Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9T9C0fP5HpehM-k4dBdnV4MaqSk.roa
File: 9T9C0fP5HpehM-k4dBdnV4MaqSk.roa (raw, json)
Hash identifier: muEPUTVjAKHGvtyVsxw8h7CXTHdVVwITR86iwM58jHg=
Subject key identifier: F5:3F:42:D1:F3:F9:1E:97:A1:33:E9:38:74:17:67:57:83:1A:A9:29
Certificate issuer: /CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Certificate serial: 018354DD3A3BF4F85FD0BEC2F199A235B17D
Authority key identifier: F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9T9C0fP5HpehM-k4dBdnV4MaqSk.roa
Signing time: Mon 19 Sep 2022 08:28:47 +0000
ROA not before: Mon 19 Sep 2022 08:28:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206262
IP address blocks: 185.171.60.0/24 maxlen: 24
185.171.60.0/22 maxlen: 22
185.171.62.0/24 maxlen: 24
185.171.61.0/24 maxlen: 24
185.171.63.0/24 maxlen: 24
37.26.64.0/24 maxlen: 24
37.26.64.0/21 maxlen: 21
37.26.71.0/24 maxlen: 24
37.26.70.0/24 maxlen: 24
37.26.66.0/24 maxlen: 24
37.26.65.0/24 maxlen: 24
37.26.67.0/24 maxlen: 24
37.26.69.0/24 maxlen: 24
37.26.68.0/24 maxlen: 24
185.191.164.0/24 maxlen: 24
185.191.164.0/22 maxlen: 22
185.191.166.0/24 maxlen: 24
185.191.165.0/24 maxlen: 24
87.238.208.0/24 maxlen: 24
185.174.208.0/24 maxlen: 24
87.238.208.0/21 maxlen: 21
185.174.208.0/22 maxlen: 22
185.191.167.0/24 maxlen: 24
87.238.210.0/24 maxlen: 24
185.174.210.0/24 maxlen: 24
185.174.211.0/24 maxlen: 24
87.238.209.0/24 maxlen: 24
185.174.209.0/24 maxlen: 24
87.238.212.0/24 maxlen: 24
87.238.213.0/24 maxlen: 24
87.238.211.0/24 maxlen: 24
87.238.215.0/24 maxlen: 24
87.238.214.0/24 maxlen: 24
95.86.41.0/24 maxlen: 24
95.86.40.0/22 maxlen: 22
95.86.40.0/24 maxlen: 24
95.86.43.0/24 maxlen: 24
95.86.42.0/24 maxlen: 24
185.186.81.0/24 maxlen: 24
185.186.80.0/22 maxlen: 22
185.186.80.0/24 maxlen: 24
185.186.83.0/24 maxlen: 24
185.186.82.0/24 maxlen: 24
5.206.232.0/21 maxlen: 21
5.206.232.0/24 maxlen: 24
5.206.233.0/24 maxlen: 24
5.206.234.0/24 maxlen: 24
5.206.236.0/24 maxlen: 24
5.206.235.0/24 maxlen: 24
5.206.238.0/24 maxlen: 24
5.206.237.0/24 maxlen: 24
5.206.239.0/24 maxlen: 24
185.179.28.0/22 maxlen: 22
185.179.29.0/24 maxlen: 24
185.179.28.0/24 maxlen: 24
185.179.30.0/24 maxlen: 24
185.179.31.0/24 maxlen: 24
2a0c:b340::/32 maxlen: 32
2a0c:b342::/32 maxlen: 32
2a0c:b343::/32 maxlen: 32
2a0c:b344::/32 maxlen: 32
2a0c:b340::/29 maxlen: 29
2a0c:b341::/32 maxlen: 32
2a0c:b340::/48 maxlen: 48
2a0c:b340:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:54:dd:3a:3b:f4:f8:5f:d0:be:c2:f1:99:a2:35:b1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Validity
Not Before: Sep 19 08:28:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f53f42d1f3f91e97a133e93874176757831aa929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:5f:c1:39:f1:35:33:0b:39:79:51:76:5d:
38:0e:01:23:37:18:88:f1:29:53:19:be:92:19:dc:
2e:2f:a1:01:04:ce:97:a8:30:ea:42:90:ab:a4:b7:
01:c5:2b:17:2e:b2:7b:7c:12:45:6c:dd:00:2e:fb:
1b:80:d2:78:d5:bf:9a:07:e9:15:8b:41:7a:71:25:
42:de:d6:a0:e7:54:e4:f4:3a:f8:c7:1c:e5:54:88:
2e:2c:45:3e:55:a0:c6:1e:bf:cd:aa:35:ed:12:bc:
ad:6e:6d:28:0c:44:09:4a:5f:49:82:01:21:45:4f:
77:8e:9a:d4:7c:81:ae:7d:85:5d:b9:a8:16:80:41:
ad:78:09:9c:4e:00:1a:ad:6a:f6:43:03:bb:b4:e4:
0b:9a:3d:4f:be:89:20:5c:c6:5a:f7:40:ee:e8:24:
65:4e:5c:f0:b4:ea:23:d8:a4:60:c9:7e:b5:bf:5f:
9f:01:6f:06:9f:35:a3:a8:ae:2c:df:bc:82:10:e6:
a2:c1:ba:20:cf:5a:d0:d4:24:6f:97:36:9a:25:ad:
d2:1a:36:5e:99:ba:db:fc:1d:b1:20:9d:f6:25:a2:
21:a4:7d:83:f2:27:8e:34:64:c1:5a:63:03:c6:7e:
81:95:bb:31:fa:a6:0c:da:3f:ea:94:05:2c:db:55:
b3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3F:42:D1:F3:F9:1E:97:A1:33:E9:38:74:17:67:57:83:1A:A9:29
X509v3 Authority Key Identifier:
keyid:F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9T9C0fP5HpehM-k4dBdnV4MaqSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.206.232.0/21
37.26.64.0/21
87.238.208.0/21
95.86.40.0/22
185.171.60.0/22
185.174.208.0/22
185.179.28.0/22
185.186.80.0/22
185.191.164.0/22
IPv6:
2a0c:b340::/29
Signature Algorithm: sha256WithRSAEncryption
9b:34:e4:01:6d:4a:02:1f:0e:b8:4b:5a:65:fa:13:a8:94:26:
a4:2a:0f:51:76:0f:0c:5d:54:07:0d:5c:da:e2:f4:77:5e:ed:
41:c3:84:9d:7d:7c:4f:c0:13:af:9c:88:a5:e5:00:e1:37:70:
dd:dc:34:83:56:25:dc:93:ac:d5:8f:89:84:b0:ba:77:0e:f5:
5f:54:83:53:8f:7b:b5:54:f1:cd:72:3e:71:63:28:d4:7e:86:
e6:87:5e:af:17:7f:2e:34:34:0d:2d:a6:47:ad:df:f1:47:40:
5b:5f:3a:8e:88:b9:ac:a1:87:d5:01:7e:f8:1a:b8:20:f4:39:
12:45:34:fa:1d:41:33:0e:60:af:76:e9:91:c5:d7:6f:0c:2a:
f4:a0:68:bb:da:47:c0:eb:1f:33:79:8d:40:a3:01:9d:f4:dd:
db:47:d4:c7:85:a3:3b:49:c2:31:37:d4:c6:88:5f:90:e3:42:
f1:89:b0:d8:a7:06:c7:53:cd:57:17:2e:82:6c:ae:09:a1:53:
7c:e7:13:f2:b2:99:df:0a:30:d9:e1:c4:ea:38:e0:cc:0e:a5:
b9:7a:69:d3:d5:9e:e8:b6:d8:42:02:48:52:4c:a4:00:7a:2f:
94:41:17:f3:47:2d:fe:6b:6c:d5:2a:c0:ee:a8:c3:86:bb:93:
95:b2:40:3f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAYNU3To79Phf0L7C8ZmiNbF9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZGFmMGJhMjFlOTAyMDI1OTdlZTQ3ZTA5ZjY4NzdmZTIz
YzJhOWYwHhcNMjIwOTE5MDgyODQ3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTNmNDJkMWYzZjkxZTk3YTEzM2U5Mzg3NDE3Njc1NzgzMWFhOTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApitfwTnxNTMLOXlRdl04DgEjNxiI
8SlTGb6SGdwuL6EBBM6XqDDqQpCrpLcBxSsXLrJ7fBJFbN0ALvsbgNJ41b+aB+kV
i0F6cSVC3tag51Tk9Dr4xxzlVIguLEU+VaDGHr/NqjXtErytbm0oDEQJSl9JggEh
RU93jprUfIGufYVduagWgEGteAmcTgAarWr2QwO7tOQLmj1PvokgXMZa90Du6CRl
TlzwtOoj2KRgyX61v1+fAW8GnzWjqK4s37yCEOaiwbogz1rQ1CRvlzaaJa3SGjZe
mbrb/B2xIJ32JaIhpH2D8ieONGTBWmMDxn6Blbsx+qYM2j/qlAUs21WzUQIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFPU/QtHz+R6XoTPpOHQXZ1eDGqkpMB8GA1UdIwQY
MBaAFPXa8Loh6QICWX7kfgn2h3/iPCqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85MDY4YTUtNzk3OS00ZjhjLWJmODIt
Y2ZlMmE5NjU3YzI2LzEvOVQ5QzBmUDVIcGVoTS1rNGRCZG5WNE1hcVNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS85MDY4YTUtNzk3OS00ZjhjLWJmODItY2ZlMmE5NjU3YzI2
LzEvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDBc7oAwQD
JRpAAwQDV+7QAwQCX1YoAwQCuas8AwQCua7QAwQCubMcAwQCubpQAwQCub+kMA0E
AgACMAcDBQMqDLNAMA0GCSqGSIb3DQEBCwUAA4IBAQCbNOQBbUoCHw64S1pl+hOo
lCakKg9Rdg8MXVQHDVza4vR3Xu1Bw4SdfXxPwBOvnIil5QDhN3Dd3DSDViXck6zV
j4mEsLp3DvVfVINTj3u1VPHNcj5xYyjUfobmh16vF38uNDQNLaZHrd/xR0BbXzqO
iLmsoYfVAX74Grgg9DkSRTT6HUEzDmCvdumRxddvDCr0oGi72kfA6x8zeY1AowGd
9N3bR9THhaM7ScIxN9TGiF+Q40LxibDYpwbHU81XFy6CbK4JoVN85xPyspnfCjDZ
4cTqOODMDqW5emnT1Z7otthCAkhSTKQAei+UQRfzRy3+a2zVKsDuqMOGu5OVskA/
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:11 2023 by rpki-client on console-ams.rpki-client.org