Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/AP7LSTZpxYdh6qPsG8ut-JYZPso.roa
File: AP7LSTZpxYdh6qPsG8ut-JYZPso.roa (raw, json)
Hash identifier: FyFzdBOl+Stm8kZaYcVZB78835J/lp28MsdK71WxxjQ=
Subject key identifier: 00:FE:CB:49:36:69:C5:87:61:EA:A3:EC:1B:CB:AD:F8:96:19:3E:CA
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1CD0AB4B
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/AP7LSTZpxYdh6qPsG8ut-JYZPso.roa
Signing time: Fri 08 Apr 2022 13:55:05 +0000
ROA not before: Fri 08 Apr 2022 13:55:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50835
IP address blocks: 91.193.30.0/23 maxlen: 23
81.161.48.0/22 maxlen: 22
194.33.64.0/23 maxlen: 23
91.246.192.0/22 maxlen: 24
77.36.57.0/24 maxlen: 24
176.113.180.0/22 maxlen: 22
77.36.60.0/24 maxlen: 24
77.36.65.0/24 maxlen: 24
91.246.203.0/24 maxlen: 24
176.118.204.0/23 maxlen: 24
176.110.112.0/23 maxlen: 23
91.246.217.0/24 maxlen: 24
81.161.8.0/22 maxlen: 22
192.162.184.0/23 maxlen: 23
37.97.120.0/24 maxlen: 24
37.97.121.0/24 maxlen: 24
91.232.56.0/23 maxlen: 23
194.33.66.0/23 maxlen: 23
64.43.120.0/22 maxlen: 24
91.233.200.0/24 maxlen: 24
176.115.236.0/22 maxlen: 24
193.36.203.0/24 maxlen: 24
109.207.129.0/24 maxlen: 24
109.207.130.0/24 maxlen: 24
109.207.132.0/24 maxlen: 24
176.96.94.0/24 maxlen: 24
91.229.18.0/23 maxlen: 23
91.200.132.0/24 maxlen: 24
91.200.134.0/23 maxlen: 23
176.121.108.0/23 maxlen: 24
176.121.110.0/23 maxlen: 24
91.238.39.0/24 maxlen: 24
91.239.222.0/23 maxlen: 23
176.116.236.0/24 maxlen: 24
91.239.226.0/24 maxlen: 24
91.224.212.0/24 maxlen: 24
93.120.8.0/23 maxlen: 23
91.232.226.0/24 maxlen: 24
46.173.248.0/22 maxlen: 24
91.236.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 483437387 (0x1cd0ab4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Apr 8 13:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00fecb493669c58761eaa3ec1bcbadf896193eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:e3:70:a4:8f:78:0f:43:f4:e5:0f:c7:d1:
95:e5:12:8f:4f:92:e0:3d:64:65:42:4c:a2:50:f9:
80:d3:6a:31:74:81:f3:df:b3:8d:48:86:20:82:20:
72:d5:73:e8:69:ba:61:29:55:e6:a1:9f:4c:ff:b0:
03:c4:92:a8:74:79:58:ba:71:04:d4:40:21:1e:89:
93:9f:11:bd:d9:e8:aa:7d:4b:52:44:e5:38:ef:25:
3b:b8:6b:14:9a:97:ab:0e:45:45:ba:ed:9e:bd:db:
40:5c:0b:39:84:5a:8e:ab:a8:6f:d7:bd:14:38:d2:
45:28:b4:cc:5e:c2:25:6a:ad:b8:20:41:b5:6c:10:
7d:b3:46:aa:58:03:2a:48:f2:fa:09:9c:3d:d1:f2:
d8:32:89:53:08:87:e6:5e:be:fe:d7:4b:6d:d5:b7:
59:5f:5b:70:a0:a1:31:34:ab:f6:ab:fc:1f:53:d5:
d0:51:e1:ca:da:85:c3:e5:19:30:f3:28:ae:e9:50:
ae:0c:77:e5:ff:c0:82:47:82:ba:a9:80:f1:6e:b0:
87:e9:2d:eb:f5:f9:26:5b:12:5c:9c:d5:e7:b8:73:
90:bc:11:c3:0b:e4:2e:a1:6a:1d:df:bb:a0:98:93:
4d:39:84:54:05:3c:a4:2f:1a:05:18:b1:65:a1:d5:
ed:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FE:CB:49:36:69:C5:87:61:EA:A3:EC:1B:CB:AD:F8:96:19:3E:CA
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/AP7LSTZpxYdh6qPsG8ut-JYZPso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.120.0/23
46.173.248.0/22
64.43.120.0/22
77.36.57.0/24
77.36.60.0/24
77.36.65.0/24
81.161.8.0/22
81.161.48.0/22
91.193.30.0/23
91.200.132.0/24
91.200.134.0/23
91.224.212.0/24
91.229.18.0/23
91.232.56.0/23
91.232.226.0/24
91.233.200.0/24
91.236.76.0/24
91.238.39.0/24
91.239.222.0/23
91.239.226.0/24
91.246.192.0/22
91.246.203.0/24
91.246.217.0/24
93.120.8.0/23
109.207.129.0-109.207.130.255
109.207.132.0/24
176.96.94.0/24
176.110.112.0/23
176.113.180.0/22
176.115.236.0/22
176.116.236.0/24
176.118.204.0/23
176.121.108.0/22
192.162.184.0/23
193.36.203.0/24
194.33.64.0/22
Signature Algorithm: sha256WithRSAEncryption
24:2d:e1:fc:25:92:30:ea:24:7e:99:d3:28:d9:2d:75:11:a1:
03:f2:7f:68:be:6a:a8:9b:54:61:48:a7:6c:0d:43:59:2a:e3:
cc:82:c5:ab:12:f2:b6:01:81:e3:4b:19:38:a2:ea:70:a4:c1:
02:ad:0c:9c:f9:06:d5:cc:0b:ab:d6:5d:02:42:02:a6:f0:64:
44:0d:60:05:09:10:de:77:9b:90:5f:96:33:9e:7a:83:b1:ad:
f1:f5:4e:ce:3f:d7:c8:ea:1b:9e:61:df:2b:f3:ff:29:b0:59:
c4:37:1d:cf:c8:56:51:3c:c8:41:82:db:28:a5:01:82:22:51:
61:3b:74:11:e8:7c:f6:9d:11:b4:52:3d:bb:b6:31:0b:82:9e:
f1:69:5e:43:99:16:86:68:7d:8d:fb:61:c2:48:d2:66:d3:ba:
c4:12:ab:fa:5a:ae:66:a3:d6:a0:39:57:03:a2:d1:54:c4:05:
2b:17:23:fe:e3:55:4e:63:db:9d:f0:0c:b5:08:38:01:83:1b:
78:0a:64:5b:b2:4b:f2:17:60:a6:3b:17:ee:87:66:02:a9:3f:
a5:f1:ad:7f:46:00:6e:7a:5a:8c:87:2d:42:4d:55:9f:ce:65:
c4:13:cc:84:49:35:b3:ba:81:93:f0:30:58:1c:38:e7:41:72:
61:3d:b8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org