Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/SYmsXhJ9uUXDq8M_pINRZQ7epj4.roa
File: SYmsXhJ9uUXDq8M_pINRZQ7epj4.roa (raw, json)
Hash identifier: KQ6UIxG8CnxgUy3FzqNrxvTvX2FqrfDGzUi5ybKw2jU=
Subject key identifier: 49:89:AC:5E:12:7D:B9:45:C3:AB:C3:3F:A4:83:51:65:0E:DE:A6:3E
Certificate issuer: /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Certificate serial: 01831DDF170C25CED6FD2B92B476F34ADA1E
Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/SYmsXhJ9uUXDq8M_pINRZQ7epj4.roa
Signing time: Thu 08 Sep 2022 16:11:43 +0000
ROA not before: Thu 08 Sep 2022 16:11:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21430
IP address blocks: 82.208.52.0/22 maxlen: 22
82.208.57.0/24 maxlen: 24
82.208.59.0/24 maxlen: 24
109.123.200.0/23 maxlen: 23
82.208.0.0/22 maxlen: 22
109.123.204.0/24 maxlen: 24
109.123.212.0/23 maxlen: 23
82.208.13.0/24 maxlen: 24
82.208.15.0/24 maxlen: 24
82.208.24.0/23 maxlen: 23
109.123.226.0/24 maxlen: 24
82.208.19.0/24 maxlen: 24
82.208.30.0/23 maxlen: 23
82.208.36.0/23 maxlen: 23
82.208.38.0/24 maxlen: 24
82.208.42.0/23 maxlen: 23
82.208.51.0/24 maxlen: 24
82.208.45.0/24 maxlen: 24
185.33.136.0/22 maxlen: 22
217.11.255.0/24 maxlen: 24
83.136.200.0/21 maxlen: 21
217.11.226.0/24 maxlen: 24
217.11.231.0/24 maxlen: 24
217.11.234.0/24 maxlen: 24
217.11.237.0/24 maxlen: 24
217.11.238.0/23 maxlen: 23
217.11.240.0/23 maxlen: 23
217.11.244.0/24 maxlen: 24
217.11.250.0/24 maxlen: 24
217.11.252.0/23 maxlen: 23
31.7.240.0/21 maxlen: 21
85.239.254.0/23 maxlen: 23
77.78.80.0/21 maxlen: 21
81.0.216.0/24 maxlen: 24
81.0.215.0/24 maxlen: 24
77.78.88.0/22 maxlen: 22
81.0.222.0/23 maxlen: 23
81.0.224.0/24 maxlen: 24
77.78.92.0/23 maxlen: 23
81.0.227.0/24 maxlen: 24
81.0.229.0/24 maxlen: 24
81.0.244.0/23 maxlen: 23
81.0.252.0/23 maxlen: 23
81.0.251.0/24 maxlen: 24
77.78.122.0/24 maxlen: 24
185.161.240.0/22 maxlen: 22
85.239.224.0/23 maxlen: 23
85.239.226.0/24 maxlen: 24
85.239.228.0/23 maxlen: 23
80.250.0.0/19 maxlen: 19
81.0.196.0/23 maxlen: 23
81.0.198.0/24 maxlen: 24
77.78.64.0/22 maxlen: 22
81.0.200.0/22 maxlen: 22
77.78.68.0/23 maxlen: 23
81.0.204.0/23 maxlen: 23
77.78.74.0/23 maxlen: 23
81.0.210.0/23 maxlen: 23
85.239.251.0/24 maxlen: 24
2a01:6400::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1d:df:17:0c:25:ce:d6:fd:2b:92:b4:76:f3:4a:da:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Validity
