Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/cz9RgVGWlEF2mk269-Bj7wbHhWY.roa
File: cz9RgVGWlEF2mk269-Bj7wbHhWY.roa (raw, json)
Hash identifier: KAfvm6mjLgGHii3vWAKOHZy/NI2r+OxPdVsada3Wsxg=
Subject key identifier: 73:3F:51:81:51:96:94:41:76:9A:4D:BA:F7:E0:63:EF:06:C7:85:66
Certificate issuer: /CN=9f96ae2770265af32e7d4be86bab07a07c2d3353
Certificate serial: 11B529B1
Authority key identifier: 9F:96:AE:27:70:26:5A:F3:2E:7D:4B:E8:6B:AB:07:A0:7C:2D:33:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5auJ3AmWvMufUvoa6sHoHwtM1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/cz9RgVGWlEF2mk269-Bj7wbHhWY.roa
Signing time: Tue 21 Jun 2022 14:06:44 +0000
ROA not before: Tue 21 Jun 2022 14:06:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21413
IP address blocks: 93.159.96.0/19 maxlen: 24
31.187.67.0/24 maxlen: 24
31.187.77.0/24 maxlen: 24
85.190.176.0/21 maxlen: 24
31.187.79.0/24 maxlen: 24
212.99.192.0/19 maxlen: 24
185.90.128.0/22 maxlen: 24
83.221.224.0/19 maxlen: 24
89.187.200.0/21 maxlen: 24
94.100.64.0/20 maxlen: 24
176.126.88.0/22 maxlen: 22
185.175.209.0/24 maxlen: 24
77.235.160.0/19 maxlen: 24
193.98.112.0/21 maxlen: 21
46.227.216.0/21 maxlen: 24
87.121.192.0/20 maxlen: 24
37.247.64.0/19 maxlen: 24
87.121.224.0/20 maxlen: 24
80.243.32.0/19 maxlen: 24
2a00:1ca0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297085361 (0x11b529b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f96ae2770265af32e7d4be86bab07a07c2d3353
Validity
Not Before: Jun 21 14:06:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=733f518151969441769a4dbaf7e063ef06c78566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:ae:0d:b4:f2:fa:5f:0f:57:99:4c:92:42:
2b:2c:d0:77:19:56:1b:d1:88:b9:52:cd:0c:55:74:
e8:9c:06:aa:e0:85:f3:c5:6d:05:7c:cc:ec:35:9d:
6f:82:51:bd:66:66:7e:a7:c0:ab:62:48:4f:a4:ce:
91:6c:76:0e:ed:f4:fd:57:48:3a:a9:b0:8d:c5:03:
1c:db:7c:7d:47:c7:f3:e1:b9:57:72:12:b4:b9:3e:
a7:bb:75:3d:f2:8a:2d:c0:2b:00:5f:63:90:91:ef:
96:b7:65:e8:7a:74:50:6c:37:47:de:50:5e:f8:d5:
ed:b3:d6:bd:63:ea:3b:98:32:92:44:49:9e:43:78:
71:53:09:c7:b3:b0:a3:30:b8:42:2d:92:f6:fe:8d:
06:3d:16:50:ce:73:25:63:ae:61:a3:4e:3e:da:56:
6f:28:98:bc:7e:b1:68:b5:55:64:a4:d9:21:d0:de:
7c:47:20:8d:bc:6a:23:31:01:a2:0c:3c:57:c7:e3:
7a:6f:9d:29:6e:ab:1a:9e:92:c7:94:d3:90:bb:dc:
cf:5d:73:f7:d0:6b:a0:f7:3d:f0:2d:10:3b:6b:fd:
69:c1:fa:13:76:c4:49:d4:28:c3:cf:c6:77:2c:fa:
e9:e9:62:57:02:60:40:48:57:18:0d:7c:ae:21:3d:
7f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3F:51:81:51:96:94:41:76:9A:4D:BA:F7:E0:63:EF:06:C7:85:66
X509v3 Authority Key Identifier:
keyid:9F:96:AE:27:70:26:5A:F3:2E:7D:4B:E8:6B:AB:07:A0:7C:2D:33:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5auJ3AmWvMufUvoa6sHoHwtM1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/cz9RgVGWlEF2mk269-Bj7wbHhWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.67.0/24
31.187.77.0/24
31.187.79.0/24
37.247.64.0/19
46.227.216.0/21
77.235.160.0/19
80.243.32.0/19
83.221.224.0/19
85.190.176.0/21
87.121.192.0/20
87.121.224.0/20
89.187.200.0/21
93.159.96.0/19
94.100.64.0/20
176.126.88.0/22
185.90.128.0/22
185.175.209.0/24
193.98.112.0/21
212.99.192.0/19
IPv6:
2a00:1ca0::/32
Signature Algorithm: sha256WithRSAEncryption
cb:d7:0f:ea:45:d7:d1:ab:02:f4:c4:1c:99:33:09:d7:cc:7f:
c1:ae:40:6d:43:36:80:21:50:4d:dc:8c:bc:ab:29:6e:a1:d9:
d6:d4:fb:45:0e:65:3a:99:41:d0:9d:7d:7e:2a:33:3b:2d:90:
b8:e1:28:6b:9b:36:3a:49:b0:d6:2a:ea:5e:d2:41:87:89:f1:
0f:40:c4:d9:9a:8c:09:16:39:b3:e6:ef:7d:01:9d:64:8a:80:
48:e2:3b:a7:1b:de:fc:11:eb:3a:f9:00:3f:b0:05:cc:cb:24:
e5:a6:43:11:45:f9:32:01:8f:97:35:d2:19:fe:cd:b8:89:ec:
b4:43:6f:68:48:77:9a:a6:40:05:1a:fa:99:eb:96:ce:40:8f:
55:02:b9:71:27:a1:db:06:be:a4:bf:14:77:ce:50:89:64:51:
6a:5e:42:dc:57:6b:54:a0:f0:d1:8c:b1:38:a5:4e:e4:39:24:
c2:a0:85:69:9f:aa:7e:15:e9:93:8c:ac:0b:f6:02:eb:6c:c0:
a9:c7:41:01:6d:a0:23:6a:3a:5d:8f:9b:92:dc:fd:59:a2:bc:
2b:b0:5c:93:45:65:53:78:7c:ce:09:80:25:13:40:ec:ea:4e:
c1:41:4f:fb:9b:23:e3:d6:bf:44:1e:1a:1d:59:25:8e:d1:32:
2c:c6:a1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:57 2023 by rpki-client on console-ams.rpki-client.org