Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/7P6S5ggS8slj9dGIxsc387Ey29c.roa
File: 7P6S5ggS8slj9dGIxsc387Ey29c.roa (raw, json)
Hash identifier: j++jI40lXRVC+J1PBN1VKq5Utga57/4ZiPvXZjPknhQ=
Subject key identifier: EC:FE:92:E6:08:12:F2:C9:63:F5:D1:88:C6:C7:37:F3:B1:32:DB:D7
Certificate issuer: /CN=59919584033c3911a009bdde3183f6c60b2afcca
Certificate serial: 0103D8
Authority key identifier: 59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/7P6S5ggS8slj9dGIxsc387Ey29c.roa
Signing time: Mon 23 May 2022 06:58:16 +0000
ROA not before: Mon 23 May 2022 06:58:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41497
IP address blocks: 5.252.240.0/22 maxlen: 22
5.252.240.0/23 maxlen: 23
5.252.242.0/23 maxlen: 23
212.183.160.0/20 maxlen: 20
212.183.162.0/24 maxlen: 24
212.183.160.0/19 maxlen: 19
212.165.32.0/19 maxlen: 19
212.165.32.0/21 maxlen: 21
212.165.32.0/20 maxlen: 20
212.165.40.0/21 maxlen: 21
212.183.176.0/21 maxlen: 21
212.183.176.0/20 maxlen: 20
193.43.24.0/24 maxlen: 24
212.165.48.0/20 maxlen: 20
212.165.48.0/21 maxlen: 21
212.165.56.0/21 maxlen: 21
83.137.232.0/22 maxlen: 22
83.137.232.0/21 maxlen: 21
83.137.236.0/22 maxlen: 22
80.76.80.0/21 maxlen: 21
80.76.80.0/20 maxlen: 20
80.76.88.0/21 maxlen: 21
2001:4bb0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66520 (0x103d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59919584033c3911a009bdde3183f6c60b2afcca
Validity
Not Before: May 23 06:58:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecfe92e60812f2c963f5d188c6c737f3b132dbd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:db:7d:5a:c3:45:5f:32:11:0f:5f:5c:62:
ed:a2:a6:a0:d4:a2:7d:80:82:ee:3f:10:df:9f:59:
4c:c1:1c:be:75:49:a4:ea:bb:6b:ec:cc:2d:d6:51:
70:9e:26:63:c4:b5:2b:d6:2a:88:c5:68:d6:e4:f4:
23:43:d7:2b:d1:0f:20:97:c1:3d:3d:90:32:43:d5:
d4:8c:f8:25:37:eb:89:c5:13:98:b6:69:59:d7:46:
01:fc:e4:d8:45:4e:10:fe:e8:b2:ed:89:0f:c3:8e:
c3:9d:5f:35:40:15:05:64:41:6c:16:fc:a8:2f:51:
c2:2c:c1:04:f4:70:9e:00:3d:8f:b4:46:1e:94:34:
35:ec:72:7a:1d:f7:74:02:f6:c0:62:c0:2e:d2:68:
66:e0:ab:e1:59:3f:e9:e1:c5:26:36:3b:f0:03:d7:
61:2a:7a:ec:70:58:69:6a:c7:0f:0e:f0:ac:b5:0d:
fd:74:b8:b3:4d:ac:d8:f3:81:5a:5b:dd:6d:d9:43:
e2:94:a3:aa:52:0c:7b:f3:fc:b2:8b:2e:9e:27:b9:
a5:63:47:67:e8:e6:7c:b7:4b:a2:5d:eb:58:cd:64:
65:c6:39:8c:c3:9e:b1:9e:9c:6b:5d:50:72:69:39:
66:65:7d:02:eb:d4:af:e5:af:a6:4e:99:57:ff:9e:
9e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FE:92:E6:08:12:F2:C9:63:F5:D1:88:C6:C7:37:F3:B1:32:DB:D7
X509v3 Authority Key Identifier:
keyid:59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/7P6S5ggS8slj9dGIxsc387Ey29c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.240.0/22
80.76.80.0/20
83.137.232.0/21
