Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ojevUqz4-nMNbP9rsIuLne3s7dc.roa
File: ojevUqz4-nMNbP9rsIuLne3s7dc.roa (raw, json)
Hash identifier: +jUz/Dx+7oR8kjnlVXaB4UfVEolhPh7nYPsL0sG7E5Y=
Subject key identifier: A2:37:AF:52:AC:F8:FA:73:0D:6C:FF:6B:B0:8B:8B:9D:ED:EC:ED:D7
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2AE76C55
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ojevUqz4-nMNbP9rsIuLne3s7dc.roa
Signing time: Sat 01 Jan 2022 13:57:45 +0000
ROA not before: Sat 01 Jan 2022 13:57:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12741
IP address blocks: 77.252.0.0/14 maxlen: 14
159.205.0.0/16 maxlen: 16
193.19.104.0/23 maxlen: 23
89.171.0.0/16 maxlen: 16
62.87.128.0/17 maxlen: 17
178.16.116.0/24 maxlen: 24
178.16.121.0/24 maxlen: 24
178.16.125.0/24 maxlen: 24
62.181.160.0/19 maxlen: 19
213.134.128.0/19 maxlen: 19
87.204.0.0/15 maxlen: 15
62.244.128.0/19 maxlen: 19
82.143.128.0/18 maxlen: 18
62.89.64.0/18 maxlen: 18
77.65.188.0/24 maxlen: 24
77.65.193.0/24 maxlen: 24
213.241.0.0/17 maxlen: 17
178.36.0.0/15 maxlen: 15
213.238.64.0/18 maxlen: 18
213.241.89.0/24 maxlen: 24
83.238.0.0/16 maxlen: 16
62.233.128.0/17 maxlen: 17
81.210.0.0/17 maxlen: 17
5.226.135.0/24 maxlen: 24
213.186.64.0/19 maxlen: 19
77.65.134.0/24 maxlen: 24
212.106.0.0/19 maxlen: 19
77.65.155.0/24 maxlen: 24
77.65.171.0/24 maxlen: 24
213.146.32.0/19 maxlen: 19
78.8.0.0/14 maxlen: 14
62.111.128.0/17 maxlen: 17
85.128.0.0/17 maxlen: 17
37.128.0.0/17 maxlen: 17
62.148.64.0/19 maxlen: 19
84.40.128.0/17 maxlen: 17
81.168.128.0/17 maxlen: 17
81.219.0.0/16 maxlen: 16
193.91.16.0/20 maxlen: 20
195.114.160.0/19 maxlen: 19
85.202.54.0/24 maxlen: 24
85.202.59.0/24 maxlen: 24
213.195.128.0/18 maxlen: 18
217.30.128.0/19 maxlen: 19
213.17.128.0/17 maxlen: 17
5.226.92.0/24 maxlen: 24
213.216.64.0/18 maxlen: 18
193.192.173.0/24 maxlen: 24
93.159.0.0/18 maxlen: 18
193.192.181.0/24 maxlen: 24
193.192.190.0/24 maxlen: 24
193.192.188.0/24 maxlen: 24
62.111.250.0/24 maxlen: 24
5.226.64.0/18 maxlen: 18
87.105.0.0/16 maxlen: 16
2001:41b0::/32 maxlen: 32
2001:16b0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719809621 (0x2ae76c55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:57:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a237af52acf8fa730d6cff6bb08b8b9dedecedd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:3d:5b:fc:cb:4f:6f:69:8a:15:1d:a2:04:
58:03:65:05:46:89:5e:71:2b:71:42:f2:dd:ea:8b:
3a:13:5e:62:be:50:f7:ea:6e:d4:28:cb:36:e7:be:
8a:8e:20:6d:dc:ed:1f:de:df:57:f3:b7:04:4c:b3:
90:9c:0b:56:b3:db:4d:78:f0:26:c9:35:fe:33:f4:
6e:6e:ff:a1:7a:c2:e8:ba:13:d1:c1:b8:47:bc:3a:
30:bb:c4:68:8c:7f:cb:2f:6e:3c:fd:fd:40:86:47:
00:06:b9:6e:1d:ca:a9:08:89:ea:6f:a3:e8:6d:b1:
2f:5b:c6:37:66:e3:82:c7:8f:e6:b4:bf:95:bf:84:
ba:31:c6:01:e7:da:2b:30:1d:ed:f0:da:36:45:c5:
d9:b9:9d:cc:f3:53:e1:45:18:64:ae:6e:6b:04:8d:
75:58:bb:07:43:db:26:68:0c:f4:8f:d7:98:4e:5d:
2a:9b:64:01:8b:a3:08:9d:f9:c8:bd:4f:f0:93:47:
c8:e1:15:1e:8d:2f:7f:60:21:36:d1:88:e9:28:6d:
84:5b:fe:2b:15:9d:de:97:16:4e:08:75:e5:fa:94:
d0:66:b2:ca:2d:9d:07:e9:7c:b4:bb:61:68:a8:2c:
4d:26:24:34:fd:c3:48:b3:2f:bd:56:18:1a:51:4f:
b7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:37:AF:52:AC:F8:FA:73:0D:6C:FF:6B:B0:8B:8B:9D:ED:EC:ED:D7
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ojevUqz4-nMNbP9rsIuLne3s7dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.64.0/18
5.226.135.0/24
37.128.0.0/17
62.87.128.0/17
62.89.64.0/18
62.111.128.0/17
62.148.64.0/19
62.181.160.0/19
62.233.128.0/17
62.244.128.0/19
77.65.134.0/24
77.65.155.0/24
77.65.171.0/24
77.65.188.0/24
77.65.193.0/24
77.252.0.0/14
78.8.0.0/14
81.168.128.0/17
81.210.0.0/17
81.219.0.0/16
82.143.128.0/18
83.238.0.0/16
84.40.128.0/17
85.128.0.0/17
85.202.54.0/24
85.202.59.0/24
87.105.0.0/16
87.204.0.0/15
89.171.0.0/16
93.159.0.0/18
159.205.0.0/16
178.16.116.0/24
178.16.121.0/24
178.16.125.0/24
178.36.0.0/15
193.19.104.0/23
193.91.16.0/20
193.192.173.0/24
193.192.181.0/24
193.192.188.0/24
193.192.190.0/24
195.114.160.0/19
212.106.0.0/19
213.17.128.0/17
213.134.128.0/19
213.146.32.0/19
213.186.64.0/19
213.195.128.0/18
213.216.64.0/18
213.238.64.0/18
213.241.0.0/17
217.30.128.0/19
IPv6:
2001:16b0::/32
2001:41b0::/32
Signature Algorithm: sha256WithRSAEncryption
2d:6c:a5:d7:1e:57:2d:fb:65:32:9b:ef:b7:bf:36:a2:90:8a:
7f:06:a5:c0:98:82:73:29:fe:31:1b:31:10:e4:37:c5:af:ae:
e3:9e:d9:69:65:a5:94:5d:50:2f:e2:b5:4f:1a:0f:20:7e:75:
15:87:b4:73:57:05:88:d6:81:98:92:c8:a5:df:85:ab:09:16:
94:a8:ba:e1:4c:cb:1b:54:d2:7f:ed:d4:6a:c2:ac:5d:2a:27:
ea:ec:f9:25:64:64:ca:06:d4:d4:57:47:f8:3a:d8:7b:05:05:
44:3f:9c:23:20:2f:92:2f:74:84:f8:6e:d4:11:fa:42:71:c0:
aa:c3:c9:8c:c5:5e:7f:51:c1:70:87:e2:ee:dc:19:ff:be:eb:
5a:df:f8:fc:22:c0:0b:91:b8:e9:d1:7f:af:ca:83:03:fe:85:
5c:57:ce:a3:f5:fa:81:2b:9a:9b:92:27:ff:c1:25:a8:de:e8:
43:f4:16:94:aa:c6:34:0c:b8:bd:fb:6a:5f:ea:8e:be:45:89:
83:ec:64:62:a8:d0:ba:8b:fd:e6:cc:16:69:50:88:b0:59:9b:
f4:85:4c:90:0c:bc:35:b6:50:02:b8:01:07:e6:20:35:e1:a3:
e6:cb:fc:f1:41:fc:22:ec:c4:94:f0:c6:c2:46:a2:69:31:1f:
33:79:59:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org