Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/5CoAnKTWFHwN3SLqW_OcAyh2REo.roa
File: 5CoAnKTWFHwN3SLqW_OcAyh2REo.roa (raw, json)
Hash identifier: TV9PiR5S6pgdmC7ClMZho/uH50sMUydURK1rhZ3dCcA=
Subject key identifier: E4:2A:00:9C:A4:D6:14:7C:0D:DD:22:EA:5B:F3:9C:03:28:76:44:4A
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 0184F2FAE6F876D64CD81C0E58AAA0BF78C7
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/5CoAnKTWFHwN3SLqW_OcAyh2REo.roa
Signing time: Thu 08 Dec 2022 18:24:00 +0000
ROA not before: Thu 08 Dec 2022 18:24:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 94.245.64.0/18 maxlen: 24
172.208.0.0/13 maxlen: 13
51.124.0.0/16 maxlen: 16
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.128.0/22 maxlen: 22
192.100.132.0/23 maxlen: 23
172.160.0.0/11 maxlen: 11
51.144.0.0/15 maxlen: 15
51.107.0.0/16 maxlen: 16
40.171.0.0/16 maxlen: 16
192.100.104.0/21 maxlen: 21
51.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
51.12.0.0/15 maxlen: 15
51.103.0.0/16 maxlen: 16
51.140.0.0/14 maxlen: 14
135.130.0.0/16 maxlen: 16
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
57.156.0.0/14 maxlen: 14
172.128.0.0/11 maxlen: 11
193.149.64.0/19 maxlen: 24
172.200.0.0/13 maxlen: 13
51.116.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
209.199.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
51.132.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
147.243.0.0/16 maxlen: 24
51.51.0.0/16 maxlen: 16
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
40.169.0.0/16 maxlen: 16
2a00:1c68::/29 maxlen: 29
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:4000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:f000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:fa:e6:f8:76:d6:4c:d8:1c:0e:58:aa:a0:bf:78:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Dec 8 18:24:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e42a009ca4d6147c0ddd22ea5bf39c032876444a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f0:1f:bf:b8:3a:bf:d8:d9:0c:08:24:f9:90:
83:19:e5:ec:0c:ce:13:2c:44:9e:f4:6d:3a:d6:b0:
ee:64:8e:f1:b8:1c:75:92:df:2d:e4:69:5d:fa:cb:
df:a5:b4:e0:79:bc:30:1a:52:5e:67:b6:4e:60:b0:
3e:09:9d:63:55:16:40:13:01:28:29:7d:0b:9d:7a:
d9:d3:7b:00:53:14:9c:a5:67:57:1d:20:f8:20:ac:
8e:81:5d:97:3e:b6:b5:e3:db:94:6d:d3:44:ec:39:
9a:8b:ce:ec:45:4b:ce:be:03:c4:07:ce:48:34:ed:
2d:2d:4e:8d:38:cd:89:08:04:3d:52:10:6a:4c:b3:
9e:94:f1:a4:b2:89:e9:9f:36:d9:e5:f9:56:2a:b8:
70:c7:4d:1a:fd:23:b1:13:a6:92:b8:d4:a7:81:9f:
cf:6a:8f:36:2c:9d:42:4a:5c:e6:c8:e1:4c:a0:c3:
a2:61:96:f7:54:5f:dd:84:32:5a:16:43:01:27:ba:
9b:0d:fe:3a:09:40:47:e0:27:88:83:62:45:59:72:
b7:71:4f:f8:00:22:cc:b3:d4:86:21:47:d7:b9:f9:
7d:93:e2:bf:d4:19:c1:da:d1:09:6a:08:bc:f0:e2:
e4:10:75:5c:15:6b:cf:81:55:73:fd:f5:96:69:50:
fa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2A:00:9C:A4:D6:14:7C:0D:DD:22:EA:5B:F3:9C:03:28:76:44:4A
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/5CoAnKTWFHwN3SLqW_OcAyh2REo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.169.0.0-40.171.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
