Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/AzPiL7D-ZG67Mtuo-oDy72xkjw4.roa
File: AzPiL7D-ZG67Mtuo-oDy72xkjw4.roa (raw, json)
Hash identifier: eC61c0LaJviBcQ6Z2BiLSqsIi1valAFlf2IUGzRDsJM=
Subject key identifier: 03:33:E2:2F:B0:FE:64:6E:BB:32:DB:A8:FA:80:F2:EF:6C:64:8F:0E
Certificate issuer: /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial: 0182D0CDF8AF558925BD154521B1C3C692B0
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/AzPiL7D-ZG67Mtuo-oDy72xkjw4.roa
Signing time: Wed 24 Aug 2022 17:02:15 +0000
ROA not before: Wed 24 Aug 2022 17:02:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50926
IP address blocks: 185.70.92.0/22 maxlen: 22
188.164.192.0/21 maxlen: 21
188.164.192.0/24 maxlen: 24
185.23.68.0/22 maxlen: 22
188.164.197.0/24 maxlen: 24
188.164.199.0/24 maxlen: 24
94.127.186.0/24 maxlen: 24
188.164.198.0/24 maxlen: 24
94.127.185.0/24 maxlen: 24
94.127.184.0/24 maxlen: 24
188.164.196.0/24 maxlen: 24
188.164.195.0/24 maxlen: 24
188.164.194.0/24 maxlen: 24
188.164.193.0/24 maxlen: 24
94.127.191.0/24 maxlen: 24
94.127.190.0/24 maxlen: 24
94.127.188.0/24 maxlen: 24
94.127.187.0/24 maxlen: 24
149.62.172.0/22 maxlen: 22
149.62.168.0/21 maxlen: 21
149.62.168.0/22 maxlen: 22
195.5.116.0/23 maxlen: 23
91.200.140.0/22 maxlen: 22
188.95.112.0/21 maxlen: 21
185.176.9.0/24 maxlen: 24
185.176.8.0/24 maxlen: 24
185.176.11.0/24 maxlen: 24
185.176.10.0/24 maxlen: 24
84.246.213.0/24 maxlen: 24
84.246.212.0/24 maxlen: 24
84.246.211.0/24 maxlen: 24
84.246.210.0/24 maxlen: 24
84.246.209.0/24 maxlen: 24
84.246.208.0/21 maxlen: 21
84.246.208.0/24 maxlen: 24
109.68.84.0/24 maxlen: 24
109.68.82.0/24 maxlen: 24
84.246.215.0/24 maxlen: 24
109.68.80.0/24 maxlen: 24
109.68.80.0/21 maxlen: 21
84.246.214.0/24 maxlen: 24
91.213.46.0/24 maxlen: 24
31.24.152.0/21 maxlen: 21
31.24.152.0/24 maxlen: 24
31.24.159.0/24 maxlen: 24
31.24.158.0/24 maxlen: 24
31.24.157.0/24 maxlen: 24
31.24.156.0/24 maxlen: 24
31.24.155.0/24 maxlen: 24
31.24.154.0/24 maxlen: 24
91.142.208.0/20 maxlen: 20
185.222.156.0/22 maxlen: 22
5.175.42.0/24 maxlen: 24
5.175.41.0/24 maxlen: 24
5.175.40.0/24 maxlen: 24
5.175.40.0/21 maxlen: 21
5.175.44.0/24 maxlen: 24
5.175.43.0/24 maxlen: 24
5.175.47.0/24 maxlen: 24
5.175.46.0/24 maxlen: 24
31.24.43.0/24 maxlen: 24
31.24.40.0/24 maxlen: 24
31.24.40.0/21 maxlen: 21
31.24.46.0/24 maxlen: 24
31.24.45.0/24 maxlen: 24
2a00:5ac0:100::/40 maxlen: 40
2a00:5ac0::/44 maxlen: 44
2a0a:680::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d0:cd:f8:af:55:89:25:bd:15:45:21:b1:c3:c6:92:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Validity
