Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/oDn7FJDz5j0nXxTvH6WoMXgawak.roa
File: oDn7FJDz5j0nXxTvH6WoMXgawak.roa (raw, json)
Hash identifier: DJqE5TjrhtYsFJS6wi+npem2zgIO6C6E8N8/EF+E6Xw=
Subject key identifier: A0:39:FB:14:90:F3:E6:3D:27:5F:14:EF:1F:A5:A8:31:78:1A:C1:A9
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 0F542086
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/oDn7FJDz5j0nXxTvH6WoMXgawak.roa
Signing time: Sat 01 Jan 2022 12:55:22 +0000
ROA not before: Sat 01 Jan 2022 12:55:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35444
IP address blocks: 80.90.80.0/20 maxlen: 20
80.90.83.0/24 maxlen: 24
80.90.87.0/24 maxlen: 24
45.93.220.0/22 maxlen: 22
185.132.92.0/23 maxlen: 23
185.132.92.0/24 maxlen: 24
185.132.93.0/24 maxlen: 24
185.132.94.0/24 maxlen: 24
185.132.95.0/24 maxlen: 24
93.93.168.0/23 maxlen: 23
93.93.168.0/22 maxlen: 22
93.93.170.0/23 maxlen: 23
81.26.200.0/24 maxlen: 24
81.26.200.0/21 maxlen: 21
81.26.201.0/24 maxlen: 24
81.26.202.0/24 maxlen: 24
81.26.203.0/24 maxlen: 24
81.26.204.0/24 maxlen: 24
81.26.205.0/24 maxlen: 24
81.26.206.0/23 maxlen: 24
185.239.9.0/24 maxlen: 24
185.239.10.0/24 maxlen: 24
185.239.10.0/23 maxlen: 23
185.239.11.0/24 maxlen: 24
185.239.8.0/23 maxlen: 23
185.239.8.0/24 maxlen: 24
185.239.8.0/22 maxlen: 22
185.158.0.0/24 maxlen: 24
185.158.0.0/23 maxlen: 23
185.158.0.0/22 maxlen: 22
185.158.1.0/24 maxlen: 24
185.158.2.0/23 maxlen: 23
185.158.2.0/24 maxlen: 24
185.158.3.0/24 maxlen: 24
185.187.0.0/24 maxlen: 24
185.187.0.0/22 maxlen: 23
185.187.1.0/24 maxlen: 24
185.187.2.0/24 maxlen: 24
185.187.3.0/24 maxlen: 24
185.175.252.0/22 maxlen: 22
185.212.189.0/24 maxlen: 24
185.212.190.0/24 maxlen: 24
185.212.190.0/23 maxlen: 23
185.212.191.0/24 maxlen: 24
185.212.188.0/22 maxlen: 22
185.212.188.0/23 maxlen: 23
185.212.188.0/24 maxlen: 24
2a03:2de0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257171590 (0xf542086)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: Jan 1 12:55:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a039fb1490f3e63d275f14ef1fa5a831781ac1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:5b:e0:a7:bb:2e:4b:d3:fc:ee:ad:f3:de:
16:96:08:69:fd:68:85:26:3d:e6:4e:5f:bb:a4:49:
14:70:44:a2:41:00:96:06:ab:aa:c7:f7:44:fb:af:
ed:a5:48:e4:a0:22:4c:0b:94:bb:f9:7d:e7:49:b4:
98:3a:16:cb:c1:93:22:93:d8:15:5d:08:90:5b:9e:
7f:a9:fb:fd:61:cf:8f:2a:a0:0d:c6:4c:66:c3:d8:
70:a6:0e:27:a9:c6:fb:bf:bf:50:f0:d8:95:c2:8a:
b5:09:f3:69:98:63:a8:19:c9:89:f1:03:16:4f:d9:
fb:bb:96:e4:5a:7c:79:29:3d:21:86:d5:52:b4:68:
db:ba:1a:84:ea:cf:e4:b8:f2:cb:eb:f1:8c:fe:32:
b4:d8:a3:d2:75:2b:f1:be:db:a8:2a:17:2b:8b:33:
ba:b5:c3:46:ee:6d:14:3a:d8:b3:94:fa:55:95:8a:
1d:d5:1f:19:c0:e9:bf:ff:8d:01:4c:83:62:35:63:
cc:1a:15:04:bd:45:d2:df:0d:42:b0:a5:84:d3:25:
2b:5c:c9:fb:0f:96:9f:69:23:c2:90:42:64:dd:2a:
cc:dd:94:5f:27:6a:84:ae:44:75:9e:79:83:f1:3f:
8f:4b:1f:89:23:87:f2:fa:a2:b1:4c:cf:83:33:ed:
36:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:39:FB:14:90:F3:E6:3D:27:5F:14:EF:1F:A5:A8:31:78:1A:C1:A9
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/oDn7FJDz5j0nXxTvH6WoMXgawak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.220.0/22
80.90.80.0/20
81.26.200.0/21
93.93.168.0/22
185.132.92.0/22
185.158.0.0/22
185.175.252.0/22
185.187.0.0/22
185.212.188.0/22
185.239.8.0/22
IPv6:
2a03:2de0::/32
Signature Algorithm: sha256WithRSAEncryption
33:ba:86:09:1e:67:aa:95:26:e1:98:85:f8:96:ee:97:56:70:
15:32:74:c2:4f:f7:ca:eb:4d:2a:39:da:fb:47:87:82:1a:89:
09:64:97:b9:72:95:68:c6:c0:4b:35:20:07:9d:02:e2:0d:96:
4d:c1:27:24:a8:d3:aa:ee:2d:a3:20:50:01:5a:6b:78:9b:b6:
df:d8:c9:95:f0:d6:2c:d5:41:67:78:98:68:c1:13:0c:df:b4:
e6:a3:1c:c2:0e:02:b2:df:a4:01:64:59:2e:fb:a7:ba:fd:ce:
ac:a5:f1:5a:8b:e6:39:31:e6:fb:87:4c:32:59:f1:0a:85:76:
23:c6:8e:47:80:7c:e1:6a:1f:03:29:c9:4f:3a:c1:9e:95:a0:
0a:91:94:af:0e:cb:53:7a:bd:dd:1f:6b:1a:97:3c:1d:20:c6:
5d:7f:5b:61:75:b2:cf:6c:79:67:1d:21:57:1b:7e:8d:dd:83:
f1:65:07:0d:0f:2a:d5:1a:97:53:00:84:58:bb:c2:b9:db:79:
96:e3:35:69:df:d9:18:a1:6f:61:df:46:ec:30:b4:1b:99:e1:
a8:14:c8:c1:02:bf:44:96:e4:fd:55:62:55:54:4d:b6:7a:a8:
75:e6:ea:8e:06:ac:09:f9:30:9d:d3:0a:85:19:b7:c3:54:83:
f4:14:f7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:14 2024 by rpki-client on console-ams.rpki-client.org