Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/_cSULC0zBmo25PtbZfZubtVCM8Q.roa
File: _cSULC0zBmo25PtbZfZubtVCM8Q.roa (raw, json)
Hash identifier: 244TSzbvfP9NpgzPvI5SzdFBdcDdPFwwhfpLycud+G4=
Subject key identifier: FD:C4:94:2C:2D:33:06:6A:36:E4:FB:5B:65:F6:6E:6E:D5:42:33:C4
Certificate issuer: /CN=5bea2b884c7067f58fff040a1f06e0df1e80ab3e
Certificate serial: 0183C0C41E8B26E335F22EB18A0D76E17A96
Authority key identifier: 5B:EA:2B:88:4C:70:67:F5:8F:FF:04:0A:1F:06:E0:DF:1E:80:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oriExwZ_WP_wQKHwbg3x6Aqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/_cSULC0zBmo25PtbZfZubtVCM8Q.roa
Signing time: Mon 10 Oct 2022 07:20:21 +0000
ROA not before: Mon 10 Oct 2022 07:20:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9050
IP address blocks: 92.87.0.0/16 maxlen: 16
92.87.11.0/24 maxlen: 24
92.80.0.0/16 maxlen: 16
109.97.0.0/16 maxlen: 16
92.84.0.0/16 maxlen: 16
92.87.118.0/24 maxlen: 24
92.87.128.0/23 maxlen: 23
92.87.133.0/24 maxlen: 24
109.101.0.0/16 maxlen: 16
92.87.54.0/24 maxlen: 24
89.121.0.0/18 maxlen: 18
89.121.0.0/16 maxlen: 16
92.86.38.0/24 maxlen: 24
92.86.36.0/24 maxlen: 24
92.86.48.0/24 maxlen: 24
109.103.0.0/16 maxlen: 16
92.86.50.0/24 maxlen: 24
109.99.184.0/24 maxlen: 24
109.99.185.0/24 maxlen: 24
109.99.189.0/24 maxlen: 24
109.99.192.0/24 maxlen: 24
109.96.0.0/16 maxlen: 16
89.123.0.0/17 maxlen: 17
89.123.0.0/16 maxlen: 16
92.86.0.0/16 maxlen: 16
86.35.128.0/17 maxlen: 17
185.133.64.0/22 maxlen: 22
109.100.0.0/16 maxlen: 16
92.86.90.0/24 maxlen: 24
89.120.0.0/16 maxlen: 16
109.99.214.0/24 maxlen: 24
92.83.0.0/19 maxlen: 19
109.99.216.0/24 maxlen: 24
92.83.0.0/16 maxlen: 16
89.123.128.0/17 maxlen: 17
109.98.192.0/24 maxlen: 24
109.98.192.0/23 maxlen: 23
109.98.193.0/24 maxlen: 24
92.82.0.0/18 maxlen: 18
92.82.0.0/16 maxlen: 16
109.102.0.0/16 maxlen: 16
86.35.64.0/18 maxlen: 18
109.102.163.0/24 maxlen: 24
109.102.161.0/24 maxlen: 24
217.115.208.0/20 maxlen: 20
86.35.0.0/21 maxlen: 21
86.35.10.0/24 maxlen: 24
86.35.9.0/24 maxlen: 24
109.99.0.0/16 maxlen: 16
86.35.0.0/16 maxlen: 16
86.35.15.0/24 maxlen: 24
86.35.16.0/20 maxlen: 20
86.35.13.0/24 maxlen: 24
86.35.14.0/24 maxlen: 24
86.35.12.0/24 maxlen: 24
86.35.32.0/19 maxlen: 19
89.121.128.0/17 maxlen: 17
92.87.214.0/23 maxlen: 23
92.87.232.0/24 maxlen: 24
109.98.0.0/16 maxlen: 16
86.34.0.0/16 maxlen: 16
92.87.244.0/24 maxlen: 24
86.34.0.0/15 maxlen: 15
92.87.245.0/24 maxlen: 24
