Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/fWWeSHjPyIuA3ayP_fkbcHVDbRU.roa
File: fWWeSHjPyIuA3ayP_fkbcHVDbRU.roa (raw, json)
Hash identifier: x5rBy9B4OtZ8LtdBSnz8UEgh86pXxVBJpNB92ZcOIB0=
Subject key identifier: 7D:65:9E:48:78:CF:C8:8B:80:DD:AC:8F:FD:F9:1B:70:75:43:6D:15
Certificate issuer: /CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Certificate serial: 12F95AC5
Authority key identifier: 50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/fWWeSHjPyIuA3ayP_fkbcHVDbRU.roa
Signing time: Tue 14 Jun 2022 12:07:44 +0000
ROA not before: Tue 14 Jun 2022 12:07:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208905
IP address blocks: 147.235.40.0/24 maxlen: 24
147.235.49.0/24 maxlen: 24
147.235.50.0/23 maxlen: 24
147.235.46.0/23 maxlen: 24
147.235.45.0/24 maxlen: 24
147.235.61.0/24 maxlen: 24
147.235.60.0/23 maxlen: 23
147.235.60.0/22 maxlen: 22
147.235.62.0/24 maxlen: 24
147.235.62.0/23 maxlen: 23
147.235.60.0/24 maxlen: 24
147.235.63.0/24 maxlen: 24
147.235.76.0/22 maxlen: 22
147.235.78.0/23 maxlen: 23
147.235.77.0/24 maxlen: 24
147.235.78.0/24 maxlen: 24
147.235.75.0/24 maxlen: 24
147.235.74.0/23 maxlen: 23
147.235.74.0/24 maxlen: 24
147.235.76.0/24 maxlen: 24
147.235.73.0/24 maxlen: 24
147.235.72.0/23 maxlen: 23
147.235.72.0/24 maxlen: 24
147.235.72.0/22 maxlen: 22
147.235.76.0/23 maxlen: 23
147.235.80.0/24 maxlen: 24
147.235.79.0/24 maxlen: 24
147.235.26.0/23 maxlen: 24
147.235.25.0/24 maxlen: 24
147.235.36.0/24 maxlen: 24
147.235.152.0/23 maxlen: 24
147.235.180.0/23 maxlen: 24
147.235.94.0/23 maxlen: 23
147.235.94.0/24 maxlen: 24
147.235.95.0/24 maxlen: 24
147.235.93.0/24 maxlen: 24
185.130.84.0/22 maxlen: 22
2a06:c702::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318331589 (0x12f95ac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Validity
Not Before: Jun 14 12:07:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d659e4878cfc88b80ddac8ffdf91b7075436d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:97:a6:f0:2a:b1:08:38:4f:26:91:ec:f8:
61:ab:af:64:d5:f9:b4:d1:e7:a8:9c:8b:0f:04:59:
4d:58:10:1f:b6:29:18:e7:34:ba:d2:ed:4a:31:2e:
9d:f5:fc:b2:8b:30:17:b0:f3:65:7a:c8:be:92:dd:
db:88:18:30:71:8d:e8:f2:88:34:7c:2f:3c:22:dc:
09:21:33:c5:a2:91:9e:a6:d2:77:8c:4d:d6:e7:82:
06:88:75:ef:92:92:71:25:7c:76:b5:8e:0b:fe:61:
9e:43:5c:3f:47:74:82:b3:c4:8a:91:94:69:7a:b4:
b9:40:fc:0e:ca:b2:09:fe:d1:c2:b2:23:68:23:16:
7e:9d:ae:2c:14:f7:2c:a2:d1:80:bc:c9:fd:93:20:
33:48:bc:ae:b9:d0:fb:8d:f9:aa:46:d7:62:d2:ca:
55:76:55:d1:b5:4b:a4:71:1c:54:06:51:58:d7:5f:
74:d2:c0:41:d8:1b:e1:60:93:3c:7f:c4:83:14:9e:
f7:f3:6f:4d:e3:8d:10:f7:61:d9:fc:bf:22:b3:fb:
25:ed:fa:e6:5f:8f:b1:5c:71:8a:18:ab:6f:91:77:
ed:cf:45:08:34:2b:9b:46:db:cf:c3:f8:a3:1a:5b:
5e:c7:8a:54:1a:78:9e:cb:c1:ac:ab:60:cb:37:ba:
e6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:65:9E:48:78:CF:C8:8B:80:DD:AC:8F:FD:F9:1B:70:75:43:6D:15
X509v3 Authority Key Identifier:
keyid:50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/fWWeSHjPyIuA3ayP_fkbcHVDbRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.235.25.0-147.235.27.255
