Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/ZHfiNyKEcKQ9pIwDIPm1WwTU0Oo.roa
File: ZHfiNyKEcKQ9pIwDIPm1WwTU0Oo.roa (raw, json)
Hash identifier: MrzNF2FPHffPNPUqwNOQ1SiZhj78eHQmY11dS4JJ8eA=
Subject key identifier: 64:77:E2:37:22:84:70:A4:3D:A4:8C:03:20:F9:B5:5B:04:D4:D0:EA
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 0184F2553358D5A2A5BFAE053B690BCCEFF9
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/ZHfiNyKEcKQ9pIwDIPm1WwTU0Oo.roa
Signing time: Thu 08 Dec 2022 15:23:00 +0000
ROA not before: Thu 08 Dec 2022 15:23:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61098
IP address blocks: 159.100.240.0/22 maxlen: 24
159.100.245.0/24 maxlen: 24
159.100.246.0/23 maxlen: 24
159.100.244.0/24 maxlen: 24
159.100.248.0/21 maxlen: 24
91.92.224.0/23 maxlen: 24
91.92.227.0/24 maxlen: 24
85.217.160.0/22 maxlen: 24
85.217.172.0/23 maxlen: 24
185.150.8.0/22 maxlen: 24
91.92.202.0/23 maxlen: 24
91.92.200.0/23 maxlen: 24
85.217.174.0/23 maxlen: 24
85.217.186.0/23 maxlen: 24
85.217.184.0/23 maxlen: 24
185.19.28.0/22 maxlen: 24
194.182.188.0/22 maxlen: 24
91.92.118.0/23 maxlen: 24
91.92.116.0/23 maxlen: 24
91.92.142.0/23 maxlen: 24
91.92.140.0/23 maxlen: 24
91.92.152.0/23 maxlen: 24
91.92.154.0/23 maxlen: 24
194.182.164.0/22 maxlen: 24
194.182.160.0/22 maxlen: 24
194.182.172.0/22 maxlen: 24
194.182.168.0/22 maxlen: 24
89.145.164.0/23 maxlen: 24
194.182.176.0/22 maxlen: 24
89.145.160.0/22 maxlen: 24
194.182.184.0/22 maxlen: 24
89.145.166.0/23 maxlen: 24
194.182.180.0/22 maxlen: 24
2a07:6cc0:11::/48 maxlen: 48
2a07:6cc0:30::/48 maxlen: 48
2a04:c42::/32 maxlen: 48
2a07:6cc0:12::/48 maxlen: 48
2a07:6cc0:41::/48 maxlen: 48
2a04:c42:f12::/48 maxlen: 48
2a04:c41::/32 maxlen: 48
2a07:6cc0:20::/48 maxlen: 48
2a07:6cc0:60::/48 maxlen: 48
2a04:c44::/32 maxlen: 48
2a04:c47::/32 maxlen: 48
2a07:6cc0:31::/48 maxlen: 48
2a04:c46::/32 maxlen: 48
2a04:c42:f11::/48 maxlen: 48
2a04:c45::/32 maxlen: 48
2a07:6cc0:50::/48 maxlen: 48
2a07:6cc0:10::/48 maxlen: 48
2a04:c47:f12::/48 maxlen: 48
2a04:c43::/32 maxlen: 48
2a07:6cc0:21::/48 maxlen: 48
2a07:6cc1::/32 maxlen: 48
2a07:6cc0:40::/48 maxlen: 48
2a04:c47:f11::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:55:33:58:d5:a2:a5:bf:ae:05:3b:69:0b:cc:ef:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Dec 8 15:23:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6477e237228470a43da48c0320f9b55b04d4d0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ba:99:6e:63:3c:fd:1b:b0:d5:d6:26:6b:75:
4b:21:81:b2:c4:55:da:f7:d8:cc:09:4f:f6:2b:d9:
17:94:ac:6f:b8:2a:45:ec:19:14:4c:c4:a5:3d:6f:
03:43:f3:f8:06:15:c2:0b:69:74:d5:25:f5:8a:be:
41:62:09:c1:04:46:eb:e4:53:bc:8f:68:22:8c:bf:
71:35:db:a2:8c:13:16:e8:99:06:84:cf:d1:b7:c3:
00:ca:07:1c:19:3b:d1:47:ae:65:d5:05:53:de:51:
35:f8:f7:bd:86:de:31:f1:f2:04:7c:03:66:61:46:
3d:2e:ad:a1:bc:21:46:1c:a9:aa:a1:b7:18:01:b7:
2d:a1:3e:73:5c:37:48:ad:99:fa:26:30:4e:fe:1f:
b7:f8:b2:44:b4:17:75:e3:00:81:b0:b3:f4:c7:fc:
1a:e6:88:52:fd:a1:df:13:2f:e0:d6:b9:6b:d4:78:
91:f7:b9:7f:17:e4:f0:dd:ef:85:07:d7:28:44:96:
c3:52:93:b0:86:c4:66:6f:2d:83:73:5d:24:c0:29:
ec:8f:72:69:70:c8:1a:03:9e:96:47:25:9a:d8:e4:
db:8a:b5:ff:72:4c:6a:71:a6:85:a1:c4:e5:6b:e5:
be:14:ce:e3:62:f6:b1:43:3f:3b:ba:7b:ad:f2:b1:
d3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:77:E2:37:22:84:70:A4:3D:A4:8C:03:20:F9:B5:5B:04:D4:D0:EA
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/ZHfiNyKEcKQ9pIwDIPm1WwTU0Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.160.0/22
85.217.172.0/22
85.217.184.0/22
89.145.160.0/21
91.92.116.0/22
91.92.140.0/22
91.92.152.0/22
91.92.200.0/22
91.92.224.0/23
91.92.227.0/24
159.100.240.0/20
185.19.28.0/22
185.150.8.0/22
194.182.160.0/19
IPv6:
2a04:c41::-2a04:c47:ffff:ffff:ffff:ffff:ffff:ffff
2a07:6cc0:10::-2a07:6cc0:12:ffff:ffff:ffff:ffff:ffff
2a07:6cc0:20::/47
2a07:6cc0:30::/47
2a07:6cc0:40::/47
2a07:6cc0:50::/48
2a07:6cc0:60::/48
2a07:6cc1::/32
Signature Algorithm: sha256WithRSAEncryption
2f:ae:3b:8d:1d:57:cb:ff:84:bc:30:f0:95:83:6d:7c:c2:86:
41:c8:d7:d0:95:76:d5:69:92:1a:eb:77:e3:8d:98:78:fb:56:
6d:da:ad:5c:e6:84:5e:a0:37:de:f9:9a:d0:ec:f2:31:d1:e8:
c6:55:ef:19:d3:c7:00:e7:d1:f4:83:58:ba:59:39:10:3b:85:
5d:31:2a:3d:66:3b:27:93:ca:18:82:db:f6:e9:ef:c7:7d:c8:
31:52:f5:09:3c:a4:ab:28:1b:45:3d:be:4b:e0:ff:9d:6b:75:
a0:e4:bd:b9:0e:17:50:82:17:39:fd:95:22:38:ac:26:98:e2:
23:e2:85:7c:f4:e6:09:51:cd:52:3d:25:6c:25:50:7a:7b:63:
62:2a:39:b5:3c:a5:bb:5a:b8:85:dd:ff:13:89:50:9b:4d:c5:
be:aa:dc:a2:24:d7:51:de:77:28:42:05:00:8a:cd:94:85:24:
3c:af:ad:37:a8:7d:d2:87:83:bd:d6:1c:ab:f3:d4:60:23:63:
62:20:e3:d5:c7:fd:a1:27:8c:ae:c6:d1:86:6f:03:8e:76:7a:
87:9b:f9:1b:a3:a1:ba:f9:1f:21:1d:a0:71:1a:f1:43:7d:41:
87:2b:a4:7f:80:52:2c:b8:41:1d:1a:0f:f9:73:a8:6c:86:64:
08:26:70:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:02 2024 by rpki-client on console-fra.rpki-client.org