Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/op1M-tMh8CxicFVYWuj2_vpWaK4.roa
File: op1M-tMh8CxicFVYWuj2_vpWaK4.roa (raw, json)
Hash identifier: +7qnqoGquGJDm0jHpT4+dTQdU5VL3yfVBX8D78laNv8=
Subject key identifier: A2:9D:4C:FA:D3:21:F0:2C:62:70:55:58:5A:E8:F6:FE:FA:56:68:AE
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 3571F12F
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/op1M-tMh8CxicFVYWuj2_vpWaK4.roa
Signing time: Tue 25 Jan 2022 13:44:13 +0000
ROA not before: Tue 25 Jan 2022 13:44:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12479
IP address blocks: 213.76.218.0/24 maxlen: 24
213.76.216.0/22 maxlen: 22
213.76.224.0/21 maxlen: 21
213.76.220.0/22 maxlen: 22
213.76.232.0/21 maxlen: 21
213.76.240.0/21 maxlen: 21
213.76.248.0/21 maxlen: 21
213.76.192.0/20 maxlen: 20
213.76.192.0/18 maxlen: 18
213.76.208.0/22 maxlen: 22
80.52.108.0/22 maxlen: 22
80.52.112.0/20 maxlen: 20
80.49.64.0/20 maxlen: 20
80.52.64.0/21 maxlen: 21
80.52.64.0/18 maxlen: 18
80.52.72.0/22 maxlen: 22
80.52.76.0/22 maxlen: 22
80.52.80.0/21 maxlen: 21
80.52.88.0/21 maxlen: 21
80.52.96.0/21 maxlen: 21
80.52.104.0/22 maxlen: 22
80.49.120.0/24 maxlen: 24
80.49.120.0/22 maxlen: 22
80.49.124.0/22 maxlen: 22
80.49.64.0/18 maxlen: 18
80.49.80.0/20 maxlen: 20
80.49.96.0/20 maxlen: 20
80.49.112.0/21 maxlen: 21
79.162.188.0/22 maxlen: 22
79.162.136.0/22 maxlen: 22
79.162.140.0/22 maxlen: 22
79.162.144.0/22 maxlen: 22
79.162.152.0/24 maxlen: 24
79.162.148.0/22 maxlen: 22
79.162.155.0/24 maxlen: 24
79.162.154.0/24 maxlen: 24
79.162.153.0/24 maxlen: 24
79.162.156.0/22 maxlen: 22
79.162.160.0/22 maxlen: 22
79.162.164.0/22 maxlen: 22
79.162.168.0/22 maxlen: 22
79.162.172.0/22 maxlen: 22
79.162.176.0/22 maxlen: 22
79.162.184.0/22 maxlen: 22
79.162.180.0/22 maxlen: 22
213.77.176.0/22 maxlen: 22
213.77.180.0/22 maxlen: 22
213.77.184.0/22 maxlen: 22
213.77.192.0/20 maxlen: 20
213.77.188.0/22 maxlen: 22
213.77.208.0/20 maxlen: 20
213.77.224.0/22 maxlen: 22
213.77.128.0/22 maxlen: 22
213.77.128.0/17 maxlen: 17
213.77.132.0/22 maxlen: 22
213.77.136.0/22 maxlen: 22
213.77.140.0/22 maxlen: 22
213.77.144.0/21 maxlen: 21
213.77.152.0/21 maxlen: 21
213.77.160.0/20 maxlen: 20
79.162.128.0/18 maxlen: 24
79.162.128.0/22 maxlen: 22
79.162.132.0/22 maxlen: 22
213.77.228.0/22 maxlen: 22
213.77.232.0/22 maxlen: 22
213.77.236.0/22 maxlen: 22
213.77.236.0/23 maxlen: 23
213.77.240.0/22 maxlen: 22
213.77.244.0/22 maxlen: 22
213.77.248.0/22 maxlen: 22
213.77.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896659759 (0x3571f12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Jan 25 13:44:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a29d4cfad321f02c627055585ae8f6fefa5668ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:8b:fd:85:91:4f:f8:fc:eb:66:29:70:85:
78:53:f1:16:3d:a3:ed:21:3d:67:7e:ad:62:b4:5b:
1a:ea:6c:ad:af:a6:34:9c:24:8a:55:10:4a:03:d8:
f9:67:7a:0e:41:43:f1:b3:d9:5d:d0:4c:f2:9a:14:
6d:01:fb:47:54:6f:6b:9d:ad:f8:3e:e9:7c:38:51:
2a:85:3f:e6:70:09:93:1c:7c:e2:25:62:1a:4c:a7:
09:33:7b:85:d3:2d:1b:f9:ac:5a:51:6c:20:49:fe:
87:7a:a9:ad:39:af:34:2b:eb:7a:ff:9a:51:52:0d:
68:43:7d:3b:08:1e:a6:b8:97:8f:67:8c:72:5f:27:
67:c6:f5:3f:c9:63:5a:eb:7a:7e:42:b7:f5:4e:04:
0a:06:92:59:c8:c6:b6:c4:d8:4f:ae:c7:9f:a1:2b:
71:81:43:82:48:61:22:23:ef:6b:ac:e8:07:f7:70:
9f:04:da:e9:2a:10:39:ec:4e:7e:8d:a2:17:dc:7b:
4b:0f:5c:04:b6:f6:1d:a4:78:ec:7a:eb:92:0f:8e:
d3:ff:aa:3d:bb:bf:d5:0e:95:06:a7:dc:f1:1a:0d:
25:6f:7b:5f:f7:ac:9f:0d:f5:4b:28:8e:2d:e3:1d:
95:73:77:21:86:ac:57:44:85:cb:2e:e5:87:25:3e:
1d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9D:4C:FA:D3:21:F0:2C:62:70:55:58:5A:E8:F6:FE:FA:56:68:AE
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/op1M-tMh8CxicFVYWuj2_vpWaK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.162.128.0/18
80.49.64.0/18
80.52.64.0/18
213.76.192.0/18
213.77.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1c:8d:03:39:2b:0d:e7:3f:7e:fe:21:5f:71:2e:38:af:73:14:
99:ef:46:8d:e6:26:ed:f8:84:35:f3:5d:49:09:f8:0f:60:ee:
11:8f:18:1c:c6:b2:18:24:48:19:27:ad:bd:03:b5:d6:82:35:
31:5d:ee:15:ab:e4:df:93:9d:fe:d0:08:f2:41:9f:4d:fd:35:
02:a9:a0:e1:45:26:af:5c:89:29:46:9a:f4:d4:ae:db:d8:e3:
fb:18:a7:c4:69:62:fb:bc:eb:a8:54:2e:82:0a:bf:95:31:93:
65:22:c0:36:be:01:b5:b3:18:2a:1e:bd:e1:e3:ab:7f:ec:46:
a6:88:fb:07:f7:6f:c8:d7:1d:9a:70:b1:9a:f3:7b:ef:c1:c0:
24:ab:f9:d3:62:49:06:0a:ec:8d:30:c3:3f:ef:58:ea:f5:61:
66:c2:b0:d2:4e:01:50:e4:13:92:e4:27:14:5e:b4:34:6f:1e:
bd:13:ee:2c:48:3b:2e:95:61:a5:bf:11:4f:31:d0:80:76:47:
4c:97:94:64:8b:44:e0:39:21:df:5f:5c:02:5e:1c:5f:d1:e5:
86:d0:3c:0d:d2:3e:56:8b:4a:c2:07:b0:99:04:18:0c:f5:f0:
cb:a8:52:8c:5e:cc:75:59:a7:cd:68:d6:16:05:04:41:63:46:
a1:d5:36:74
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIENXHxLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZWNmNTMwMDdjNzljYzVlMmYyZDczNTZiYTkxMjFhNzhjMGM3NzE0MB4XDTIyMDEy
NTEzNDQxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTI5ZDRjZmFkMzIx
ZjAyYzYyNzA1NTU4NWFlOGY2ZmVmYTU2NjhhZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANcci/2FkU/4/OtmKXCFeFPxFj2j7SE9Z36tYrRbGupsra+m
NJwkilUQSgPY+Wd6DkFD8bPZXdBM8poUbQH7R1Rva52t+D7pfDhRKoU/5nAJkxx8
4iViGkynCTN7hdMtG/msWlFsIEn+h3qprTmvNCvrev+aUVINaEN9OwgepriXj2eM
cl8nZ8b1P8ljWut6fkK39U4ECgaSWcjGtsTYT67Hn6ErcYFDgkhhIiPva6zoB/dw
nwTa6SoQOexOfo2iF9x7Sw9cBLb2HaR47Hrrkg+O0/+qPbu/1Q6VBqfc8RoNJW97
X/esnw31SyiOLeMdlXN3IYasV0SFyy7lhyU+HT0CAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBSinUz60yHwLGJwVVha6Pb++lZorjAfBgNVHSMEGDAWgBROz1MAfHnMXi8t
c1a6kSGnjAx3FDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RzOVRBSHg1ekY0dkxYTld1cEVocDR3TWR4US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjIvNjQ4Yzc1LTJiZTgtNGJmZC1hMWIxLWNiOGIzYTA5NDIwOS8x
L29wMU0tdE1oOEN4aWNGVllXdWoyX3ZwV2FLNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIv
NjQ4Yzc1LTJiZTgtNGJmZC1hMWIxLWNiOGIzYTA5NDIwOS8xL1RzOVRBSHg1ekY0
dkxYTld1cEVocDR3TWR4US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEBk+igAMEBlAxQAMEBlA0QAMEBtVM
wAMEB9VNgDANBgkqhkiG9w0BAQsFAAOCAQEAHI0DOSsN5z9+/iFfcS44r3MUme9G
jeYm7fiENfNdSQn4D2DuEY8YHMayGCRIGSetvQO11oI1MV3uFavk35Od/tAI8kGf
Tf01Aqmg4UUmr1yJKUaa9NSu29jj+xinxGli+7zrqFQuggq/lTGTZSLANr4BtbMY
Kh694eOrf+xGpoj7B/dvyNcdmnCxmvN778HAJKv502JJBgrsjTDDP+9Y6vVhZsKw
0k4BUOQTkuQnFF60NG8evRPuLEg7LpVhpb8RTzHQgHZHTJeUZItE4Dkh319cAl4c
X9HlhtA8DdI+VotKwgewmQQYDPXwy6hSjF7MdVmnzWjWFgUEQWNGodU2dA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:23 2024 by rpki-client on console-fra.rpki-client.org