Not Before: Sep 8 16:11:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4989ac5e127db945c3abc33fa48351650edea63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:b2:b6:bb:d2:0f:7b:17:c0:b9:3b:6b:59:
bc:3e:e3:d8:07:01:a6:53:90:1e:16:82:41:c4:12:
a6:34:26:d5:a9:aa:44:97:2f:5b:c1:77:cf:d0:3d:
f9:22:82:73:f0:c6:30:3a:42:f8:cf:97:16:82:fe:
56:03:ff:9c:93:53:e1:25:35:a9:f5:d7:60:77:01:
ef:39:6f:c2:c0:9d:bf:8f:e0:13:2f:bb:e6:1d:bc:
83:81:07:ac:3b:61:ed:bf:31:70:44:88:9a:d7:0d:
0e:8c:bb:04:26:5f:9e:2a:5e:cb:d6:32:ac:a9:47:
6a:f9:d7:e7:ce:3e:0a:5f:bd:ef:c9:e9:96:99:7a:
4d:a4:23:12:b2:5b:9b:60:8d:aa:5c:ee:c3:c7:47:
a4:63:ec:0a:eb:eb:24:c6:e5:a7:1f:e6:40:27:dc:
52:9c:14:aa:f8:da:fd:26:c8:79:9a:63:37:56:d0:
87:1f:e3:bd:fa:99:82:62:d0:0e:36:df:b7:71:64:
54:84:7f:a4:b4:04:f7:61:31:59:30:5f:86:57:df:
ca:5f:46:b7:dd:31:9a:ae:e3:5b:99:cd:00:83:33:
d6:07:30:d5:e7:97:0c:69:13:81:95:6e:0c:0b:d3:
7e:79:7f:37:45:92:da:d0:0b:b1:00:0c:03:eb:53:
3c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:89:AC:5E:12:7D:B9:45:C3:AB:C3:3F:A4:83:51:65:0E:DE:A6:3E
X509v3 Authority Key Identifier:
keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/SYmsXhJ9uUXDq8M_pINRZQ7epj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.240.0/21
77.78.64.0-77.78.69.255
77.78.74.0/23
77.78.80.0-77.78.93.255
77.78.122.0/24
80.250.0.0/19
81.0.196.0-81.0.198.255
81.0.200.0-81.0.205.255
81.0.210.0/23
81.0.215.0-81.0.216.255
81.0.222.0-81.0.224.255
81.0.227.0/24
81.0.229.0/24
81.0.244.0/23
81.0.251.0-81.0.253.255
82.208.0.0/22
82.208.13.0/24
82.208.15.0/24
82.208.19.0/24
82.208.24.0/23
82.208.30.0/23
82.208.36.0-82.208.38.255
82.208.42.0/23
82.208.45.0/24
82.208.51.0-82.208.55.255
82.208.57.0/24
82.208.59.0/24
83.136.200.0/21
85.239.224.0-85.239.226.255
85.239.228.0/23
85.239.251.0/24
85.239.254.0/23
109.123.200.0/23
109.123.204.0/24
109.123.212.0/23
109.123.226.0/24
185.33.136.0/22
185.161.240.0/22
217.11.226.0/24
217.11.231.0/24
217.11.234.0/24
217.11.237.0-217.11.241.255
217.11.244.0/24
217.11.250.0/24
217.11.252.0/23
217.11.255.0/24
IPv6:
2a01:6400::/32
Signature Algorithm: sha256WithRSAEncryption
2b:d3:50:49:4b:f6:aa:3e:1f:d6:be:c3:f9:88:77:89:5e:24:
87:e2:81:59:3c:37:44:5d:f4:6c:19:dc:f1:26:b4:7d:ec:77:
25:cc:d1:fd:70:75:de:be:dc:71:5d:fd:6d:ed:97:91:96:a4:
c6:0d:24:1c:4a:5f:d1:dd:16:73:ed:6c:23:64:0a:bf:c1:b4:
00:08:f8:21:80:32:54:a7:f4:f4:7c:72:e3:4d:0b:ed:8a:63:
57:71:91:ba:7d:70:26:dc:00:59:14:6a:38:6e:c5:7f:46:38:
aa:58:e7:3d:2b:1f:68:b3:ad:2a:c6:5c:ce:1a:eb:d7:f5:61:
fc:ee:75:f8:3f:aa:c8:2f:85:80:f3:e6:5f:87:04:94:a6:00:
86:d5:1a:17:f7:55:05:e3:e7:f2:6e:d8:82:45:71:b0:2d:a8:
eb:d7:f7:22:ef:6a:ab:39:6f:2a:2d:c7:dd:1c:00:09:4c:50:
d7:fc:22:fb:15:e1:38:7e:49:be:78:63:40:e6:39:80:bc:82:
ed:6c:95:ca:a4:9d:02:cc:40:79:35:0a:52:34:2d:4c:00:ad:
e3:73:a0:ee:99:c5:ec:40:03:6b:95:ec:8a:fa:9f:4d:84:b6:
d1:b0:4d:06:b6:17:32:36:73:4d:cc:73:e3:70:9f:4a:51:97:
64:e0:97:8b
-----BEGIN CERTIFICATE-----
MIIGfDCCBWSgAwIBAgISAYMd3xcMJc7W/SuStHbzStoeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxODEyMzg1YjgyZGRhMGZkNDgyNmFiYjdhZWZlYjBkZjNl
YjhmZmQwHhcNMjIwOTA4MTYxMTQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTg5YWM1ZTEyN2RiOTQ1YzNhYmMzM2ZhNDgzNTE2NTBlZGVhNjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9GytrvSD3sXwLk7a1m8PuPYBwGm
U5AeFoJBxBKmNCbVqapEly9bwXfP0D35IoJz8MYwOkL4z5cWgv5WA/+ck1PhJTWp
9ddgdwHvOW/CwJ2/j+ATL7vmHbyDgQesO2HtvzFwRIia1w0OjLsEJl+eKl7L1jKs
qUdq+dfnzj4KX73vyemWmXpNpCMSslubYI2qXO7Dx0ekY+wK6+skxuWnH+ZAJ9xS
nBSq+Nr9Jsh5mmM3VtCHH+O9+pmCYtAONt+3cWRUhH+ktAT3YTFZMF+GV9/KX0a3
3TGaruNbmc0AgzPWBzDV55cMaROBlW4MC9N+eX83RZLa0AuxAAwD61M8OwIDAQAB
o4IDiDCCA4QwHQYDVR0OBBYEFEmJrF4SfblFw6vDP6SDUWUO3qY+MB8GA1UdIwQY
MBaAFIGBI4W4LdoP1IJqu3rv6w3z64/9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEt
ZGEyZWM4Y2ZiODg4LzEvU1ltc1hoSjl1VVhEcThNX3BJTlJaUTdlcGo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEtZGEyZWM4Y2ZiODg4
LzEvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBnAYIKwYBBQUHAQcBAf8EggGLMIIBhzCCAXQEAgABMIIB
bAMEAx8H8DAMAwQGTU5AAwQBTU5EAwQBTU5KMAwDBARNTlADBAFNTlwDBABNTnoD
BAVQ+gAwDAMEAlEAxAMEAFEAxjAMAwQDUQDIAwQBUQDMAwQBUQDSMAwDBABRANcD
BABRANgwDAMEAVEA3gMEAFEA4AMEAFEA4wMEAFEA5QMEAVEA9DAMAwQAUQD7AwQB
UQD8AwQCUtAAAwQAUtANAwQAUtAPAwQAUtATAwQBUtAYAwQBUtAeMAwDBAJS0CQD
BABS0CYDBAFS0CoDBABS0C0wDAMEAFLQMwMEA1LQMAMEAFLQOQMEAFLQOwMEA1OI
yDAMAwQFVe/gAwQAVe/iAwQBVe/kAwQAVe/7AwQBVe/+AwQBbXvIAwQAbXvMAwQB
bXvUAwQAbXviAwQCuSGIAwQCuaHwAwQA2QviAwQA2QvnAwQA2QvqMAwDBADZC+0D
BAHZC/ADBADZC/QDBADZC/oDBAHZC/wDBADZC/8wDQQCAAIwBwMFACoBZAAwDQYJ
KoZIhvcNAQELBQADggEBACvTUElL9qo+H9a+w/mId4leJIfigVk8N0Rd9GwZ3PEm
tH3sdyXM0f1wdd6+3HFd/W3tl5GWpMYNJBxKX9HdFnPtbCNkCr/BtAAI+CGAMlSn
9PR8cuNNC+2KY1dxkbp9cCbcAFkUajhuxX9GOKpY5z0rH2izrSrGXM4a69f1Yfzu
dfg/qsgvhYDz5l+HBJSmAIbVGhf3VQXj5/Ju2IJFcbAtqOvX9yLvaqs5byotx90c
AAlMUNf8IvsV4Th+Sb54Y0DmOYC8gu1slcqknQLMQHk1ClI0LUwAreNzoO6ZxexA
A2uV7Ir6n02EttGwTQa2FzI2c03Mc+Nwn0pRl2Tgl4s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:30 2024 by rpki-client on console-ams.rpki-client.org