Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/X6Z9Ss70pVjUkJOim5juiEvak0I.roa
File: X6Z9Ss70pVjUkJOim5juiEvak0I.roa (raw, json)
Hash identifier: UhUmvYJ9FJLTPxCff2PMIFQa8fV16YC/DMGHzIemEBU=
Subject key identifier: 5F:A6:7D:4A:CE:F4:A5:58:D4:90:93:A2:9B:98:EE:88:4B:DA:93:42
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 0FC0B4EA
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/X6Z9Ss70pVjUkJOim5juiEvak0I.roa
Signing time: Fri 18 Feb 2022 20:40:41 +0000
ROA not before: Fri 18 Feb 2022 20:40:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35444
IP address blocks: 80.90.83.0/24 maxlen: 24
80.90.80.0/20 maxlen: 20
80.90.87.0/24 maxlen: 24
80.90.89.0/24 maxlen: 24
80.90.90.0/24 maxlen: 24
45.93.220.0/22 maxlen: 22
93.93.168.0/23 maxlen: 23
93.93.168.0/22 maxlen: 22
93.93.170.0/23 maxlen: 23
81.26.200.0/24 maxlen: 24
81.26.200.0/21 maxlen: 21
81.26.201.0/24 maxlen: 24
81.26.202.0/24 maxlen: 24
81.26.203.0/24 maxlen: 24
81.26.204.0/24 maxlen: 24
81.26.205.0/24 maxlen: 24
81.26.206.0/23 maxlen: 24
185.239.9.0/24 maxlen: 24
185.239.10.0/24 maxlen: 24
185.239.10.0/23 maxlen: 23
185.239.11.0/24 maxlen: 24
185.239.8.0/23 maxlen: 23
185.239.8.0/24 maxlen: 24
185.239.8.0/22 maxlen: 22
185.158.0.0/24 maxlen: 24
185.158.0.0/23 maxlen: 23
185.158.0.0/22 maxlen: 22
185.158.1.0/24 maxlen: 24
185.158.2.0/23 maxlen: 23
185.158.2.0/24 maxlen: 24
185.158.3.0/24 maxlen: 24
185.187.0.0/24 maxlen: 24
185.187.0.0/22 maxlen: 23
185.187.1.0/24 maxlen: 24
185.187.2.0/24 maxlen: 24
185.187.3.0/24 maxlen: 24
185.132.92.0/23 maxlen: 23
185.132.92.0/24 maxlen: 24
185.132.93.0/24 maxlen: 24
185.132.94.0/24 maxlen: 24
185.132.95.0/24 maxlen: 24
185.175.252.0/22 maxlen: 22
185.212.189.0/24 maxlen: 24
185.212.190.0/24 maxlen: 24
185.212.190.0/23 maxlen: 23
185.212.191.0/24 maxlen: 24
185.212.188.0/22 maxlen: 22
185.212.188.0/23 maxlen: 23
185.212.188.0/24 maxlen: 24
2a03:2de0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264287466 (0xfc0b4ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: Feb 18 20:40:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fa67d4acef4a558d49093a29b98ee884bda9342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:98:4b:cd:5f:d5:09:f5:75:33:b1:04:48:46:
9a:02:94:13:35:70:f3:00:b6:aa:8b:84:cd:58:b2:
82:cb:e8:d2:0b:af:f2:b4:da:29:fc:4f:c8:dc:09:
0b:68:7b:9c:ea:b2:07:c3:54:3e:f1:28:e7:ac:bd:
9a:b0:0b:6e:d6:18:6c:b1:88:da:89:66:a0:7b:7a:
89:7f:0c:ce:a4:a4:b9:0b:89:48:21:c9:fd:75:ca:
08:d7:18:91:7e:cb:42:17:3b:6e:01:e6:42:aa:0b:
50:e4:47:c0:e6:ee:ae:34:99:88:00:96:db:6a:fa:
aa:f5:91:78:c7:2e:a1:ef:cb:54:f3:dd:4e:9f:6e:
3d:65:94:78:85:4a:53:54:46:53:ae:ec:b9:f2:46:
41:6b:46:8f:50:c8:c6:5b:8e:df:46:b7:ea:b8:77:
bf:bf:e6:43:40:16:29:82:92:ef:b9:fd:77:b5:f8:
3a:69:41:d9:88:fe:67:94:41:ac:8c:4b:5a:14:c2:
e4:93:dc:a4:4e:73:ab:2d:a8:7d:1b:55:42:bb:33:
59:a1:d2:31:cd:b5:8a:1e:d6:c6:eb:9e:89:72:76:
8e:f8:50:96:0b:02:8b:27:82:ef:3d:f3:1d:52:91:
17:d3:b4:84:5f:ad:0b:0a:79:c0:54:2d:b4:a0:64:
5b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A6:7D:4A:CE:F4:A5:58:D4:90:93:A2:9B:98:EE:88:4B:DA:93:42
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/X6Z9Ss70pVjUkJOim5juiEvak0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.220.0/22
80.90.80.0/20
81.26.200.0/21
93.93.168.0/22
185.132.92.0/22
185.158.0.0/22
185.175.252.0/22
185.187.0.0/22
185.212.188.0/22
185.239.8.0/22
IPv6:
2a03:2de0::/32
Signature Algorithm: sha256WithRSAEncryption
6a:dc:ee:0d:fa:c2:e8:e8:e0:94:53:75:b7:93:2d:84:55:7c:
61:b6:72:a8:a6:62:fd:cd:13:0f:9a:28:c7:6a:3f:1d:f5:73:
69:5c:19:fa:70:ab:b9:0f:ed:15:6c:92:9f:cf:6c:98:64:81:
2c:02:bf:98:d5:dd:09:8c:ae:e4:17:a5:98:a4:d8:93:16:fe:
50:fa:3a:1c:a1:78:08:1d:88:3f:d3:0a:7b:bd:ed:32:16:d0:
84:c8:51:39:b9:45:50:e0:8d:3f:dd:3a:13:f1:ff:54:d3:a8:
fe:cc:d8:83:2a:e7:e7:c0:fb:2c:1d:e9:85:d8:a0:ea:dc:ce:
d7:40:60:47:30:f5:64:2f:a2:31:13:d6:32:21:9d:68:76:96:
f5:30:e6:3a:33:87:bf:74:d8:88:73:ca:8f:b0:ce:d4:9e:76:
4f:e4:a7:82:ab:f1:80:cb:16:0f:78:1a:ca:d5:00:20:77:dd:
d2:52:b8:27:52:7f:8b:4d:14:54:05:0a:f1:d6:59:d3:f8:a8:
ef:03:af:e3:5c:43:1b:59:02:9e:4b:ee:6d:7a:bf:68:5c:6a:
16:d9:19:7c:be:bf:a6:02:10:cd:20:3e:d8:c6:2b:89:e9:d4:
df:75:74:e5:2f:cc:25:70:00:f7:57:87:ae:6c:c8:e7:93:9f:
88:c8:f7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:14 2024 by rpki-client on console-ams.rpki-client.org