Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/JoFBAAgEtMPQz-ZUPpU1mBU0RAc.roa
File: JoFBAAgEtMPQz-ZUPpU1mBU0RAc.roa (raw, json)
Hash identifier: bSHq4BtnE29Z8PcnS6MgUkxKfp5KGJU1EtMo377DxPU=
Subject key identifier: 26:81:41:00:08:04:B4:C3:D0:CF:E6:54:3E:95:35:98:15:34:44:07
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0183A17A05DBD8C626FCD67135B0849DF385
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/JoFBAAgEtMPQz-ZUPpU1mBU0RAc.roa
Signing time: Tue 04 Oct 2022 05:31:12 +0000
ROA not before: Tue 04 Oct 2022 05:31:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12716
IP address blocks: 151.251.254.0/24 maxlen: 24
151.251.255.0/24 maxlen: 24
83.97.30.0/24 maxlen: 24
84.252.40.0/23 maxlen: 23
151.251.240.0/24 maxlen: 24
151.251.238.0/24 maxlen: 24
151.251.239.0/24 maxlen: 24
151.251.245.0/24 maxlen: 24
151.251.240.0/20 maxlen: 20
151.251.243.0/24 maxlen: 24
151.251.246.0/24 maxlen: 24
151.251.241.0/24 maxlen: 24
151.251.244.0/24 maxlen: 24
151.251.242.0/24 maxlen: 24
151.251.253.0/24 maxlen: 24
151.251.248.0/24 maxlen: 24
151.251.251.0/24 maxlen: 24
151.251.249.0/24 maxlen: 24
151.251.252.0/24 maxlen: 24
151.251.247.0/24 maxlen: 24
151.251.250.0/24 maxlen: 24
89.215.62.0/23 maxlen: 23
151.251.44.0/22 maxlen: 22
151.251.68.0/22 maxlen: 22
185.224.160.0/23 maxlen: 23
37.63.0.0/20 maxlen: 20
37.63.16.0/22 maxlen: 22
62.204.154.0/23 maxlen: 23
151.251.121.0/24 maxlen: 24
85.118.64.0/22 maxlen: 22
85.118.71.0/24 maxlen: 24
85.118.68.0/23 maxlen: 23
213.226.17.0/24 maxlen: 24
85.118.70.0/24 maxlen: 24
85.118.76.0/22 maxlen: 22
85.118.74.0/24 maxlen: 24
85.118.72.0/23 maxlen: 23
213.226.19.0/24 maxlen: 24
185.151.156.0/22 maxlen: 22
85.118.84.0/24 maxlen: 24
85.118.80.0/22 maxlen: 22
213.226.36.0/24 maxlen: 24
85.118.92.0/24 maxlen: 24
85.118.93.0/24 maxlen: 24
213.226.40.0/24 maxlen: 24
213.226.51.0/24 maxlen: 24
213.226.57.0/24 maxlen: 24
213.226.56.0/24 maxlen: 24
213.226.63.0/24 maxlen: 24
213.226.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a1:7a:05:db:d8:c6:26:fc:d6:71:35:b0:84:9d:f3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Oct 4 05:31:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=268141000804b4c3d0cfe6543e95359815344407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:bc:1b:46:04:80:da:37:90:5d:98:2f:6c:
e2:f8:d3:be:ea:c9:cc:e3:c4:e2:1d:28:b7:8b:7c:
e5:a5:30:21:9c:a6:73:4a:22:1c:3b:06:bb:51:6b:
8f:70:c2:ce:cb:f5:13:1f:79:81:0d:4d:6d:a1:62:
16:dc:e7:67:38:62:4e:cd:86:08:79:22:8f:91:4b:
3f:26:35:21:24:9c:7b:00:f1:18:b9:6c:f4:77:fa:
bd:da:9a:4f:97:c3:04:2f:38:85:d9:13:11:c5:d5:
28:1b:27:05:a4:61:4b:c9:ee:ea:a7:70:fd:19:b6:
d9:e1:c8:12:c8:71:ee:4c:0d:9f:9c:15:41:89:ef:
77:82:64:e8:1b:29:62:8f:53:29:74:b0:ea:aa:00:
bf:ab:ea:e0:ed:34:c9:79:42:e6:a0:df:35:26:4a:
5f:4f:80:ba:fd:8f:cf:34:39:28:fb:9d:6b:5c:1a:
53:3b:94:aa:a2:0e:ca:03:31:44:dc:f5:22:ef:ea:
53:4c:be:86:a2:94:11:72:75:97:c2:fa:5b:42:03:
8f:a7:5c:95:9c:80:cb:c9:bb:89:fd:7c:0f:2d:1d:
eb:61:a6:9f:1f:c3:20:d8:bd:9f:3b:4f:17:ea:8c:
ee:71:65:08:8e:2f:15:10:22:ff:60:70:4d:a2:47:
5a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:81:41:00:08:04:B4:C3:D0:CF:E6:54:3E:95:35:98:15:34:44:07
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/JoFBAAgEtMPQz-ZUPpU1mBU0RAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.63.0.0-37.63.19.255
62.204.154.0/23
83.97.30.0/24
84.252.40.0/23
85.118.64.0-85.118.74.255
85.118.76.0-85.118.84.255
85.118.92.0/23
89.215.62.0/23
151.251.44.0/22
151.251.68.0/22
151.251.121.0/24
151.251.238.0-151.251.255.255
185.151.156.0/22
185.224.160.0/23
213.226.17.0/24
213.226.19.0/24
213.226.36.0/24
213.226.40.0/24
213.226.51.0/24
213.226.56.0/23
213.226.59.0/24
213.226.63.0/24
Signature Algorithm: sha256WithRSAEncryption
38:36:1b:01:d2:d8:7d:6b:60:3f:f4:c1:0f:42:b2:2e:ba:51:
5d:39:3a:62:43:44:72:24:35:02:3a:1e:24:d0:9f:67:28:73:
25:5c:1b:ae:10:6a:ef:68:2e:36:e5:14:62:de:bc:db:e4:a0:
5a:4c:8b:69:63:f7:89:97:59:7e:61:4a:36:00:83:61:6a:45:
64:b0:1c:53:dc:b1:d2:01:8a:18:71:8f:44:cf:20:25:95:8b:
52:23:a6:6d:39:33:4f:12:98:a7:5c:de:6f:db:0f:1d:41:07:
d6:fc:44:d9:c7:e3:98:8c:44:bb:fa:17:22:b5:68:e9:58:93:
8e:73:39:15:75:75:25:39:d1:75:fc:20:c4:e1:e4:20:b9:51:
9b:5d:07:28:86:39:6d:aa:5b:17:dc:4c:e2:67:98:24:61:22:
39:50:42:53:1c:21:92:a3:5c:ce:d6:bf:f1:a2:23:d0:08:ae:
2d:b6:f9:08:e2:85:e0:09:c5:eb:0d:88:b6:58:17:53:2e:df:
84:6b:7a:5e:c6:0a:04:bf:6c:50:ce:71:34:3c:1c:5b:c2:87:
0e:c6:82:fe:d6:36:93:9f:66:eb:f3:57:ab:eb:a6:52:1e:18:
45:3b:bb:d8:e6:3a:6e:8b:d8:a1:b0:ed:20:86:9c:4a:30:f3:
0b:b2:6c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:51 2024 by rpki-client on console-ams.rpki-client.org