Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/OkwVkFJbB2tFJYaqs-hhbWZv11k.roa
File: OkwVkFJbB2tFJYaqs-hhbWZv11k.roa (raw, json)
Hash identifier: g4re8gG/621+RoGA4oPQUiwxKcfgNaojk+ureS6zJRk=
Subject key identifier: 3A:4C:15:90:52:5B:07:6B:45:25:86:AA:B3:E8:61:6D:66:6F:D7:59
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 0182827C5BA26F83B46BAA57D0F515233026
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/OkwVkFJbB2tFJYaqs-hhbWZv11k.roa
Signing time: Tue 09 Aug 2022 12:02:44 +0000
ROA not before: Tue 09 Aug 2022 12:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 37.235.48.0/24 maxlen: 24
89.31.120.0/24 maxlen: 24
89.31.121.0/24 maxlen: 24
91.132.92.0/24 maxlen: 24
91.132.95.0/24 maxlen: 24
158.255.208.0/24 maxlen: 24
158.255.213.0/24 maxlen: 24
158.255.214.0/24 maxlen: 24
158.255.215.0/24 maxlen: 24
185.26.239.0/24 maxlen: 24
149.154.157.0/24 maxlen: 24
149.154.158.0/24 maxlen: 24
149.154.159.0/24 maxlen: 24
151.236.15.0/24 maxlen: 24
151.236.16.0/24 maxlen: 24
151.236.17.0/24 maxlen: 24
151.236.18.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.21.0/24 maxlen: 24
151.236.22.0/24 maxlen: 24
151.236.25.0/24 maxlen: 24
46.183.187.0/24 maxlen: 24
103.57.248.0/24 maxlen: 24
103.57.249.0/24 maxlen: 24
103.57.251.0/24 maxlen: 24
2a03:f80:65::/48 maxlen: 48
2a03:f80:45::/48 maxlen: 48
2a03:f80:40::/48 maxlen: 48
2a03:f80:39::/48 maxlen: 48
2a03:f80:33::/48 maxlen: 48
2a03:f80:4416::/48 maxlen: 48
2a03:f80:971::/48 maxlen: 48
2a03:f80:47::/48 maxlen: 48
2a03:f80:49::/48 maxlen: 48
2a03:f80:44::/48 maxlen: 48
2a03:f80:852::/48 maxlen: 48
2a03:f80:32::/48 maxlen: 48
2a03:f80:48::/48 maxlen: 48
2a03:f80:61::/48 maxlen: 48
2a03:f80:81::/48 maxlen: 48
2a03:f80:381::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:82:7c:5b:a2:6f:83:b4:6b:aa:57:d0:f5:15:23:30:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Aug 9 12:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a4c1590525b076b452586aab3e8616d666fd759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a4:73:43:37:3f:92:4e:47:30:de:27:49:71:
30:e5:be:75:48:c3:1b:55:6e:f6:27:3e:3d:cc:e1:
68:59:07:57:6e:9e:50:4a:60:9e:69:c1:45:ce:e3:
ba:ce:5b:1e:2a:87:f7:eb:96:2b:77:8e:e9:35:4a:
57:9d:7e:d2:47:f3:e4:5a:c5:03:84:cb:0b:b6:ed:
8a:53:f8:bf:c8:dc:ae:9d:c2:84:d3:be:91:c4:8a:
23:70:c9:43:04:7b:4f:5d:ea:89:31:ed:99:cb:a2:
6f:18:db:9e:0d:b1:bf:a9:78:b3:8b:e4:23:9f:85:
68:15:4a:d2:2e:fa:e2:c0:41:fd:a1:9b:31:af:7e:
5a:6f:a2:2c:ce:72:ee:61:e6:30:61:23:fd:e5:3f:
d4:d8:f8:3a:8a:91:d7:6b:02:56:c7:47:32:5f:7a:
66:95:b7:3e:22:a6:17:bf:1d:f0:e1:20:78:12:16:
53:ce:07:a9:c0:74:ae:5e:12:15:a2:1a:79:f1:ca:
21:8c:61:e7:32:de:7a:17:aa:ef:0f:9c:3b:8f:45:
3e:c0:ed:29:fe:b5:a5:6c:f7:14:f1:ed:d9:c7:3e:
1c:c6:65:39:06:47:06:83:36:09:2b:1a:12:9d:7b:
fa:3d:1d:cc:80:ec:69:6e:e9:81:76:06:3e:72:db:
0f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4C:15:90:52:5B:07:6B:45:25:86:AA:B3:E8:61:6D:66:6F:D7:59
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/OkwVkFJbB2tFJYaqs-hhbWZv11k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.48.0/24
46.183.187.0/24
89.31.120.0/23
91.132.92.0/24
91.132.95.0/24
103.57.248.0/23
103.57.251.0/24
149.154.157.0-149.154.159.255
151.236.15.0-151.236.18.255
151.236.20.0-151.236.22.255
151.236.25.0/24
158.255.208.0/24
158.255.213.0-158.255.215.255
185.26.239.0/24
IPv6:
2a03:f80:32::/47
2a03:f80:39::/48
2a03:f80:40::/48
2a03:f80:44::/47
2a03:f80:47::-2a03:f80:49:ffff:ffff:ffff:ffff:ffff
2a03:f80:61::/48
2a03:f80:65::/48
2a03:f80:81::/48
2a03:f80:381::/48
2a03:f80:852::/48
2a03:f80:971::/48
2a03:f80:4416::/48
Signature Algorithm: sha256WithRSAEncryption
94:75:a8:3d:9b:b2:3a:0e:07:b9:e7:01:d7:fd:bf:d9:6f:05:
0c:4e:25:a1:4a:51:2d:5c:58:74:77:b4:77:6c:d9:14:32:7a:
89:72:29:7c:81:b7:c4:10:19:63:cb:72:aa:ce:f0:37:b3:8b:
2e:67:af:c9:f3:91:45:5b:09:14:d2:86:13:20:3a:6b:70:b8:
1c:27:ae:67:77:4c:8d:54:4b:9c:c2:29:10:7d:7a:a1:ab:99:
6a:b3:62:53:9f:35:b5:b9:ea:84:1f:85:0c:51:49:34:5b:ee:
55:91:56:53:1a:fe:25:9b:98:cb:9c:0e:f9:23:f5:96:9e:a3:
9b:e7:3e:c1:b4:29:02:32:54:e0:12:8f:0a:b1:15:47:86:ef:
b7:20:8a:6e:68:2a:f3:9a:60:1d:c0:93:f5:23:f4:5c:2c:cb:
8c:ba:89:ab:67:02:5c:95:33:c3:8e:a7:5a:86:ff:b1:8b:1d:
30:a8:a0:3b:51:d7:df:41:b7:29:e6:45:15:aa:f8:8a:ef:57:
d4:0d:be:b9:4d:74:34:1b:c3:08:c4:9c:5f:9e:77:77:5d:fa:
8f:0b:f4:0b:9f:89:d6:e5:2d:d5:b4:80:9c:1a:69:0c:6d:68:
fd:2f:f9:6c:d9:b0:63:9b:86:ce:a5:1f:27:95:b0:4d:76:2f:
0e:da:bd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:09 2023 by rpki-client on console-fra.rpki-client.org