Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/kCKgmKTju8lO9fTq7dRFtk05jX0.roa
File: kCKgmKTju8lO9fTq7dRFtk05jX0.roa (raw, json)
Hash identifier: Bx3z4M8xhl6Dv/6NK1oMMvE8jV4iJig0XRe5E3/W1So=
Subject key identifier: 90:22:A0:98:A4:E3:BB:C9:4E:F5:F4:EA:ED:D4:45:B6:4D:39:8D:7D
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018326EB69CB5B57223CDF1331C21A7ECBC6
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/kCKgmKTju8lO9fTq7dRFtk05jX0.roa
Signing time: Sat 10 Sep 2022 10:21:45 +0000
ROA not before: Sat 10 Sep 2022 10:21:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 89.38.38.0/24 maxlen: 24
45.87.22.0/24 maxlen: 24
45.87.20.0/24 maxlen: 24
45.83.188.0/22 maxlen: 24
185.51.194.0/23 maxlen: 23
185.51.193.0/24 maxlen: 24
45.130.143.0/24 maxlen: 24
45.88.122.0/24 maxlen: 24
45.88.120.0/24 maxlen: 24
136.144.16.0/24 maxlen: 24
136.144.18.0/24 maxlen: 24
136.144.24.0/22 maxlen: 24
45.133.252.0/24 maxlen: 24
45.133.254.0/24 maxlen: 24
136.144.34.0/24 maxlen: 24
136.144.32.0/24 maxlen: 24
188.208.38.0/23 maxlen: 23
45.148.24.0/24 maxlen: 24
45.159.244.0/22 maxlen: 24
45.154.139.0/24 maxlen: 24
45.154.136.0/24 maxlen: 24
45.146.52.0/24 maxlen: 24
185.114.60.0/22 maxlen: 22
185.243.246.0/24 maxlen: 24
185.243.244.0/24 maxlen: 24
185.227.32.0/24 maxlen: 24
45.129.232.0/22 maxlen: 24
89.251.3.0/24 maxlen: 24
89.251.1.0/24 maxlen: 24
89.46.46.0/24 maxlen: 24
45.157.96.0/22 maxlen: 24
89.36.36.0/24 maxlen: 24
45.149.0.0/24 maxlen: 24
45.157.114.0/23 maxlen: 24
45.157.113.0/24 maxlen: 24
45.150.94.0/24 maxlen: 24
45.150.92.0/24 maxlen: 24
45.143.192.0/24 maxlen: 24
45.143.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:26:eb:69:cb:5b:57:22:3c:df:13:31:c2:1a:7e:cb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Sep 10 10:21:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9022a098a4e3bbc94ef5f4eaedd445b64d398d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:98:a2:46:fc:e8:24:9c:48:00:51:ee:6e:8d:
2d:88:41:2d:a1:42:ff:cf:2a:1e:52:bc:79:b4:e2:
46:7c:28:95:ed:59:ee:3b:bd:c9:a4:7f:a3:c4:b5:
2d:8c:a5:8a:56:a5:9e:36:66:3c:a0:85:c0:c6:57:
ac:ef:7f:98:d8:59:04:f5:dc:6c:8c:40:5f:d9:ec:
82:4b:62:17:7a:7e:78:b0:9a:6e:81:bf:a3:6a:af:
0e:70:da:d3:7a:17:08:78:4e:ea:7e:eb:3c:47:58:
3e:d6:5d:03:dc:f1:14:63:e9:42:c5:f2:a6:af:0a:
00:a0:30:d8:12:b8:4f:71:bb:2f:fe:fa:1c:d1:c3:
14:10:d0:2b:cf:1f:e2:fd:86:c1:0d:6b:7f:7e:ce:
d0:90:e4:ab:fb:ad:6a:af:a5:8a:fb:e5:fd:62:14:
8e:e7:7c:b3:82:7b:dd:43:9a:f5:f3:c5:68:98:85:
36:00:08:5f:ea:0d:f7:1a:a6:fe:d0:7d:d0:38:04:
bd:63:61:5b:07:20:ff:b2:79:4e:3d:03:0b:9a:cf:
d8:27:a8:98:17:b1:09:01:c1:f3:13:05:ff:b8:88:
bf:d8:5b:4d:2b:52:81:08:f5:35:c0:24:17:26:8e:
4a:71:23:63:f6:c4:50:74:a5:42:48:e3:34:ab:4a:
54:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:22:A0:98:A4:E3:BB:C9:4E:F5:F4:EA:ED:D4:45:B6:4D:39:8D:7D
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/kCKgmKTju8lO9fTq7dRFtk05jX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.188.0/22
45.87.20.0/24
45.87.22.0/24
45.88.120.0/24
45.88.122.0/24
45.129.232.0/22
45.130.143.0/24
45.133.252.0/24
45.133.254.0/24
45.143.192.0/24
45.143.194.0/24
45.146.52.0/24
45.148.24.0/24
45.149.0.0/24
45.150.92.0/24
45.150.94.0/24
45.154.136.0/24
45.154.139.0/24
45.157.96.0/22
45.157.113.0-45.157.115.255
45.159.244.0/22
89.36.36.0/24
89.38.38.0/24
89.46.46.0/24
89.251.1.0/24
89.251.3.0/24
136.144.16.0/24
136.144.18.0/24
136.144.24.0/22
136.144.32.0/24
136.144.34.0/24
185.51.193.0-185.51.195.255
185.114.60.0/22
185.227.32.0/24
185.243.244.0/24
185.243.246.0/24
188.208.38.0/23
Signature Algorithm: sha256WithRSAEncryption
28:96:2d:3b:d5:7a:c3:0b:aa:24:06:0f:76:32:56:fd:49:eb:
99:f9:18:d5:1f:1a:52:45:c8:b2:ee:c3:bc:da:c1:89:c7:5b:
91:fb:d4:3e:37:eb:c1:7d:73:50:ee:7a:0f:c2:f3:17:cf:c6:
47:95:05:d9:86:02:0f:4d:b6:c3:37:90:cc:95:40:7e:58:18:
10:86:be:68:ff:b2:53:e5:33:5e:bf:69:31:22:3f:8d:00:41:
9d:b3:49:1b:8d:1f:9f:6b:76:fb:f3:69:89:55:95:83:d1:a4:
5a:d0:7e:28:a7:38:5d:6c:7d:ac:ca:07:fe:aa:64:8b:65:96:
57:ef:2f:a8:48:f3:a2:bb:9b:e4:69:e7:01:55:81:ee:1c:c6:
95:8f:b0:22:7d:a6:b2:50:37:31:fb:d6:d3:ee:3b:d4:4f:61:
d0:98:6d:56:23:5b:7f:d0:b5:5f:14:83:33:ba:8a:9c:c8:02:
7a:4f:03:12:4e:61:86:53:a9:12:7e:f2:37:4e:f2:36:95:88:
95:30:47:a0:c8:3e:75:45:05:d5:b6:76:0d:88:17:26:88:79:
33:c3:bc:ca:8c:6f:f2:fb:72:72:42:1d:5f:1f:f5:15:6a:5e:
a5:a8:c9:10:2d:09:08:cb:4f:36:a1:f7:66:5e:20:35:ec:7a:
02:5f:a5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:33 2023 by rpki-client on console-fra.rpki-client.org