Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8aAfPHFPv21xmUlvEDiMVpqsCX8.roa
File: 8aAfPHFPv21xmUlvEDiMVpqsCX8.roa (raw, json)
Hash identifier: SvqoE34Hi3NIwKWZl3giANuGKiQLL278yPThIoE9jLc=
Subject key identifier: F1:A0:1F:3C:71:4F:BF:6D:71:99:49:6F:10:38:8C:56:9A:AC:09:7F
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01852BC1AAA2F33FC5C4C8D0B0CC2BD31CCB
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8aAfPHFPv21xmUlvEDiMVpqsCX8.roa
Signing time: Mon 19 Dec 2022 18:59:50 +0000
ROA not before: Mon 19 Dec 2022 18:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.228.0/22 maxlen: 22
85.133.232.0/22 maxlen: 22
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.236.0/22 maxlen: 22
85.133.240.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.237.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.242.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.241.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/22 maxlen: 22
85.133.249.0/24 maxlen: 24
85.133.250.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.192.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.203.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.200.0/22 maxlen: 22
85.133.206.0/24 maxlen: 24
85.133.200.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
85.133.204.0/22 maxlen: 22
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.208.0/22 maxlen: 22
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.209.0/24 maxlen: 24
85.133.216.0/22 maxlen: 22
85.133.220.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.226.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.132.0/22 maxlen: 22
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.128.0/17 maxlen: 24
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.134.0/24 maxlen: 24
85.133.136.0/22 maxlen: 22
85.133.133.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.140.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.147.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.156.0/22 maxlen: 22
85.133.154.0/24 maxlen: 24
85.133.160.0/22 maxlen: 22
85.133.162.0/24 maxlen: 24
85.133.163.0/24 maxlen: 24
85.133.164.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.168.0/22 maxlen: 24
185.41.0.0/24 maxlen: 24
185.41.1.0/24 maxlen: 24
185.41.2.0/24 maxlen: 24
185.41.3.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2b:c1:aa:a2:f3:3f:c5:c4:c8:d0:b0:cc:2b:d3:1c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Dec 19 18:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1a01f3c714fbf6d7199496f10388c569aac097f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:50:44:82:88:d1:ff:ff:41:bf:9a:f5:bf:e7:
89:75:b5:2c:b1:63:04:c9:5c:c7:a5:35:79:90:ce:
ed:6c:2c:f4:04:04:ba:cd:d7:46:e2:2e:b4:4e:84:
93:d0:9d:2f:22:e5:4d:e0:fb:25:da:ca:20:94:df:
61:8c:6c:1f:27:f6:c1:5d:e5:75:b1:ff:22:e1:2a:
dd:be:9b:4a:b2:6f:46:31:f2:e7:05:2a:03:26:ef:
72:7f:bd:e4:b8:d1:d9:4d:ad:40:b9:44:d4:60:8e:
cc:93:96:16:a3:bc:f2:f4:16:95:90:7a:64:72:c8:
2d:fa:0a:93:ff:eb:4f:1b:fc:61:23:1d:79:e7:5e:
08:b2:ce:ce:74:88:43:ad:6a:61:34:54:06:2e:8f:
7d:06:87:b0:be:ea:4b:24:af:f8:1d:a1:b9:62:12:
37:7d:32:58:84:07:99:1f:8e:0b:b9:94:1b:98:75:
56:71:6c:23:10:47:a0:30:a4:0f:0d:91:b4:65:2b:
76:5a:2e:3d:9d:e5:6c:ba:be:26:aa:a5:27:6e:99:
3d:34:8d:0e:9b:9d:f1:79:92:f3:ce:2a:b9:60:96:
56:20:64:c6:16:db:e0:64:bd:89:1f:22:67:ae:9a:
95:9a:98:52:5c:79:ac:ff:38:ea:6c:0e:58:da:b1:
38:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A0:1F:3C:71:4F:BF:6D:71:99:49:6F:10:38:8C:56:9A:AC:09:7F
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8aAfPHFPv21xmUlvEDiMVpqsCX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
185.41.0.0/22
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
86:98:1e:1f:c8:b8:50:9c:24:65:96:a4:5a:92:11:a2:1f:67:
59:74:d2:e0:70:e5:ef:49:cf:d6:59:85:ee:f1:25:dc:4b:98:
f6:20:e3:3b:9c:f9:23:5f:41:cc:09:94:d6:22:27:f6:34:6c:
90:a4:8e:fe:e6:bb:b3:73:08:09:34:76:2f:37:73:c6:3b:a0:
e2:fb:fc:c6:6d:98:4a:e4:82:13:9e:66:1e:70:70:9d:03:44:
20:8c:a8:0b:b9:a3:4f:2f:46:76:0c:d4:6e:0a:26:de:af:74:
c4:1b:e7:98:74:4a:06:9e:7f:94:1d:f1:ea:9b:f2:a0:22:8b:
0b:25:0f:b8:0b:b1:03:57:62:a8:db:9e:ec:cb:6c:e3:29:4d:
4c:25:04:a2:a7:cc:14:91:26:fa:90:49:d1:79:18:74:7b:93:
ab:81:7d:c6:49:dc:79:74:0a:9d:ec:66:2c:69:84:74:29:c0:
5d:85:08:db:3e:db:df:64:92:c1:c7:e3:54:03:c5:89:be:bc:
d9:22:06:4a:ff:47:0f:c6:84:e3:d4:0e:dd:3f:43:02:8b:63:
be:50:23:27:2b:84:ab:ab:1f:1e:2a:c6:16:00:86:f9:f1:50:
c9:37:d0:93:0c:b4:7d:88:8a:18:37:3e:52:c8:fb:01:80:a7:
95:0c:dd:49
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYUrwaqi8z/FxMjQsMwr0xzLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjIxMjE5MTg1OTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWEwMWYzYzcxNGZiZjZkNzE5OTQ5NmYxMDM4OGM1NjlhYWMwOTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFBEgojR//9Bv5r1v+eJdbUssWME
yVzHpTV5kM7tbCz0BAS6zddG4i60ToST0J0vIuVN4Psl2soglN9hjGwfJ/bBXeV1
sf8i4SrdvptKsm9GMfLnBSoDJu9yf73kuNHZTa1AuUTUYI7Mk5YWo7zy9BaVkHpk
csgt+gqT/+tPG/xhIx15514Iss7OdIhDrWphNFQGLo99BoewvupLJK/4HaG5YhI3
fTJYhAeZH44LuZQbmHVWcWwjEEegMKQPDZG0ZSt2Wi49neVsur4mqqUnbpk9NI0O
m53xeZLzziq5YJZWIGTGFtvgZL2JHyJnrpqVmphSXHms/zjqbA5Y2rE4DQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFPGgHzxxT79tcZlJbxA4jFaarAl/MB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvOGFBZlBIRlB2MjF4bVVsdkVEaU1WcHFzQ1g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQHVYWAAwQC
uSkAMA0EAgACMAcDBQMqBIfAMA0GCSqGSIb3DQEBCwUAA4IBAQCGmB4fyLhQnCRl
lqRakhGiH2dZdNLgcOXvSc/WWYXu8SXcS5j2IOM7nPkjX0HMCZTWIif2NGyQpI7+
5ruzcwgJNHYvN3PGO6Di+/zGbZhK5IITnmYecHCdA0QgjKgLuaNPL0Z2DNRuCibe
r3TEG+eYdEoGnn+UHfHqm/KgIosLJQ+4C7EDV2Ko257sy2zjKU1MJQSip8wUkSb6
kEnReRh0e5OrgX3GSdx5dAqd7GYsaYR0KcBdhQjbPtvfZJLBx+NUA8WJvrzZIgZK
/0cPxoTj1A7dP0MCi2O+UCMnK4Srqx8eKsYWAIb58VDJN9CTDLR9iIoYNz5SyPsB
gKeVDN1J
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:01 2024 by rpki-client on console-ams.rpki-client.org