Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/87t2wEkrTv8zDDh-95-ixN2-BBg.roa
File: 87t2wEkrTv8zDDh-95-ixN2-BBg.roa (raw, json)
Hash identifier: by5Z4r0MNb3dC5n1MpGBKZ0JNJQ+Wg+uP45hBfZDMD0=
Subject key identifier: F3:BB:76:C0:49:2B:4E:FF:33:0C:38:7E:F7:9F:A2:C4:DD:BE:04:18
Certificate issuer: /CN=767bc02a5859623f563ea84a6bb0a2920d5b3e91
Certificate serial: 03E71248
Authority key identifier: 76:7B:C0:2A:58:59:62:3F:56:3E:A8:4A:6B:B0:A2:92:0D:5B:3E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnvAKlhZYj9WPqhKa7Cikg1bPpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/87t2wEkrTv8zDDh-95-ixN2-BBg.roa
Signing time: Sat 01 Jan 2022 04:53:25 +0000
ROA not before: Sat 01 Jan 2022 04:53:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44702
IP address blocks: 79.134.137.0/24 maxlen: 24
79.134.136.0/22 maxlen: 22
79.134.136.0/24 maxlen: 24
79.134.135.0/24 maxlen: 24
79.134.139.0/24 maxlen: 24
79.134.138.0/24 maxlen: 24
79.134.134.0/24 maxlen: 24
79.134.133.0/24 maxlen: 24
79.134.140.0/22 maxlen: 22
79.134.141.0/24 maxlen: 24
79.134.140.0/24 maxlen: 24
79.134.144.0/24 maxlen: 24
79.134.143.0/24 maxlen: 24
79.134.144.0/22 maxlen: 22
79.134.142.0/24 maxlen: 24
79.134.145.0/24 maxlen: 24
79.134.150.0/24 maxlen: 24
79.134.151.0/24 maxlen: 24
79.134.149.0/24 maxlen: 24
79.134.148.0/22 maxlen: 22
79.134.148.0/24 maxlen: 24
79.134.152.0/22 maxlen: 22
79.134.152.0/24 maxlen: 24
79.134.147.0/24 maxlen: 24
79.134.146.0/24 maxlen: 24
79.134.158.0/24 maxlen: 24
79.134.157.0/24 maxlen: 24
79.134.156.0/24 maxlen: 24
79.134.155.0/24 maxlen: 24
79.134.156.0/22 maxlen: 22
79.134.159.0/24 maxlen: 24
79.134.154.0/24 maxlen: 24
79.134.153.0/24 maxlen: 24
79.134.130.0/24 maxlen: 24
79.134.129.0/24 maxlen: 24
79.134.128.0/24 maxlen: 24
79.134.128.0/22 maxlen: 22
79.134.132.0/24 maxlen: 24
79.134.131.0/24 maxlen: 24
79.134.132.0/22 maxlen: 22
185.139.220.0/24 maxlen: 24
185.139.220.0/22 maxlen: 22
185.139.223.0/24 maxlen: 24
185.139.222.0/24 maxlen: 24
185.139.221.0/24 maxlen: 24
5.199.186.0/24 maxlen: 24
5.199.185.0/24 maxlen: 24
5.199.184.0/22 maxlen: 22
5.199.184.0/24 maxlen: 24
5.199.187.0/24 maxlen: 24
2a07:146::/32 maxlen: 32
2a07:145::/32 maxlen: 32
2a07:140::/32 maxlen: 32
2a07:142::/32 maxlen: 32
2a07:143::/32 maxlen: 32
2a07:144::/32 maxlen: 32
2a07:140::/29 maxlen: 29
2a07:147::/32 maxlen: 32
2a07:141::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65475144 (0x3e71248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767bc02a5859623f563ea84a6bb0a2920d5b3e91
Validity
Not Before: Jan 1 04:53:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3bb76c0492b4eff330c387ef79fa2c4ddbe0418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:09:87:a8:a1:5c:f9:58:d6:c7:e0:b9:ce:fe:
b8:98:07:11:18:98:c0:67:fb:94:86:9a:66:77:9b:
1d:88:28:82:54:5e:c0:25:b8:91:24:ad:59:36:40:
3f:04:cb:8e:cb:05:a6:e8:51:69:c5:c3:42:00:b3:
f9:72:15:36:b4:5e:cb:18:1e:f1:89:71:5a:67:0c:
e2:fc:83:8f:c5:be:73:4f:10:1c:e0:e3:98:61:40:
a1:35:19:cb:d8:50:5a:7e:62:7a:87:dc:59:f1:4c:
24:0e:d0:a1:8c:3d:93:7f:0c:5d:29:b8:ac:f4:ba:
bd:ed:1a:c3:4e:ef:29:5b:57:0a:35:a4:f5:20:05:
a4:30:5c:1d:5b:36:8b:32:72:e8:3e:30:c8:ff:83:
00:ec:5e:68:73:a1:3a:6c:9d:17:14:1d:05:ba:f4:
3d:02:4d:9a:57:c5:ad:ae:51:ec:2c:13:91:29:5b:
66:62:50:fc:53:47:79:c3:9a:6e:bd:c1:a9:94:b5:
17:e6:9d:51:2f:f2:84:62:62:ab:15:a0:48:2a:d3:
9e:a8:7b:b7:98:73:01:2f:5d:47:d3:8f:d1:3f:15:
e2:a6:84:d2:93:ce:b1:2a:f4:c7:a0:04:0c:bf:ff:
bd:a0:c8:d3:f4:77:3d:2f:0c:22:7d:3e:59:67:37:
db:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BB:76:C0:49:2B:4E:FF:33:0C:38:7E:F7:9F:A2:C4:DD:BE:04:18
X509v3 Authority Key Identifier:
keyid:76:7B:C0:2A:58:59:62:3F:56:3E:A8:4A:6B:B0:A2:92:0D:5B:3E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnvAKlhZYj9WPqhKa7Cikg1bPpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/87t2wEkrTv8zDDh-95-ixN2-BBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.184.0/22
79.134.128.0/19
185.139.220.0/22
IPv6:
2a07:140::/29
Signature Algorithm: sha256WithRSAEncryption
5a:5b:07:40:d1:99:6f:81:c1:9a:09:59:83:18:57:20:65:16:
1c:b7:20:d9:78:d1:29:b7:bb:f6:9e:57:4c:0b:6c:cc:b5:89:
2e:ff:d1:ac:d9:29:ae:83:27:31:cd:48:f2:af:51:bc:78:d0:
c5:42:42:c6:1d:16:2f:b1:a2:04:74:12:05:b2:ee:85:fc:c1:
b4:72:ba:6d:15:c5:86:09:ab:4e:1b:4c:89:28:50:67:8a:c5:
08:35:2b:be:af:73:1c:96:10:1a:ac:6a:d7:cb:a7:2e:fa:5f:
d6:1f:65:78:d5:66:86:86:02:b1:ea:93:ee:b8:b4:11:b5:4f:
15:6b:55:18:f4:e7:7e:88:86:9c:56:c5:f9:bb:aa:cf:37:e5:
06:32:d1:9e:3c:2b:cf:90:ed:67:65:4a:a3:b6:79:97:d7:75:
d1:8c:ad:e0:5b:65:ca:43:d3:76:16:19:df:87:43:6d:d1:2c:
6a:d0:d8:44:e0:62:dc:1c:4a:d9:73:57:2e:06:bd:af:b5:db:
52:80:16:bd:b2:6c:60:d6:55:bb:a2:3b:53:6f:37:eb:11:c1:
df:82:bf:e5:65:84:22:c0:65:e8:56:fd:cd:c8:f1:bc:38:de:
40:93:79:fb:f3:b9:c4:e9:f2:b5:db:5c:01:c2:66:23:c9:ef:
a1:2c:46:87
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEA+cSSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NjdiYzAyYTU4NTk2MjNmNTYzZWE4NGE2YmIwYTI5MjBkNWIzZTkxMB4XDTIyMDEw
MTA0NTMyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjNiYjc2YzA0OTJi
NGVmZjMzMGMzODdlZjc5ZmEyYzRkZGJlMDQxODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOAJh6ihXPlY1sfguc7+uJgHERiYwGf7lIaaZnebHYgoglRe
wCW4kSStWTZAPwTLjssFpuhRacXDQgCz+XIVNrReyxge8YlxWmcM4vyDj8W+c08Q
HODjmGFAoTUZy9hQWn5ieofcWfFMJA7QoYw9k38MXSm4rPS6ve0aw07vKVtXCjWk
9SAFpDBcHVs2izJy6D4wyP+DAOxeaHOhOmydFxQdBbr0PQJNmlfFra5R7CwTkSlb
ZmJQ/FNHecOabr3BqZS1F+adUS/yhGJiqxWgSCrTnqh7t5hzAS9dR9OP0T8V4qaE
0pPOsSr0x6AEDL//vaDI0/R3PS8MIn0+WWc3208CAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBTzu3bASStO/zMMOH73n6LE3b4EGDAfBgNVHSMEGDAWgBR2e8AqWFliP1Y+
qEprsKKSDVs+kTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RudkFLbGhaWWo5V1BxaEthN0Npa2cxYlBwRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzEvY2RhYmM0LWJhZTUtNGQ5OS05ZTE3LTY4MTU1NDhiZjMzZi8x
Lzg3dDJ3RWtyVHY4ekREaC05NS1peE4yLUJCZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEv
Y2RhYmM0LWJhZTUtNGQ5OS05ZTE3LTY4MTU1NDhiZjMzZi8xL2RudkFLbGhaWWo5
V1BxaEthN0Npa2cxYlBwRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAgXHuAMEBU+GgAMEArmL3DANBAIA
AjAHAwUDKgcBQDANBgkqhkiG9w0BAQsFAAOCAQEAWlsHQNGZb4HBmglZgxhXIGUW
HLcg2XjRKbe79p5XTAtszLWJLv/RrNkproMnMc1I8q9RvHjQxUJCxh0WL7GiBHQS
BbLuhfzBtHK6bRXFhgmrThtMiShQZ4rFCDUrvq9zHJYQGqxq18unLvpf1h9leNVm
hoYCseqT7ri0EbVPFWtVGPTnfoiGnFbF+buqzzflBjLRnjwrz5DtZ2VKo7Z5l9d1
0Yyt4FtlykPTdhYZ34dDbdEsatDYROBi3BxK2XNXLga9r7XbUoAWvbJsYNZVu6I7
U2836xHB34K/5WWEIsBl6Fb9zcjxvDjeQJN5+/O5xOnytdtcAcJmI8nvoSxGhw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:33 2023 by rpki-client on console.sobornost.net