Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/qX55bMra5Nlgc4hiUeOqaqsy0HQ.roa
File: qX55bMra5Nlgc4hiUeOqaqsy0HQ.roa (raw, json)
Hash identifier: d5a6AnUf6KgV7NYAJF9lgUrJqXNJs1s/cjAyS5/sfxI=
Subject key identifier: A9:7E:79:6C:CA:DA:E4:D9:60:73:88:62:51:E3:AA:6A:AB:32:D0:74
Certificate issuer: /CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Certificate serial: 0C2B7225
Authority key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/qX55bMra5Nlgc4hiUeOqaqsy0HQ.roa
Signing time: Sat 01 Jan 2022 00:55:14 +0000
ROA not before: Sat 01 Jan 2022 00:55:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16010
IP address blocks: 80.241.240.0/22 maxlen: 22
212.58.96.0/19 maxlen: 20
213.157.192.0/19 maxlen: 19
80.241.253.0/24 maxlen: 24
80.241.248.0/22 maxlen: 22
80.241.254.0/23 maxlen: 23
94.137.160.0/19 maxlen: 19
82.211.128.0/18 maxlen: 19
188.129.128.0/17 maxlen: 18
94.240.192.0/18 maxlen: 19
5.178.128.0/17 maxlen: 18
95.104.0.0/17 maxlen: 18
213.200.0.0/19 maxlen: 19
134.19.224.0/19 maxlen: 19
89.232.32.0/19 maxlen: 19
62.168.160.0/19 maxlen: 19
85.114.224.0/19 maxlen: 19
77.74.40.0/21 maxlen: 21
212.72.128.0/23 maxlen: 23
212.72.132.0/22 maxlen: 22
212.72.131.0/24 maxlen: 24
212.72.136.0/21 maxlen: 21
212.72.144.0/21 maxlen: 21
212.72.152.0/23 maxlen: 23
46.49.0.0/17 maxlen: 18
212.72.156.0/22 maxlen: 22
212.72.154.0/24 maxlen: 24
93.177.128.0/18 maxlen: 19
109.172.128.0/17 maxlen: 18
185.115.4.0/22 maxlen: 22
188.121.192.0/19 maxlen: 19
185.115.4.0/24 maxlen: 24
2a0b:6200::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204173861 (0xc2b7225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Validity
Not Before: Jan 1 00:55:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a97e796ccadae4d96073886251e3aa6aab32d074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:68:89:12:08:f8:d5:cb:33:7e:5f:ae:81:e5:
a7:b4:a9:ac:c6:7c:f2:43:56:5f:c2:6a:33:86:6b:
d0:c6:2b:c3:48:20:74:65:7b:b8:d1:cf:7b:96:0b:
52:47:bd:62:89:99:fe:a5:60:bc:0b:d6:4e:21:b4:
4a:6f:c5:45:6f:07:48:4c:3a:38:a4:41:b2:51:51:
df:a9:75:b9:d3:62:c2:9b:a3:65:f7:e1:e8:8a:31:
a3:80:ce:c1:52:2f:4d:26:80:00:9c:30:ee:dd:b0:
6e:4e:96:b2:11:16:c1:d5:a2:14:c6:45:04:a3:ce:
80:20:dc:f4:0e:e7:5b:ca:b2:c5:3b:44:ca:3f:b9:
63:d2:01:4c:31:3e:67:7a:04:0e:0d:9b:fe:2b:f0:
30:b9:32:f6:43:b1:cf:21:00:40:69:cb:66:2b:d3:
5e:ba:39:2e:dc:6c:ac:56:e6:29:1b:1e:29:87:00:
5c:be:fb:bb:2f:5b:0f:25:df:e8:66:e4:50:93:fd:
97:03:50:67:a3:95:3d:36:46:df:d0:18:25:97:8f:
d2:39:81:16:c2:5f:3f:57:d0:e9:47:bc:fc:fb:bb:
53:21:e2:73:b3:ad:47:fe:74:18:9c:01:33:40:36:
ed:82:c1:68:35:60:04:b4:56:c7:e2:2b:1f:ea:60:
d8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7E:79:6C:CA:DA:E4:D9:60:73:88:62:51:E3:AA:6A:AB:32:D0:74
X509v3 Authority Key Identifier:
keyid:FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/qX55bMra5Nlgc4hiUeOqaqsy0HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.128.0/17
46.49.0.0/17
62.168.160.0/19
77.74.40.0/21
80.241.240.0/22
80.241.248.0/22
80.241.253.0-80.241.255.255
82.211.128.0/18
85.114.224.0/19
89.232.32.0/19
93.177.128.0/18
