Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/MHc0WKBtbOqoS_Eha0fhQ_G6hZg.roa
File: MHc0WKBtbOqoS_Eha0fhQ_G6hZg.roa (raw, json)
Hash identifier: +fnyo5LNEPanCEJ6uLO5+kGmboPI9U2Ll6tf+SNXoNI=
Subject key identifier: 30:77:34:58:A0:6D:6C:EA:A8:4B:F1:21:6B:47:E1:43:F1:BA:85:98
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 07C865B2
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/MHc0WKBtbOqoS_Eha0fhQ_G6hZg.roa
Signing time: Wed 04 May 2022 13:01:04 +0000
ROA not before: Wed 04 May 2022 13:01:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201942
IP address blocks: 91.235.41.0/24 maxlen: 24
91.235.40.0/24 maxlen: 24
185.201.152.0/22 maxlen: 22
185.204.244.0/22 maxlen: 22
45.137.160.0/22 maxlen: 22
45.147.104.0/22 maxlen: 22
185.224.220.0/22 maxlen: 22
185.245.32.0/23 maxlen: 23
45.147.116.0/22 maxlen: 24
185.107.152.0/22 maxlen: 22
185.124.108.0/22 maxlen: 22
212.80.208.0/22 maxlen: 22
185.228.160.0/23 maxlen: 23
185.228.162.0/24 maxlen: 24
185.232.8.0/22 maxlen: 22
193.26.152.0/22 maxlen: 22
109.230.250.0/24 maxlen: 24
93.92.228.0/22 maxlen: 22
31.170.100.0/22 maxlen: 22
185.163.168.0/22 maxlen: 22
185.220.240.0/22 maxlen: 22
185.227.176.0/22 maxlen: 22
185.220.248.0/22 maxlen: 22
185.106.124.0/22 maxlen: 22
185.210.232.0/22 maxlen: 22
185.150.78.0/23 maxlen: 24
193.8.112.0/22 maxlen: 22
81.21.228.0/22 maxlen: 22
109.230.194.0/24 maxlen: 24
185.210.152.0/22 maxlen: 22
95.214.144.0/22 maxlen: 22
185.224.184.0/22 maxlen: 22
185.218.16.0/22 maxlen: 22
185.197.216.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.221.16.0/22 maxlen: 22
185.221.20.0/22 maxlen: 22
185.200.228.0/22 maxlen: 22
185.163.232.0/22 maxlen: 22
185.166.36.0/22 maxlen: 22
185.247.4.0/24 maxlen: 24
185.230.48.0/22 maxlen: 22
194.38.56.0/22 maxlen: 22
185.230.52.0/22 maxlen: 22
185.230.64.0/22 maxlen: 22
85.115.192.0/22 maxlen: 22
185.239.255.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
93.189.120.0/24 maxlen: 24
193.17.180.0/22 maxlen: 22
85.31.60.0/22 maxlen: 22
45.159.76.0/22 maxlen: 24
185.223.80.0/22 maxlen: 22
194.41.118.0/24 maxlen: 24
185.105.232.0/22 maxlen: 22
194.35.40.0/24 maxlen: 24
185.217.12.0/22 maxlen: 22
185.223.220.0/22 maxlen: 22
185.176.188.0/22 maxlen: 22
185.166.172.0/22 maxlen: 22
193.35.88.0/22 maxlen: 22
185.119.48.0/22 maxlen: 22
185.179.228.0/22 maxlen: 22
185.179.232.0/22 maxlen: 22
185.129.104.0/22 maxlen: 22
185.250.180.0/22 maxlen: 22
185.128.52.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.226.8.0/22 maxlen: 22
185.212.84.0/22 maxlen: 22
212.115.44.0/22 maxlen: 22
185.105.12.0/22 maxlen: 22
185.202.204.0/22 maxlen: 22
45.81.152.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.196.40.0/22 maxlen: 22
185.239.253.0/24 maxlen: 24
185.239.252.0/24 maxlen: 24
185.175.152.0/22 maxlen: 22
185.222.188.0/22 maxlen: 22
185.226.28.0/22 maxlen: 22
