Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/1KJKuU01RtUqJ-KZiNyCZ6mPuRM.roa
File: 1KJKuU01RtUqJ-KZiNyCZ6mPuRM.roa (raw, json)
Hash identifier: SCpqjxxeaVRoaSIxtsKDHAWlFe+z3LTJBmlk+3nveHQ=
Subject key identifier: D4:A2:4A:B9:4D:35:46:D5:2A:27:E2:99:88:DC:82:67:A9:8F:B9:13
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 38D59F0C
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/1KJKuU01RtUqJ-KZiNyCZ6mPuRM.roa
Signing time: Tue 17 May 2022 05:43:30 +0000
ROA not before: Tue 17 May 2022 05:43:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12716
IP address blocks: 151.251.254.0/24 maxlen: 24
151.251.255.0/24 maxlen: 24
83.97.30.0/24 maxlen: 24
84.252.40.0/23 maxlen: 23
151.251.240.0/24 maxlen: 24
151.251.238.0/24 maxlen: 24
151.251.239.0/24 maxlen: 24
151.251.245.0/24 maxlen: 24
151.251.240.0/20 maxlen: 20
151.251.243.0/24 maxlen: 24
151.251.246.0/24 maxlen: 24
151.251.241.0/24 maxlen: 24
151.251.244.0/24 maxlen: 24
151.251.242.0/24 maxlen: 24
151.251.253.0/24 maxlen: 24
151.251.248.0/24 maxlen: 24
151.251.251.0/24 maxlen: 24
151.251.249.0/24 maxlen: 24
151.251.252.0/24 maxlen: 24
151.251.247.0/24 maxlen: 24
151.251.250.0/24 maxlen: 24
89.215.62.0/23 maxlen: 23
151.251.44.0/22 maxlen: 22
151.251.68.0/22 maxlen: 22
185.224.160.0/23 maxlen: 23
37.63.0.0/20 maxlen: 20
37.63.16.0/22 maxlen: 22
62.204.154.0/23 maxlen: 23
85.118.64.0/22 maxlen: 22
85.118.71.0/24 maxlen: 24
85.118.68.0/23 maxlen: 23
213.226.17.0/24 maxlen: 24
85.118.70.0/24 maxlen: 24
85.118.76.0/22 maxlen: 22
85.118.74.0/24 maxlen: 24
85.118.72.0/23 maxlen: 23
213.226.19.0/24 maxlen: 24
185.151.156.0/22 maxlen: 22
85.118.84.0/24 maxlen: 24
85.118.80.0/22 maxlen: 22
213.226.36.0/24 maxlen: 24
85.118.92.0/24 maxlen: 24
85.118.93.0/24 maxlen: 24
213.226.40.0/24 maxlen: 24
213.226.51.0/24 maxlen: 24
213.226.57.0/24 maxlen: 24
213.226.56.0/24 maxlen: 24
213.226.63.0/24 maxlen: 24
213.226.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953523980 (0x38d59f0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 17 05:43:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4a24ab94d3546d52a27e29988dc8267a98fb913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:86:d9:62:a3:52:8c:2c:7f:d6:be:82:57:b4:
ca:3a:3e:d8:9b:4e:ff:b7:da:e9:0c:71:68:3e:6e:
5a:57:76:be:ed:51:ad:54:e5:48:f8:07:54:ae:97:
c6:7a:a9:01:22:f7:52:30:40:a9:6c:47:2b:c5:cd:
1c:80:a6:9e:9a:8f:97:7c:6e:e9:48:54:d4:05:11:
83:b3:f6:88:31:ea:eb:de:62:5f:ce:70:58:c6:5f:
bc:0f:3f:c6:f1:42:62:e7:98:a6:5a:52:91:41:6c:
be:26:3b:b9:8e:b6:fe:03:e3:05:5b:fd:41:a9:91:
61:97:9a:75:9c:2f:3f:b4:52:9c:6d:4b:85:b5:09:
6d:79:fb:32:46:0e:62:de:59:63:50:38:10:eb:b0:
df:83:48:02:33:a1:7f:19:1b:53:ea:d2:f8:ed:b8:
26:43:43:3c:2e:65:5d:49:18:70:da:6f:43:43:6d:
9b:c0:14:aa:69:ea:1a:1f:12:28:e5:76:34:90:15:
52:42:54:e6:6c:26:b8:5f:b4:cb:57:ca:79:df:3b:
4b:c7:58:6a:46:ad:ca:ea:d0:d3:d8:45:65:97:59:
cc:d4:1b:b3:9c:39:1e:d4:f0:c0:87:e9:05:f4:3a:
10:be:84:bf:9a:99:51:d1:ea:3f:15:f9:2b:1b:c8:
63:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A2:4A:B9:4D:35:46:D5:2A:27:E2:99:88:DC:82:67:A9:8F:B9:13
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/1KJKuU01RtUqJ-KZiNyCZ6mPuRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.63.0.0-37.63.19.255
62.204.154.0/23
83.97.30.0/24
84.252.40.0/23
85.118.64.0-85.118.74.255
85.118.76.0-85.118.84.255
85.118.92.0/23
89.215.62.0/23
151.251.44.0/22
151.251.68.0/22
151.251.238.0-151.251.255.255
185.151.156.0/22
185.224.160.0/23
213.226.17.0/24
213.226.19.0/24
213.226.36.0/24
213.226.40.0/24
213.226.51.0/24
213.226.56.0/23
213.226.59.0/24
213.226.63.0/24
Signature Algorithm: sha256WithRSAEncryption
52:0d:70:e2:8f:a0:28:4b:26:45:4b:a4:f6:96:f7:80:aa:45:
f6:c7:63:9c:8e:c4:a5:06:f4:a7:5d:72:8c:81:f5:2b:c6:fc:
4b:39:45:69:46:24:e0:cf:d8:63:98:b4:12:8b:d0:39:57:76:
07:c9:2c:99:f7:53:4d:d9:32:af:fc:2e:cb:72:88:0f:07:95:
26:a6:f4:30:34:1b:9f:01:b2:38:97:c6:6d:21:53:9a:b0:3d:
c1:6f:b1:bc:72:3c:6b:e7:8b:86:53:27:60:1c:98:a1:86:71:
53:c4:71:69:a2:5d:a6:03:1b:15:4a:b7:01:79:a2:a4:41:fc:
65:10:08:7c:9e:e3:c0:aa:3c:88:ea:7f:75:36:0e:6c:a9:c1:
38:83:df:f2:db:4e:76:da:ff:0b:81:64:93:f7:c4:c0:75:d7:
74:f7:bc:0b:40:7e:5f:ad:f4:45:29:6a:3a:23:29:5b:b2:0e:
b1:25:94:aa:1e:54:6e:be:aa:b8:10:d6:7b:7e:06:4c:bc:04:
d1:4c:a7:e2:ab:f0:91:b4:78:78:0e:fc:cb:77:14:31:df:0f:
6e:a2:ed:d7:00:c1:ed:0e:be:e2:e4:a1:7d:29:35:b5:2b:b0:
70:fa:3f:93:ae:33:8b:20:e9:53:66:32:c1:84:a2:3d:3e:b6:
e4:92:99:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:17 2023 by rpki-client on console-fra.rpki-client.org