Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zq-_Oyymys7lY3TcO6UXwXI4cx0.roa
File: zq-_Oyymys7lY3TcO6UXwXI4cx0.roa (raw, json)
Hash identifier: fkSFXfaOo0DF1bPrsD5DZEftN1Fiscofz4xpM81qZYk=
Subject key identifier: CE:AF:BF:3B:2C:A6:CA:CE:E5:63:74:DC:3B:A5:17:C1:72:38:73:1D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018287F8BF3F9EF0732297D40094269A4954
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zq-_Oyymys7lY3TcO6UXwXI4cx0.roa
Signing time: Wed 10 Aug 2022 13:36:42 +0000
ROA not before: Wed 10 Aug 2022 13:36:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 85.31.45.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
92.249.48.0/24 maxlen: 24
194.180.50.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
185.218.136.0/24 maxlen: 24
82.115.208.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
212.87.206.0/24 maxlen: 24
212.87.205.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
85.217.144.0/24 maxlen: 24
84.54.49.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
80.76.50.0/24 maxlen: 24
80.76.48.0/24 maxlen: 24
193.42.32.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.69.0/24 maxlen: 24
79.110.48.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
94.103.126.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:87:f8:bf:3f:9e:f0:73:22:97:d4:00:94:26:9a:49:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 10 13:36:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ceafbf3b2ca6cacee56374dc3ba517c17238731d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:5e:73:b4:77:89:35:76:a5:14:44:ea:da:
46:fd:38:38:7f:99:5c:7d:1c:a0:29:c9:71:8c:08:
dd:d8:80:92:e0:8b:b0:ec:bc:9a:6d:04:de:ea:4e:
07:c7:10:cc:3a:df:3d:22:67:d1:76:fa:ab:fb:68:
76:42:b0:cb:c1:b5:bd:7d:2f:cc:fd:4f:bc:de:c1:
55:18:cd:e3:7b:5b:2c:e6:25:5b:a2:74:4c:63:72:
44:31:b7:0c:e4:d8:b7:bd:fb:76:03:1f:44:79:84:
31:99:b9:78:97:3a:c8:5f:fb:70:7e:a6:97:d3:93:
93:48:c1:7e:21:e1:1a:1e:f4:d8:36:5a:22:84:71:
dc:03:c6:aa:42:dc:24:e8:e7:f2:4f:57:39:07:f6:
2f:e4:d6:79:69:a2:e8:06:66:f9:38:fb:91:fd:f1:
b9:cb:c7:46:ec:d3:47:db:f5:fc:4e:b7:fb:e1:9b:
f6:c4:b3:0d:ea:56:c7:b0:46:82:01:31:61:36:42:
ce:ee:24:8a:82:96:6c:52:be:b2:a7:4d:28:5f:22:
dd:e6:70:4b:03:c9:e3:01:bd:19:d5:96:01:ba:fe:
fb:fe:73:3e:c8:d7:22:a7:3c:cc:5f:51:22:cc:7f:
aa:bd:da:88:35:2b:57:29:ce:94:28:7e:03:a4:b7:
4b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AF:BF:3B:2C:A6:CA:CE:E5:63:74:DC:3B:A5:17:C1:72:38:73:1D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zq-_Oyymys7lY3TcO6UXwXI4cx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.48.0/24
79.110.61.0/24
79.110.63.0/24
80.76.48.0/24
80.76.50.0/24
82.115.208.0/24
83.219.97.0/24
84.54.49.0/24
85.31.45.0/24
85.31.47.0/24
85.217.144.0/24
87.120.84.0/24
87.120.87.0/24
92.249.48.0/24
94.103.125.0-94.103.127.255
94.154.172.0/24
178.215.225.0-178.215.227.255
178.215.236.0/24
178.215.239.0/24
185.216.69.0-185.216.70.255
185.218.136.0/24
185.246.221.0/24
185.252.176.0/23
193.25.216.0/24
193.35.19.0/24
193.37.42.0/24
193.37.47.0/24
193.42.32.0/24
193.47.62.0/23
193.222.97.0/24
194.169.175.0/24
194.180.50.0/24
212.87.205.0-212.87.206.255
Signature Algorithm: sha256WithRSAEncryption
88:da:ea:2a:9a:b1:4c:ef:e2:c8:e3:4e:8f:a1:ab:44:7a:8d:
61:53:fc:dc:5a:fc:81:a2:6a:77:bd:6d:a5:04:a9:58:d5:74:
97:b0:36:a9:e7:cd:af:d0:74:7c:da:b3:46:2e:02:5a:1c:f2:
03:84:e5:58:5a:41:a3:6c:7a:93:37:66:06:91:65:cf:5b:34:
4d:36:0b:e8:bd:73:a0:0f:1c:fb:3a:63:3a:e1:7d:2f:f8:c3:
ff:f1:99:6a:b2:ee:25:a7:86:42:81:34:c8:2f:e4:c7:17:2d:
f3:80:0d:4a:46:c8:0a:f4:86:13:27:00:25:b0:f1:b9:e7:56:
dc:09:e1:d3:38:e4:d5:7a:0c:2e:04:32:d5:27:89:2a:6f:17:
99:c3:7e:cd:99:94:7d:84:32:1d:b5:20:24:55:49:91:f9:94:
36:9c:2f:90:29:9b:21:41:0f:4c:92:4e:67:34:bf:9d:30:5b:
63:22:81:50:eb:bb:27:c7:2d:49:17:4b:aa:c0:b7:d6:12:50:
8d:d5:4f:09:73:2d:94:d9:dc:57:56:7b:37:7b:1b:5c:29:35:
e2:97:0a:f3:75:f8:97:e8:74:51:84:e3:08:8d:86:33:ed:ae:
96:b3:4e:36:b9:12:f9:62:c5:86:6d:54:63:40:ac:02:6f:c9:
7d:85:b8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:44 2023 by rpki-client on console-ams.rpki-client.org