Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/dnNZ1oJ5k4sRMktsEe-Nso9hnNY.roa
File: dnNZ1oJ5k4sRMktsEe-Nso9hnNY.roa (raw, json)
Hash identifier: 6vT7Sfi2N47rijEJNZA79ZqEku/gfPoYDY2x+9u/U9U=
Subject key identifier: 76:73:59:D6:82:79:93:8B:11:32:4B:6C:11:EF:8D:B2:8F:61:9C:D6
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 0B3724DB
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/dnNZ1oJ5k4sRMktsEe-Nso9hnNY.roa
Signing time: Tue 10 May 2022 09:02:00 +0000
ROA not before: Tue 10 May 2022 09:02:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9021
IP address blocks: 213.161.128.0/19 maxlen: 19
213.161.128.0/21 maxlen: 21
213.161.136.0/21 maxlen: 21
213.161.135.0/24 maxlen: 24
213.161.145.0/24 maxlen: 24
213.161.144.0/23 maxlen: 23
213.161.144.0/24 maxlen: 24
213.161.146.0/24 maxlen: 24
213.161.150.0/24 maxlen: 24
213.161.148.0/23 maxlen: 23
213.161.149.0/24 maxlen: 24
213.161.148.0/24 maxlen: 24
213.161.152.0/24 maxlen: 24
213.161.151.0/24 maxlen: 24
213.161.152.0/21 maxlen: 21
90.159.128.0/20 maxlen: 20
90.159.136.0/21 maxlen: 21
90.159.136.0/24 maxlen: 24
90.159.44.0/22 maxlen: 22
90.159.50.0/24 maxlen: 24
90.159.51.0/24 maxlen: 24
90.159.58.0/24 maxlen: 24
90.159.59.0/24 maxlen: 24
90.159.68.0/24 maxlen: 24
90.159.64.0/18 maxlen: 18
90.159.240.0/20 maxlen: 20
90.159.246.0/24 maxlen: 24
90.158.136.0/21 maxlen: 21
90.158.139.0/24 maxlen: 24
212.98.0.0/19 maxlen: 19
212.98.2.0/24 maxlen: 24
212.98.1.0/24 maxlen: 24
212.98.0.0/20 maxlen: 20
90.158.160.0/24 maxlen: 24
212.98.8.0/21 maxlen: 21
212.98.9.0/24 maxlen: 24
212.98.16.0/24 maxlen: 24
212.98.16.0/21 maxlen: 21
90.158.96.0/22 maxlen: 22
90.158.101.0/24 maxlen: 24
90.158.100.0/24 maxlen: 24
90.158.105.0/24 maxlen: 24
90.158.104.0/24 maxlen: 24
90.158.102.0/23 maxlen: 23
90.158.111.0/24 maxlen: 24
90.158.110.0/24 maxlen: 24
90.158.109.0/24 maxlen: 24
90.158.114.0/24 maxlen: 24
90.158.112.0/20 maxlen: 20
90.158.116.0/24 maxlen: 24
90.158.119.0/24 maxlen: 24
90.158.122.0/24 maxlen: 24
90.158.121.0/24 maxlen: 24
90.158.120.0/24 maxlen: 24
90.158.123.0/24 maxlen: 24
90.158.126.0/24 maxlen: 24
90.158.128.0/21 maxlen: 21
90.158.127.0/24 maxlen: 24
90.158.128.0/17 maxlen: 17
90.158.240.0/21 maxlen: 21
90.158.248.0/21 maxlen: 21
90.158.249.0/24 maxlen: 24
90.159.2.0/24 maxlen: 24
90.159.1.0/24 maxlen: 24
90.159.0.0/24 maxlen: 24
90.159.0.0/22 maxlen: 22
