Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2TnjJxg8Ntc7KoLSXDUlfC1Rd6Y.roa
File: 2TnjJxg8Ntc7KoLSXDUlfC1Rd6Y.roa (raw, json)
Hash identifier: aSNXoHPD0dhK6i/wM2KdimuX1ZOh3MQnJNe2mJSExSg=
Subject key identifier: D9:39:E3:27:18:3C:36:D7:3B:2A:82:D2:5C:35:25:7C:2D:51:77:A6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01831865C3DDC8EBAF4513FC6551BF523560
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2TnjJxg8Ntc7KoLSXDUlfC1Rd6Y.roa
Signing time: Wed 07 Sep 2022 14:41:05 +0000
ROA not before: Wed 07 Sep 2022 14:41:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 85.31.45.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
185.218.136.0/24 maxlen: 24
82.115.208.0/24 maxlen: 24
82.115.209.0/24 maxlen: 24
82.115.210.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
84.54.49.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
194.55.227.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
80.76.50.0/24 maxlen: 24
80.76.48.0/24 maxlen: 24
193.42.32.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.69.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
94.103.126.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
193.25.218.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:18:65:c3:dd:c8:eb:af:45:13:fc:65:51:bf:52:35:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 7 14:41:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d939e327183c36d73b2a82d25c35257c2d5177a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1d:be:fc:8c:cb:e5:50:dd:7e:fc:e6:88:93:
05:0a:2b:85:bf:b2:77:e3:fb:38:b1:e8:01:a2:8a:
09:d5:be:32:5b:29:fd:8b:a7:a3:67:5c:1a:88:e0:
d4:dc:b1:3c:47:65:73:e0:20:9b:b7:72:e0:65:c5:
b6:97:f3:74:ad:99:ce:33:fe:54:d2:5a:85:e3:31:
0f:bb:cc:41:a7:00:e8:58:a5:10:5c:07:9f:1b:7a:
d4:07:64:b1:a2:0b:2c:45:fd:b2:2d:c2:7f:ca:b6:
13:62:3d:8a:57:56:c7:d2:84:51:b7:6d:48:5b:77:
9f:8a:d6:90:c3:a7:37:21:63:92:2d:50:45:ca:51:
2f:a0:43:29:cb:18:a2:d8:ea:eb:95:d7:0a:d4:a9:
22:74:86:50:0e:9b:57:cd:85:64:1a:ab:d1:1b:24:
33:ea:12:38:5d:90:4f:ab:e9:94:fe:5d:c3:e8:bc:
39:a2:9f:4f:82:64:b6:f3:29:5a:ce:31:65:b9:91:
4c:92:af:77:c5:b4:1c:e8:25:a1:95:e3:89:40:ea:
c6:28:f6:ca:ca:f1:94:57:16:79:af:d6:c5:24:45:
dc:88:a6:5b:96:93:22:e8:d9:cd:eb:44:83:81:cb:
9e:6e:ed:55:3b:db:36:73:23:85:99:52:63:8c:22:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:39:E3:27:18:3C:36:D7:3B:2A:82:D2:5C:35:25:7C:2D:51:77:A6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2TnjJxg8Ntc7KoLSXDUlfC1Rd6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.48.0/24
80.76.50.0/24
82.115.208.0/22
84.21.172.0/23
84.54.48.0/23
85.31.45.0/24
85.31.47.0/24
87.120.84.0/24
87.120.87.0/24
87.121.221.0/24
92.249.50.0/24
94.103.125.0-94.103.126.255
94.154.172.0/24
178.215.225.0-178.215.227.255
178.215.236.0/24
178.215.239.0/24
185.216.69.0-185.216.70.255
185.218.136.0/24
185.246.221.0/24
193.25.217.0-193.25.218.255
193.35.19.0/24
193.37.42.0/24
193.42.32.0/24
193.47.62.0/23
193.222.97.0/24
193.222.99.0/24
194.55.224.0/22
194.180.36.0/24
Signature Algorithm: sha256WithRSAEncryption
27:c9:8f:35:c8:b4:aa:83:32:49:68:f3:9a:cb:e6:c0:57:9c:
4d:0d:57:73:97:26:6d:7f:6f:20:db:a4:1e:88:c6:2a:81:f8:
fb:0b:6b:94:92:32:90:4a:36:43:a4:a2:82:97:17:ae:37:46:
7b:ee:58:22:a3:9f:4c:a6:d2:0c:ea:29:b6:38:f5:ec:4b:8b:
39:6e:4f:b4:99:4a:07:ce:e9:52:e3:88:7e:4f:3c:5d:78:cd:
2b:61:08:56:41:5d:52:f7:29:47:d5:61:23:62:36:7e:1c:f7:
9f:01:45:fa:4e:36:47:84:f0:7d:6a:da:12:46:04:d3:71:00:
87:7c:1a:d2:4b:97:b2:08:72:fb:cd:81:95:1a:ed:24:25:bf:
7d:1a:4c:ba:c6:2a:80:8d:ba:2a:d9:08:a6:a3:b9:56:6e:3c:
f5:ef:40:0d:eb:15:c7:fc:ad:fa:6d:c6:98:15:ce:dc:9d:63:
c7:d1:d8:0c:ed:c6:6b:3f:65:0f:8b:f5:67:f6:b9:06:57:61:
cc:76:cf:fe:ea:b2:11:91:8d:c3:78:c3:ec:ee:d2:83:a5:17:
a7:7a:9b:3f:30:39:64:07:ca:a9:de:99:16:9b:ad:5d:2f:35:
89:7d:01:ec:68:5e:4f:c7:ac:62:d4:24:3a:0d:69:5d:92:47:
c4:3d:8b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org