Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/FkdjK3wAmx1j3MT7lgpC8o7Ek1c.roa
File: FkdjK3wAmx1j3MT7lgpC8o7Ek1c.roa (raw, json)
Hash identifier: R6ER0chI5+byhJA4CLWHQe4K+20ciaTcxnfyOUsO07Q=
Subject key identifier: 16:47:63:2B:7C:00:9B:1D:63:DC:C4:FB:96:0A:42:F2:8E:C4:93:57
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 018360629D1835D3BBD2C4F27AA9BA563AC8
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/FkdjK3wAmx1j3MT7lgpC8o7Ek1c.roa
Signing time: Wed 21 Sep 2022 14:10:18 +0000
ROA not before: Wed 21 Sep 2022 14:10:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202468
IP address blocks: 37.152.176.0/20 maxlen: 24
37.152.184.0/24 maxlen: 24
185.206.92.0/22 maxlen: 22
185.231.180.0/22 maxlen: 22
185.228.238.0/24 maxlen: 24
185.228.239.0/24 maxlen: 24
185.228.236.0/24 maxlen: 24
185.228.236.0/22 maxlen: 22
185.228.237.0/24 maxlen: 24
185.97.116.0/22 maxlen: 22
188.121.120.0/21 maxlen: 24
185.239.104.0/24 maxlen: 24
185.239.105.0/24 maxlen: 24
185.220.224.0/24 maxlen: 24
185.220.224.0/22 maxlen: 22
185.220.225.0/24 maxlen: 24
185.220.226.0/24 maxlen: 24
185.239.106.0/23 maxlen: 23
185.220.227.0/24 maxlen: 24
37.32.12.0/22 maxlen: 22
37.32.24.0/22 maxlen: 22
193.176.240.0/22 maxlen: 24
37.32.20.0/22 maxlen: 22
37.32.28.0/22 maxlen: 24
193.176.242.0/23 maxlen: 23
188.121.96.0/19 maxlen: 24
188.121.104.0/22 maxlen: 22
188.121.108.0/22 maxlen: 22
94.101.176.0/20 maxlen: 24
94.101.184.0/21 maxlen: 24
94.101.180.0/23 maxlen: 23
94.101.180.0/24 maxlen: 24
94.101.182.0/24 maxlen: 24
185.143.232.0/22 maxlen: 24
185.226.116.0/22 maxlen: 22
2a0c:a7c0:1::/48 maxlen: 48
2a0c:a7c0:3::/48 maxlen: 48
2a0c:a7c0::/48 maxlen: 48
2a07:3900::/29 maxlen: 29
2a0c:a7c0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:60:62:9d:18:35:d3:bb:d2:c4:f2:7a:a9:ba:56:3a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Sep 21 14:10:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1647632b7c009b1d63dcc4fb960a42f28ec49357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:c2:f0:0d:3a:8a:cc:9e:dd:b2:a3:93:7f:
1d:dc:bd:1a:af:20:f2:14:19:9d:9b:28:53:79:9d:
9c:70:d9:b2:31:ec:fc:78:83:db:94:32:73:e1:2b:
5e:da:44:7e:3c:24:b3:93:5f:82:56:df:4e:67:f4:
f5:a2:eb:56:33:cf:3f:66:c0:53:97:3a:2b:6d:d5:
4e:15:2c:59:ea:af:46:0d:70:49:f9:7a:c7:22:e1:
af:c7:42:f8:5b:26:a0:16:96:00:35:c4:38:9a:1d:
0a:86:8f:31:b3:7c:ca:cb:f0:5c:ce:a8:44:01:19:
08:6b:66:90:ed:27:5f:03:7b:1a:55:08:12:03:df:
ae:0e:f2:18:b0:fe:af:5b:95:29:15:3f:2d:0c:79:
1a:ad:9e:6a:94:d4:69:0d:a7:81:04:6e:1f:62:fb:
f4:ab:5d:36:f2:f2:db:b9:39:b7:7e:1c:25:54:ee:
38:c4:be:41:7f:99:aa:fb:ea:8f:b7:61:dd:64:b3:
36:4a:e6:41:19:85:24:20:ae:d4:c1:fe:20:9b:94:
e3:c4:fa:d5:73:0d:2a:e6:dd:bb:93:0b:df:70:89:
4e:3c:28:cc:19:f3:15:50:34:89:fc:a7:62:df:94:
49:af:f2:d3:67:68:28:54:cc:8e:70:24:de:7c:3b:
27:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:47:63:2B:7C:00:9B:1D:63:DC:C4:FB:96:0A:42:F2:8E:C4:93:57