Not Before: Aug 24 17:02:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0333e22fb0fe646ebb32dba8fa80f2ef6c648f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:7f:37:d2:35:8e:f8:b4:38:8c:11:c9:02:
b0:d7:03:8b:15:4f:50:54:25:b8:a5:f6:a1:db:81:
05:33:b0:1a:00:a1:4b:16:73:0d:cd:f8:2e:96:6f:
42:a6:73:3a:f6:8e:b7:15:19:9f:29:76:4e:fd:fa:
a9:9f:91:1e:98:4b:65:2f:4c:43:25:c0:e5:5d:e2:
1e:8c:70:d8:b6:e0:2b:a5:a1:6f:0b:ed:a5:05:6e:
7f:85:22:a0:a8:57:83:29:a3:5a:82:92:f2:fa:c7:
93:3b:82:77:a7:83:ab:69:a7:53:7d:30:05:b4:ff:
1a:e1:d1:ae:46:32:0a:04:0c:2b:e5:57:93:72:f1:
80:d0:3c:59:2d:c4:9c:64:9d:fb:b6:2c:48:a1:f4:
e0:16:0e:de:61:90:cf:56:a3:d0:2b:21:46:b5:4a:
67:56:b6:29:87:c0:6c:89:55:76:34:44:5a:72:b9:
4e:a9:9b:63:b4:bb:5d:b2:a2:22:34:92:5d:a2:b5:
57:8f:f1:66:e3:9c:7b:b7:27:28:f8:2a:c6:bf:e7:
51:a8:8d:94:34:99:75:63:b3:d7:f8:e4:32:5a:39:
75:2e:e2:77:3c:c0:8f:82:2d:ff:e0:41:25:8c:1d:
c6:30:fa:6a:2e:c3:53:25:68:83:f0:6f:08:e1:92:
36:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:33:E2:2F:B0:FE:64:6E:BB:32:DB:A8:FA:80:F2:EF:6C:64:8F:0E
X509v3 Authority Key Identifier:
keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/AzPiL7D-ZG67Mtuo-oDy72xkjw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.40.0/21
31.24.40.0/21
31.24.152.0/21
84.246.208.0/21
91.142.208.0/20
91.200.140.0/22
91.213.46.0/24
94.127.184.0-94.127.188.255
94.127.190.0/23
109.68.80.0/21
149.62.168.0/21
185.23.68.0/22
185.70.92.0/22
185.176.8.0/22
185.222.156.0/22
188.95.112.0/21
188.164.192.0/21
195.5.116.0/23
IPv6:
2a00:5ac0::/44
2a00:5ac0:100::/40
2a0a:680::/29
Signature Algorithm: sha256WithRSAEncryption
56:a5:b2:40:af:c9:8f:7f:6d:2a:a6:92:8b:46:fa:f4:40:34:
08:8a:51:76:1f:b5:fa:77:92:5d:c4:cc:c1:2a:ac:32:cc:ea:
75:22:5a:15:58:07:b8:20:7a:8a:7a:15:ce:c2:39:1e:55:d8:
f7:a7:38:34:4d:8b:4c:eb:06:08:ef:6d:8a:23:5b:35:68:02:
23:3b:47:87:fb:ba:28:89:07:43:49:06:6e:2a:11:86:aa:3d:
44:8f:86:75:87:01:ec:23:68:18:bb:d8:59:fa:de:fc:e0:9e:
1c:95:03:c4:b2:1b:d7:c8:5d:5e:02:46:0a:52:7c:fd:87:c3:
49:6b:20:0f:13:66:83:f7:bf:6e:96:b7:c0:15:bb:cc:d1:59:
5b:b1:66:7a:81:23:0c:97:e3:fe:63:90:e1:c5:5d:9c:6c:07:
76:57:12:08:54:15:29:01:5a:c9:8e:39:1b:87:f0:ea:7f:15:
22:26:5b:77:3f:44:72:11:2b:69:ad:5a:a6:b0:8f:c0:ea:b0:
9a:62:ac:d6:e5:e8:68:63:87:3e:dc:1c:d1:e3:73:af:7c:67:
b6:92:77:2d:ca:02:3c:11:0c:1f:47:f6:61:25:81:ac:b6:75:
4b:74:dc:29:58:63:b7:02:3c:28:22:30:86:ec:ca:6c:59:af:
18:7c:6b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:45 2024 by rpki-client on console-ams.rpki-client.org