94.245.64.0/18
132.164.0.0/16
135.130.0.0/16
138.105.0.0/16
147.243.0.0/16
151.206.0.0/16
157.31.0.0/16
157.95.0.0/16
159.128.0.0/16
167.162.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
209.199.0.0/16
213.199.128.0/18
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
cd:1d:cf:96:39:59:24:ec:04:55:99:a1:07:66:7f:dc:8d:c6:
32:2f:de:db:06:90:29:9f:95:d6:71:1b:bb:a7:9c:43:56:0b:
2d:ce:05:65:97:8c:03:74:eb:18:29:ce:db:a1:da:7d:e2:e2:
38:24:18:e6:b2:17:f7:a3:4d:79:81:41:1b:e5:68:0b:e5:48:
97:11:3c:c5:da:18:5d:24:44:fd:53:b7:6f:4f:ca:ee:46:a4:
74:ec:bb:13:d4:f4:37:02:b0:3c:3e:51:a3:4a:53:f0:6d:0f:
89:56:70:b7:b6:36:5d:9a:80:d8:b9:2b:52:9a:48:06:d7:1f:
d2:26:4d:c2:61:1d:9b:36:23:32:01:cd:1b:20:64:88:4a:c0:
b6:da:05:5e:57:f6:db:f8:05:54:f9:b2:da:52:58:35:5f:ac:
fa:e8:a8:df:15:92:d3:4c:1e:6f:da:55:87:d8:8b:39:d8:cb:
ee:19:c3:26:d6:8d:f5:1b:da:1a:a2:64:97:99:a7:67:f7:36:
4b:4f:cb:58:5b:16:72:a4:ac:07:54:c6:ce:2a:e7:d1:4b:96:
19:96:09:0e:25:7d:1c:6a:7b:35:6e:ff:d1:6c:7d:f1:30:04:
a2:0a:c6:4b:99:79:6c:49:46:ee:0c:38:49:9a:29:15:df:9a:
fb:e8:44:fd
-----BEGIN CERTIFICATE-----
MIIF9TCCBN2gAwIBAgISAYTy+ub4dtZM2BwOWKqgv3jHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZTY4ZGFmNWYwODk0NTZjMGUxZDAyMjQ1MzkzNTMxYWM1
YjhmY2IwHhcNMjIxMjA4MTgyNDAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDJhMDA5Y2E0ZDYxNDdjMGRkZDIyZWE1YmYzOWMwMzI4NzY0NDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvAfv7g6v9jZDAgk+ZCDGeXsDM4T
LESe9G061rDuZI7xuBx1kt8t5Gld+svfpbTgebwwGlJeZ7ZOYLA+CZ1jVRZAEwEo
KX0LnXrZ03sAUxScpWdXHSD4IKyOgV2XPra149uUbdNE7Dmai87sRUvOvgPEB85I
NO0tLU6NOM2JCAQ9UhBqTLOelPGksonpnzbZ5flWKrhwx00a/SOxE6aSuNSngZ/P
ao82LJ1CSlzmyOFMoMOiYZb3VF/dhDJaFkMBJ7qbDf46CUBH4CeIg2JFWXK3cU/4
ACLMs9SGIUfXufl9k+K/1BnB2tEJagi88OLkEHVcFWvPgVVz/fWWaVD6BwIDAQAB
o4IDATCCAv0wHQYDVR0OBBYEFOQqAJyk1hR8Dd0i6lvznAModkRKMB8GA1UdIwQY
MBaAFHzmja9fCJRWwOHQIkU5NTGsW4/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMt
MTNhMDZhMjY5YWE4LzEvNUNvQW5LVFdGSHdOM1NMcVdfT2NBeWgyUkVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMtMTNhMDZhMjY5YWE4
LzEvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBFQYIKwYBBQUHAQcBAf8EggEEMIIBADCB5wQCAAEwgeAw
CgMDACipAwMCKKgwCgMDATMKAwMBMwwDAwAzMwMDADM1MAoDAwAzZwMDATNoAwMA
M2sDAwAzdAMDADN4AwMAM3wDAwAzhDAKAwMDM4gDAwAzijAKAwMCM4wDAwEzkDAK
AwMBOZYDAwQ5oAMEBl71QAMDAISkAwMAh4IDAwCKaQMDAJPzAwMAl84DAwCdHwMD
AJ1fAwMAn4ADAwCnogMDBqyAMAoDAwOsyAMDA6zQMAwDBAPAZGgDBAHAZIQDBAXB
lUADBADB3XEDBATCKRADBADCbsUDAwDRxwMEBtXHgDAUBAIAAjAOAwUDKgAcaAMF
ACoBAREwDQYJKoZIhvcNAQELBQADggEBAM0dz5Y5WSTsBFWZoQdmf9yNxjIv3tsG
kCmfldZxG7unnENWCy3OBWWXjAN06xgpztuh2n3i4jgkGOayF/ejTXmBQRvlaAvl
SJcRPMXaGF0kRP1Tt29Pyu5GpHTsuxPU9DcCsDw+UaNKU/BtD4lWcLe2Nl2agNi5
K1KaSAbXH9ImTcJhHZs2IzIBzRsgZIhKwLbaBV5X9tv4BVT5stpSWDVfrProqN8V
ktNMHm/aVYfYiznYy+4ZwybWjfUb2hqiZJeZp2f3NktPy1hbFnKkrAdUxs4q59FL
lhmWCQ4lfRxqezVu/9FsffEwBKIKxkuZeWxJRu4MOEmaKRXfmvvoRP0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-fra.rpki-client.org