Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kuzngMKb4DAaxtHtNc_1ovw1N-o.roa
File: kuzngMKb4DAaxtHtNc_1ovw1N-o.roa (raw, json)
Hash identifier: n+HvawMDLSmw/erGU1KlkYv7eCuOWmh4yvuHmLxKt9A=
Subject key identifier: 92:EC:E7:80:C2:9B:E0:30:1A:C6:D1:ED:35:CF:F5:A2:FC:35:37:EA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0182C5EC06A6CF295CAFD1ADE5F6E14B73EA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kuzngMKb4DAaxtHtNc_1ovw1N-o.roa
Signing time: Mon 22 Aug 2022 14:19:15 +0000
ROA not before: Mon 22 Aug 2022 14:19:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 85.31.45.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
92.249.48.0/24 maxlen: 24
185.218.136.0/24 maxlen: 24
82.115.208.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
212.87.206.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
85.217.144.0/24 maxlen: 24
84.54.49.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
80.76.50.0/24 maxlen: 24
80.76.48.0/24 maxlen: 24
193.42.32.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.69.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
94.103.126.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c5:ec:06:a6:cf:29:5c:af:d1:ad:e5:f6:e1:4b:73:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 22 14:19:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92ece780c29be0301ac6d1ed35cff5a2fc3537ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:38:59:9c:08:1e:41:ed:10:f9:ad:e2:73:
02:aa:f1:48:bc:77:44:9d:8a:63:7b:9d:b0:d9:bd:
7d:67:31:fc:d5:29:db:75:d4:51:d9:12:34:e4:32:
aa:ee:f2:f9:8a:6c:29:23:60:63:8c:34:2e:b1:4e:
80:1f:59:fb:5d:df:4d:25:a5:47:70:1d:77:cc:46:
9f:d3:39:85:e5:63:7b:bb:35:91:e8:93:07:91:41:
61:39:a0:99:e2:27:8d:e2:84:78:fe:4c:cc:4f:d3:
a2:76:42:1e:6e:38:ef:2f:91:e9:9a:37:51:cc:59:
6f:67:13:e8:94:f3:d3:9e:12:7e:68:48:44:f8:13:
34:a8:15:69:fc:7d:b0:d0:7a:dd:8c:dc:f8:6f:e7:
bb:e8:4b:28:51:f7:b6:ac:d8:3a:0d:a9:8a:2d:b8:
49:f5:ca:2f:9e:d4:87:b6:ab:f6:4a:b9:20:50:30:
e2:6e:23:f4:2f:87:07:cc:96:14:74:50:8b:cd:f2:
8b:16:3c:cf:c7:8f:b7:85:48:60:f8:e3:6a:03:63:
3b:25:96:ea:a2:3d:80:66:3b:4f:94:6f:36:ff:43:
32:20:64:b7:d3:eb:47:1a:85:1c:bf:bc:a6:b2:1e:
55:f6:9a:ed:a5:a2:9f:79:56:00:15:7c:c8:5d:bb:
46:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EC:E7:80:C2:9B:E0:30:1A:C6:D1:ED:35:CF:F5:A2:FC:35:37:EA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kuzngMKb4DAaxtHtNc_1ovw1N-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.61.0/24
80.76.48.0/24
80.76.50.0/24
82.115.208.0/24
84.54.49.0/24
85.31.45.0/24
85.31.47.0/24
85.217.144.0/24
87.120.84.0/24
87.120.87.0/24
92.249.48.0/24
94.103.125.0-94.103.127.255
94.154.172.0/24
178.215.225.0-178.215.227.255
178.215.236.0/24
178.215.239.0/24
185.216.69.0-185.216.70.255
185.218.136.0/24
185.246.221.0/24
185.252.177.0/24
193.25.216.0/24
193.35.19.0/24
193.37.42.0/24
193.37.47.0/24
193.42.32.0/24
193.47.62.0/23
193.222.97.0/24
212.87.206.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ce:eb:c5:df:46:7c:e4:79:af:68:7a:b7:a7:5f:42:2f:c1:
29:6e:87:e4:79:62:27:d6:7c:34:70:35:0c:31:2f:a5:05:84:
f0:f1:aa:8e:f9:a9:09:22:78:f1:ee:aa:ad:cf:4b:21:5a:5f:
56:b5:0e:66:b5:dc:00:44:46:23:ce:70:16:b7:13:3d:b9:65:
cf:75:35:00:00:04:d4:b3:9e:ae:76:7a:8f:c7:13:93:44:37:
01:ef:c3:70:6e:3b:ea:56:be:71:8c:78:49:e9:37:6a:6d:25:
f6:85:a5:89:87:28:0d:47:75:c2:f6:00:d7:44:34:69:25:cf:
29:a5:e3:f6:0f:6d:38:bc:ba:89:ff:32:0c:fd:dc:c5:d1:ce:
90:b7:fd:0f:ea:4f:d0:8d:ee:03:21:21:aa:ca:a8:ce:93:70:
cf:8e:46:36:a8:c4:ec:1d:39:ae:72:de:95:97:21:39:b1:7a:
4f:d6:9f:c1:85:58:ee:ae:bb:8f:76:ec:c3:84:8a:f1:6c:c4:
a3:ef:94:2b:56:5f:91:f2:53:c6:83:f2:54:a7:6a:34:b8:ee:
82:52:f2:77:7b:46:c4:36:94:92:6c:ef:51:8f:dc:f1:10:51:
92:23:b8:4d:5c:f3:93:13:c8:fc:ad:2f:07:33:ad:1e:58:ea:
c1:06:68:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:41 2023 by rpki-client on console-ams.rpki-client.org