Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/7k_RPb8ETwPo_UOW8kR3-h4W0FA.roa
File: 7k_RPb8ETwPo_UOW8kR3-h4W0FA.roa (raw, json)
Hash identifier: 5bd83TVTLoTC/02ycYNvRnJLbJ7K2qr8mq4Fjgwh7fQ=
Subject key identifier: EE:4F:D1:3D:BF:04:4F:03:E8:FD:43:96:F2:44:77:FA:1E:16:D0:50
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 0184BD2C0AB8715235DAE55103E1008A5879
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/7k_RPb8ETwPo_UOW8kR3-h4W0FA.roa
Signing time: Mon 28 Nov 2022 07:38:10 +0000
ROA not before: Mon 28 Nov 2022 07:38:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44092
IP address blocks: 185.191.105.0/24 maxlen: 24
185.191.104.0/24 maxlen: 24
185.191.106.0/24 maxlen: 24
185.191.107.0/24 maxlen: 24
188.191.56.0/22 maxlen: 24
188.191.56.0/24 maxlen: 24
188.191.57.0/24 maxlen: 24
188.191.58.0/24 maxlen: 24
188.191.59.0/24 maxlen: 24
185.56.156.0/22 maxlen: 24
85.208.200.0/24 maxlen: 24
85.208.201.0/24 maxlen: 24
85.208.203.0/24 maxlen: 24
85.208.202.0/24 maxlen: 24
185.215.144.0/24 maxlen: 24
77.242.130.0/24 maxlen: 24
77.242.128.0/24 maxlen: 24
77.242.129.0/24 maxlen: 24
77.242.128.0/20 maxlen: 24
185.215.145.0/24 maxlen: 24
77.242.131.0/24 maxlen: 24
77.242.132.0/24 maxlen: 24
185.248.227.0/24 maxlen: 24
45.145.201.0/24 maxlen: 24
45.145.202.0/24 maxlen: 24
45.145.200.0/24 maxlen: 24
45.145.203.0/24 maxlen: 24
89.37.71.0/24 maxlen: 24
89.37.70.0/23 maxlen: 24
89.37.70.0/24 maxlen: 24
77.242.134.0/24 maxlen: 24
77.242.133.0/24 maxlen: 24
185.215.147.0/24 maxlen: 24
185.215.146.0/24 maxlen: 24
77.242.137.0/24 maxlen: 24
77.242.135.0/24 maxlen: 24
77.242.136.0/24 maxlen: 24
77.242.138.0/24 maxlen: 24
77.242.139.0/24 maxlen: 24
77.242.140.0/24 maxlen: 24
77.242.141.0/24 maxlen: 24
77.242.143.0/24 maxlen: 24
77.242.142.0/24 maxlen: 24
185.171.232.0/24 maxlen: 24
185.171.233.0/24 maxlen: 24
185.171.235.0/24 maxlen: 24
185.171.234.0/24 maxlen: 24
185.219.117.0/24 maxlen: 24
185.219.118.0/24 maxlen: 24
185.219.116.0/24 maxlen: 24
185.219.119.0/24 maxlen: 24
2a02:53e0::/32 maxlen: 32
2a0b:7b80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:2c:0a:b8:71:52:35:da:e5:51:03:e1:00:8a:58:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Nov 28 07:38:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee4fd13dbf044f03e8fd4396f24477fa1e16d050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:c5:9d:32:78:d4:58:87:c5:c5:34:64:ef:
24:24:d0:ec:6e:2f:88:6e:ba:f5:95:7f:c3:67:79:
1f:eb:27:a4:41:11:ca:ac:d1:c2:6c:1c:07:5c:25:
15:2b:26:19:92:3b:a4:8a:87:23:8e:58:c2:e7:72:
21:a8:7c:b1:4f:8f:77:7d:55:85:0e:7c:27:23:5e:
56:59:a9:c0:f6:bc:60:fc:89:85:84:16:f1:85:20:
17:5f:96:33:66:6e:01:25:0e:db:b7:7e:48:83:10:
34:e3:52:0f:7c:c1:86:d9:35:18:46:72:e5:3a:27:
de:86:aa:19:d5:70:30:b1:e5:f8:af:7e:c4:5f:c0:
9e:97:d3:c8:c3:46:6d:9a:56:d8:0f:26:ff:14:11:
83:31:07:0a:5b:51:8d:cb:3b:35:1d:4c:d9:98:bd:
a6:f2:e7:36:25:8a:dc:d7:1b:d9:18:fb:a3:55:4c:
c0:4e:ab:2d:77:23:15:9b:38:6c:44:8e:17:13:e3:
a3:69:51:e6:d9:7a:8a:f5:e0:47:fb:28:76:9b:5d:
47:3b:b5:38:b1:a7:52:d9:90:3a:b3:cf:97:cc:d5:
ad:f7:b4:da:84:f1:04:3c:c9:25:c4:65:ae:96:55:
a2:7e:c1:63:1d:e3:99:0f:ab:8c:e7:c0:29:ad:3c:
fa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4F:D1:3D:BF:04:4F:03:E8:FD:43:96:F2:44:77:FA:1E:16:D0:50
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/7k_RPb8ETwPo_UOW8kR3-h4W0FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.200.0/22
77.242.128.0/20
85.208.200.0/22
89.37.70.0/23
185.56.156.0/22
185.171.232.0/22
185.191.104.0/22
185.215.144.0/22
185.219.116.0/22
185.248.227.0/24
188.191.56.0/22
IPv6:
2a02:53e0::/32
2a0b:7b80::/29
Signature Algorithm: sha256WithRSAEncryption
4b:2a:c6:f4:f6:f1:cb:04:4c:ef:1b:19:90:93:41:16:2b:3d:
90:0e:99:e7:7a:f7:69:a5:76:a5:31:50:47:59:d4:6d:7a:96:
62:2b:d4:80:65:c9:d6:28:d6:1d:54:0a:9d:1c:57:1b:a6:bc:
df:ac:b2:6a:95:d4:cd:f7:65:7e:89:45:b3:2f:ca:b7:ea:bf:
be:68:f7:88:b1:59:e0:9e:98:56:84:84:47:2c:44:6c:01:1b:
f9:3e:16:fc:f9:5b:ed:28:14:b0:26:ca:2b:83:17:e8:6c:a5:
80:33:96:a0:05:8c:cd:53:db:80:8a:ab:3a:5d:c5:65:ba:c8:
ef:d8:8d:e8:e6:2a:58:bf:3b:2b:45:8b:a5:75:21:1a:99:40:
19:3a:fe:f2:cf:8c:2b:aa:70:2e:9e:f6:99:1d:31:dc:2b:d3:
c4:cc:be:1b:00:08:15:79:74:1a:8e:94:96:84:25:15:00:bf:
28:51:a1:4e:25:60:b6:27:16:ff:63:44:f4:b7:3c:68:07:87:
2f:0d:33:e3:7f:da:53:67:c5:bf:ad:b1:89:3f:50:c1:d3:7e:
81:3d:ba:84:31:29:28:bb:75:0b:89:99:e3:89:e3:36:b5:8b:
91:0d:68:e5:6f:05:66:ec:66:e9:ea:c3:2f:1d:64:45:88:7a:
e8:17:81:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:24 2023 by rpki-client on console-fra.rpki-client.org