Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u1Z0ICB0xcUI7wIiLY_WDcH5Erw.roa
File: u1Z0ICB0xcUI7wIiLY_WDcH5Erw.roa (raw, json)
Hash identifier: YfGKV6nqHD1gs5HXUdgMpWdOGUXz1Io7c6A11tgEamE=
Subject key identifier: BB:56:74:20:20:74:C5:C5:08:EF:02:22:2D:8F:D6:0D:C1:F9:12:BC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0183695A4B610B66CA0EE3999691F12EF1D6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u1Z0ICB0xcUI7wIiLY_WDcH5Erw.roa
Signing time: Fri 23 Sep 2022 07:57:48 +0000
ROA not before: Fri 23 Sep 2022 07:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 85.31.45.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
82.115.208.0/24 maxlen: 24
82.115.209.0/24 maxlen: 24
82.115.210.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
84.54.49.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
194.55.227.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
80.76.48.0/24 maxlen: 24
193.42.32.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.69.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
94.103.126.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
193.25.218.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:69:5a:4b:61:0b:66:ca:0e:e3:99:96:91:f1:2e:f1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 23 07:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb5674202074c5c508ef02222d8fd60dc1f912bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:49:55:81:2d:80:1f:af:1d:e4:27:7b:80:c2:
be:f0:9a:ca:ed:c2:61:b7:a9:5f:9e:2a:8a:f0:67:
da:a0:f9:da:56:3a:5b:60:8a:7d:0d:59:14:64:1e:
ec:74:70:8c:f1:47:0f:a9:70:5d:26:fa:a6:11:1c:
38:ec:23:76:25:ed:f0:12:83:43:e5:4f:2c:17:65:
4c:17:99:66:00:b9:98:5c:9d:4c:d9:95:11:3b:03:
50:e7:83:4a:66:cb:3c:ef:81:5b:e0:79:6d:e4:0a:
d1:4f:dc:e9:f2:04:7b:54:b0:67:f5:9a:eb:b1:ca:
9a:44:11:54:05:5a:e6:82:86:b0:97:eb:ac:9d:bc:
22:39:22:06:e4:19:3d:6c:fe:50:2a:97:c6:ce:56:
49:8f:23:b4:c7:67:5e:b1:2a:79:05:5f:3e:92:ec:
c1:89:86:04:41:c6:4a:7c:98:dc:de:35:fe:fa:67:
b5:92:2d:af:d8:34:73:dd:cf:34:b0:4d:e3:f0:64:
aa:8f:2a:71:ab:32:61:7e:45:49:0e:45:72:20:e5:
ae:f6:80:ad:3a:52:53:47:87:30:b3:31:0a:ba:34:
ae:97:ed:5c:b5:62:30:f7:df:16:c0:c2:88:e9:02:
78:0f:5d:31:13:fe:83:d1:91:f4:66:a3:8e:8f:3a:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:56:74:20:20:74:C5:C5:08:EF:02:22:2D:8F:D6:0D:C1:F9:12:BC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u1Z0ICB0xcUI7wIiLY_WDcH5Erw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.48.0/24
82.115.208.0/22
84.21.172.0/23
84.54.48.0/23
85.31.45.0/24
85.31.47.0/24
87.120.84.0/24
87.120.87.0/24
87.121.221.0/24
92.249.50.0/24
94.103.125.0-94.103.126.255
94.154.172.0/24
178.215.225.0-178.215.227.255
178.215.239.0/24
185.216.69.0-185.216.70.255
185.246.221.0/24
193.25.217.0-193.25.218.255
193.35.19.0/24
193.42.32.0/24
193.47.63.0/24
193.222.99.0/24
194.55.224.0/22
194.180.36.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ce:99:75:80:9a:5e:7d:91:09:79:f3:74:d5:66:91:c1:19:
b7:52:34:51:80:f2:ad:6b:11:70:71:6d:60:32:cb:16:a5:bd:
cb:c0:e8:c2:18:f2:dc:39:fb:a2:81:18:a2:f2:f1:16:4a:86:
2a:9a:52:64:57:88:70:14:08:6a:14:38:aa:1e:ec:5c:8b:96:
2a:d5:1a:c3:a8:1c:e6:ba:5a:51:df:24:e9:52:11:77:52:f4:
ce:69:01:11:31:5e:1f:2b:48:30:2e:a2:65:4b:37:91:4a:89:
1b:70:19:c1:ba:34:41:43:77:99:61:19:7a:fa:5a:2d:07:f0:
3c:db:b9:e8:08:d6:67:04:10:35:d9:dc:83:4d:69:e4:3a:e8:
c0:22:dd:a4:39:08:eb:36:4d:89:9d:61:86:0d:1e:ca:47:c1:
db:e3:ca:9c:e6:0c:e2:28:6e:8c:b8:0b:10:84:29:5f:d2:66:
1c:1b:b6:67:7d:0b:65:d8:92:8f:45:fb:1f:15:ff:82:e1:89:
5e:ba:62:7e:fd:c0:18:84:76:d6:84:25:f4:7c:ad:c7:b7:08:
c9:70:dd:6e:cc:91:5b:10:4a:c0:51:43:d9:74:e7:6b:5e:7f:
f4:53:a8:44:d4:ac:e0:e4:a2:0d:bb:83:a0:d6:91:b7:80:8f:
9b:52:8a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-ams.rpki-client.org