Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lfxWk9ATdbbGpGxIwQZfu96rRpc.roa
File: lfxWk9ATdbbGpGxIwQZfu96rRpc.roa (raw, json)
Hash identifier: szRK5N4ap5890GL7CsVd/NUssC2BYwoeHVybZeuG6D4=
Subject key identifier: 95:FC:56:93:D0:13:75:B6:C6:A4:6C:48:C1:06:5F:BB:DE:AB:46:97
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01833C77A0B463C6E2D23D1E1E3C58FE4415
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lfxWk9ATdbbGpGxIwQZfu96rRpc.roa
Signing time: Wed 14 Sep 2022 14:46:56 +0000
ROA not before: Wed 14 Sep 2022 14:46:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 85.31.45.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
185.218.136.0/24 maxlen: 24
82.115.208.0/24 maxlen: 24
82.115.209.0/24 maxlen: 24
82.115.210.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
84.54.49.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
194.55.227.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
80.76.48.0/24 maxlen: 24
193.42.32.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.69.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
94.103.126.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
193.25.218.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3c:77:a0:b4:63:c6:e2:d2:3d:1e:1e:3c:58:fe:44:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 14 14:46:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95fc5693d01375b6c6a46c48c1065fbbdeab4697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6b:72:9b:6b:d4:9e:d5:25:67:46:07:da:28:
ca:7b:62:3a:d7:36:98:6c:dd:90:b8:43:79:7c:9b:
10:ba:91:76:ac:be:f3:e6:41:b2:45:a5:48:b7:e5:
ec:51:b7:9b:13:77:9b:d9:b5:de:0b:ce:79:f7:7c:
43:c7:39:07:a1:96:d5:a3:5b:5f:c6:7b:9d:fa:72:
27:5d:8e:9b:b0:de:15:45:73:28:03:05:24:7c:9f:
8b:9b:73:63:bf:6f:3f:49:2d:8f:b9:c9:64:a9:a1:
ce:96:b6:c2:63:4e:3b:b7:56:60:d8:21:db:0e:bd:
b6:99:83:05:10:81:d0:94:29:33:34:bd:6b:23:1d:
31:92:d2:78:3f:4e:30:47:82:d1:06:1a:c7:fa:59:
bc:52:b1:63:4d:e0:99:81:f6:df:85:44:d6:1d:7f:
f7:5a:83:53:7e:1a:b5:aa:bd:14:6c:a0:9b:1c:f8:
ae:e8:74:39:2f:b7:4c:7f:9b:05:2f:81:79:ec:d7:
6e:65:ab:21:15:61:fd:39:25:11:7f:23:60:fe:b6:
c3:3b:f8:17:82:b5:ae:a6:d5:0c:b9:78:7c:87:3c:
67:1f:f6:79:1c:06:56:98:16:b9:13:50:c2:50:7f:
5f:06:a1:36:00:ee:05:72:bc:f4:f8:35:f5:fc:3b:
51:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FC:56:93:D0:13:75:B6:C6:A4:6C:48:C1:06:5F:BB:DE:AB:46:97
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lfxWk9ATdbbGpGxIwQZfu96rRpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.48.0/24
82.115.208.0/22
84.21.172.0/23
84.54.48.0/23
85.31.45.0/24
85.31.47.0/24
87.120.84.0/24
87.120.87.0/24
87.121.221.0/24
92.249.50.0/24
94.103.125.0-94.103.126.255
94.154.172.0/24
178.215.225.0-178.215.227.255
178.215.236.0/24
178.215.239.0/24
185.216.69.0-185.216.70.255
185.218.136.0/24
185.246.221.0/24
193.25.217.0-193.25.218.255
193.35.19.0/24
193.37.42.0/24
193.42.32.0/24
193.47.63.0/24
193.222.97.0/24
193.222.99.0/24
194.55.224.0/22
194.180.36.0/24
Signature Algorithm: sha256WithRSAEncryption
70:31:ab:72:bf:a4:64:26:f5:f6:84:d7:1c:e5:a7:d3:35:a1:
7e:c0:60:6b:bc:bc:2c:4c:b5:71:2d:6d:b8:0b:01:33:89:ec:
fb:36:8f:fe:83:ca:8b:a9:6c:70:64:66:17:d3:38:df:c1:c9:
9f:9a:3e:f1:28:fe:a5:95:00:51:53:04:5c:20:d7:9a:0b:44:
62:0f:d9:f0:af:25:fa:60:e0:2e:39:1f:1c:ed:38:fb:82:a9:
5d:58:5b:b4:e6:dc:ea:10:c0:f4:13:d3:e2:33:11:2f:0b:f5:
d1:29:c5:c5:4c:34:62:6c:3a:87:5d:d9:1d:a1:bd:06:94:e3:
a8:e9:5c:1c:96:64:ed:f7:12:bf:b0:7a:23:3c:e8:ed:e0:99:
91:c0:8c:dc:12:e7:9e:3a:fd:5b:f5:b8:8f:09:03:67:b4:54:
e7:5b:e9:9a:85:f7:67:b0:ee:69:a2:5c:f4:49:29:47:49:28:
4d:b8:3a:7e:af:8e:25:46:df:f4:67:e6:98:4a:29:bc:c0:3a:
7f:1b:12:7e:20:1b:a4:9a:11:2c:4e:f6:7a:d8:5a:7a:93:30:
57:ce:8e:1d:06:2e:a9:80:7b:4b:07:e9:82:c7:58:bc:0d:77:
60:cf:33:dd:6a:63:2f:08:21:e2:ea:82:f7:a3:a2:50:3b:ac:
ba:63:c4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:41 2023 by rpki-client on console-ams.rpki-client.org