Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/jEPgxO0WiD9HAwq6SrHxA12kAVw.roa
File: jEPgxO0WiD9HAwq6SrHxA12kAVw.roa (raw, json)
Hash identifier: 49l9W94sfWYEEiW3yviftUgsno0dDaYWbBiPZF0sPQc=
Subject key identifier: 8C:43:E0:C4:ED:16:88:3F:47:03:0A:BA:4A:B1:F1:03:5D:A4:01:5C
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 08FDC955
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/jEPgxO0WiD9HAwq6SrHxA12kAVw.roa
Signing time: Wed 02 Feb 2022 22:35:21 +0000
ROA not before: Wed 02 Feb 2022 22:35:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64200
IP address blocks: 31.132.53.0/24 maxlen: 24
31.132.54.0/23 maxlen: 23
5.182.198.0/24 maxlen: 24
5.182.199.0/24 maxlen: 24
5.182.195.0/24 maxlen: 24
5.182.194.0/24 maxlen: 24
5.182.193.0/24 maxlen: 24
79.98.181.0/24 maxlen: 24
78.31.204.0/24 maxlen: 24
92.249.28.0/24 maxlen: 24
185.171.125.0/24 maxlen: 24
185.171.124.0/24 maxlen: 24
94.154.168.0/23 maxlen: 23
94.154.170.0/24 maxlen: 24
185.171.127.0/24 maxlen: 24
94.154.179.0/24 maxlen: 24
94.154.176.0/24 maxlen: 24
45.67.147.0/24 maxlen: 24
185.205.206.0/24 maxlen: 24
193.148.94.0/24 maxlen: 24
45.67.142.0/24 maxlen: 24
45.67.144.0/24 maxlen: 24
45.67.143.0/24 maxlen: 24
63.246.133.0/24 maxlen: 24
63.246.139.0/24 maxlen: 24
63.246.136.0/24 maxlen: 24
63.246.137.0/24 maxlen: 24
63.246.145.0/24 maxlen: 24
63.246.142.0/24 maxlen: 24
63.246.146.0/23 maxlen: 23
63.246.148.0/24 maxlen: 24
63.246.152.0/24 maxlen: 24
63.246.149.0/24 maxlen: 24
63.246.151.0/24 maxlen: 24
63.246.157.0/24 maxlen: 24
63.246.156.0/24 maxlen: 24
63.246.158.0/23 maxlen: 23
185.201.41.0/24 maxlen: 24
185.201.43.0/24 maxlen: 24
5.182.186.0/23 maxlen: 23
192.145.68.0/24 maxlen: 24
217.197.169.0/24 maxlen: 24
63.246.132.0/24 maxlen: 24
63.246.129.0/24 maxlen: 24
63.246.128.0/24 maxlen: 24
63.246.131.0/24 maxlen: 24
63.246.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150849877 (0x8fdc955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Feb 2 22:35:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c43e0c4ed16883f47030aba4ab1f1035da4015c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f8:0e:f6:6f:b8:48:5e:b1:d9:cb:69:56:a7:
85:20:46:b7:37:08:a3:5e:d2:c8:6e:16:de:ac:cb:
ac:33:62:cf:04:c8:20:da:6d:47:99:c5:53:42:40:
c3:00:10:95:02:80:e0:d3:05:79:81:8f:b6:5a:f4:
b0:97:90:f3:c2:85:3d:e3:1a:90:b2:b8:be:81:bb:
28:fc:bc:50:90:37:86:0f:52:29:f8:af:e3:ae:75:
b7:4b:8b:9e:3d:1e:e5:12:6e:67:9e:dd:5f:29:9f:
31:82:fa:1a:be:81:79:98:23:a5:9f:fc:6f:89:f9:
dd:b1:2d:40:c3:b5:db:5a:68:75:c6:1b:99:9e:b2:
ed:40:7e:77:d0:4d:f6:02:a2:e1:c8:54:65:ae:5c:
69:88:ac:b1:16:53:09:3d:b0:0b:b5:b9:8d:f1:81:
57:34:21:23:a9:7c:6d:d0:aa:6e:10:c9:c8:14:8e:
3a:b0:04:19:96:d9:a1:9d:15:26:b7:25:ee:71:be:
7e:d4:55:36:62:17:50:63:68:d8:18:59:d5:67:b6:
8f:75:17:83:a0:8d:ff:8c:c7:f7:ac:4f:3b:fd:05:
56:c7:a1:bc:cf:68:be:0b:98:bb:32:25:59:c3:50:
bb:87:07:95:bf:63:ff:3a:48:3c:b1:8e:29:23:16:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:43:E0:C4:ED:16:88:3F:47:03:0A:BA:4A:B1:F1:03:5D:A4:01:5C
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/jEPgxO0WiD9HAwq6SrHxA12kAVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.186.0/23
5.182.193.0-5.182.195.255
5.182.198.0/23
31.132.53.0-31.132.55.255
45.67.142.0-45.67.144.255
