Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/thcwQx8aosQt2iPaJywbbSq4Tu8.roa
File: thcwQx8aosQt2iPaJywbbSq4Tu8.roa (raw, json)
Hash identifier: JOYvfg56mR7GHfLFqMtHe4nmeavFscCLnou8srvRVQ4=
Subject key identifier: B6:17:30:43:1F:1A:A2:C4:2D:DA:23:DA:27:2C:1B:6D:2A:B8:4E:EF
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 0182E9B2D1E44463BF3FDAFFC40BD59E034A
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/thcwQx8aosQt2iPaJywbbSq4Tu8.roa
Signing time: Mon 29 Aug 2022 13:03:06 +0000
ROA not before: Mon 29 Aug 2022 13:03:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57363
IP address blocks: 91.231.234.0/24 maxlen: 24
91.231.235.0/24 maxlen: 24
91.231.236.0/24 maxlen: 24
91.231.237.0/24 maxlen: 24
91.231.239.0/24 maxlen: 24
91.238.108.0/24 maxlen: 24
91.238.109.0/24 maxlen: 24
91.238.110.0/24 maxlen: 24
185.31.112.0/24 maxlen: 24
185.31.114.0/24 maxlen: 24
185.31.115.0/24 maxlen: 24
91.240.170.0/24 maxlen: 24
91.240.168.0/24 maxlen: 24
91.240.169.0/24 maxlen: 24
151.236.109.0/24 maxlen: 24
151.236.110.0/23 maxlen: 23
151.236.111.0/24 maxlen: 24
151.236.106.0/24 maxlen: 24
151.236.107.0/24 maxlen: 24
151.236.113.0/24 maxlen: 24
151.236.122.0/23 maxlen: 23
151.236.123.0/24 maxlen: 24
151.236.125.0/24 maxlen: 24
151.236.64.0/24 maxlen: 24
151.236.65.0/24 maxlen: 24
151.236.67.0/24 maxlen: 24
151.236.68.0/24 maxlen: 24
151.236.70.0/24 maxlen: 24
151.236.74.0/24 maxlen: 24
151.236.75.0/24 maxlen: 24
151.236.77.0/24 maxlen: 24
151.236.78.0/24 maxlen: 24
151.236.72.0/24 maxlen: 24
151.236.73.0/24 maxlen: 24
151.236.81.0/24 maxlen: 24
151.236.83.0/24 maxlen: 24
151.236.84.0/24 maxlen: 24
151.236.85.0/24 maxlen: 24
151.236.80.0/24 maxlen: 24
151.236.89.0/24 maxlen: 24
151.236.90.0/24 maxlen: 24
151.236.91.0/24 maxlen: 24
151.236.86.0/24 maxlen: 24
151.236.87.0/24 maxlen: 24
151.236.95.0/24 maxlen: 24
151.236.96.0/24 maxlen: 24
151.236.102.0/24 maxlen: 24
151.236.99.0/24 maxlen: 24
151.236.100.0/24 maxlen: 24
2a02:aec0:3::/48 maxlen: 48
2a02:aec0:7::/48 maxlen: 48
2a02:aec0:8::/48 maxlen: 48
2a02:aec0:1::/48 maxlen: 48
2a02:aec0:5::/48 maxlen: 48
2a02:aec0:2::/48 maxlen: 48
2a02:aec0:9::/48 maxlen: 48
2a02:aec0:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e9:b2:d1:e4:44:63:bf:3f:da:ff:c4:0b:d5:9e:03:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Aug 29 13:03:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b61730431f1aa2c42dda23da272c1b6d2ab84eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:77:e0:4f:81:f7:52:45:d4:52:a6:ad:4e:d6:
8c:dd:e3:2e:a6:0e:6c:bf:42:3d:37:8b:d5:22:77:
96:63:07:39:67:fb:48:c4:20:f2:7d:74:46:68:8c:
ac:a0:a9:79:ee:69:02:f1:5d:59:e8:11:d2:01:39:
b1:7f:1a:c6:00:13:df:eb:5c:c6:48:32:a4:29:04:
0c:68:0d:95:d9:e8:ae:4e:f2:27:fd:f4:ae:60:d0:
f5:36:6d:19:d0:8b:52:88:19:1b:8d:14:61:c8:7b:
05:bc:eb:c2:c1:e0:51:d0:3e:96:6c:b7:2b:01:bb:
93:38:84:79:95:ac:a4:da:71:2f:2b:05:c9:11:af:
09:84:88:6b:35:62:00:22:1c:43:80:02:c7:24:4c:
61:1b:de:27:b9:a3:d3:ea:f3:ec:fb:b7:56:d2:e6:
8b:e4:21:78:02:f9:0b:8b:84:dc:a5:dc:66:ab:be:
0d:10:54:50:89:1b:38:3f:37:1a:dc:53:e9:1a:1e:
e9:b3:89:d7:df:3b:ec:15:1e:fd:36:4b:8e:b3:85:
2b:34:98:65:23:85:26:69:23:d9:44:1e:cc:ab:25:
d4:c5:e2:7c:58:86:c6:c6:0f:b6:f8:57:52:14:25:
ec:a7:ad:37:70:d3:76:0a:aa:82:59:13:ad:9f:f9:
d9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:17:30:43:1F:1A:A2:C4:2D:DA:23:DA:27:2C:1B:6D:2A:B8:4E:EF
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/thcwQx8aosQt2iPaJywbbSq4Tu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.234.0-91.231.237.255
91.231.239.0/24
91.238.108.0-91.238.110.255
91.240.168.0-91.240.170.255
151.236.64.0/23
151.236.67.0-151.236.68.255
151.236.70.0/24
151.236.72.0/22
151.236.77.0-151.236.78.255
151.236.80.0/23
151.236.83.0-151.236.87.255
151.236.89.0-151.236.91.255
151.236.95.0-151.236.96.255
151.236.99.0-151.236.100.255
151.236.102.0/24
151.236.106.0/23
151.236.109.0-151.236.111.255
151.236.113.0/24
151.236.122.0/23
151.236.125.0/24
185.31.112.0/24
185.31.114.0/23
IPv6:
2a02:aec0:1::-2a02:aec0:3:ffff:ffff:ffff:ffff:ffff
2a02:aec0:5::-2a02:aec0:9:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
74:02:bc:0c:9a:c9:82:85:10:6c:54:2c:d8:99:3c:4b:6a:9d:
34:dd:b5:82:40:a2:0f:29:92:98:a3:b6:b3:e3:2f:e2:c9:b5:
1e:7e:74:9c:5a:e1:54:0e:80:a3:e0:de:83:8b:77:a9:4d:95:
6c:5d:6c:68:4d:52:ea:9d:93:fc:b8:a4:fd:3a:b0:70:15:60:
28:55:f1:04:5e:79:2f:bd:18:96:15:ac:58:3d:7a:37:1c:6d:
d4:dd:b7:d5:74:72:4f:39:3b:68:f6:17:b4:bf:0b:a3:43:10:
e2:3b:93:a6:c3:5c:4f:27:f0:be:c6:61:b2:c9:cf:36:35:1d:
94:06:32:b7:5e:03:e8:74:93:b1:6f:bf:1a:cf:fb:85:f6:d3:
19:64:08:7f:21:09:db:28:7f:26:c5:60:af:3a:95:de:e0:8f:
80:25:9f:5b:e3:3c:8c:0e:58:28:3b:e6:7e:c8:77:ab:0d:75:
06:65:17:7a:03:d1:3e:75:3b:b2:d4:d8:90:5c:7b:6d:7e:54:
98:38:79:f7:a1:11:58:9c:34:e4:1f:99:d9:87:a3:16:df:db:
e6:43:04:c8:0d:ae:72:e6:ae:6f:c2:fb:fa:c3:da:78:62:19:
a1:2c:b0:e9:9f:76:e4:41:0b:29:bb:1d:8d:c1:dd:b8:68:9e:
f9:fb:b1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:23 2024 by rpki-client on console-ams.rpki-client.org