Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/r5v09MnYvLMsBXknEjasRMpEOoo.roa
File: r5v09MnYvLMsBXknEjasRMpEOoo.roa (raw, json)
Hash identifier: IpI9Ol6/Xb5HKxRnsHyBrgeqV5ED1B4y7s19jWgFkdY=
Subject key identifier: AF:9B:F4:F4:C9:D8:BC:B3:2C:05:79:27:12:36:AC:44:CA:44:3A:8A
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 41F18BA6
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/r5v09MnYvLMsBXknEjasRMpEOoo.roa
Signing time: Sat 01 Jan 2022 16:05:06 +0000
ROA not before: Sat 01 Jan 2022 16:05:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48176
IP address blocks: 81.177.228.0/22 maxlen: 22
81.177.240.0/21 maxlen: 21
81.177.248.0/22 maxlen: 22
81.177.252.0/23 maxlen: 23
81.177.184.0/24 maxlen: 24
81.177.188.0/22 maxlen: 22
81.177.195.0/24 maxlen: 24
81.177.200.0/22 maxlen: 22
81.177.200.0/21 maxlen: 21
81.177.226.0/23 maxlen: 23
81.177.224.0/20 maxlen: 20
81.177.224.0/23 maxlen: 23
185.8.20.0/22 maxlen: 22
178.237.176.0/20 maxlen: 20
178.237.176.0/21 maxlen: 21
178.237.176.0/22 maxlen: 22
178.237.184.0/21 maxlen: 21
178.237.180.0/22 maxlen: 22
178.237.190.0/23 maxlen: 23
178.237.188.0/23 maxlen: 23
81.177.56.0/21 maxlen: 21
81.177.56.0/22 maxlen: 22
91.207.136.0/23 maxlen: 23
62.122.240.0/21 maxlen: 21
37.18.152.0/21 maxlen: 21
37.18.156.0/22 maxlen: 22
213.222.240.0/21 maxlen: 21
213.222.240.0/20 maxlen: 20
213.59.150.0/24 maxlen: 24
213.59.148.0/23 maxlen: 23
213.59.146.0/24 maxlen: 24
213.59.154.0/24 maxlen: 24
213.222.248.0/21 maxlen: 21
213.59.186.0/23 maxlen: 23
213.59.186.0/24 maxlen: 24
149.255.24.0/21 maxlen: 21
213.59.190.0/23 maxlen: 23
213.59.188.0/22 maxlen: 22
213.222.224.0/22 maxlen: 22
213.222.224.0/21 maxlen: 21
213.222.232.0/22 maxlen: 22
213.222.232.0/21 maxlen: 21
213.222.236.0/22 maxlen: 22
213.59.144.0/22 maxlen: 22
2a03:aa00::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1106348966 (0x41f18ba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 1 16:05:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af9bf4f4c9d8bcb32c0579271236ac44ca443a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d1:01:de:38:65:4b:a0:bf:dc:ad:ca:c8:4f:
7e:75:24:e9:88:c0:f3:95:61:be:ed:3e:cc:40:81:
39:10:8c:74:31:be:25:fb:31:80:20:7a:93:66:21:
b1:3f:74:53:25:4c:14:df:4e:f4:ce:57:69:6a:fe:
3f:51:fa:1c:c5:1c:7d:05:9b:4b:2e:b7:7f:a7:db:
3c:ec:a4:26:ca:01:8d:dc:b8:63:b4:f7:36:a9:09:
b6:fb:fa:d7:e4:89:1c:af:c8:07:25:8b:3c:4e:9a:
9a:f0:7d:5d:3b:19:09:bd:55:c3:85:69:b3:38:e4:
e3:7a:d4:b1:8c:72:3d:e4:99:9e:65:bc:3f:a7:e9:
99:71:65:a4:5f:3a:f3:a1:c7:a8:1c:0f:cf:3f:9d:
a1:58:16:44:8a:fd:c9:08:f8:3a:8e:b1:13:5c:36:
68:49:13:dc:6d:f2:42:f2:26:bb:56:e0:f5:c6:b5:
66:35:d9:9f:36:96:70:d7:67:a5:8b:e7:a3:77:d5:
1b:b2:64:b3:9b:00:08:18:68:45:79:76:dd:50:f2:
a1:c1:42:5e:99:6b:f8:8e:11:b1:fd:9b:bd:fd:25:
d0:ec:63:96:ba:12:1d:a9:0d:2c:95:d4:35:8f:59:
50:aa:53:b6:f1:52:1d:49:72:63:b3:ba:dd:4e:49:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9B:F4:F4:C9:D8:BC:B3:2C:05:79:27:12:36:AC:44:CA:44:3A:8A
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/r5v09MnYvLMsBXknEjasRMpEOoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.152.0/21
62.122.240.0/21
81.177.56.0/21
81.177.184.0/24
81.177.188.0/22
81.177.195.0/24
81.177.200.0/21
81.177.224.0-81.177.253.255
91.207.136.0/23
149.255.24.0/21
178.237.176.0/20
185.8.20.0/22
213.59.144.0-213.59.150.255
213.59.154.0/24
213.59.186.0-213.59.191.255
213.222.224.0/19
IPv6:
2a03:aa00::/36
Signature Algorithm: sha256WithRSAEncryption
60:ad:b7:69:60:4b:4a:68:dc:84:5e:ac:00:dc:1b:57:f5:fc:
ab:7f:01:d7:57:3f:25:6d:f4:a0:be:c3:47:db:bb:f7:e7:6c:
28:88:5e:ed:f1:71:6a:1f:52:79:9c:8a:32:7a:33:8b:47:50:
af:0a:d1:e6:64:dc:08:4a:19:48:14:35:39:02:6a:6c:cd:b9:
c8:cd:d1:7d:e0:86:6a:6b:51:c4:6d:d4:2c:ba:2b:6c:a4:9c:
c8:ec:6f:aa:69:72:f7:ef:8d:d0:2c:fa:f6:8e:56:63:9c:13:
0f:85:1b:e4:25:bb:11:cb:c6:17:67:da:48:35:b4:53:64:a2:
98:c5:2b:50:ca:26:70:3e:78:62:9d:21:19:61:be:77:59:5a:
16:ee:78:23:50:0a:cb:fd:3e:75:50:e5:7d:a0:bb:6e:72:0e:
fe:7d:0a:80:f9:dd:cb:b9:e5:6f:16:b4:88:2d:2e:52:44:24:
6b:54:4a:cd:26:0e:90:96:29:44:e3:ab:eb:5b:8e:64:c5:6a:
ba:a7:36:e9:95:21:cb:e5:3d:0c:6c:b4:6e:86:5a:f3:bb:93:
37:49:89:72:36:d9:9e:ee:62:18:77:4c:cf:bb:58:d3:15:2e:
a8:7a:4f:78:cf:ba:bb:fa:1c:98:89:08:3f:cc:91:28:1c:d7:
cb:2a:e0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:13 2024 by rpki-client on console-ams.rpki-client.org