193.43.24.0/24
212.165.32.0/19
212.183.160.0/19
IPv6:
2001:4bb0::/32
Signature Algorithm: sha256WithRSAEncryption
cc:43:67:14:ee:d4:9f:0e:f6:1e:d6:50:8f:eb:53:25:0f:7a:
3a:50:30:d8:c0:9f:67:2d:4b:02:2d:ae:aa:f3:e5:b9:99:59:
27:bf:8b:8c:64:4b:4e:5a:fe:06:59:a2:b1:1e:3a:12:6e:5e:
17:3b:bb:8e:18:af:4c:0c:9b:03:c0:d8:8e:d5:9c:44:69:39:
9e:ff:2c:65:12:be:04:a6:39:02:a2:9d:cf:cf:9d:61:ee:14:
37:62:0a:55:7b:5a:9b:be:46:77:2a:52:c0:c6:a7:a6:e4:ad:
6a:c1:2b:be:d8:8d:79:47:25:ab:14:03:51:b3:60:3f:6f:5e:
06:03:fe:db:7b:06:a8:8d:47:a7:9a:d1:cc:5b:39:ed:55:47:
bb:ed:13:49:e3:89:b7:9f:d5:fb:e4:d8:32:93:aa:71:64:07:
bb:d1:a7:bd:9b:42:d7:3b:e5:11:94:b8:91:13:32:96:28:6a:
29:92:f0:c2:42:44:eb:01:33:b8:4b:dd:0c:01:c2:49:2e:04:
7f:ab:d1:c3:9f:42:0c:77:35:9c:e7:e8:ca:80:56:07:e8:f9:
34:8c:ab:fd:cb:7b:c4:6e:8a:55:59:2b:e6:50:10:5e:ec:ad:
92:bf:df:f4:6b:42:d8:24:b7:d7:41:52:d7:fd:60:d5:db:03:
37:2c:d9:6c
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgIDAQPYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU5
OTE5NTg0MDMzYzM5MTFhMDA5YmRkZTMxODNmNmM2MGIyYWZjY2EwHhcNMjIwNTIz
MDY1ODE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlY2ZlOTJlNjA4MTJm
MmM5NjNmNWQxODhjNmM3MzdmM2IxMzJkYmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp+nbfVrDRV8yEQ9fXGLtoqag1KJ9gILuPxDfn1lMwRy+dUmk
6rtr7Mwt1lFwniZjxLUr1iqIxWjW5PQjQ9cr0Q8gl8E9PZAyQ9XUjPglN+uJxROY
tmlZ10YB/OTYRU4Q/uiy7YkPw47DnV81QBUFZEFsFvyoL1HCLMEE9HCeAD2PtEYe
lDQ17HJ6Hfd0AvbAYsAu0mhm4KvhWT/p4cUmNjvwA9dhKnrscFhpascPDvCstQ39
dLizTazY84FaW91t2UPilKOqUgx78/yyiy6eJ7mlY0dn6OZ8t0uiXetYzWRlxjmM
w56xnpxrXVByaTlmZX0C69Sv5a+mTplX/56e2wIDAQABo4ICNjCCAjIwHQYDVR0O
BBYEFOz+kuYIEvLJY/XRiMbHN/OxMtvXMB8GA1UdIwQYMBaAFFmRlYQDPDkRoAm9
3jGD9sYLKvzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
V1pHVmhBTThPUkdnQ2IzZU1ZUDJ4Z3NxX01vLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kZi8yZmVhMTgtZmI2Mi00Yjk1LTlmZWItOWNmODExZTlmYTdhLzEv
N1A2UzVnZ1M4c2xqOWRHSXhzYzM4N0V5MjljLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8y
ZmVhMTgtZmI2Mi00Yjk1LTlmZWItOWNmODExZTlmYTdhLzEvV1pHVmhBTThPUkdn
Q2IzZU1ZUDJ4Z3NxX01vLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwG
CCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCBfzwAwQEUExQAwQDU4noAwQAwSsY
AwQF1KUgAwQF1LegMA0EAgACMAcDBQAgAUuwMA0GCSqGSIb3DQEBCwUAA4IBAQDM
Q2cU7tSfDvYe1lCP61MlD3o6UDDYwJ9nLUsCLa6q8+W5mVknv4uMZEtOWv4GWaKx
HjoSbl4XO7uOGK9MDJsDwNiO1ZxEaTme/yxlEr4EpjkCop3Pz51h7hQ3YgpVe1qb
vkZ3KlLAxqem5K1qwSu+2I15RyWrFANRs2A/b14GA/7bewaojUenmtHMWzntVUe7
7RNJ44m3n9X75Ngyk6pxZAe70ae9m0LXO+URlLiREzKWKGopkvDCQkTrATO4S90M
AcJJLgR/q9HDn0IMdzWc5+jKgFYH6Pk0jKv9y3vEbopVWSvmUBBe7K2Sv9/0a0LY
JLfXQVLX/WDV2wM3LNls
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:32 2025 by rpki-client