147.235.36.0/24
147.235.40.0/24
147.235.45.0-147.235.47.255
147.235.49.0-147.235.51.255
147.235.60.0/22
147.235.72.0-147.235.80.255
147.235.93.0-147.235.95.255
147.235.152.0/23
147.235.180.0/23
185.130.84.0/22
IPv6:
2a06:c702::/48
Signature Algorithm: sha256WithRSAEncryption
1d:61:df:e5:00:1b:10:fb:3e:cb:f5:88:a1:9e:0d:da:73:25:
22:72:ef:75:3a:9a:36:cf:92:54:54:78:ee:66:67:60:2a:f3:
c0:7e:1d:16:2e:3b:06:9e:53:56:40:f6:57:ae:29:83:37:f6:
e4:a7:e9:89:46:d6:bb:98:fc:a6:a2:a6:82:cb:e5:91:a9:0c:
7d:97:38:0d:48:1c:9c:29:84:1b:28:4d:f4:11:0e:21:d3:c1:
1e:df:de:db:02:19:58:f8:ec:cc:08:dc:89:57:3e:88:45:23:
f7:5f:34:77:4e:a7:0b:08:ba:2e:01:55:5f:54:d5:1a:aa:72:
00:2f:0c:b0:d0:a0:a1:23:50:32:68:7c:05:2f:52:b7:51:43:
7d:dd:f9:5c:ae:88:d5:d9:af:e7:59:f9:15:04:06:1b:2d:a2:
19:7f:42:6a:51:3a:ea:ee:fe:2c:66:ec:62:57:b1:b9:25:bc:
d1:75:ef:a0:95:d9:33:cd:44:1a:80:8a:3d:36:48:d5:38:ac:
25:8f:8b:0f:b3:68:da:89:97:de:6e:a2:ac:f8:90:c4:28:3e:
cc:02:56:3a:b2:32:cd:3f:32:59:43:0a:4f:4b:4b:0a:88:9d:
3b:35:0d:e3:5e:25:5e:dc:17:bf:8c:bc:07:19:b0:88:1e:51:
5d:d8:14:b0
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIEEvlaxTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MDc0MTE1OGYzZWQ2NWJlZTFiZGUxMmYzNGY4OTVhZmIwZGQ1MGQ1MB4XDTIyMDYx
NDEyMDc0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2Q2NTllNDg3OGNm
Yzg4YjgwZGRhYzhmZmRmOTFiNzA3NTQzNmQxNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMjhl6bwKrEIOE8mkez4YauvZNX5tNHnqJyLDwRZTVgQH7Yp
GOc0utLtSjEunfX8soswF7DzZXrIvpLd24gYMHGN6PKINHwvPCLcCSEzxaKRnqbS
d4xN1ueCBoh175KScSV8drWOC/5hnkNcP0d0grPEipGUaXq0uUD8DsqyCf7RwrIj
aCMWfp2uLBT3LKLRgLzJ/ZMgM0i8rrnQ+435qkbXYtLKVXZV0bVLpHEcVAZRWNdf
dNLAQdgb4WCTPH/EgxSe9/NvTeONEPdh2fy/IrP7Je365l+PsVxxihirb5F37c9F
CDQrm0bbz8P4oxpbXseKVBp4nsvBrKtgyze65k8CAwEAAaOCAoEwggJ9MB0GA1Ud
DgQWBBR9ZZ5IeM/Ii4DdrI/9+RtwdUNtFTAfBgNVHSMEGDAWgBRQdBFY8+1lvuG9
4S80+JWvsN1Q1TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VIUVJXUFB0WmI3aHZlRXZOUGlWcjdEZFVOVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjkvNzM5YjgxLTNjZDMtNDY5Yy1iOTU0LTM1NTNiNGVkNjc5NC8x
L2ZXV2VTSGpQeUl1QTNheVBfZmtiY0hWRGJSVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkv
NzM5YjgxLTNjZDMtNDY5Yy1iOTU0LTM1NTNiNGVkNjc5NC8xL1VIUVJXUFB0WmI3
aHZlRXZOUGlWcjdEZFVOVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
lgYIKwYBBQUHAQcBAf8EgYYwgYMwcAQCAAEwajAMAwQAk+sZAwQCk+sYAwQAk+sk
AwQAk+soMAwDBACT6y0DBAST6yAwDAMEAJPrMQMEApPrMAMEApPrPDAMAwQDk+tI
AwQAk+tQMAwDBACT610DBAWT60ADBAGT65gDBAGT67QDBAK5glQwDwQCAAIwCQMH
ACoGxwIAADANBgkqhkiG9w0BAQsFAAOCAQEAHWHf5QAbEPs+y/WIoZ4N2nMlInLv
dTqaNs+SVFR47mZnYCrzwH4dFi47Bp5TVkD2V64pgzf25KfpiUbWu5j8pqKmgsvl
kakMfZc4DUgcnCmEGyhN9BEOIdPBHt/e2wIZWPjszAjciVc+iEUj9180d06nCwi6
LgFVX1TVGqpyAC8MsNCgoSNQMmh8BS9St1FDfd35XK6I1dmv51n5FQQGGy2iGX9C
alE66u7+LGbsYlexuSW80XXvoJXZM81EGoCKPTZI1TisJY+LD7No2omX3m6irPiQ
xCg+zAJWOrIyzT8yWUMKT0tLCoidOzUN414lXtwXv4y8BxmwiB5RXdgUsA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:45 2023 by rpki-client on console.sobornost.net