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/FkdjK3wAmx1j3MT7lgpC8o7Ek1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.12.0/22
37.32.20.0-37.32.31.255
37.152.176.0/20
94.101.176.0/20
185.97.116.0/22
185.143.232.0/22
185.206.92.0/22
185.220.224.0/22
185.226.116.0/22
185.228.236.0/22
185.231.180.0/22
185.239.104.0/22
188.121.96.0/19
193.176.240.0/22
IPv6:
2a07:3900::/29
2a0c:a7c0::/46
Signature Algorithm: sha256WithRSAEncryption
7d:f3:3c:69:b0:e0:ce:bb:2a:08:5c:63:82:fb:c9:10:88:74:
28:bc:a5:36:f5:ce:8a:05:a2:ae:aa:76:3d:2f:ec:a1:11:cb:
c3:9e:bc:8e:32:6a:b5:5e:27:96:80:06:83:92:ad:b7:f8:33:
1d:e7:bc:88:5b:ee:09:8e:86:00:ca:a7:76:34:af:5e:11:c1:
d8:f4:39:cc:a0:4a:55:da:fe:a0:6c:fd:f7:43:b6:dd:22:2c:
89:2c:43:58:d0:de:df:aa:e0:91:74:94:57:83:8f:b5:65:91:
cc:9a:eb:9f:45:6e:85:55:3f:86:ac:f9:64:7b:4c:1b:93:11:
5a:c4:56:95:10:7b:ae:74:be:bb:f0:63:21:6e:a9:6a:e2:3c:
71:97:c2:af:91:8e:be:86:0a:1b:89:63:c1:1b:6f:fc:25:59:
d4:eb:c7:d3:92:43:94:17:03:50:62:b9:b6:f1:8e:f9:74:d8:
12:f6:ab:0e:07:f1:24:51:1c:b4:f2:3c:26:c7:85:56:1f:66:
95:1b:dd:c2:53:13:d1:89:03:97:5a:82:3a:8e:df:82:dc:4c:
03:c9:31:8c:4f:a7:ac:24:86:b0:3a:8c:ab:50:9c:26:3b:57:
2b:90:64:38:07:47:b0:a2:9e:4c:08:71:ff:2b:ea:53:2c:52:
e1:2d:eb:83
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgISAYNgYp0YNdO70sTyeqm6VjrIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YzM3MWYzYTM0YWJmMTk1N2QxODk1ZGY4MDYzZjRkNjIw
N2VjMDIwHhcNMjIwOTIxMTQxMDE4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjQ3NjMyYjdjMDA5YjFkNjNkY2M0ZmI5NjBhNDJmMjhlYzQ5MzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVLC8A06isye3bKjk38d3L0aryDy
FBmdmyhTeZ2ccNmyMez8eIPblDJz4Ste2kR+PCSzk1+CVt9OZ/T1outWM88/ZsBT
lzorbdVOFSxZ6q9GDXBJ+XrHIuGvx0L4WyagFpYANcQ4mh0Kho8xs3zKy/BczqhE
ARkIa2aQ7SdfA3saVQgSA9+uDvIYsP6vW5UpFT8tDHkarZ5qlNRpDaeBBG4fYvv0
q1028vLbuTm3fhwlVO44xL5Bf5mq++qPt2HdZLM2SuZBGYUkIK7Uwf4gm5TjxPrV
cw0q5t27kwvfcIlOPCjMGfMVUDSJ/Kdi35RJr/LTZ2goVMyOcCTefDsnPQIDAQAB
o4ICeDCCAnQwHQYDVR0OBBYEFBZHYyt8AJsdY9zE+5YKQvKOxJNXMB8GA1UdIwQY
MBaAFPXDcfOjSr8ZV9GJXfgGP01iB+wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEt
MWJiMTdhOGIyNmZlLzEvRmtkakszd0FteDFqM01UN2xncEM4bzdFazFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEtMWJiMTdhOGIyNmZl
LzEvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwYgQCAAEwXAMEAiUgDDAM
AwQCJSAUAwQFJSAAAwQEJZiwAwQEXmWwAwQCuWF0AwQCuY/oAwQCuc5cAwQCudzg
AwQCueJ0AwQCueTsAwQCuee0AwQCue9oAwQFvHlgAwQCwbDwMBYEAgACMBADBQMq
BzkAAwcCKgynwAAAMA0GCSqGSIb3DQEBCwUAA4IBAQB98zxpsODOuyoIXGOC+8kQ
iHQovKU29c6KBaKuqnY9L+yhEcvDnryOMmq1XieWgAaDkq23+DMd57yIW+4JjoYA
yqd2NK9eEcHY9DnMoEpV2v6gbP33Q7bdIiyJLENY0N7fquCRdJRXg4+1ZZHMmuuf
RW6FVT+GrPlke0wbkxFaxFaVEHuudL678GMhbqlq4jxxl8KvkY6+hgobiWPBG2/8
JVnU68fTkkOUFwNQYrm28Y75dNgS9qsOB/EkURy08jwmx4VWH2aVG93CUxPRiQOX
WoI6jt+C3EwDyTGMT6esJIawOoyrUJwmO1crkGQ4B0ewop5MCHH/K+pTLFLhLeuD
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:25 2023 by rpki-client on console-ams.rpki-client.org