Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/i_8__jPazPLeXzeTpL3q7f2KOEk.roa
File: i_8__jPazPLeXzeTpL3q7f2KOEk.roa (raw, json)
Hash identifier: Osoqnner7pu0mIYE7sqwk+AS7GgMoiSoUBFmxRY2NvY=
Subject key identifier: 8B:FF:3F:FE:33:DA:CC:F2:DE:5F:37:93:A4:BD:EA:ED:FD:8A:38:49
Certificate issuer: /CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Certificate serial: 16775439
Authority key identifier: CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/i_8__jPazPLeXzeTpL3q7f2KOEk.roa
Signing time: Sat 01 Jan 2022 01:52:19 +0000
ROA not before: Sat 01 Jan 2022 01:52:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200924
IP address blocks: 185.75.164.0/22 maxlen: 22
185.44.132.0/22 maxlen: 22
5.83.176.0/20 maxlen: 20
46.167.24.0/21 maxlen: 21
185.27.212.0/22 maxlen: 22
185.37.248.0/22 maxlen: 22
31.22.24.0/21 maxlen: 21
2a01:7420::/32 maxlen: 32
2a05:5800::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376919097 (0x16775439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Validity
Not Before: Jan 1 01:52:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bff3ffe33daccf2de5f3793a4bdeaedfd8a3849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:62:5b:2e:25:32:b4:f0:a0:e7:70:77:30:
c6:d2:29:62:b1:8b:bd:03:1a:96:26:6d:81:58:45:
f3:1c:41:0b:e5:ed:3a:59:0d:bc:ad:36:82:9c:34:
d4:2c:fe:e4:fd:92:ee:74:e9:29:3e:bb:ef:e7:94:
3d:17:1d:7a:ec:d9:9b:63:a8:4c:17:3b:50:db:ca:
8d:e2:63:0a:4f:16:94:9f:75:b5:c4:ca:73:af:19:
cb:e3:6e:ca:24:74:68:ec:b0:86:a4:9a:dd:f6:40:
8b:3a:e8:bb:8f:72:ff:51:cc:25:19:36:c8:4c:35:
4e:6f:22:4a:0c:d0:49:5b:18:29:74:91:7e:a9:ca:
01:c8:33:dd:4a:9d:fc:22:fa:60:cb:35:f4:27:37:
50:7d:c8:96:3e:cc:60:2d:40:b4:a9:19:2d:ad:43:
b0:15:68:03:3a:86:fa:4f:d3:cf:c1:dc:b9:60:fe:
6d:b6:cc:9d:58:bb:9a:96:45:d0:b2:e1:21:b7:c3:
da:b6:3b:d0:40:7d:f4:e4:26:b7:f2:68:01:90:c8:
06:36:48:27:79:a9:51:e3:7c:c0:df:32:ec:1b:c7:
57:5d:c2:99:85:76:ed:4a:d0:f8:58:20:41:2e:76:
a1:68:c4:6a:57:d3:ab:cc:c7:01:80:8e:d1:58:fc:
a3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FF:3F:FE:33:DA:CC:F2:DE:5F:37:93:A4:BD:EA:ED:FD:8A:38:49
X509v3 Authority Key Identifier:
keyid:CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/i_8__jPazPLeXzeTpL3q7f2KOEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.176.0/20
31.22.24.0/21
46.167.24.0/21
185.27.212.0/22
185.37.248.0/22
185.44.132.0/22
185.75.164.0/22
IPv6:
2a01:7420::/32
2a05:5800::/29
Signature Algorithm: sha256WithRSAEncryption
5e:55:10:eb:3e:ec:01:14:a3:87:34:63:f3:de:36:5a:7e:7e:
81:c2:4c:d1:e8:c0:1c:4e:52:b8:63:86:12:b4:3c:83:a5:c2:
67:80:6b:37:5a:a6:0e:a6:d1:1b:79:eb:fe:0a:b0:43:3a:84:
f5:44:48:d5:14:7b:55:cc:a5:d9:c9:d9:22:ca:c2:8a:3a:b7:
6e:f8:99:d4:76:ca:51:7f:50:b0:70:cc:12:96:91:dd:c1:a9:
1d:58:fd:59:2d:70:24:3d:e2:28:ce:d3:e0:fc:9f:32:58:3b:
3c:c8:86:81:ff:f8:63:9c:c6:07:18:75:62:17:44:dc:b6:d7:
97:7e:9f:68:7d:6a:39:11:0c:0b:84:0b:50:d2:bf:b1:f6:b2:
2a:d0:ea:34:b8:6a:f8:38:90:3f:b3:54:f5:fe:ef:73:91:78:
73:3d:14:46:10:3d:8a:d3:02:19:e9:73:08:d4:c6:19:e1:5b:
c1:e6:e5:74:58:84:86:d7:1a:7b:3f:fd:ac:01:04:86:a1:50:
09:bb:10:9b:ce:fa:18:10:40:e2:2e:2c:ac:b3:95:78:89:61:
1f:45:b1:c6:1f:95:1f:5a:26:f2:73:25:55:d2:ad:f0:e3:38:
bb:c6:a3:2f:a5:a7:b4:f0:6b:16:dc:2c:9b:27:5f:ca:12:78:
f7:51:c6:97
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIEFndUOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZjU4Y2JjNGFhZTNmODBjNDliMzcyOTExYThkNDQ4NjFjZGZlZWNiMB4XDTIyMDEw
MTAxNTIxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGJmZjNmZmUzM2Rh
Y2NmMmRlNWYzNzkzYTRiZGVhZWRmZDhhMzg0OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMT2YlsuJTK08KDncHcwxtIpYrGLvQMaliZtgVhF8xxBC+Xt
OlkNvK02gpw01Cz+5P2S7nTpKT677+eUPRcdeuzZm2OoTBc7UNvKjeJjCk8WlJ91
tcTKc68Zy+NuyiR0aOywhqSa3fZAizrou49y/1HMJRk2yEw1Tm8iSgzQSVsYKXSR
fqnKAcgz3Uqd/CL6YMs19Cc3UH3Ilj7MYC1AtKkZLa1DsBVoAzqG+k/Tz8HcuWD+
bbbMnVi7mpZF0LLhIbfD2rY70EB99OQmt/JoAZDIBjZIJ3mpUeN8wN8y7BvHV13C
mYV27UrQ+FggQS52oWjEalfTq8zHAYCO0Vj8o6UCAwEAAaOCAkMwggI/MB0GA1Ud
DgQWBBSL/z/+M9rM8t5fN5Okvert/Yo4STAfBgNVHSMEGDAWgBTPWMvEquP4DEmz
cpEajUSGHN/uyzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3oxakx4S3JqLUF4SnMzS1JHbzFFaGh6Zjdzcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTUvNWNhMzI4LWYxMTQtNGIzZi1iOGJhLTUwZDdkOTRlMmI5Zi8x
L2lfOF9falBhelBMZVh6ZVRwTDNxN2YyS09Fay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUv
NWNhMzI4LWYxMTQtNGIzZi1iOGJhLTUwZDdkOTRlMmI5Zi8xL3oxakx4S3JqLUF4
SnMzS1JHbzFFaGh6Zjdzcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZ
BggrBgEFBQcBBwEB/wRKMEgwMAQCAAEwKgMEBAVTsAMEAx8WGAMEAy6nGAMEArkb
1AMEArkl+AMEArkshAMEArlLpDAUBAIAAjAOAwUAKgF0IAMFAyoFWAAwDQYJKoZI
hvcNAQELBQADggEBAF5VEOs+7AEUo4c0Y/PeNlp+foHCTNHowBxOUrhjhhK0PIOl
wmeAazdapg6m0Rt56/4KsEM6hPVESNUUe1XMpdnJ2SLKwoo6t274mdR2ylF/ULBw
zBKWkd3BqR1Y/VktcCQ94ijO0+D8nzJYOzzIhoH/+GOcxgcYdWIXRNy215d+n2h9
ajkRDAuEC1DSv7H2sirQ6jS4avg4kD+zVPX+73OReHM9FEYQPYrTAhnpcwjUxhnh
W8Hm5XRYhIbXGns//awBBIahUAm7EJvO+hgQQOIuLKyzlXiJYR9FscYflR9aJvJz
JVXSrfDjOLvGoy+lp7TwaxbcLJsnX8oSePdRxpc=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net