90.159.3.0/24 maxlen: 24
90.159.0.0/16 maxlen: 16
90.159.10.0/24 maxlen: 24
90.159.15.0/24 maxlen: 24
90.159.20.0/24 maxlen: 24
90.159.29.0/24 maxlen: 24
90.159.27.0/24 maxlen: 24
90.159.31.0/24 maxlen: 24
90.159.33.0/24 maxlen: 24
90.159.36.0/24 maxlen: 24
90.159.34.0/24 maxlen: 24
90.159.38.0/24 maxlen: 24
90.159.37.0/24 maxlen: 24
212.98.28.0/22 maxlen: 22
90.158.200.0/23 maxlen: 23
213.143.255.0/24 maxlen: 24
213.143.254.0/24 maxlen: 24
90.158.28.0/24 maxlen: 24
90.158.27.0/24 maxlen: 24
90.158.26.0/24 maxlen: 24
90.158.31.0/24 maxlen: 24
90.158.30.0/24 maxlen: 24
90.158.29.0/24 maxlen: 24
90.158.32.0/24 maxlen: 24
90.158.33.0/24 maxlen: 24
90.158.37.0/24 maxlen: 24
90.158.36.0/24 maxlen: 24
90.158.39.0/24 maxlen: 24
90.158.41.0/24 maxlen: 24
90.158.44.0/24 maxlen: 24
90.158.43.0/24 maxlen: 24
90.158.50.0/23 maxlen: 23
90.158.51.0/24 maxlen: 24
90.158.46.0/24 maxlen: 24
90.158.45.0/24 maxlen: 24
90.158.48.0/20 maxlen: 20
90.158.48.0/24 maxlen: 24
90.158.47.0/24 maxlen: 24
90.158.52.0/23 maxlen: 23
90.158.53.0/24 maxlen: 24
90.158.52.0/24 maxlen: 24
90.158.56.0/24 maxlen: 24
90.158.55.0/24 maxlen: 24
90.158.54.0/23 maxlen: 23
90.158.60.0/24 maxlen: 24
90.158.62.0/24 maxlen: 24
90.158.64.0/21 maxlen: 21
90.158.64.0/24 maxlen: 24
90.158.66.0/24 maxlen: 24
90.158.65.0/24 maxlen: 24
90.158.68.0/24 maxlen: 24
90.158.67.0/24 maxlen: 24
90.158.73.0/24 maxlen: 24
90.158.72.0/24 maxlen: 24
90.158.72.0/22 maxlen: 22
90.158.75.0/24 maxlen: 24
90.158.74.0/24 maxlen: 24
90.158.0.0/23 maxlen: 23
90.158.0.0/22 maxlen: 22
90.158.0.0/18 maxlen: 18
90.158.3.0/24 maxlen: 24
90.158.0.0/16 maxlen: 16
90.158.8.0/24 maxlen: 24
90.158.16.0/24 maxlen: 24
90.158.15.0/24 maxlen: 24
90.158.18.0/24 maxlen: 24
90.158.19.0/24 maxlen: 24
90.158.24.0/24 maxlen: 24
213.143.224.0/20 maxlen: 20
213.143.226.0/24 maxlen: 24
213.143.226.0/23 maxlen: 23
213.143.228.0/24 maxlen: 24
213.143.227.0/24 maxlen: 24
213.143.230.0/24 maxlen: 24
213.143.229.0/24 maxlen: 24
213.143.233.0/24 maxlen: 24
213.143.235.0/24 maxlen: 24
213.143.234.0/24 maxlen: 24
213.143.238.0/24 maxlen: 24
213.143.236.0/22 maxlen: 22
213.143.240.0/24 maxlen: 24
213.143.240.0/22 maxlen: 22
213.143.239.0/24 maxlen: 24
213.143.240.0/20 maxlen: 20
213.143.241.0/24 maxlen: 24
213.143.244.0/22 maxlen: 22
213.143.243.0/24 maxlen: 24
213.143.252.0/24 maxlen: 24
213.143.251.0/24 maxlen: 24
213.143.250.0/24 maxlen: 24
