Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/YyHIrO6BWAKBUz9RpO5kyF7BwQY.roa
File: YyHIrO6BWAKBUz9RpO5kyF7BwQY.roa (raw, json)
Hash identifier: 3vfZ95fV2OBrSa64LRQrgRqF9fSj4LVqpkSykxnt/wA=
Subject key identifier: 63:21:C8:AC:EE:81:58:02:81:53:3F:51:A4:EE:64:C8:5E:C1:C1:06
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0716E2B9
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/YyHIrO6BWAKBUz9RpO5kyF7BwQY.roa
Signing time: Wed 01 Jun 2022 05:34:13 +0000
ROA not before: Wed 01 Jun 2022 05:34:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25211
IP address blocks: 94.26.79.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
94.26.76.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
78.159.130.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
93.152.205.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
91.92.47.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.219.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.150.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
45.141.232.0/24 maxlen: 24
45.141.233.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118940345 (0x716e2b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 1 05:34:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6321c8acee81580281533f51a4ee64c85ec1c106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:2f:44:bb:20:d1:35:4b:e0:5a:1a:27:06:
fd:6f:36:3a:76:01:75:b3:24:9a:f6:fc:d9:2c:08:
90:6b:d6:08:dd:07:f2:4f:bc:b4:13:05:a9:0c:32:
5e:13:c1:cf:22:6d:df:ce:02:d3:6a:02:fb:fd:bf:
8e:76:61:8c:60:54:6f:9f:1d:32:12:40:9c:ec:d1:
f2:e7:42:bc:f5:b0:91:7d:df:3d:98:38:12:b7:47:
fd:e7:27:51:0b:fe:91:86:37:d5:09:ad:c8:75:da:
20:10:91:57:78:e8:7e:dd:f3:0b:0b:95:67:af:ea:
81:96:9e:38:22:1d:8e:b6:d3:67:29:4a:89:55:73:
b9:ea:c5:f1:55:22:2d:30:39:8f:70:c6:8f:29:0e:
32:bf:8e:22:05:9c:4b:4a:d8:ae:bd:b0:25:32:77:
e7:56:77:b1:c3:71:0e:aa:1d:8c:cb:05:d6:ee:8d:
9e:ea:1b:bd:ec:a4:9c:97:6c:2e:24:f0:68:f4:c7:
06:b1:6e:a2:e9:07:fb:f3:bd:e2:bc:43:57:d9:72:
fc:ea:7a:19:21:a6:a3:7f:11:99:68:66:c2:88:f6:
e9:f1:7b:f4:54:39:b2:c7:4a:2b:c6:39:9e:6d:52:
f8:e8:21:14:39:30:a3:16:e8:c0:4b:8e:bc:7c:66:
2b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:21:C8:AC:EE:81:58:02:81:53:3F:51:A4:EE:64:C8:5E:C1:C1:06
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/YyHIrO6BWAKBUz9RpO5kyF7BwQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0-45.141.234.255
78.159.128.0/22
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/22
78.159.157.0-78.159.158.255
91.92.33.0/24
91.92.35.0/24
91.92.40.0/21
91.92.49.0-91.92.53.255
93.152.205.0-93.152.206.255
93.152.209.0-93.152.227.255
93.152.230.0/24
94.26.28.0/23
94.26.76.0/22
94.26.90.0/24
185.96.252.0/23
185.96.255.0/24
212.102.105.0/24
