Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MSk0Vb_hExW_ngCKwfqeifM28ac.roa
File: MSk0Vb_hExW_ngCKwfqeifM28ac.roa (raw, json)
Hash identifier: swRFzLHCL1+gnO2IE64Zgb6cbaf7GwdjV5iVYwjVoJU=
Subject key identifier: 31:29:34:55:BF:E1:13:15:BF:9E:00:8A:C1:FA:9E:89:F3:36:F1:A7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1E9A67D4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MSk0Vb_hExW_ngCKwfqeifM28ac.roa
Signing time: Mon 23 May 2022 06:27:30 +0000
ROA not before: Mon 23 May 2022 06:27:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 185.218.139.0/24 maxlen: 24
37.139.131.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
37.139.130.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.184.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.185.0/24 maxlen: 24
194.48.249.0/24 maxlen: 24
185.216.68.0/24 maxlen: 24
79.110.48.0/24 maxlen: 24
79.110.49.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
83.219.98.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
83.219.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513435604 (0x1e9a67d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 23 06:27:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31293455bfe11315bf9e008ac1fa9e89f336f1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:19:40:d8:bd:30:eb:1c:b5:e7:43:c4:ba:
fb:64:1a:39:0a:b8:36:f0:0c:f7:99:62:e7:c2:c2:
b7:f8:09:99:77:70:0e:e5:d7:b5:9b:40:0b:03:68:
79:47:da:bd:6a:5e:23:70:6f:7c:e6:e4:f5:89:a8:
11:dc:c3:f5:88:4b:12:77:93:a5:b2:8d:70:32:c2:
9b:9c:a6:62:c0:9c:70:1e:66:b0:dc:76:29:10:8e:
2a:4d:81:a9:58:3f:5a:1a:7d:d4:0b:5a:61:b8:c2:
c3:a9:fb:20:21:e2:d8:e4:26:32:de:c6:b5:38:44:
f0:49:29:16:56:bb:2e:f4:9a:5a:9b:9c:d3:f9:b5:
d8:bd:c6:4a:db:47:1b:5d:b4:c6:1d:24:64:d9:34:
0d:6a:80:22:19:d8:25:96:bb:03:61:d6:12:45:09:
c1:57:6a:3d:82:73:45:8f:39:c1:44:7f:61:5c:e3:
5c:4a:11:ec:7c:14:8c:71:1b:20:ad:b3:2d:8b:a4:
7c:46:ec:a4:69:ba:aa:e0:0c:34:73:d0:d8:ca:08:
43:e1:fb:e7:fd:c8:d3:7b:73:98:3d:66:b1:f9:96:
3c:46:b6:79:12:db:90:14:54:04:a2:99:3f:e9:71:
ad:60:11:d5:23:39:39:c6:b5:e0:14:27:a5:2b:9d:
78:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:29:34:55:BF:E1:13:15:BF:9E:00:8A:C1:FA:9E:89:F3:36:F1:A7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MSk0Vb_hExW_ngCKwfqeifM28ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/23
79.110.48.0/22
80.76.51.0/24
83.219.96.0/22
87.120.84.0/24
87.120.87.0/24
94.154.172.0/24
178.215.224.0/22
178.215.239.0/24
185.216.68.0/24
185.218.139.0/24
185.252.176.0/24
193.35.18.0/24
193.47.60.0/24
193.47.62.0/23
194.48.248.0/22
194.55.184.0/23
Signature Algorithm: sha256WithRSAEncryption
44:47:23:f1:e5:05:51:13:e3:2b:25:de:cb:34:0c:6b:69:9a:
2f:54:5a:35:1e:2a:8d:dc:0f:9b:80:ac:81:46:ad:c0:a4:a2:
5b:da:dd:13:7a:52:47:d8:46:b8:cf:a6:87:4e:d0:35:1e:45:
0e:f2:d6:5a:c3:55:a9:a3:bd:51:e2:a4:0c:77:66:a0:50:50:
c4:4a:51:1a:22:16:f0:6f:db:8a:76:df:6b:49:8c:a6:20:ce:
c2:19:f7:63:58:2d:d5:f8:a1:af:c4:aa:5d:da:ae:2c:80:63:
e2:f8:27:ce:10:c5:a8:fd:28:1f:e8:a7:e1:9a:68:ae:40:3d:
f7:ef:b1:1c:c7:3f:1c:22:f5:bb:62:e5:c3:19:dd:40:81:22:
f2:b3:b3:94:f8:6d:0c:a4:68:92:94:99:e2:cc:16:5e:02:14:
ba:41:b8:a2:fd:58:74:8e:65:5e:34:8f:4c:bc:f1:dd:0b:2b:
91:77:99:d4:0e:c9:67:58:50:99:1a:c3:a2:3b:79:29:be:7b:
87:8e:a7:95:11:70:1e:e0:36:78:93:8c:fe:11:35:9b:15:96:
d1:fa:87:0d:28:a8:6c:83:2a:f1:50:51:d3:f6:51:b3:81:9f:
ca:8e:33:97:6d:6b:9f:70:9f:47:9f:7d:4e:8e:8b:1e:7f:ea:
22:16:23:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org