Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/oliVDSY30zNDB_o3ng4Lv1OiFyk.roa
File: oliVDSY30zNDB_o3ng4Lv1OiFyk.roa (raw, json)
Hash identifier: t1WonHLHf9c1VhRoeCgmtFbmsgF0+F0uBK0mHnbKqQw=
Subject key identifier: A2:58:95:0D:26:37:D3:33:43:07:FA:37:9E:0E:0B:BF:53:A2:17:29
Certificate issuer: /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial: 06E6177C
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/oliVDSY30zNDB_o3ng4Lv1OiFyk.roa
Signing time: Sun 19 Jun 2022 10:47:44 +0000
ROA not before: Sun 19 Jun 2022 10:47:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59441
IP address blocks: 185.208.78.0/24 maxlen: 24
185.208.79.0/24 maxlen: 24
185.83.112.0/22 maxlen: 22
185.83.112.0/23 maxlen: 23
185.83.112.0/24 maxlen: 24
185.83.114.0/23 maxlen: 23
185.83.113.0/24 maxlen: 24
185.83.114.0/24 maxlen: 24
185.83.115.0/24 maxlen: 24
185.173.104.0/22 maxlen: 22
185.173.104.0/24 maxlen: 24
185.173.105.0/24 maxlen: 24
185.173.106.0/24 maxlen: 24
185.173.107.0/24 maxlen: 24
5.144.128.0/22 maxlen: 22
5.144.132.0/22 maxlen: 22
5.144.128.0/21 maxlen: 21
5.144.128.0/23 maxlen: 23
5.144.128.0/24 maxlen: 24
5.144.129.0/24 maxlen: 24
5.144.130.0/24 maxlen: 24
5.144.131.0/24 maxlen: 24
5.144.132.0/24 maxlen: 24
5.144.135.0/24 maxlen: 24
5.144.133.0/24 maxlen: 24
5.144.134.0/24 maxlen: 24
45.92.95.0/24 maxlen: 24
45.92.92.0/22 maxlen: 22
45.92.92.0/24 maxlen: 24
45.92.93.0/24 maxlen: 24
45.92.94.0/24 maxlen: 24
45.138.132.0/22 maxlen: 22
45.138.132.0/24 maxlen: 24
45.138.133.0/24 maxlen: 24
45.138.134.0/24 maxlen: 24
45.138.135.0/24 maxlen: 24
2a10:5c40::/29 maxlen: 29
2a05:9a00:4::/48 maxlen: 48
2a05:9a00::/29 maxlen: 29
2a05:9a00:1::/48 maxlen: 48
2a05:9a00:1001::/48 maxlen: 48
2a05:9a00::/48 maxlen: 48
2a05:9a00:1000::/48 maxlen: 48
2a05:9a00:3::/48 maxlen: 48
2a05:9a00:1003::/48 maxlen: 48
2a05:9a00:2::/48 maxlen: 48
2a05:9a00:1002::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115742588 (0x6e6177c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Validity
Not Before: Jun 19 10:47:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a258950d2637d3334307fa379e0e0bbf53a21729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:92:bf:9a:23:8f:73:be:c5:15:96:07:fe:
10:2e:08:e9:95:42:0a:1b:70:93:5e:3e:36:05:b4:
e7:75:0a:ec:a2:1f:05:77:8e:93:23:05:d2:29:ea:
5f:7d:fb:ae:61:c2:d1:ad:b5:6e:38:86:0a:18:c8:
28:35:15:d4:e7:03:9d:ab:f5:5e:1d:2e:e4:20:e4:
51:fc:f8:12:83:57:89:11:37:4c:cb:dd:98:74:3c:
63:c0:d6:95:ee:95:8b:17:d8:ce:9d:d7:08:d9:be:
f3:6c:6f:79:8d:a3:e4:ed:7b:62:c9:c0:8f:bd:93:
f2:89:5d:c1:fa:95:e8:30:d7:0f:b9:44:cf:09:ef:
b2:66:14:23:e7:b7:9b:26:37:a6:14:2e:a3:40:f8:
fa:95:d0:ba:8d:45:3a:7c:a0:d5:2c:92:ac:de:f2:
ba:15:29:eb:ce:8e:db:7a:d9:c0:b1:10:e4:1e:03:
fe:af:39:d5:da:f0:fb:d2:1c:57:a6:07:0b:04:34:
0b:4d:61:3f:c0:00:40:38:00:cc:86:14:46:47:80:
dd:70:9d:46:7d:81:80:4a:f4:28:e3:c8:f2:0a:ae:
0b:64:74:0a:7e:5f:5a:97:c4:a4:27:3c:5b:1a:4b:
73:8f:7e:b3:9d:c4:cf:84:c3:06:3f:37:3f:e3:85:
e1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:58:95:0D:26:37:D3:33:43:07:FA:37:9E:0E:0B:BF:53:A2:17:29
X509v3 Authority Key Identifier:
keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/oliVDSY30zNDB_o3ng4Lv1OiFyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.128.0/21
45.92.92.0/22
45.138.132.0/22
185.83.112.0/22
185.173.104.0/22
185.208.78.0/23
IPv6:
2a05:9a00::/29
2a10:5c40::/29
Signature Algorithm: sha256WithRSAEncryption
0c:08:75:35:0f:44:29:e6:d8:8d:e7:53:97:31:07:39:6c:f9:
80:01:eb:c5:cd:38:10:a2:4e:ec:60:0a:50:ce:43:10:bc:6d:
55:a3:8a:1c:b4:a2:1d:62:32:3b:3b:eb:3b:c0:8b:e6:97:07:
ce:5a:ae:3c:90:cd:70:6b:fa:37:fa:2f:fe:90:03:c9:d2:a4:
5f:72:f4:a3:60:1f:51:7c:31:90:4b:e3:9e:1b:19:cb:ee:05:
d4:5b:15:53:46:52:5c:49:fa:b3:b3:48:d3:70:f4:49:ce:88:
18:62:ba:5d:c5:60:69:5e:bf:ca:5b:03:ba:8b:52:cf:79:a9:
91:48:a3:9e:cd:66:2c:75:e9:85:33:7f:f1:d8:12:7e:2a:af:
e0:30:bb:45:7f:df:34:d9:13:fa:c6:65:85:84:2b:e7:66:22:
d0:29:84:09:a4:e8:20:07:61:47:c5:2e:d5:44:d6:81:4d:b5:
4f:9a:3b:77:cf:12:2a:b3:9d:fe:1f:f1:c2:9c:34:bd:93:c5:
3c:de:35:c0:24:fc:44:8d:5e:8d:d8:ae:11:0d:67:34:37:1f:
ab:70:a5:9c:67:ac:7b:01:9f:1a:2e:1c:9b:4c:29:4c:6e:6a:
4f:5e:d1:ec:65:06:68:bc:c6:3b:bc:fb:0e:a4:c6:b5:46:7d:
f8:f8:5e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:53 2023 by rpki-client on console-fra.rpki-client.org