Signature Algorithm: sha256WithRSAEncryption
11:45:ab:5c:7b:c1:57:ff:58:e5:23:d0:e4:c4:25:2f:c2:94:
d0:73:3b:b5:46:5f:16:a7:e2:f5:04:95:8e:8c:37:e8:cd:cc:
ff:ea:24:3e:32:c5:b3:3b:28:41:67:4e:9b:a9:97:9f:5d:a7:
3e:30:2b:f4:e4:98:08:a4:e1:83:48:58:6a:9b:a8:ff:a4:9e:
9a:93:3e:df:17:a5:28:cf:41:c4:08:74:d8:c9:c6:7f:2f:28:
38:d7:27:e6:b3:e1:51:73:11:63:c1:7c:00:9f:ae:b8:7e:1e:
26:64:d2:4c:5f:3a:5b:fc:89:62:6b:8e:55:a8:4c:d4:bd:8b:
d0:80:6e:65:19:84:b0:4f:4b:5e:68:7b:db:8e:35:4c:7d:8d:
a9:bd:4e:89:96:d7:63:ff:76:85:9f:33:be:4d:f5:f7:eb:d8:
a0:b1:c0:a1:74:77:9a:d3:f1:14:23:b3:c9:8f:6e:fc:66:94:
93:d0:98:ab:32:b6:0c:02:1b:be:ec:cf:a5:8b:81:2f:d6:c5:
9b:d6:ce:53:9d:a5:23:2f:8f:3b:9c:56:ae:5f:f8:eb:a2:1b:
0f:0c:29:3e:e4:f4:d7:3c:36:66:e8:14:fd:08:44:21:bf:5b:
6b:4b:29:4e:f6:36:63:9a:e7:fc:5e:ad:54:16:8a:09:e9:d5:
f5:97:d9:12
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIEBxbiuTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZDFjYWE2OTM1OGY4Yzk4ZjdhNzE5ZjI1OTdkNWRhZGRiZDAwMThjMB4XDTIyMDYw
MTA1MzQxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjMyMWM4YWNlZTgx
NTgwMjgxNTMzZjUxYTRlZTY0Yzg1ZWMxYzEwNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM90L0S7INE1S+BaGicG/W82OnYBdbMkmvb82SwIkGvWCN0H
8k+8tBMFqQwyXhPBzyJt384C02oC+/2/jnZhjGBUb58dMhJAnOzR8udCvPWwkX3f
PZg4ErdH/ecnUQv+kYY31QmtyHXaIBCRV3joft3zCwuVZ6/qgZaeOCIdjrbTZylK
iVVzuerF8VUiLTA5j3DGjykOMr+OIgWcS0rYrr2wJTJ351Z3scNxDqodjMsF1u6N
nuobveyknJdsLiTwaPTHBrFuoukH+/O94rxDV9ly/Op6GSGmo38RmWhmwoj26fF7
9FQ5ssdKK8Y5nm1S+OghFDkwoxbowEuOvHxmK+ECAwEAAaOCAqowggKmMB0GA1Ud
DgQWBBRjIcis7oFYAoFTP1Gk7mTIXsHBBjAfBgNVHSMEGDAWgBQtHKppNY+MmPen
GfJZfV2t29ABjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xSeXFhVFdQakpqM3B4bnlXWDFkcmR2UUFZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGYvYTkzNjk5LTE4OGItNDcwYS05NmI3LTI5YjA4NWRkMjNhZC8x
L1l5SElyTzZCV0FLQlV6OVJwTzVreUY3QndRWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYv
YTkzNjk5LTE4OGItNDcwYS05NmI3LTI5YjA4NWRkMjNhZC8xL0xSeXFhVFdQakpq
M3B4bnlXWDFkcmR2UUFZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
vwYIKwYBBQUHAQcBAf8Ega8wgawwgakEAgABMIGiMAwDBAMtjegDBAAtjeoDBAJO
n4ADBAJOn4gwDAMEAE6flQMEAE6flgMEAk6fmDAMAwQATp+dAwQATp+eAwQAW1wh
AwQAW1wjAwQDW1woMAwDBABbXDEDBAFbXDQwDAMEAF2YzQMEAF2YzjAMAwQAXZjR
AwQCXZjgAwQAXZjmAwQBXhocAwQCXhpMAwQAXhpaAwQBuWD8AwQAuWD/AwQA1GZp
MA0GCSqGSIb3DQEBCwUAA4IBAQARRatce8FX/1jlI9DkxCUvwpTQczu1Rl8Wp+L1
BJWOjDfozcz/6iQ+MsWzOyhBZ06bqZefXac+MCv05JgIpOGDSFhqm6j/pJ6akz7f
F6Uoz0HECHTYycZ/Lyg41yfms+FRcxFjwXwAn664fh4mZNJMXzpb/Ilia45VqEzU
vYvQgG5lGYSwT0teaHvbjjVMfY2pvU6Jltdj/3aFnzO+TfX369igscChdHea0/EU
I7PJj278ZpST0JirMrYMAhu+7M+li4Ev1sWb1s5TnaUjL487nFauX/jrohsPDCk+
5PTXPDZm6BT9CEQhv1trSylO9jZjmuf8Xq1UFooJ6dX1l9kS
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org