Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QhOxH0pjaAvlVVcuIw9CmXbUNiE.roa
File: QhOxH0pjaAvlVVcuIw9CmXbUNiE.roa (raw, json)
Hash identifier: tU2Ji11BuiMgL2mPFHBUuvPqiNS/IuG8xhZnfLDCKtA=
Subject key identifier: 42:13:B1:1F:4A:63:68:0B:E5:55:57:2E:23:0F:42:99:76:D4:36:21
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018379E586A8F2F3C571C8238A9947CBFDA2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QhOxH0pjaAvlVVcuIw9CmXbUNiE.roa
Signing time: Mon 26 Sep 2022 13:03:48 +0000
ROA not before: Mon 26 Sep 2022 13:03:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 85.31.45.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
82.115.208.0/24 maxlen: 24
82.115.209.0/24 maxlen: 24
82.115.210.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
84.54.49.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
194.55.227.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
80.76.48.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.69.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
94.103.126.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
193.25.218.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:79:e5:86:a8:f2:f3:c5:71:c8:23:8a:99:47:cb:fd:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 26 13:03:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4213b11f4a63680be555572e230f429976d43621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c5:a8:09:50:90:1e:fa:08:14:29:b3:f7:29:
3d:12:5a:84:90:72:e5:03:e8:46:65:ab:7d:3d:58:
b9:1f:c9:60:dc:b6:5e:46:f4:b0:47:6b:f4:98:05:
73:6f:e6:44:f8:3b:e1:f0:45:be:8b:c5:ae:fb:67:
15:71:8b:ef:58:14:7b:6a:74:9b:42:83:d2:06:2a:
53:38:1f:6e:a1:fd:6e:49:ea:8d:e1:fd:f8:00:a2:
65:db:53:3e:ac:ae:76:82:39:60:19:3c:22:b4:a9:
86:3b:d1:9e:c8:d5:07:de:d1:c8:91:78:22:8a:27:
68:c5:19:fd:8f:3a:e3:33:a0:0d:10:8a:39:e8:8c:
d1:b2:49:99:e2:f4:75:cf:89:e8:df:b2:49:34:fc:
fa:11:e6:69:8a:6f:8a:96:25:44:ca:fb:52:29:df:
96:14:1d:bf:cf:9d:8e:f6:86:02:d2:2c:15:c4:f9:
3a:99:bf:54:7a:ef:b7:fb:c6:fe:bc:8d:21:23:33:
30:33:a8:06:8b:63:58:d1:8b:7b:2c:de:4b:c4:10:
2b:56:13:0d:67:79:7a:4a:81:2b:52:d3:92:d1:b9:
bf:7f:7b:8c:cf:66:94:63:83:0d:8d:c3:d5:2c:ab:
9d:ac:d9:b9:a0:e7:1a:b0:30:6c:bb:e4:b3:82:11:
c4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:13:B1:1F:4A:63:68:0B:E5:55:57:2E:23:0F:42:99:76:D4:36:21
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QhOxH0pjaAvlVVcuIw9CmXbUNiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.48.0/24
82.115.208.0/22
84.21.172.0/23
84.54.48.0/23
85.31.45.0/24
85.31.47.0/24
87.120.84.0/24
87.120.87.0/24
87.121.221.0/24
94.103.125.0-94.103.126.255
94.154.172.0/24
178.215.225.0-178.215.227.255
178.215.239.0/24
185.216.69.0-185.216.70.255
185.246.221.0/24
193.25.217.0-193.25.218.255
193.35.19.0/24
193.47.63.0/24
193.222.99.0/24
194.55.224.0/22
194.180.36.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d1:51:cf:bc:6f:8d:3e:78:19:91:0c:cf:42:82:01:29:21:
86:24:31:24:a8:dc:f2:af:c6:9e:78:bf:b8:f8:bf:ff:10:61:
ea:9b:29:cf:1e:9d:b5:f5:de:1d:e0:47:d0:a7:78:1a:5f:b2:
25:5e:80:ab:02:09:10:e3:69:f3:a2:0a:73:2f:17:a2:83:83:
eb:2d:d2:19:87:a8:2c:21:83:5b:40:4a:8d:36:1b:9c:79:47:
0d:48:eb:0a:b9:14:54:0a:dc:ea:5e:9a:c7:a3:7d:66:00:88:
1d:3d:9b:2a:35:d8:3a:7e:14:92:b1:93:6a:9b:7b:43:69:fd:
cd:fd:7f:28:b5:56:ad:f2:d0:d0:d8:5b:0d:ca:6e:b2:a2:2c:
d3:80:cb:17:fd:5d:e2:27:4a:0f:d0:d8:f0:11:b3:b2:09:9f:
f7:4a:72:7a:78:c0:ad:22:b4:69:0e:ef:33:17:9d:6d:bd:52:
82:9a:f3:8e:ce:1c:03:0e:81:63:ec:86:75:bd:34:8c:af:7a:
06:f6:95:1f:58:d1:15:4a:ac:05:c2:98:db:ca:b7:88:79:78:
97:30:15:8c:be:bf:5b:49:90:54:9f:8e:b8:2a:7c:5f:db:9d:
1b:ec:c5:46:1d:5c:33:36:ce:e6:93:d5:af:4b:a5:cf:df:4b:
1d:f5:6b:99
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-ams.rpki-client.org