Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/JtcNoRWODHkxznX071FbKsJssi4.roa
File: JtcNoRWODHkxznX071FbKsJssi4.roa (raw, json)
Hash identifier: LZmyybyWG9JgB5EjbAyEa1qwjco4dUyF24vtIXX9OIg=
Subject key identifier: 26:D7:0D:A1:15:8E:0C:79:31:CE:75:F4:EF:51:5B:2A:C2:6C:B2:2E
Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial: 330DC5F2
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/JtcNoRWODHkxznX071FbKsJssi4.roa
Signing time: Fri 04 Feb 2022 12:36:30 +0000
ROA not before: Fri 04 Feb 2022 12:36:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31638
IP address blocks: 93.115.170.0/23 maxlen: 23
89.39.224.0/20 maxlen: 21
188.241.190.0/23 maxlen: 24
46.255.80.0/21 maxlen: 24
89.44.206.0/24 maxlen: 24
5.144.184.0/21 maxlen: 24
89.45.95.0/24 maxlen: 24
37.156.148.0/22 maxlen: 23
89.47.32.0/23 maxlen: 24
188.215.44.0/22 maxlen: 23
86.105.179.0/24 maxlen: 24
89.45.24.0/24 maxlen: 24
89.45.24.0/21 maxlen: 21
89.45.26.0/24 maxlen: 24
89.45.25.0/24 maxlen: 24
89.45.27.0/24 maxlen: 24
176.223.164.0/24 maxlen: 24
188.215.65.0/24 maxlen: 24
37.156.96.0/22 maxlen: 23
89.33.232.0/24 maxlen: 24
94.177.18.0/23 maxlen: 23
93.118.37.0/24 maxlen: 24
195.62.160.0/19 maxlen: 20
89.34.6.0/24 maxlen: 24
89.45.216.0/22 maxlen: 23
188.215.248.0/24 maxlen: 24
188.212.153.0/24 maxlen: 24
188.215.247.0/24 maxlen: 24
188.210.239.0/24 maxlen: 24
37.156.168.0/22 maxlen: 23
185.82.168.0/22 maxlen: 23
185.82.170.0/24 maxlen: 24
185.82.169.0/24 maxlen: 24
185.82.171.0/24 maxlen: 24
188.241.4.0/23 maxlen: 24
37.156.208.0/22 maxlen: 23
94.177.151.0/24 maxlen: 24
89.42.230.0/24 maxlen: 24
188.209.80.0/20 maxlen: 24
86.104.229.0/24 maxlen: 24
188.209.88.0/21 maxlen: 21
93.113.89.0/24 maxlen: 24
86.105.8.0/24 maxlen: 24
2a02:20d8::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 856540658 (0x330dc5f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Validity
Not Before: Feb 4 12:36:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26d70da1158e0c7931ce75f4ef515b2ac26cb22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:14:26:82:2e:0f:80:eb:e7:d6:28:b1:e6:
03:60:9c:b2:d6:4a:8c:bc:20:0d:16:cc:80:d7:1e:
d6:b6:c8:77:f9:55:54:e9:4c:0a:8e:0a:c2:d9:3e:
dc:10:2b:80:07:2b:40:e4:4e:b4:e2:17:58:38:91:
77:3f:85:e1:a8:2e:7e:45:42:b0:95:77:d2:fc:29:
3c:fb:cc:f2:fa:9c:e3:13:ee:a4:57:28:92:0e:59:
da:d5:aa:84:9a:d9:1c:79:64:ab:6e:3b:ad:c3:a8:
5e:40:0f:b0:a3:9d:38:59:45:8b:20:66:0f:d5:ea:
9e:95:b8:40:20:c4:88:db:60:98:18:bf:70:cf:7e:
67:f3:16:ec:ac:b6:d7:20:95:08:0a:a6:cd:bc:35:
57:1e:e4:03:bd:22:0d:d4:07:93:c2:89:3d:5d:f8:
01:2f:85:48:e4:90:76:ab:66:fc:86:95:b7:8f:43:
f6:16:a2:f6:6a:ce:b5:96:9c:b4:91:24:d1:9a:4a:
93:41:69:3c:44:69:e1:4e:6d:b8:0c:67:4a:00:6b:
41:ec:72:65:fc:70:db:b4:e6:25:ed:73:4c:11:a4:
b8:c3:16:59:61:04:a0:d2:ee:f8:5b:7c:3a:e2:f7:
b2:5b:82:42:18:8a:31:80:49:ae:6b:70:24:fc:7b:
5c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D7:0D:A1:15:8E:0C:79:31:CE:75:F4:EF:51:5B:2A:C2:6C:B2:2E
X509v3 Authority Key Identifier:
keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/JtcNoRWODHkxznX071FbKsJssi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.184.0/21
37.156.96.0/22
37.156.148.0/22
37.156.168.0/22
37.156.208.0/22
46.255.80.0/21
86.104.229.0/24
86.105.8.0/24
86.105.179.0/24
89.33.232.0/24
89.34.6.0/24
89.39.224.0/20
89.42.230.0/24
89.44.206.0/24
89.45.24.0/21
89.45.95.0/24
89.45.216.0/22
89.47.32.0/23
93.113.89.0/24
93.115.170.0/23
93.118.37.0/24
94.177.18.0/23
94.177.151.0/24
176.223.164.0/24
185.82.168.0/22
188.209.80.0/20
188.210.239.0/24
188.212.153.0/24
188.215.44.0/22
188.215.65.0/24
188.215.247.0-188.215.248.255
188.241.4.0/23
188.241.190.0/23
195.62.160.0/19
IPv6:
2a02:20d8::/29
Signature Algorithm: sha256WithRSAEncryption
28:72:5c:4c:1c:d5:de:8e:a3:2c:4e:54:25:d6:cf:02:c0:4f:
30:92:c1:c1:f4:65:c9:e0:cc:d9:0d:cd:e5:7f:36:13:37:83:
b8:17:4a:1a:f2:03:9f:6d:c2:2f:d8:fd:e7:90:e9:1b:9a:17:
fb:5b:f4:49:39:4d:d0:68:19:bc:1b:e6:bd:77:1a:af:72:0e:
35:c8:ad:38:43:8e:d0:f4:13:14:e8:8e:9d:92:a0:00:a4:cd:
15:1f:2b:9f:71:83:a6:a4:8e:c0:c3:40:11:40:b7:3f:ba:d3:
dd:80:0d:b3:f2:7f:55:a5:20:13:8f:46:6e:4b:84:6c:fe:51:
7b:15:07:a3:6e:bc:ea:e6:8d:6c:72:c5:5a:96:32:32:4f:9d:
29:70:d0:1d:ec:ac:1f:ff:cc:67:45:0d:ed:96:5f:9d:08:09:
84:fd:d3:57:9b:b4:9b:e1:15:e3:13:0d:44:a7:2a:0c:18:dc:
70:c8:66:78:a1:e9:6c:73:ae:30:73:a4:ae:2c:d6:47:b0:33:
77:42:81:f5:e7:f9:1c:15:03:30:95:ee:b2:8c:77:26:43:3f:
e8:6c:3f:08:79:f0:3c:15:e0:ca:94:09:7d:4f:f3:38:84:ba:
35:3e:59:fa:77:e2:82:6c:da:a4:55:97:c3:e6:c6:31:3c:29:
26:dc:74:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:36 2024 by rpki-client on console-ams.rpki-client.org