Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/GLZ5rUAkSA3czOl-5iKJYmJy9-k.roa
File: GLZ5rUAkSA3czOl-5iKJYmJy9-k.roa (raw, json)
Hash identifier: gIvFj/RX4kSJa52UAlJJx9ygqfn+B2dHkfXErKArTHw=
Subject key identifier: 18:B6:79:AD:40:24:48:0D:DC:CC:E9:7E:E6:22:89:62:62:72:F7:E9
Certificate issuer: /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial: 1ABE5134
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/GLZ5rUAkSA3czOl-5iKJYmJy9-k.roa
Signing time: Thu 31 Mar 2022 05:50:29 +0000
ROA not before: Thu 31 Mar 2022 05:50:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2116
IP address blocks: 85.252.0.0/16 maxlen: 16
194.29.200.0/22 maxlen: 22
37.191.128.0/17 maxlen: 17
213.160.224.0/20 maxlen: 20
213.160.240.0/21 maxlen: 21
31.185.24.0/21 maxlen: 21
81.175.0.0/20 maxlen: 20
178.74.0.0/18 maxlen: 18
81.175.24.0/21 maxlen: 22
81.175.20.0/22 maxlen: 22
213.151.128.0/19 maxlen: 19
81.175.32.0/19 maxlen: 19
217.77.32.0/20 maxlen: 20
195.204.0.0/16 maxlen: 16
85.221.0.0/17 maxlen: 17
217.8.128.0/19 maxlen: 19
77.234.48.0/21 maxlen: 21
86.62.128.0/18 maxlen: 18
62.63.0.0/18 maxlen: 18
89.191.0.0/19 maxlen: 19
81.191.0.0/16 maxlen: 16
193.90.0.0/16 maxlen: 16
80.241.80.0/20 maxlen: 20
194.19.0.0/17 maxlen: 17
212.62.224.0/19 maxlen: 19
85.196.64.0/18 maxlen: 18
193.75.0.0/17 maxlen: 17
195.139.0.0/16 maxlen: 16
213.172.192.0/19 maxlen: 19
78.24.144.0/21 maxlen: 21
109.199.192.0/19 maxlen: 19
195.1.0.0/16 maxlen: 16
213.52.0.0/17 maxlen: 17
185.129.156.0/22 maxlen: 22
185.35.80.0/22 maxlen: 22
193.69.0.0/16 maxlen: 16
195.18.128.0/17 maxlen: 17
185.8.16.0/22 maxlen: 22
85.112.128.0/19 maxlen: 19
82.196.192.0/19 maxlen: 19
217.118.32.0/19 maxlen: 19
79.135.0.0/19 maxlen: 19
91.135.32.0/20 maxlen: 20
217.144.224.0/19 maxlen: 19
77.40.128.0/17 maxlen: 17
185.67.116.0/22 maxlen: 24
213.239.64.0/18 maxlen: 18
87.118.0.0/18 maxlen: 18
84.20.96.0/19 maxlen: 19
77.88.64.0/18 maxlen: 18
195.159.0.0/16 maxlen: 16
62.101.192.0/18 maxlen: 18
80.64.192.0/20 maxlen: 20
88.84.160.0/19 maxlen: 19
194.54.96.0/19 maxlen: 19
81.0.128.0/18 maxlen: 18
212.71.64.0/19 maxlen: 19
195.0.128.0/17 maxlen: 17
217.14.0.0/20 maxlen: 20
193.91.128.0/17 maxlen: 17
213.158.224.0/19 maxlen: 19
2a00:c440::/29 maxlen: 29
2a02:270::/32 maxlen: 32
2001:840::/29 maxlen: 29
2a03:c000::/29 maxlen: 29
2001:8c0::/29 maxlen: 29
2a01:520::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448680244 (0x1abe5134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Validity
Not Before: Mar 31 05:50:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18b679ad4024480ddccce97ee62289626272f7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:30:49:29:19:f1:9d:ea:f5:ca:e4:af:28:
0f:b5:5a:be:10:c8:48:70:df:4b:e2:33:e7:6a:25:
cb:94:2a:4f:d1:ec:b3:5b:5a:ce:79:48:09:09:f4:
29:d5:4c:d1:d7:98:e6:15:1e:a4:1a:1b:10:5d:57:
f0:ea:6e:00:55:f7:45:2d:93:77:25:5f:6a:27:5b:
7c:54:f5:69:8a:eb:a7:a4:c4:6d:92:ce:b9:2f:ce:
ee:e2:e1:20:31:59:ea:14:07:d6:af:15:f1:67:c3:
9d:b4:d3:19:1a:ff:bd:56:cb:b1:54:17:f1:dc:e7:
62:f2:21:76:de:24:4f:4c:28:8a:6c:4b:32:fa:44:
6c:97:77:5d:69:5a:c0:af:6b:d7:e3:a9:a0:a1:f4:
41:0e:87:dd:17:37:18:46:18:bc:ce:d4:3f:09:54:
a4:1f:9a:92:0f:91:4e:d2:af:c2:78:ba:62:3b:22:
9b:24:d3:aa:e1:a0:01:4c:2e:da:64:85:d4:61:28:
3e:20:8a:37:02:9b:5a:4f:77:6c:73:57:99:c6:e3:
12:81:f5:f8:b6:14:bf:04:f1:d6:ce:f5:a1:c1:22:
af:ac:7f:73:7d:02:ad:8c:49:3b:b1:45:60:6c:bc:
f1:20:9f:4a:2f:8e:91:24:42:36:b4:47:ca:b0:a6:
32:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B6:79:AD:40:24:48:0D:DC:CC:E9:7E:E6:22:89:62:62:72:F7:E9
X509v3 Authority Key Identifier:
keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/GLZ5rUAkSA3czOl-5iKJYmJy9-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.24.0/21
37.191.128.0/17
62.63.0.0/18
62.101.192.0/18
77.40.128.0/17
77.88.64.0/18
77.234.48.0/21
78.24.144.0/21
79.135.0.0/19
80.64.192.0/20
80.241.80.0/20
81.0.128.0/18
81.175.0.0/20
81.175.20.0-81.175.63.255
81.191.0.0/16
82.196.192.0/19
84.20.96.0/19
85.112.128.0/19
85.196.64.0/18
85.221.0.0/17
85.252.0.0/16
86.62.128.0/18
87.118.0.0/18
88.84.160.0/19
89.191.0.0/19
91.135.32.0/20
109.199.192.0/19
178.74.0.0/18
185.8.16.0/22
185.35.80.0/22
185.67.116.0/22
185.129.156.0/22
193.69.0.0/16
193.75.0.0/17
193.90.0.0/16
193.91.128.0/17
194.19.0.0/17
194.29.200.0/22
194.54.96.0/19
195.0.128.0-195.1.255.255
195.18.128.0/17
195.139.0.0/16
195.159.0.0/16
195.204.0.0/16
212.62.224.0/19
212.71.64.0/19
213.52.0.0/17
213.151.128.0/19
213.158.224.0/19
213.160.224.0-213.160.247.255
213.172.192.0/19
213.239.64.0/18
217.8.128.0/19
217.14.0.0/20
217.77.32.0/20
217.118.32.0/19
217.144.224.0/19
IPv6:
2001:840::/29
2001:8c0::/29
2a00:c440::/29
2a01:520::/32
2a02:270::/32
2a03:c000::/29
Signature Algorithm: sha256WithRSAEncryption
c0:fe:b0:a0:fa:46:66:4a:c7:21:25:67:50:5b:ea:4e:2a:e5:
c4:05:04:fc:8d:e3:63:48:0c:33:c9:60:77:19:cd:01:3c:af:
fc:73:b4:3a:59:79:c3:0b:4e:c3:f6:da:08:0f:73:5c:7a:0b:
9c:76:61:36:59:c0:98:cb:e8:5a:dc:b3:88:e5:f2:51:01:9a:
5e:b1:d9:ae:e0:84:ff:cb:a8:f6:e5:21:07:11:7e:06:f9:35:
92:67:01:bb:85:4a:3c:4f:66:51:6b:fe:65:0f:55:f7:b1:2e:
6d:5b:db:35:59:fa:06:40:53:62:8e:d1:a4:3c:09:fb:7a:52:
be:68:a0:14:0d:38:4a:dc:8e:c3:23:3c:af:0a:cd:38:8b:d1:
72:db:bc:0f:6a:da:85:91:9c:6e:37:b1:b1:27:8f:0e:a8:53:
b0:fb:1d:06:b1:7b:65:66:62:57:50:2a:7b:b7:17:20:96:67:
67:00:4d:63:4c:1c:39:87:75:cd:e4:e7:eb:b5:76:d9:e9:01:
60:73:65:fe:0d:a6:9d:c0:2b:a3:a3:07:6a:61:36:29:56:35:
6b:ab:08:f1:b0:a1:e6:e0:ef:d9:7b:27:3a:4b:5d:76:cb:0c:
e3:15:5e:ca:70:74:52:66:7c:0a:2a:81:be:d0:30:a8:b2:bf:
68:33:fa:f9
-----BEGIN CERTIFICATE-----
MIIGizCCBXOgAwIBAgIEGr5RNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZGM0YWNlZGNiODZjZGRmZWQ3ZjZkZThjYWRmY2EwMDQ2OWJiYzhlMB4XDTIyMDMz
MTA1NTAyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMThiNjc5YWQ0MDI0
NDgwZGRjY2NlOTdlZTYyMjg5NjI2MjcyZjdlOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALcCMEkpGfGd6vXK5K8oD7VavhDISHDfS+Iz52oly5QqT9Hs
s1taznlICQn0KdVM0deY5hUepBobEF1X8OpuAFX3RS2TdyVfaidbfFT1aYrrp6TE
bZLOuS/O7uLhIDFZ6hQH1q8V8WfDnbTTGRr/vVbLsVQX8dznYvIhdt4kT0woimxL
MvpEbJd3XWlawK9r1+OpoKH0QQ6H3Rc3GEYYvM7UPwlUpB+akg+RTtKvwni6Yjsi
myTTquGgAUwu2mSF1GEoPiCKNwKbWk93bHNXmcbjEoH1+LYUvwTx1s71ocEir6x/
c30CrYxJO7FFYGy88SCfSi+OkSRCNrRHyrCmMjcCAwEAAaOCA6UwggOhMB0GA1Ud
DgQWBBQYtnmtQCRIDdzM6X7mIoliYnL36TAfBgNVHSMEGDAWgBR9xKzty4bN3+1/
bejK38oARpu8jjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZjU3M3Y3VHemRfdGYyM295dF9LQUVhYnZJNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTkvM2QyYTE0LTZiNzktNDY4OS05NTc5LTM5NDgwMjg1YTk0OC8x
L0dMWjVyVUFrU0EzY3pPbC01aUtKWW1KeTktay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkv
M2QyYTE0LTZiNzktNDY4OS05NTc5LTM5NDgwMjg1YTk0OC8xL2ZjU3M3Y3VHemRf
dGYyM295dF9LQUVhYnZJNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AbkGCCsGAQUFBwEHAQH/BIIBqDCCAaQwggFuBAIAATCCAWYDBAMfuRgDBAclv4AD
BAY+PwADBAY+ZcADBAdNKIADBAZNWEADBANN6jADBANOGJADBAVPhwADBARQQMAD
BARQ8VADBAZRAIADBARRrwAwDAMEAlGvFAMEBlGvAAMDAFG/AwQFUsTAAwQFVBRg
AwQFVXCAAwQGVcRAAwQHVd0AAwMAVfwDBAZWPoADBAZXdgADBAVYVKADBAVZvwAD
BARbhyADBAVtx8ADBAaySgADBAK5CBADBAK5I1ADBAK5Q3QDBAK5gZwDAwDBRQME
B8FLAAMDAMFaAwQHwVuAAwQHwhMAAwQCwh3IAwQFwjZgMAsDBAfDAIADAwHDAAME
B8MSgAMDAMOLAwMAw58DAwDDzAMEBdQ+4AMEBdRHQAMEB9U0AAMEBdWXgAMEBdWe
4DAMAwQF1aDgAwQD1aDwAwQF1azAAwQG1e9AAwQF2QiAAwQE2Q4AAwQE2U0gAwQF
2XYgAwQF2ZDgMDAEAgACMCoDBQMgAQhAAwUDIAEIwAMFAyoAxEADBQAqAQUgAwUA
KgICcAMFAyoDwAAwDQYJKoZIhvcNAQELBQADggEBAMD+sKD6RmZKxyElZ1Bb6k4q
5cQFBPyN42NIDDPJYHcZzQE8r/xztDpZecMLTsP22ggPc1x6C5x2YTZZwJjL6Frc
s4jl8lEBml6x2a7ghP/LqPblIQcRfgb5NZJnAbuFSjxPZlFr/mUPVfexLm1b2zVZ
+gZAU2KO0aQ8Cft6Ur5ooBQNOErcjsMjPK8KzTiL0XLbvA9q2oWRnG43sbEnjw6o
U7D7HQaxe2VmYldQKnu3FyCWZ2cATWNMHDmHdc3k5+u1dtnpAWBzZf4Npp3AK6Oj
B2phNilWNWurCPGwoebg79l7JzpLXXbLDOMVXspwdFJmfAoqgb7QMKiyv2gz+vk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:07 2024 by rpki-client on console-fra.rpki-client.org