Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/EZnGNHICvkTMOQmyWg4d8Vf_S-w.roa
File: EZnGNHICvkTMOQmyWg4d8Vf_S-w.roa (raw, json)
Hash identifier: rsSoXPp7f5ZuXCQU2dEcdhcsEKmr3zqZ37Q2rl2bXiY=
Subject key identifier: 11:99:C6:34:72:02:BE:44:CC:39:09:B2:5A:0E:1D:F1:57:FF:4B:EC
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 0B52663D
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/EZnGNHICvkTMOQmyWg4d8Vf_S-w.roa
Signing time: Mon 31 Jan 2022 15:42:14 +0000
ROA not before: Mon 31 Jan 2022 15:42:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20559
IP address blocks: 185.122.116.0/22 maxlen: 22
194.213.112.0/23 maxlen: 23
5.172.40.0/21 maxlen: 21
31.200.208.0/21 maxlen: 21
91.224.248.0/23 maxlen: 23
45.13.164.0/22 maxlen: 22
46.226.88.0/21 maxlen: 21
185.51.56.0/22 maxlen: 22
45.133.196.0/22 maxlen: 22
193.37.204.0/22 maxlen: 22
185.46.64.0/22 maxlen: 22
193.187.188.0/22 maxlen: 22
45.146.124.0/22 maxlen: 22
88.218.152.0/22 maxlen: 22
46.19.216.0/21 maxlen: 21
91.218.148.0/22 maxlen: 22
185.113.84.0/22 maxlen: 22
93.186.176.0/20 maxlen: 20
85.209.108.0/22 maxlen: 22
2a03:3400::/32 maxlen: 32
2a00:d10::/32 maxlen: 32
2a06:6940::/29 maxlen: 29
2a04:a840::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189949501 (0xb52663d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Jan 31 15:42:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1199c6347202be44cc3909b25a0e1df157ff4bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:ec:36:92:25:a9:23:df:a7:a0:e8:a0:e2:
cf:38:5f:56:66:bc:b3:52:be:77:85:f2:ef:50:12:
4b:52:11:f0:bc:df:f7:21:d8:c6:ac:51:94:2a:ab:
ff:6d:21:20:96:45:f7:35:6f:71:f3:7e:e1:54:98:
67:59:6d:f7:ff:d5:b5:fd:ad:59:41:af:23:fa:3f:
83:fa:e7:68:79:48:11:7d:6a:23:38:77:0d:2f:14:
ea:3c:40:a9:e7:55:01:99:29:2a:8e:b8:cf:f4:24:
ca:c6:5e:6c:21:fc:f3:41:8a:ad:b9:11:10:9d:d3:
75:6a:c4:6e:65:2e:4f:dd:49:87:2a:c8:87:46:9a:
b3:73:57:fa:d4:08:91:31:e9:a7:29:0b:4f:d6:f0:
f4:d3:0c:42:bc:55:53:ee:44:ed:b4:9a:12:e2:05:
cb:6c:86:94:50:83:4e:11:8a:00:b5:52:2d:45:65:
8d:b8:15:04:57:00:b8:b3:34:85:98:12:1e:f3:1b:
d4:2b:bf:47:cd:1c:2e:6d:5a:40:38:d7:db:4d:aa:
b5:6a:09:55:eb:bb:37:43:a0:b7:28:7e:7a:05:dd:
ef:e6:54:41:64:ae:b0:25:7b:77:44:e0:ec:20:0e:
12:44:c3:63:1d:91:25:84:dc:07:c9:96:ef:03:3e:
95:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:99:C6:34:72:02:BE:44:CC:39:09:B2:5A:0E:1D:F1:57:FF:4B:EC
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/EZnGNHICvkTMOQmyWg4d8Vf_S-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.40.0/21
31.200.208.0/21
45.13.164.0/22
45.133.196.0/22
45.146.124.0/22
46.19.216.0/21
46.226.88.0/21
85.209.108.0/22
88.218.152.0/22
91.218.148.0/22
91.224.248.0/23
93.186.176.0/20
185.46.64.0/22
185.51.56.0/22
185.113.84.0/22
185.122.116.0/22
193.37.204.0/22
193.187.188.0/22
194.213.112.0/23
IPv6:
2a00:d10::/32
2a03:3400::/32
2a04:a840::/29
2a06:6940::/29
Signature Algorithm: sha256WithRSAEncryption
2b:70:25:f7:e4:a8:aa:24:d9:8f:e1:79:6b:96:da:70:b3:a3:
5a:12:e6:fc:0d:bb:48:c8:56:af:f7:bb:0a:25:db:c8:57:83:
8f:64:db:29:42:72:f2:28:5e:9e:a2:38:7f:18:5b:30:f8:0b:
d4:f6:00:1f:81:7e:0c:f4:67:e5:ff:21:38:0e:00:08:9c:b6:
e1:12:cd:25:1f:15:a4:fe:45:a9:99:28:73:6f:78:e3:35:05:
3f:c2:19:e0:18:37:a1:c2:29:fc:be:47:ca:19:74:4e:06:2e:
f3:4b:7a:73:0c:d7:83:99:23:37:8e:34:90:5c:15:a0:05:17:
a1:f2:fe:99:b1:d1:fe:8c:c1:6e:97:e2:5e:48:39:c8:46:d0:
bf:04:60:1e:5c:70:ef:8a:62:eb:82:0b:f2:f9:13:5a:bf:09:
ae:78:d0:8b:c2:0f:c9:fd:cb:76:0f:86:ca:7e:40:1a:7f:c7:
e7:f8:e3:13:69:e4:d6:e2:1e:c1:a7:12:0e:a5:fc:e1:b0:c9:
ae:18:94:1c:75:ed:ca:af:42:34:41:f8:e9:a7:8a:60:e2:88:
f6:6b:df:e7:b9:b7:5d:48:8f:00:4c:4e:9c:ce:2b:79:49:59:
f1:a8:86:c2:32:a7:0c:04:6a:d6:32:d3:4b:cd:8d:d7:db:83:
8f:2f:d3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:23 2024 by rpki-client on console-fra.rpki-client.org