Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mhJZ4vizALMLtPNptmC9SyPgpu8.roa
File: mhJZ4vizALMLtPNptmC9SyPgpu8.roa (raw, json)
Hash identifier: x/kJrKEl/GTrTgqWWKUeBg8TQGQz97ucbeO1qrO/hBo=
Subject key identifier: 9A:12:59:E2:F8:B3:00:B3:0B:B4:F3:69:B6:60:BD:4B:23:E0:A6:EF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01821ACB3DA02A9E685EE48DF2D722CE3EF7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mhJZ4vizALMLtPNptmC9SyPgpu8.roa
Signing time: Wed 20 Jul 2022 08:48:23 +0000
ROA not before: Wed 20 Jul 2022 08:48:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 85.217.145.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
185.252.178.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
185.254.37.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
37.139.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:cb:3d:a0:2a:9e:68:5e:e4:8d:f2:d7:22:ce:3e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 20 08:48:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a1259e2f8b300b30bb4f369b660bd4b23e0a6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:ba:c6:ae:a4:d1:96:85:5f:08:91:67:b2:
99:24:88:f4:e5:5f:49:9c:80:75:f5:fe:4a:d7:a4:
6c:ff:90:34:ff:5b:9d:ac:07:57:99:7f:0f:da:de:
b2:9a:04:23:8c:57:06:df:ad:5d:4d:92:1d:f8:61:
f5:cf:a8:8e:51:82:d0:07:97:16:34:b3:34:7e:c8:
50:b4:88:99:4c:95:94:9a:44:08:17:fc:9d:83:2b:
7d:5b:4c:0b:08:af:33:46:dc:01:11:46:a6:56:73:
5c:39:3d:83:46:5f:9d:60:1f:60:0b:bd:1a:68:81:
70:db:c7:e2:58:c6:0f:77:91:67:4b:ff:67:a8:3a:
70:b3:99:78:eb:a3:ee:93:64:27:72:8a:ac:96:03:
df:be:77:42:46:71:50:0b:78:47:b8:65:17:43:d3:
24:ce:dc:75:3e:fc:bc:d0:fb:e9:df:33:22:27:11:
19:13:92:0f:86:36:78:36:61:44:58:0c:80:17:63:
0b:78:89:0f:c5:e6:46:34:68:aa:11:0b:ce:8a:57:
ca:8d:82:e6:a6:42:46:1a:03:73:d1:0d:d5:28:4b:
f8:49:a3:b6:8b:50:03:30:7e:de:d9:9e:75:22:c5:
82:71:2a:22:85:df:23:06:6a:ed:7d:0a:c7:7a:c0:
0c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:12:59:E2:F8:B3:00:B3:0B:B4:F3:69:B6:60:BD:4B:23:E0:A6:EF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mhJZ4vizALMLtPNptmC9SyPgpu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/23
79.110.62.0/24
80.76.51.0/24
85.31.46.0/24
85.217.145.0/24
109.206.241.0/24
185.216.71.0/24
185.225.73.0/24
185.246.220.0/24
185.252.178.0/23
185.254.37.0/24
193.47.61.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:df:6e:51:65:97:07:2b:22:17:23:f6:0d:63:ef:2e:47:7e:
cd:f3:c6:6e:30:f4:ab:c1:5f:c9:1f:2f:47:3e:09:b8:eb:3b:
a8:03:9e:6c:24:df:d4:08:c7:9a:83:cd:b1:2d:bf:88:aa:b6:
00:97:97:0a:ef:7d:1f:90:d9:22:30:f3:b6:02:56:41:3e:4c:
80:6d:84:08:5c:8e:28:32:63:2b:3e:5e:b9:6a:e7:cb:3d:1f:
b6:04:b3:d3:c1:22:79:cb:e0:a9:0d:69:0c:08:0b:eb:0f:f3:
7e:d8:28:43:1b:1d:0d:64:c7:e5:df:e9:9f:61:aa:70:78:59:
7e:3a:2a:b8:c6:69:62:51:2b:98:18:32:e1:4f:92:33:b3:c7:
9f:0a:2d:84:59:01:dd:5e:95:0a:44:e3:58:1f:9b:5c:28:23:
54:c2:61:70:2e:54:c9:19:0b:c2:33:60:95:65:71:41:13:c4:
d0:2e:4d:c6:1c:cb:2d:95:72:d2:c9:60:93:30:46:b9:b7:76:
55:97:d1:be:05:85:16:27:db:34:f9:c0:b6:c8:45:ef:4e:d2:
58:b5:30:a2:fa:4e:41:80:38:e5:6e:15:0d:c2:fc:8e:c5:c7:
91:aa:c0:ed:a5:0b:28:fc:79:52:b0:7c:86:5a:82:d0:83:d6:
40:43:a1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:41 2023 by rpki-client on console-ams.rpki-client.org