Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/gMqzeqmFfwNLOwIrUm4kr7V9eH0.roa
File: gMqzeqmFfwNLOwIrUm4kr7V9eH0.roa (raw, json)
Hash identifier: k+gM02zYCg39EjJ0Wl4+aHcZUVG/Lo5+Y3PkdqWnOdw=
Subject key identifier: 80:CA:B3:7A:A9:85:7F:03:4B:3B:02:2B:52:6E:24:AF:B5:7D:78:7D
Certificate issuer: /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial: 06806F65
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/gMqzeqmFfwNLOwIrUm4kr7V9eH0.roa
Signing time: Mon 21 Feb 2022 17:15:10 +0000
ROA not before: Mon 21 Feb 2022 17:15:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29802
IP address blocks: 149.255.39.0/24 maxlen: 24
45.158.38.0/24 maxlen: 24
45.158.36.0/23 maxlen: 32
45.158.39.0/24 maxlen: 24
37.72.168.0/21 maxlen: 32
37.72.172.0/23 maxlen: 23
37.72.171.0/24 maxlen: 24
37.72.170.0/23 maxlen: 23
37.72.170.0/24 maxlen: 24
37.72.174.0/23 maxlen: 23
194.126.172.0/22 maxlen: 24
194.126.172.0/24 maxlen: 24
194.126.175.0/24 maxlen: 24
194.126.173.0/24 maxlen: 24
94.100.16.0/20 maxlen: 32
94.100.16.0/24 maxlen: 24
94.100.17.0/24 maxlen: 24
94.100.23.0/24 maxlen: 24
94.100.24.0/24 maxlen: 24
94.100.21.0/24 maxlen: 24
94.100.22.0/24 maxlen: 24
94.100.19.0/24 maxlen: 24
94.100.20.0/24 maxlen: 24
94.100.18.0/24 maxlen: 24
94.100.30.0/24 maxlen: 24
94.100.31.0/24 maxlen: 24
94.100.28.0/24 maxlen: 24
94.100.29.0/24 maxlen: 24
94.100.26.0/24 maxlen: 24
94.100.27.0/24 maxlen: 24
94.100.25.0/24 maxlen: 24
217.79.240.0/24 maxlen: 24
217.79.242.0/23 maxlen: 24
217.79.240.0/20 maxlen: 24
149.255.37.0/24 maxlen: 24
149.255.38.0/24 maxlen: 24
149.255.32.0/21 maxlen: 32
149.255.35.0/24 maxlen: 24
149.255.36.0/24 maxlen: 32
89.233.104.0/24 maxlen: 24
89.233.104.0/21 maxlen: 24
89.233.105.0/24 maxlen: 24
89.233.106.0/24 maxlen: 24
89.233.107.0/24 maxlen: 24
46.21.144.0/24 maxlen: 24
46.21.145.0/24 maxlen: 24
46.21.144.0/20 maxlen: 32
46.21.151.0/24 maxlen: 24
46.21.152.0/24 maxlen: 24
46.21.150.0/24 maxlen: 24
46.21.148.0/24 maxlen: 24
46.21.146.0/24 maxlen: 24
46.21.147.0/24 maxlen: 24
46.21.158.0/23 maxlen: 23
46.21.156.0/24 maxlen: 24
46.21.157.0/24 maxlen: 24
46.21.153.0/24 maxlen: 24
195.242.153.0/24 maxlen: 24
2a02:748:f000::/36 maxlen: 36
2a02:748:e000::/35 maxlen: 35
2a02:748::/35 maxlen: 35
2a02:748:c000::/35 maxlen: 35
2a02:748::/32 maxlen: 48
2a0f:5180::/32 maxlen: 32
2a02:748:6000::/48 maxlen: 48