45.67.147.0/24
63.246.128.0-63.246.133.255
63.246.136.0/23
63.246.139.0/24
63.246.142.0/24
63.246.145.0-63.246.149.255
63.246.151.0-63.246.152.255
63.246.156.0/22
78.31.204.0/24
79.98.181.0/24
92.249.28.0/24
94.154.168.0-94.154.170.255
94.154.176.0/24
94.154.179.0/24
185.171.124.0/23
185.171.127.0/24
185.201.41.0/24
185.201.43.0/24
185.205.206.0/24
192.145.68.0/24
193.148.94.0/24
217.197.169.0/24
Signature Algorithm: sha256WithRSAEncryption
97:03:0c:6f:78:9a:a7:e3:22:ee:8f:81:c3:bd:05:6e:42:74:
99:4f:6f:aa:e9:fe:8f:70:87:c9:b8:59:55:89:bf:a8:d7:b4:
4e:ec:2a:2f:9e:0c:45:77:bc:5e:b8:5c:65:e3:b2:42:82:94:
9d:3c:dd:37:53:05:28:28:a1:6a:b2:b5:70:80:0d:2b:f7:85:
1b:c8:3d:77:8e:e0:16:52:72:03:9a:e4:47:e4:c7:c6:1a:b6:
54:05:c9:1d:ff:26:6f:9e:18:e8:99:2e:ad:37:1f:b3:09:88:
51:dc:cd:2d:aa:88:97:a5:8a:06:88:fd:19:31:df:ef:24:78:
e4:cd:dd:67:f0:2c:09:66:05:9b:79:31:03:bf:04:bc:20:6d:
05:7f:05:62:07:af:3a:69:22:ba:6b:5a:38:cf:a9:6d:00:90:
92:9d:e4:69:61:a8:6b:4e:55:72:7b:9d:e1:53:42:2a:d5:c2:
53:d4:e6:a9:bb:e9:cb:ab:4d:b9:b9:5a:63:15:7e:e6:9c:6c:
01:32:dd:b5:4b:f4:bf:d4:59:6b:86:70:a7:4a:3a:a8:31:4d:
98:00:63:1a:dc:05:c1:4e:44:9c:91:a4:5a:f3:d3:29:3a:27:
8f:de:2c:3d:36:a1:6a:75:99:e7:c0:43:66:c1:41:90:aa:b6:
3b:0b:ff:ad
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIECP3JVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MmI3OGY2NjgyZmMzOWM1NWI0MWQ0OGY4MGI4ODM4ZDVkMmRiZjA3MB4XDTIyMDIw
MjIyMzUyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGM0M2UwYzRlZDE2
ODgzZjQ3MDMwYWJhNGFiMWYxMDM1ZGE0MDE1YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIf4DvZvuEhesdnLaVanhSBGtzcIo17SyG4W3qzLrDNizwTI
INptR5nFU0JAwwAQlQKA4NMFeYGPtlr0sJeQ88KFPeMakLK4voG7KPy8UJA3hg9S
Kfiv4651t0uLnj0e5RJuZ57dXymfMYL6Gr6BeZgjpZ/8b4n53bEtQMO121podcYb
mZ6y7UB+d9BN9gKi4chUZa5caYissRZTCT2wC7W5jfGBVzQhI6l8bdCqbhDJyBSO
OrAEGZbZoZ0VJrcl7nG+ftRVNmIXUGNo2BhZ1We2j3UXg6CN/4zH96xPO/0FVseh
vM9ovguYuzIlWcNQu4cHlb9j/zpIPLGOKSMWTTUCAwEAAaOCAuIwggLeMB0GA1Ud
DgQWBBSMQ+DE7RaIP0cDCrpKsfEDXaQBXDAfBgNVHSMEGDAWgBRyt49mgvw5xVtB
1I+AuIONXS2/BzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NyZVBab0w4T2NWYlFkU1BnTGlEalYwdHZ3Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2EvM2M0YjhhLWJmYzctNDFlOS05OWUxLWYzZTUwNmFlYWEwMS8x
L2pFUGd4TzBXaUQ5SEF3cTZTckh4QTEya0FWdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Ev
M2M0YjhhLWJmYzctNDFlOS05OWUxLWYzZTUwNmFlYWEwMS8xL2NyZVBab0w4T2NW
YlFkU1BnTGlEalYwdHZ3Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
9wYIKwYBBQUHAQcBAf8EgecwgeQwgeEEAgABMIHaAwQBBba6MAwDBAAFtsEDBAIF
tsADBAEFtsYwDAMEAB+ENQMEAx+EMDAMAwQBLUOOAwQALUOQAwQALUOTMAwDBAc/
9oADBAE/9oQDBAE/9ogDBAA/9osDBAA/9o4wDAMEAD/2kQMEAT/2lDAMAwQAP/aX
AwQAP/aYAwQCP/acAwQATh/MAwQAT2K1AwQAXPkcMAwDBANemqgDBABemqoDBABe
mrADBABemrMDBAG5q3wDBAC5q38DBAC5ySkDBAC5ySsDBAC5zc4DBADAkUQDBADB
lF4DBADZxakwDQYJKoZIhvcNAQELBQADggEBAJcDDG94mqfjIu6PgcO9BW5CdJlP
b6rp/o9wh8m4WVWJv6jXtE7sKi+eDEV3vF64XGXjskKClJ083TdTBSgooWqytXCA
DSv3hRvIPXeO4BZScgOa5Efkx8YatlQFyR3/Jm+eGOiZLq03H7MJiFHczS2qiJel
igaI/Rkx3+8keOTN3WfwLAlmBZt5MQO/BLwgbQV/BWIHrzppIrprWjjPqW0AkJKd
5GlhqGtOVXJ7neFTQirVwlPU5qm76curTbm5WmMVfuacbAEy3bVL9L/UWWuGcKdK
OqgxTZgAYxrcBcFORJyRpFrz0yk6J4/eLD02oWp1mefAQ2bBQZCqtjsL/60=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-ams.rpki-client.org