213.143.253.0/24 maxlen: 24
2a00:1f90::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188163291 (0xb3724db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: May 10 09:02:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=767359d68279938b11324b6c11ef8db28f619cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:a6:cc:62:42:0f:6b:60:3b:9b:4a:04:b9:
d1:32:77:98:60:8a:53:3f:b2:ae:67:ca:a3:4f:ab:
6a:28:b0:61:c3:78:b1:94:3c:dc:b5:23:ba:20:92:
d5:ba:58:cc:c0:26:a2:13:de:c8:ac:17:a0:d1:6d:
ac:a0:c4:f6:47:7a:9b:45:6a:4f:d4:8b:e2:ad:b0:
66:c9:7d:18:ca:11:1d:46:3d:63:2a:fb:ff:04:17:
27:5d:87:33:91:46:f2:43:c6:23:4a:e1:55:a4:6c:
e1:af:24:c3:28:82:94:ba:9f:d4:bb:ae:7b:85:1d:
2b:22:a0:93:6e:b6:82:04:00:bf:6f:7d:9e:ca:4e:
9e:2a:9b:3a:5f:08:35:21:7f:a7:32:78:f3:1b:bb:
12:e0:80:79:bd:4b:ed:37:ad:ca:3f:71:d4:a9:2f:
d6:c9:0a:a2:9d:52:7a:98:b5:02:9c:27:37:54:f9:
cb:ee:6b:ed:08:14:01:71:7a:5d:c1:31:5d:16:39:
9c:8c:04:44:0d:a8:35:aa:15:e1:4c:a4:50:3a:ce:
a0:83:42:0e:4a:0c:19:97:80:b8:9b:c5:20:d8:5d:
7c:7d:f0:8b:4d:94:59:6d:93:ee:78:81:97:67:3e:
20:a4:83:18:1d:fe:76:cc:4f:e4:9e:da:db:85:07:
55:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:73:59:D6:82:79:93:8B:11:32:4B:6C:11:EF:8D:B2:8F:61:9C:D6
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/dnNZ1oJ5k4sRMktsEe-Nso9hnNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.158.0.0/15
212.98.0.0/19
213.143.224.0/19
213.161.128.0/19
IPv6:
2a00:1f90::/32
Signature Algorithm: sha256WithRSAEncryption
5d:1a:c4:11:fa:49:e9:d2:77:41:0f:75:70:27:70:b9:a3:8e:
b0:50:0a:bc:fb:4b:95:2a:e3:91:c0:ba:9f:b2:1a:a8:57:69:
88:6e:73:af:b7:98:04:3a:96:69:1c:99:d1:21:41:4a:ec:30:
ba:50:d1:08:6d:b8:10:a7:52:3b:0e:d2:4f:ba:eb:b5:7e:62:
a7:9c:fb:15:42:57:e9:1d:51:a3:d8:19:ab:1a:8e:ae:4a:a9:
a1:62:d7:6f:95:3f:f4:43:69:e7:50:c4:64:2a:a4:cc:db:91:
b7:ad:7a:fb:b4:e8:76:ab:a4:5f:50:9a:73:f4:66:ca:96:8d:
5b:ed:c9:8d:2c:90:c1:02:a3:83:6d:f9:cf:63:65:df:d0:5e:
57:40:17:4e:b8:ce:1b:8e:91:22:5b:f5:7c:81:37:1d:b2:56:
23:72:e3:84:d7:90:1c:fb:72:06:cc:58:e8:60:68:9d:a2:16:
e7:cf:bd:ea:61:da:48:af:74:f6:5a:d4:d9:17:fa:e9:e0:5d:
1a:9e:3c:6e:22:3a:e5:5e:a1:cd:e5:e9:a0:e3:31:64:00:47:
28:8f:a6:a3:a4:15:70:07:e5:fd:d9:1a:72:d2:19:46:63:20:
60:81:27:a1:04:49:3d:ef:90:7b:ed:02:33:b2:34:d9:9a:b7:
8e:b0:65:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:16 2024 by rpki-client on console-ams.rpki-client.org