer: /CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Certificate serial: 3228DC17
Authority key identifier: 31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/VTivhbr7F9Af68CmW6bqQzm4H6U.roa
Signing time: Sat 01 Jan 2022 12:02:26 +0000
ROA not before: Sat 01 Jan 2022 12:02:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57763
IP address blocks: 91.224.66.0/23 maxlen: 23
185.63.0.0/22 maxlen: 22
185.63.0.0/24 maxlen: 24
185.63.1.0/24 maxlen: 24
185.63.2.0/24 maxlen: 24
185.63.3.0/24 maxlen: 24
37.75.136.0/21 maxlen: 21
37.75.136.0/22 maxlen: 22
37.75.140.0/24 maxlen: 24
37.75.141.0/24 maxlen: 24
37.75.142.0/23 maxlen: 23
2a01:5741::/32 maxlen: 32
2a01:5741::/48 maxlen: 48
2001:67c:2074::/48 maxlen: 48
2a01:5740::/32 maxlen: 32
2a01:5740::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 841538583 (0x3228dc17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Validity
Not Before: Jan 1 12:02:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5538af85bafb17d01febc0a65ba6ea4339b81fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:19:9f:cc:dc:8d:78:7e:ff:48:84:85:dd:52:
b1:1d:9a:57:a4:ff:30:05:52:ed:22:14:ba:5a:26:
58:27:85:1a:7b:8d:45:75:0c:9a:a1:82:e0:b5:1e:
8b:48:53:1a:17:93:50:97:75:e0:e6:04:9b:00:ce:
62:a6:b0:67:f7:99:95:65:21:a6:e7:bf:d3:d6:e8:
f3:23:ab:6d:a5:e0:c4:7e:fa:71:85:16:9e:76:e6:
af:dc:ce:b4:73:95:3e:41:e3:ce:1b:a9:c9:d6:1c:
86:e9:bf:ed:0d:07:21:af:d7:01:64:4a:fb:6b:22:
15:d1:e8:29:fe:68:32:69:c1:16:ce:de:e6:8e:2f:
45:13:f0:db:f5:ab:29:89:96:4b:c3:19:9a:52:3d:
40:f7:3c:42:76:f4:c8:25:27:76:a5:7d:56:0d:a1:
50:21:a4:75:d4:cd:44:c7:94:98:0e:ec:ff:2d:00:
fa:7a:e0:69:4b:6b:4c:5e:51:db:6b:ce:b3:f7:16:
6f:8f:e8:ff:8a:bb:0c:2c:d9:7d:6b:1c:f6:1d:5e:
67:9d:84:53:38:92:f9:0a:fb:26:7b:ac:32:7f:97:
53:e4:2d:c3:c5:b3:42:b0:b5:51:9e:d7:81:6a:ed:
9a:dc:f6:00:7f:7b:fb:98:e4:d9:54:7b:7d:a7:79:
fc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:38:AF:85:BA:FB:17:D0:1F:EB:C0:A6:5B:A6:EA:43:39:B8:1F:A5
X509v3 Authority Key Identifier:
keyid:31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/VTivhbr7F9Af68CmW6bqQzm4H6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.136.0/21
91.224.66.0/23
185.63.0.0/22
IPv6:
2001:67c:2074::/48
2a01:5740::/31
Signature Algorithm: sha256WithRSAEncryption
5d:d6:59:27:84:67:5e:89:1d:f3:62:48:fc:7e:42:16:48:88:
f0:90:73:0f:12:e8:03:ee:49:36:b5:f1:1e:ea:fb:f4:2d:21:
5e:2e:8b:94:ce:7a:40:03:2d:cf:0c:9f:66:4c:ba:f1:67:7d:
9f:ac:f1:cb:e7:38:b5:6d:1b:d1:8b:bc:56:7f:01:a4:7a:49:
7e:8f:3a:d3:2a:23:ff:27:c7:a6:38:99:45:83:e5:e2:8c:bb:
cc:b8:45:a0:f2:aa:ba:4c:7c:8b:83:74:c5:d9:83:7e:3e:be:
55:61:10:0e:05:43:f6:e8:ae:c7:d6:9f:73:7e:3b:d6:f3:b7:
51:4f:90:f9:a8:ad:ba:10:2b:af:2f:84:a9:5b:58:35:cc:60:
97:06:24:6a:7b:0b:e0:a6:34:d0:59:e6:19:e4:94:fe:2b:22:
aa:0e:38:1b:8e:59:32:17:28:01:6a:01:c0:e1:c5:3b:26:b7:
1a:fa:cd:f3:4a:4d:3f:58:62:d1:4f:f4:26:42:fc:c5:a7:a4:
1b:d1:3a:e0:08:75:5c:c8:cb:88:20:40:bf:89:95:4c:7e:c3:
4c:82:09:6f:47:59:4b:c8:93:21:83:44:b0:41:71:06:60:54:
61:14:f1:0a:a0:1d:8a:69:b9:5e:cd:bb:33:3f:7f:cb:cc:49:
37:1d:cd:ae
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIEMijcFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MTkyMWI2ZmYxYWM0NDliYTNlN2Y4OTJjZjA4MzJkMWNlYjdkNDY0MB4XDTIyMDEw
MTEyMDIyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTUzOGFmODViYWZi
MTdkMDFmZWJjMGE2NWJhNmVhNDMzOWI4MWZhNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKQZn8zcjXh+/0iEhd1SsR2aV6T/MAVS7SIUulomWCeFGnuN
RXUMmqGC4LUei0hTGheTUJd14OYEmwDOYqawZ/eZlWUhpue/09bo8yOrbaXgxH76
cYUWnnbmr9zOtHOVPkHjzhupydYchum/7Q0HIa/XAWRK+2siFdHoKf5oMmnBFs7e
5o4vRRPw2/WrKYmWS8MZmlI9QPc8Qnb0yCUndqV9Vg2hUCGkddTNRMeUmA7s/y0A
+nrgaUtrTF5R22vOs/cWb4/o/4q7DCzZfWsc9h1eZ52EUziS+Qr7JnusMn+XU+Qt
w8WzQrC1UZ7XgWrtmtz2AH97+5jk2VR7fad5/K8CAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBRVOK+FuvsX0B/rwKZbpupDObgfpTAfBgNVHSMEGDAWgBQxkhtv8axEm6Pn
+JLPCDLRzrfUZDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01aSWJiX0dzUkp1ajVfaVN6d2d5MGM2MzFHUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzgvY2UwNDNlLTJkZGItNDhhNy04OTgzLTlkN2E4ODcyYjQ1NC8x
L1ZUaXZoYnI3RjlBZjY4Q21XNmJxUXptNEg2VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgv
Y2UwNDNlLTJkZGItNDhhNy04OTgzLTlkN2E4ODcyYjQ1NC8xL01aSWJiX0dzUkp1
ajVfaVN6d2d5MGM2MzFHUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwGAQCAAEwEgMEAyVLiAMEAVvgQgMEArk/ADAWBAIA
AjAQAwcAIAEGfCB0AwUBKgFXQDANBgkqhkiG9w0BAQsFAAOCAQEAXdZZJ4RnXokd
82JI/H5CFkiI8JBzDxLoA+5JNrXxHur79C0hXi6LlM56QAMtzwyfZky68Wd9n6zx
y+c4tW0b0Yu8Vn8BpHpJfo860yoj/yfHpjiZRYPl4oy7zLhFoPKqukx8i4N0xdmD
fj6+VWEQDgVD9uiux9afc3471vO3UU+Q+aituhArry+EqVtYNcxglwYkansL4KY0
0FnmGeSU/isiqg44G45ZMhcoAWoBwOHFOya3GvrN80pNP1hi0U/0JkL8xaekG9E6
4Ah1XMjLiCBAv4mVTH7DTIIJb0dZS8iTIYNEsEFxBmBUYRTxCqAdimm5Xs27Mz9/
y8xJNx3Nrg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:54 2023 by rpki-client on console-fra.rpki-client.org