Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ER6CswfQ3UzZJru63_chRHKccBc.roa
File: ER6CswfQ3UzZJru63_chRHKccBc.roa (raw, json)
Hash identifier: DYsrb2W09LD3zqVQEjtLWNFbZq8AZOJhHqOO3hbF6TU=
Subject key identifier: 11:1E:82:B3:07:D0:DD:4C:D9:26:BB:BA:DF:F7:21:44:72:9C:70:17
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 08B7B00B
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ER6CswfQ3UzZJru63_chRHKccBc.roa
Signing time: Wed 05 Jan 2022 01:14:20 +0000
ROA not before: Wed 05 Jan 2022 01:14:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64200
IP address blocks: 31.132.53.0/24 maxlen: 24
31.132.54.0/23 maxlen: 23
5.182.198.0/24 maxlen: 24
5.182.199.0/24 maxlen: 24
5.182.195.0/24 maxlen: 24
5.182.194.0/24 maxlen: 24
5.182.193.0/24 maxlen: 24
79.98.181.0/24 maxlen: 24
78.31.204.0/24 maxlen: 24
92.249.28.0/24 maxlen: 24
185.171.125.0/24 maxlen: 24
185.171.124.0/24 maxlen: 24
94.154.168.0/23 maxlen: 23
94.154.170.0/24 maxlen: 24
185.171.127.0/24 maxlen: 24
94.154.179.0/24 maxlen: 24
94.154.176.0/24 maxlen: 24
45.67.147.0/24 maxlen: 24
185.205.206.0/24 maxlen: 24
45.67.142.0/24 maxlen: 24
45.67.144.0/24 maxlen: 24
45.67.143.0/24 maxlen: 24
63.246.133.0/24 maxlen: 24
63.246.139.0/24 maxlen: 24
63.246.136.0/24 maxlen: 24
63.246.137.0/24 maxlen: 24
63.246.145.0/24 maxlen: 24
63.246.142.0/24 maxlen: 24
63.246.146.0/23 maxlen: 23
63.246.148.0/24 maxlen: 24
63.246.152.0/24 maxlen: 24
63.246.149.0/24 maxlen: 24
63.246.151.0/24 maxlen: 24
63.246.157.0/24 maxlen: 24
63.246.156.0/24 maxlen: 24
63.246.158.0/23 maxlen: 23
185.201.41.0/24 maxlen: 24
185.201.43.0/24 maxlen: 24
5.182.186.0/23 maxlen: 23
192.145.68.0/24 maxlen: 24
217.197.169.0/24 maxlen: 24
63.246.132.0/24 maxlen: 24
63.246.129.0/24 maxlen: 24
63.246.128.0/24 maxlen: 24
63.246.131.0/24 maxlen: 24
63.246.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146255883 (0x8b7b00b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 5 01:14:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=111e82b307d0dd4cd926bbbadff72144729c7017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:f2:d8:bc:da:fc:46:b1:25:d0:fb:71:63:
00:99:cf:47:79:fd:06:00:5d:51:47:75:dc:3d:c4:
fb:00:c4:b8:90:f0:ad:3e:ff:ae:a4:67:23:72:9c:
6b:01:b8:a0:68:aa:68:c9:3a:d2:31:20:1b:8d:15:
46:93:f2:bc:ae:23:67:79:31:d8:8f:c8:c8:af:80:
6b:c5:36:ba:94:0e:2c:44:d1:b1:cf:69:cd:3e:5c:
f4:2d:8c:85:86:8f:93:97:ab:c5:81:ae:bf:a8:cb:
8a:a4:f4:6a:54:40:d3:f0:b8:f9:87:5c:a1:81:67:
12:32:1a:c2:1d:91:c4:ab:3c:2a:b1:90:7b:e7:1e:
60:19:37:e4:19:ac:39:92:11:52:f2:d4:76:02:ef:
bb:47:0a:a2:5d:52:31:12:f2:f1:aa:20:46:f3:65:
f4:57:48:aa:eb:93:0e:8f:03:41:0b:28:32:2c:cf:
ff:55:3b:db:2c:cb:93:75:f5:8c:a0:9b:68:bd:62:
84:7b:3a:08:98:6b:7c:a8:83:0a:6f:66:ca:8d:1b:
08:ce:18:6d:c8:5d:04:7d:90:e6:4f:4e:dd:6b:72:
6d:d8:11:7a:70:3e:3c:1a:02:91:30:db:42:c4:33:
91:cf:9c:51:11:d1:57:5e:77:50:63:40:70:5b:c1:
a5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1E:82:B3:07:D0:DD:4C:D9:26:BB:BA:DF:F7:21:44:72:9C:70:17
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ER6CswfQ3UzZJru63_chRHKccBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.186.0/23
5.182.193.0-5.182.195.255
5.182.198.0/23
31.132.53.0-31.132.55.255
45.67.142.0-45.67.144.255
45.67.147.0/24