2a0f:5180::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109080421 (0x6806f65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Validity
Not Before: Feb 21 17:15:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80cab37aa9857f034b3b022b526e24afb57d787d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:d0:7d:bf:0b:19:73:66:6d:c3:c8:21:44:
61:46:11:5c:96:9b:a9:a5:5b:67:d8:26:0c:cf:89:
be:c9:38:08:a3:2b:a6:68:8b:07:b7:d2:bb:72:64:
33:45:2e:64:08:80:76:48:d2:1b:ac:ab:5f:c3:37:
7b:6d:c0:6a:b4:b6:51:5b:8d:3e:56:47:57:a6:66:
d0:5d:19:2f:35:7c:47:ca:db:14:44:8a:97:ec:9d:
90:72:ad:8c:3b:14:a5:40:8a:5b:d0:1b:0a:69:cc:
64:93:d6:34:58:dc:37:dc:69:28:34:32:ae:91:82:
2e:f8:0d:f8:cc:31:32:52:b4:ef:ea:2b:3b:20:d6:
09:cf:71:88:ca:70:c4:d1:0f:68:dc:c3:70:6e:c1:
cb:6a:78:6c:0b:ac:a9:52:a0:75:a2:db:4a:16:a7:
c5:5c:da:3e:57:aa:dc:6e:e1:be:f7:03:00:4b:db:
84:01:02:9f:27:21:23:3a:61:e5:c9:cc:00:d9:d7:
36:6e:be:18:f8:3a:65:bd:88:83:6e:80:95:5a:f3:
80:b5:ef:2e:3c:5e:84:d2:67:5b:56:15:ef:40:bc:
f7:23:9f:73:ea:a2:78:cf:e9:32:5a:a3:90:4e:aa:
2e:13:24:45:35:90:75:23:31:f3:b2:d7:47:58:38:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CA:B3:7A:A9:85:7F:03:4B:3B:02:2B:52:6E:24:AF:B5:7D:78:7D
X509v3 Authority Key Identifier:
keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/gMqzeqmFfwNLOwIrUm4kr7V9eH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.168.0/21
45.158.36.0/22
46.21.144.0/20
89.233.104.0/21
94.100.16.0/20
149.255.32.0/21
194.126.172.0/22
195.242.153.0/24
217.79.240.0/20
IPv6:
2a02:748::/32
2a0f:5180::/29
Signature Algorithm: sha256WithRSAEncryption
79:10:ce:35:d3:aa:4d:e9:91:cb:ae:05:6b:61:70:64:bb:97:
33:38:65:58:52:e6:0a:63:d5:2c:64:81:73:13:ab:8a:a6:0b:
b0:de:90:84:20:e9:de:56:6f:62:0a:dd:01:0a:f8:70:a1:10:
e9:a3:e8:61:d3:86:56:89:8b:9e:30:06:72:86:c3:cc:9a:ad:
b6:60:45:82:08:e3:8b:4c:8b:1f:3a:5e:e5:49:68:ea:ed:92:
83:cb:d7:de:7d:05:c3:6d:97:e7:3c:f1:02:5b:37:01:ff:4c:
5c:d6:8b:92:61:a5:a4:ad:46:03:f2:88:5b:4e:bd:4b:de:fd:
a3:56:58:e2:60:a0:52:28:f8:4e:47:53:1c:c3:36:a3:cc:9d:
da:ad:f8:6f:6b:8d:3d:15:17:77:4d:4f:7a:83:5c:18:a2:c6:
e5:dd:80:7d:42:51:cf:23:60:8a:ad:e8:81:52:e8:8e:f1:a9:
f9:31:df:e9:cd:88:a2:24:0f:79:d1:52:67:f1:20:d1:a7:90:
ae:98:38:67:0b:a2:e1:11:9a:74:d0:b2:43:76:d9:af:9f:a1:
23:61:4c:6f:df:3e:13:86:a1:a9:6b:03:78:0c:ae:12:b8:27:
8b:9a:df:ef:4c:79:e1:2a:5b:d9:f7:62:57:3f:af:ef:ab:3e:
b7:0f:f1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:39 2023 by rpki-client on console-ams.rpki-client.org