Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/kK2ZCwYCzRUv11M7rjFmyGBslzc.roa
File: kK2ZCwYCzRUv11M7rjFmyGBslzc.roa (raw, json)
Hash identifier: k5WIu1pn/Fxiv0KZGN2RPMI2VIoUE5tOU2+cwJBgayY=
Subject key identifier: 90:AD:99:0B:06:02:CD:15:2F:D7:53:3B:AE:31:66:C8:60:6C:97:37
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 4270FE81
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/kK2ZCwYCzRUv11M7rjFmyGBslzc.roa
Signing time: Sat 01 Jan 2022 14:57:49 +0000
ROA not before: Sat 01 Jan 2022 14:57:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42560
IP address blocks: 185.58.92.0/22 maxlen: 22
77.77.195.0/24 maxlen: 24
77.77.192.0/18 maxlen: 24
5.43.64.0/18 maxlen: 18
146.255.128.0/19 maxlen: 19
77.77.216.0/22 maxlen: 22
77.221.0.0/19 maxlen: 19
185.24.208.0/22 maxlen: 22
185.18.152.0/22 maxlen: 22
185.15.64.0/22 maxlen: 22
37.208.32.0/21 maxlen: 21
93.180.96.0/19 maxlen: 19
178.209.0.0/19 maxlen: 19
31.185.112.0/20 maxlen: 20
141.170.192.0/20 maxlen: 20
185.48.172.0/22 maxlen: 22
77.239.0.0/19 maxlen: 19
77.78.192.0/19 maxlen: 24
77.78.192.0/18 maxlen: 18
109.237.32.0/20 maxlen: 20
185.6.104.0/22 maxlen: 22
178.236.80.0/20 maxlen: 20
77.78.224.0/19 maxlen: 19
128.65.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1114701441 (0x4270fe81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Jan 1 14:57:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90ad990b0602cd152fd7533bae3166c8606c9737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:ad:67:88:bd:06:d1:35:80:d8:03:3a:44:
ae:c1:37:a2:ec:be:a2:5d:22:99:d4:ae:d7:b6:f7:
b6:30:63:61:cc:84:81:8b:60:ab:ba:2a:f1:7a:3c:
2d:c9:84:bd:f4:d2:56:70:4e:55:40:50:f9:bf:19:
29:62:39:d2:e9:f5:9d:13:a9:18:82:b5:64:3d:14:
f4:f7:0b:26:1c:a6:e0:07:0f:2d:5e:cb:de:76:26:
67:26:b2:bf:4f:39:c9:47:8d:41:ea:07:02:bf:4a:
ac:cf:97:c3:a1:cf:9c:3d:05:5c:5c:2e:8c:3b:23:
2d:fa:20:58:90:69:55:7e:f1:77:ad:cc:be:94:f6:
d5:a6:1a:2e:3a:19:78:6e:13:62:9f:1f:d1:ca:be:
af:5c:a2:81:c0:cd:22:98:69:79:bd:ee:c8:32:e6:
42:5b:20:db:20:10:09:5a:8f:a2:61:aa:d0:4e:25:
33:f1:ab:57:03:28:9c:a6:36:2e:74:74:c3:69:50:
0a:16:c1:0b:95:54:0f:f9:1a:50:f7:68:e2:cf:0b:
26:20:0c:ef:9f:48:5c:0c:f4:30:cc:d1:36:bd:61:
86:84:50:ca:4b:a2:74:9a:8a:58:9a:be:19:8a:56:
3c:fe:81:9d:27:5a:7e:35:b0:20:df:ed:db:d2:36:
6b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AD:99:0B:06:02:CD:15:2F:D7:53:3B:AE:31:66:C8:60:6C:97:37
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/kK2ZCwYCzRUv11M7rjFmyGBslzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.43.64.0/18
31.185.112.0/20
37.208.32.0/21
77.77.192.0/18
77.78.192.0/18
77.221.0.0/19
77.239.0.0/19
93.180.96.0/19
109.237.32.0/20
128.65.104.0/21
141.170.192.0/20
146.255.128.0/19
178.209.0.0/19
178.236.80.0/20
185.6.104.0/22
185.15.64.0/22
185.18.152.0/22
185.24.208.0/22
185.48.172.0/22
185.58.92.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:4e:d6:20:70:d8:35:3f:4c:2f:ee:45:15:81:2b:05:32:d4:
3c:b5:be:cd:b3:3f:55:00:32:1b:a5:f9:fa:0e:0e:2e:1e:b0:
96:ec:e1:a2:c8:d9:ab:d1:00:74:46:7c:86:a7:97:ae:43:64:
7a:bc:49:fb:0b:2f:6d:ba:76:2e:51:17:41:1f:ba:75:cf:5c:
9e:2c:de:6d:a4:80:ac:80:e0:50:a2:37:44:ba:39:e2:a5:48:
ad:4f:65:f9:72:3b:4b:a1:a2:f7:3c:90:fc:4f:7c:8f:94:b9:
91:03:3d:ec:69:1f:ec:44:06:51:4a:fd:ab:ac:dd:20:2b:73:
57:a1:33:9f:be:27:19:5f:75:82:30:3e:61:b3:d5:4a:0b:7f:
74:b7:92:9e:dd:1c:eb:38:21:13:f8:60:98:14:d3:9a:0d:e6:
11:e9:46:3a:69:58:07:6f:1a:d8:7f:91:a8:8b:49:ea:cd:b8:
0d:39:70:1f:63:01:2c:12:51:87:d0:82:38:f7:e7:23:da:32:
ae:3c:32:71:10:4e:9e:c9:71:80:0a:4a:f2:39:85:78:a5:f5:
1e:80:12:93:56:46:ef:64:8b:93:d5:f3:ea:23:be:62:de:41:
b5:bc:4a:7f:a0:d4:44:6a:0c:7d:ee:8f:f7:a3:21:7d:33:6e:
67:9e:80:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:57 2024 by rpki-client on console-ams.rpki-client.org