63.246.128.0-63.246.133.255
63.246.136.0/23
63.246.139.0/24
63.246.142.0/24
63.246.145.0-63.246.149.255
63.246.151.0-63.246.152.255
63.246.156.0/22
78.31.204.0/24
79.98.181.0/24
92.249.28.0/24
94.154.168.0-94.154.170.255
94.154.176.0/24
94.154.179.0/24
185.171.124.0/23
185.171.127.0/24
185.201.41.0/24
185.201.43.0/24
185.205.206.0/24
192.145.68.0/24
217.197.169.0/24
Signature Algorithm: sha256WithRSAEncryption
94:55:da:38:c3:94:0c:a7:0e:28:70:da:0b:4c:77:4a:cf:cd:
de:2e:7a:96:b5:9f:db:33:39:4b:3d:43:11:12:f9:80:b8:a2:
fc:2b:b6:72:de:ff:62:5f:b2:dd:fb:82:fd:36:49:3c:db:cb:
2a:99:48:c6:bb:57:67:59:1b:b1:90:29:2d:1d:21:5b:8d:9e:
10:9e:2a:aa:4b:c6:2e:b9:31:4d:8c:00:08:a1:de:38:c6:80:
42:34:c4:1b:19:c3:00:fb:38:b6:d1:1e:c7:b8:bc:44:5d:fb:
45:96:19:f0:2e:93:9f:8d:47:b9:67:57:c6:d7:2a:fe:20:30:
d1:ed:07:a9:c6:74:da:d1:09:ea:fb:56:6b:0c:ad:c4:61:5d:
d0:95:80:c0:7b:26:0c:53:47:31:02:d9:cb:5b:b8:2d:19:e4:
b3:f6:af:82:ee:d0:e8:ad:50:8b:e3:89:07:ad:d7:1f:bb:24:
b8:34:ac:2f:66:87:a8:75:c1:56:c2:c0:4f:56:e8:a5:78:f7:
03:b1:84:93:20:65:46:0e:6a:a3:40:93:f7:42:6e:c4:23:3a:
ab:ab:f7:ba:5c:e8:b0:4f:e3:02:74:0c:92:56:1f:c7:31:aa:
2f:08:25:5c:0c:ee:4f:78:73:00:8b:dd:37:a6:47:f4:b1:fc:
fe:6d:c1:03
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIECLewCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MmI3OGY2NjgyZmMzOWM1NWI0MWQ0OGY4MGI4ODM4ZDVkMmRiZjA3MB4XDTIyMDEw
NTAxMTQyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTExZTgyYjMwN2Qw
ZGQ0Y2Q5MjZiYmJhZGZmNzIxNDQ3MjljNzAxNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALK18ti82vxGsSXQ+3FjAJnPR3n9BgBdUUd13D3E+wDEuJDw
rT7/rqRnI3KcawG4oGiqaMk60jEgG40VRpPyvK4jZ3kx2I/IyK+Aa8U2upQOLETR
sc9pzT5c9C2MhYaPk5erxYGuv6jLiqT0alRA0/C4+YdcoYFnEjIawh2RxKs8KrGQ
e+ceYBk35BmsOZIRUvLUdgLvu0cKol1SMRLy8aogRvNl9FdIquuTDo8DQQsoMizP
/1U72yzLk3X1jKCbaL1ihHs6CJhrfKiDCm9myo0bCM4YbchdBH2Q5k9O3WtybdgR
enA+PBoCkTDbQsQzkc+cURHRV153UGNAcFvBpfECAwEAAaOCAtwwggLYMB0GA1Ud
DgQWBBQRHoKzB9DdTNkmu7rf9yFEcpxwFzAfBgNVHSMEGDAWgBRyt49mgvw5xVtB
1I+AuIONXS2/BzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NyZVBab0w4T2NWYlFkU1BnTGlEalYwdHZ3Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2EvM2M0YjhhLWJmYzctNDFlOS05OWUxLWYzZTUwNmFlYWEwMS8x
L0VSNkNzd2ZRM1V6WkpydTYzX2NoUkhLY2NCYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Ev
M2M0YjhhLWJmYzctNDFlOS05OWUxLWYzZTUwNmFlYWEwMS8xL2NyZVBab0w4T2NW
YlFkU1BnTGlEalYwdHZ3Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
8QYIKwYBBQUHAQcBAf8EgeEwgd4wgdsEAgABMIHUAwQBBba6MAwDBAAFtsEDBAIF
tsADBAEFtsYwDAMEAB+ENQMEAx+EMDAMAwQBLUOOAwQALUOQAwQALUOTMAwDBAc/
9oADBAE/9oQDBAE/9ogDBAA/9osDBAA/9o4wDAMEAD/2kQMEAT/2lDAMAwQAP/aX
AwQAP/aYAwQCP/acAwQATh/MAwQAT2K1AwQAXPkcMAwDBANemqgDBABemqoDBABe
mrADBABemrMDBAG5q3wDBAC5q38DBAC5ySkDBAC5ySsDBAC5zc4DBADAkUQDBADZ
xakwDQYJKoZIhvcNAQELBQADggEBAJRV2jjDlAynDihw2gtMd0rPzd4uepa1n9sz
OUs9QxES+YC4ovwrtnLe/2Jfst37gv02STzbyyqZSMa7V2dZG7GQKS0dIVuNnhCe
KqpLxi65MU2MAAih3jjGgEI0xBsZwwD7OLbRHse4vERd+0WWGfAuk5+NR7lnV8bX
Kv4gMNHtB6nGdNrRCer7VmsMrcRhXdCVgMB7JgxTRzEC2ctbuC0Z5LP2r4Lu0Oit
UIvjiQet1x+7JLg0rC9mh6h1wVbCwE9W6KV49wOxhJMgZUYOaqNAk/dCbsQjOqur
97pc6LBP4wJ0DJJWH8cxqi8IJVwM7k94cwCL3TemR/Sx/P5twQM=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:58 2023 by rpki-client on console-fra.rpki-client.org