94.137.160.0/19
94.240.192.0/18
95.104.0.0/17
109.172.128.0/17
134.19.224.0/19
185.115.4.0/22
188.121.192.0/19
188.129.128.0/17
212.58.96.0/19
212.72.128.0/23
212.72.131.0-212.72.154.255
212.72.156.0/22
213.157.192.0/19
213.200.0.0/19
IPv6:
2a0b:6200::/29
Signature Algorithm: sha256WithRSAEncryption
9f:5e:ea:ce:83:ee:03:95:fb:60:40:bd:47:f4:72:be:18:29:
59:56:de:75:86:1b:7c:85:a0:fe:9d:d0:27:27:39:a4:8c:69:
73:ea:33:25:95:79:ad:67:9a:3f:48:b4:5c:ec:2c:5e:84:1f:
2f:e2:4f:68:74:f8:d6:1c:1b:4a:25:c2:bb:d0:f8:60:0f:c0:
33:34:69:ba:49:db:33:09:23:eb:a1:fa:fd:6b:7f:2d:5c:17:
ef:fa:c5:9f:7f:ca:03:35:de:53:5f:c6:b1:0b:e7:19:9d:29:
7a:90:13:68:0b:b9:be:b6:ed:ad:ce:1e:13:f0:bd:fe:7d:09:
ea:95:e8:4c:2b:47:24:1a:97:25:29:fc:b9:f3:40:02:e5:4c:
1b:9a:0a:23:fb:86:32:6d:57:10:74:b2:c8:e2:aa:bc:fa:ef:
91:86:98:22:15:85:fb:28:82:31:d9:ed:f2:6d:43:6d:dc:d1:
c1:06:15:ee:18:d8:5d:f3:94:3c:73:c8:9c:91:29:6f:90:d3:
3a:8d:2a:48:70:b8:92:08:6c:1c:28:8a:39:13:9a:86:af:2f:
28:3e:31:2c:d1:7f:86:7a:25:5b:c4:63:6b:1c:1b:a2:55:53:
c4:4b:06:10:20:bb:bf:af:a1:6d:78:72:c3:4c:29:9f:1d:87:
ef:e0:69:80
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgIEDCtyJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZGQyYjM2MjA2NDM5YmJjZTE1YjM2M2YwOWVlZmYxZDczOGNlY2M3MB4XDTIyMDEw
MTAwNTUxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTk3ZTc5NmNjYWRh
ZTRkOTYwNzM4ODYyNTFlM2FhNmFhYjMyZDA3NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKVoiRII+NXLM35froHlp7SprMZ88kNWX8JqM4Zr0MYrw0gg
dGV7uNHPe5YLUke9YomZ/qVgvAvWTiG0Sm/FRW8HSEw6OKRBslFR36l1udNiwpuj
Zffh6Ioxo4DOwVIvTSaAAJww7t2wbk6WshEWwdWiFMZFBKPOgCDc9A7nW8qyxTtE
yj+5Y9IBTDE+Z3oEDg2b/ivwMLky9kOxzyEAQGnLZivTXro5LtxsrFbmKRseKYcA
XL77uy9bDyXf6GbkUJP9lwNQZ6OVPTZG39AYJZeP0jmBFsJfP1fQ6Ue8/Pu7UyHi
c7OtR/50GJwBM0A27YLBaDVgBLRWx+IrH+pg2KkCAwEAAaOCArwwggK4MB0GA1Ud
DgQWBBSpfnlsytrk2WBziGJR46pqqzLQdDAfBgNVHSMEGDAWgBT90rNiBkObvOFb
Nj8J7v8dc4zsxzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19kS3pZZ1pEbTd6aFd6WV9DZTdfSFhPTTdNYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDkvNjJiOTA5LTFlM2UtNGExYi05ZTI0LWIwMWUwMjk3YjA3MC8x
L3FYNTViTXJhNU5sZ2M0aGlVZU9xYXFzeTBIUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkv
NjJiOTA5LTFlM2UtNGExYi05ZTI0LWIwMWUwMjk3YjA3MC8xL19kS3pZZ1pEbTd6
aFd6WV9DZTdfSFhPTTdNYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
0QYIKwYBBQUHAQcBAf8EgcEwgb4wgawEAgABMIGlAwQHBbKAAwQHLjEAAwQFPqig
AwQDTUooAwQCUPHwAwQCUPH4MAsDBABQ8f0DAwFQ8AMEBlLTgAMEBVVy4AMEBVno
IAMEBl2xgAMEBV6JoAMEBl7wwAMEB19oAAMEB22sgAMEBYYT4AMEArlzBAMEBbx5
wAMEB7yBgAMEBdQ6YAMEAdRIgDAMAwQA1EiDAwQA1EiaAwQC1EicAwQF1Z3AAwQF
1cgAMA0EAgACMAcDBQMqC2IAMA0GCSqGSIb3DQEBCwUAA4IBAQCfXurOg+4Dlftg
QL1H9HK+GClZVt51hht8haD+ndAnJzmkjGlz6jMllXmtZ5o/SLRc7CxehB8v4k9o
dPjWHBtKJcK70PhgD8AzNGm6SdszCSProfr9a38tXBfv+sWff8oDNd5TX8axC+cZ
nSl6kBNoC7m+tu2tzh4T8L3+fQnqlehMK0ckGpclKfy580AC5Uwbmgoj+4YybVcQ
dLLI4qq8+u+RhpgiFYX7KIIx2e3ybUNt3NHBBhXuGNhd85Q8c8ickSlvkNM6jSpI
cLiSCGwcKIo5E5qGry8oPjEs0X+GeiVbxGNrHBuiVVPESwYQILu/r6FteHLDTCmf
HYfv4GmA
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:17 2023 by rpki-client on console.sobornost.net