185.199.44.0/22 maxlen: 22
185.209.72.0/22 maxlen: 22
185.199.52.0/22 maxlen: 22
185.91.108.0/22 maxlen: 22
88.135.64.0/22 maxlen: 22
185.162.52.0/22 maxlen: 22
185.216.28.0/22 maxlen: 22
185.189.64.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130573746 (0x7c865b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 4 13:01:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30773458a06d6ceaa84bf1216b47e143f1ba8598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:ac:a5:53:1f:69:2f:54:d3:db:0c:8b:24:
4e:83:e2:fb:ff:15:96:95:7b:d7:8a:06:cb:4e:f4:
83:b2:c8:fb:ee:1c:9c:2b:5e:e5:15:fe:86:a6:9b:
3d:23:55:04:88:ab:30:66:85:21:4e:15:dc:98:a8:
8d:cb:b9:2a:c3:96:c0:fb:d9:0f:fb:c2:b8:fa:97:
93:f8:e8:a5:13:b9:ab:76:7e:d5:ab:3a:4d:d6:36:
71:36:9d:64:a1:7d:83:19:a0:db:ac:2b:dc:9c:d1:
2d:ae:a4:81:2b:31:0c:ba:99:d9:68:fb:a0:0f:82:
09:5a:b9:1d:20:ab:47:72:b3:54:ba:7d:47:2b:b8:
58:2d:83:13:80:30:16:06:65:81:51:01:80:eb:c2:
9a:ac:98:ed:41:24:52:63:10:53:e4:b9:cb:ed:08:
0f:18:5a:b5:88:3f:59:2e:11:ff:70:05:a4:fb:76:
7d:cd:0a:c5:4b:e0:65:2c:6a:db:10:3f:e9:92:c5:
4c:cc:5a:c3:5f:5a:f7:52:0c:35:21:dc:70:64:55:
0b:ce:ac:05:86:38:7c:a1:29:c3:43:f4:01:28:d4:
81:cc:b5:5d:e7:c0:d4:b4:88:cc:7f:66:34:a1:8b:
96:9f:bd:62:2f:55:92:ab:22:42:dc:e6:03:4d:65:
b7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:77:34:58:A0:6D:6C:EA:A8:4B:F1:21:6B:47:E1:43:F1:BA:85:98
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/MHc0WKBtbOqoS_Eha0fhQ_G6hZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
45.81.152.0/22
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
81.21.228.0/22
85.31.60.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.124.108.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.162.52.0/22
185.163.168.0/22
185.163.232.0/22
185.166.36.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.52.0/22
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.244.0/22
185.209.72.0/22
185.210.152.0/22
185.210.232.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.220.248.0/22
185.221.16.0/21
185.222.188.0/22
185.223.80.0/22
185.223.220.0/22
185.224.184.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.228.160.0-185.228.162.255
185.230.48.0/21
185.230.64.0/22
185.232.8.0/22
185.239.252.0/23
185.239.255.0/24
185.245.32.0/23
185.247.4.0/24
185.250.180.0/22
193.8.112.0/22
193.17.180.0/22
193.26.152.0/22
193.35.88.0/22
194.35.40.0/24
194.38.56.0/22
194.41.118.0/24
212.80.208.0/22
212.115.44.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:ef:2e:66:38:d5:65:44:ff:56:35:db:bd:85:bd:98:95:16:
80:7f:2f:c6:ce:b5:68:e1:c1:86:25:3b:c5:9b:46:7c:49:fb:
e4:7c:77:09:57:63:d2:2b:f3:72:91:e8:9a:c8:92:94:f0:e9:
52:70:2e:62:c8:c0:87:16:b1:4e:a7:64:db:9e:9e:61:78:5e:
c2:76:e2:21:ea:09:76:f0:c3:38:bf:da:12:81:f8:04:03:77:
0f:37:f7:cc:f5:bb:4d:4f:67:bc:4a:2c:89:53:a8:4e:cd:26:
27:e1:de:62:3b:37:6e:4e:01:1e:9b:29:ef:d7:12:ab:f9:e9:
68:bb:c0:5f:8c:cc:20:17:ae:f3:d8:b9:23:f1:46:12:27:03:
bb:b7:34:87:f8:d5:3c:6c:0a:c6:6f:e9:71:b9:be:7f:21:f4:
b7:b4:0f:51:a1:d3:49:61:42:25:cd:63:f9:05:1f:b2:9c:63:
4c:d6:b0:a7:0f:54:7c:63:6e:f9:c5:b8:0d:58:31:0c:01:1f:
a2:b7:41:d0:7e:e4:19:a3:16:f0:19:79:37:c0:69:cb:cd:9f:
a4:23:61:b5:ed:cb:9a:3a:88:39:c4:8d:f7:7c:4b:97:5a:4d:
b3:13:fa:b7:66:19:21:20:d2:fd:16:3c:eb:12:36:06:f4:5f:
bc:27:d1:5b
-----BEGIN CERTIFICATE-----
MIIG7zCCBdegAwIBAgIEB8hlsjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MDY3ODRjMTA1MDg1YjlkNmFkNWY3M2EwM2IyMGQ5YTVjMTE0Y2FmMB4XDTIyMDUw
NDEzMDEwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzA3NzM0NThhMDZk
NmNlYWE4NGJmMTIxNmI0N2UxNDNmMWJhODU5ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALpkrKVTH2kvVNPbDIskToPi+/8VlpV714oGy070g7LI++4c
nCte5RX+hqabPSNVBIirMGaFIU4V3Jiojcu5KsOWwPvZD/vCuPqXk/jopRO5q3Z+
1as6TdY2cTadZKF9gxmg26wr3JzRLa6kgSsxDLqZ2Wj7oA+CCVq5HSCrR3KzVLp9
Ryu4WC2DE4AwFgZlgVEBgOvCmqyY7UEkUmMQU+S5y+0IDxhatYg/WS4R/3AFpPt2
fc0KxUvgZSxq2xA/6ZLFTMxaw19a91IMNSHccGRVC86sBYY4fKEpw0P0ASjUgcy1
XefA1LSIzH9mNKGLlp+9Yi9VkqsiQtzmA01lt/UCAwEAAaOCBAkwggQFMB0GA1Ud
DgQWBBQwdzRYoG1s6qhL8SFrR+FD8bqFmDAfBgNVHSMEGDAWgBRgZ4TBBQhbnWrV
9zoDsg2aXBFMrzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lHZUV3UVVJVzUxcTFmYzZBN0lObWx3UlRLOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvMmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFiYy8x
L01IYzBXS0J0Yk9xb1NfRWhhMGZoUV9HNmhaZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
MmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFiYy8xL1lHZUV3UVVJVzUx
cTFmYzZBN0lObWx3UlRLOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
Ah0GCCsGAQUFBwEHAQH/BIICDDCCAggwggIEBAIAATCCAfwDBAIfqmQDBAItUZgD
BAItiaADBAItk2gDBAItk3QDBAItn0wDBAJRFeQDBAJVHzwDBAJVc8ADBAJYh0AD
BAFb6ygDBAJdXOQDBABdvXgDBABdvXsDBAJf1pADBABt5sIDBABt5voDBAK5W2wD
BAK5aQwDBAK5aegDBAK5anwDBAK5a5gDBAK5djQDBAK5dzADBAK5fGwDBAK5gDQD
BAK5gWgDBAG5lk4DBAK5ojQDBAK5o6gDBAK5o+gDBAK5piQDBAK5pqwDBAK5r5gD
BAK5sLwwDAMEArmz5AMEArmz6AMEArm9QAMEArnEKAMEArnF2AMEArnHLAMEArnH
NAMEArnI5AMEArnJmAMEArnKzAMEArnM9AMEArnRSAMEArnSmAMEArnS6AMEArnU
VAMEArnYHAMEArnZDAMEArnaEAMEArnc8AMEArnc+AMEA7ndEAMEArnevAMEArnf
UAMEArnf3AMEArnguAMEArng3AMEArniCAMEArniHAMEArnjsAMEALnjzDAMAwQF
ueSgAwQAueSiAwQDueYwAwQCueZAAwQCuegIAwQBue/8AwQAue//AwQBufUgAwQA
ufcEAwQCufq0AwQCwQhwAwQCwRG0AwQCwRqYAwQCwSNYAwQAwiMoAwQCwiY4AwQA
wil2AwQC1FDQAwQC1HMsMA0GCSqGSIb3DQEBCwUAA4IBAQDC7y5mONVlRP9WNdu9
hb2YlRaAfy/GzrVo4cGGJTvFm0Z8SfvkfHcJV2PSK/NykeiayJKU8OlScC5iyMCH
FrFOp2Tbnp5heF7CduIh6gl28MM4v9oSgfgEA3cPN/fM9btNT2e8SiyJU6hOzSYn
4d5iOzduTgEemynv1xKr+elou8BfjMwgF67z2Lkj8UYSJwO7tzSH+NU8bArGb+lx
ub5/IfS3tA9RodNJYUIlzWP5BR+ynGNM1rCnD1R8Y275xbgNWDEMAR+it0HQfuQZ
oxbwGXk3wGnLzZ+kI2G17cuaOog5xI33fEuXWk2zE/q3ZhkhINL9FjzrEjYG9F+8
J9Fb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org