89.121.64.0/18 maxlen: 18
92.87.170.0/24 maxlen: 24
92.87.175.0/24 maxlen: 24
92.87.173.0/24 maxlen: 24
92.87.174.0/24 maxlen: 24
92.81.0.0/16 maxlen: 16
92.81.128.0/17 maxlen: 17
84.243.64.0/18 maxlen: 18
109.98.113.0/24 maxlen: 24
89.122.0.0/16 maxlen: 16
109.98.117.0/24 maxlen: 24
109.98.115.0/24 maxlen: 24
109.98.119.0/24 maxlen: 24
109.98.123.0/24 maxlen: 24
109.98.121.0/24 maxlen: 24
109.98.126.0/24 maxlen: 24
92.85.0.0/16 maxlen: 16
2a02:d10:800:1::/64 maxlen: 64
2a02:d10::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c0:c4:1e:8b:26:e3:35:f2:2e:b1:8a:0d:76:e1:7a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea2b884c7067f58fff040a1f06e0df1e80ab3e
Validity
Not Before: Oct 10 07:20:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdc4942c2d33066a36e4fb5b65f66e6ed54233c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:87:6c:e8:eb:1e:c3:b5:82:7c:f9:ff:42:
c6:3a:1f:42:dd:25:e1:5c:91:8c:3a:cf:a5:09:af:
98:79:81:3b:45:0f:af:b8:c1:a7:d6:61:b1:6d:ec:
4e:56:00:2f:80:ce:d9:d5:79:79:24:ac:f6:d1:71:
e5:a4:67:1e:c2:9f:a7:76:dd:2a:2a:ef:04:e2:3c:
24:cb:35:1e:94:b5:d2:f1:90:bc:65:d4:99:0d:cb:
c6:54:d4:34:b5:e1:2d:0a:6e:bf:3d:f4:cc:3d:b3:
b1:86:85:18:c6:95:c8:eb:a1:48:88:7a:df:ff:07:
f0:ed:84:35:45:22:3c:9e:1b:4b:2e:7a:de:64:b1:
7c:15:58:87:f1:c8:10:37:03:b4:a1:1b:63:16:db:
fe:2d:ce:1c:4e:0e:fe:ab:e4:5c:a8:26:48:90:71:
a1:de:53:8e:2f:84:11:09:cc:ca:ce:3c:fc:5f:c4:
d6:1f:3c:d6:54:54:5a:60:df:ce:07:07:ff:b8:96:
a7:a5:cc:5c:dc:74:c3:1d:c5:b7:f4:07:45:6c:77:
5a:e1:be:13:1a:a7:7a:a2:3d:a0:b2:0d:0c:3e:b8:
06:79:6d:42:2d:54:1c:b7:23:0d:53:4f:10:21:a3:
07:a3:a9:ab:b7:26:b3:8d:1d:7f:15:a9:66:be:82:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C4:94:2C:2D:33:06:6A:36:E4:FB:5B:65:F6:6E:6E:D5:42:33:C4
X509v3 Authority Key Identifier:
keyid:5B:EA:2B:88:4C:70:67:F5:8F:FF:04:0A:1F:06:E0:DF:1E:80:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oriExwZ_WP_wQKHwbg3x6Aqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/_cSULC0zBmo25PtbZfZubtVCM8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/W-oriExwZ_WP_wQKHwbg3x6Aqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.243.64.0/18
86.34.0.0/15
89.120.0.0/14
92.80.0.0/13
109.96.0.0/13
185.133.64.0/22
217.115.208.0/20
IPv6:
2a02:d10::/32
Signature Algorithm: sha256WithRSAEncryption
00:b7:a5:cf:ea:77:52:7e:bb:89:5a:a1:ed:6e:cb:fb:8a:cb:
5c:86:72:51:23:ce:4c:e4:42:26:91:76:a8:17:11:49:f2:bf:
76:95:12:dc:f6:e5:96:c8:0c:e8:04:35:d3:6f:f6:0a:8b:94:
78:1a:38:ca:d9:1f:d2:ca:04:1d:c2:03:a7:07:b1:1c:73:c8:
14:b1:74:1e:c3:13:5d:04:3b:16:3b:f0:e5:54:8c:e6:84:d7:
62:68:cf:79:19:da:57:5d:2e:11:91:76:cb:90:f9:c2:d7:21:
4f:c2:9c:e3:3e:17:a0:dc:20:2a:f5:1d:e2:00:7f:21:0c:ba:
06:a0:0d:e0:db:74:28:0d:a7:8d:8f:4c:ec:c7:58:7e:6e:03:
1f:15:c6:34:18:0a:36:ff:4d:39:7c:98:33:53:7c:dd:85:65:
ab:cc:b2:d5:a1:58:66:c6:61:54:86:d9:e4:a9:4a:97:ff:53:
2d:3d:b2:34:05:b7:ac:41:b1:73:eb:fb:e7:99:7d:b8:ac:7f:
a7:6f:9d:c8:cf:21:8b:f8:48:a8:f8:e1:e9:9e:50:24:47:9d:
ac:3d:3f:49:eb:83:5e:e4:97:a0:e0:d4:63:c5:1f:57:74:46:
cc:9e:41:ba:38:c8:2f:79:7f:1b:85:62:7c:4c:e2:9c:63:c9:
14:0e:57:4b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAYPAxB6LJuM18i6xig124XqWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZWEyYjg4NGM3MDY3ZjU4ZmZmMDQwYTFmMDZlMGRmMWU4
MGFiM2UwHhcNMjIxMDEwMDcyMDIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGM0OTQyYzJkMzMwNjZhMzZlNGZiNWI2NWY2NmU2ZWQ1NDIzM2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy+HbOjrHsO1gnz5/0LGOh9C3SXh
XJGMOs+lCa+YeYE7RQ+vuMGn1mGxbexOVgAvgM7Z1Xl5JKz20XHlpGcewp+ndt0q
Ku8E4jwkyzUelLXS8ZC8ZdSZDcvGVNQ0teEtCm6/PfTMPbOxhoUYxpXI66FIiHrf
/wfw7YQ1RSI8nhtLLnreZLF8FViH8cgQNwO0oRtjFtv+Lc4cTg7+q+RcqCZIkHGh
3lOOL4QRCczKzjz8X8TWHzzWVFRaYN/OBwf/uJanpcxc3HTDHcW39AdFbHda4b4T
Gqd6oj2gsg0MPrgGeW1CLVQctyMNU08QIaMHo6mrtyazjR1/FalmvoIOvQIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFP3ElCwtMwZqNuT7W2X2bm7VQjPEMB8GA1UdIwQY
MBaAFFvqK4hMcGf1j/8ECh8G4N8egKs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVy1vcmlFeHdaX1dQX3dRS0h3YmczeDZBcXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMzM0ZjgtZGFjZS00OTdmLWE1YTMt
ODE0ZTgwOTA0YmU0LzEvX2NTVUxDMHpCbW8yNVB0YlpmWnVidFZDTThRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMzM0ZjgtZGFjZS00OTdmLWE1YTMtODE0ZTgwOTA0YmU0
LzEvVy1vcmlFeHdaX1dQX3dRS0h3YmczeDZBcXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQGVPNAAwMB
ViIDAwJZeAMDA1xQAwMDbWADBAK5hUADBATZc9AwDQQCAAIwBwMFACoCDRAwDQYJ
KoZIhvcNAQELBQADggEBAAC3pc/qd1J+u4laoe1uy/uKy1yGclEjzkzkQiaRdqgX
EUnyv3aVEtz25ZbIDOgENdNv9gqLlHgaOMrZH9LKBB3CA6cHsRxzyBSxdB7DE10E
OxY78OVUjOaE12Joz3kZ2lddLhGRdsuQ+cLXIU/CnOM+F6DcICr1HeIAfyEMugag
DeDbdCgNp42PTOzHWH5uAx8VxjQYCjb/TTl8mDNTfN2FZavMstWhWGbGYVSG2eSp
Spf/Uy09sjQFt6xBsXPr++eZfbisf6dvncjPIYv4SKj44emeUCRHnaw9P0nrg17k
l6Dg1GPFH1d0RsyeQbo4yC95fxuFYnxM4pxjyRQOV0s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:38 2024 by rpki-client on console-fra.rpki-client.org