Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/oqYBalUkwTgwi7uWx0piTg9iDCQ.roa
File: oqYBalUkwTgwi7uWx0piTg9iDCQ.roa (raw, json)
Hash identifier: HR+/bhWXYqwi6U0k++9g4b6zt8lnWQm0IB7Ralb/MS8=
Subject key identifier: A2:A6:01:6A:55:24:C1:38:30:8B:BB:96:C7:4A:62:4E:0F:62:0C:24
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 018292055F5E9ECE0E20436BE3CFCD860241
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/oqYBalUkwTgwi7uWx0piTg9iDCQ.roa
Signing time: Fri 12 Aug 2022 12:26:41 +0000
ROA not before: Fri 12 Aug 2022 12:26:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.87.120.0/24 maxlen: 24
185.141.33.0/24 maxlen: 24
185.141.35.0/24 maxlen: 24
185.141.34.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
193.35.154.0/24 maxlen: 24
193.35.155.0/24 maxlen: 24
193.35.153.0/24 maxlen: 24
185.86.4.0/24 maxlen: 24
185.86.6.0/24 maxlen: 24
185.86.7.0/24 maxlen: 24
185.86.14.0/24 maxlen: 24
185.86.15.0/24 maxlen: 24
185.86.12.0/24 maxlen: 24
185.86.152.0/24 maxlen: 24
185.86.155.0/24 maxlen: 24
185.184.24.0/24 maxlen: 24
185.184.25.0/24 maxlen: 24
185.184.26.0/24 maxlen: 24
185.184.27.0/24 maxlen: 24
91.194.55.0/24 maxlen: 24
193.160.140.0/24 maxlen: 24
193.160.141.0/24 maxlen: 24
193.160.142.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
185.254.236.0/24 maxlen: 24
185.254.238.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
185.254.237.0/24 maxlen: 24
193.223.104.0/24 maxlen: 24
193.223.105.0/24 maxlen: 24
185.88.172.0/24 maxlen: 24
185.88.175.0/24 maxlen: 24
193.223.107.0/24 maxlen: 24
193.223.106.0/24 maxlen: 24
185.88.173.0/24 maxlen: 24
185.88.174.0/24 maxlen: 24
185.243.182.0/24 maxlen: 24
185.243.183.0/24 maxlen: 24
185.243.180.0/24 maxlen: 24
185.243.181.0/24 maxlen: 24
185.254.30.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.29.0/24 maxlen: 24
185.254.31.0/24 maxlen: 24
185.85.188.0/24 maxlen: 24
185.250.210.0/24 maxlen: 24
194.62.54.0/24 maxlen: 24
194.62.55.0/24 maxlen: 24
194.62.52.0/24 maxlen: 24
194.62.53.0/24 maxlen: 24
93.190.12.0/24 maxlen: 24
93.190.13.0/24 maxlen: 24
160.20.109.0/24 maxlen: 24
160.20.108.0/24 maxlen: 24
109.236.48.0/24 maxlen: 24
109.236.49.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
109.236.50.0/24 maxlen: 24
185.185.232.0/24 maxlen: 24
185.185.233.0/24 maxlen: 24
185.185.234.0/24 maxlen: 24
185.249.200.0/24 maxlen: 24
185.249.201.0/24 maxlen: 24
185.249.202.0/24 maxlen: 24
185.249.203.0/24 maxlen: 24
185.98.63.0/24 maxlen: 24
185.98.61.0/24 maxlen: 24
185.98.62.0/24 maxlen: 24
2a0b:2780::/29 maxlen: 29
2a05:bf00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:92:05:5f:5e:9e:ce:0e:20:43:6b:e3:cf:cd:86:02:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 12 12:26:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2a6016a5524c138308bbb96c74a624e0f620c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b7:b8:ce:98:b8:e7:3b:fe:f3:c0:a5:e9:c2:
1e:7b:1d:76:44:c8:f9:46:00:c5:50:00:85:32:91:
1f:28:77:b9:f9:a4:32:9c:9b:c5:92:3d:46:2e:1f:
28:dd:02:23:16:f5:cb:0b:43:1c:2a:ed:18:0e:eb:
86:66:50:31:1f:3c:50:a6:3d:27:64:65:48:32:eb:
22:14:f0:ee:0e:57:82:96:84:a9:4b:33:16:a1:3d:
fa:12:09:47:36:a8:1b:af:78:0b:32:9e:b5:f0:e5:
7b:9e:c0:ba:c8:3e:65:96:6e:f1:c8:f1:f3:4f:ec:
3b:8d:5a:ae:a9:70:08:68:6e:6b:a8:ad:e7:69:05:
27:b0:67:82:d1:de:60:cc:c6:fc:05:6c:e1:ff:8b:
90:f8:9d:2a:b5:7a:a8:a8:70:95:71:60:5b:77:5b:
dc:57:03:e0:54:5e:e7:fa:d7:c6:54:5d:57:41:e4:
d9:26:e0:a4:e6:f2:90:d2:d8:16:cb:13:52:5b:24:
11:29:46:46:22:52:32:7e:de:5d:c3:2c:00:c5:83:
b4:e3:49:a6:36:8a:32:de:a8:5d:94:85:b2:7b:3a:
d9:9b:a4:90:52:75:97:3a:cc:7a:e5:4d:34:27:8b:
db:ce:35:ac:e1:b6:80:d1:4d:a0:46:80:93:30:78:
70:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A6:01:6A:55:24:C1:38:30:8B:BB:96:C7:4A:62:4E:0F:62:0C:24
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/oqYBalUkwTgwi7uWx0piTg9iDCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.55.0/24
93.190.12.0/23
109.236.48.0/22
160.20.108.0/23
185.85.188.0/24
185.86.4.0/24
185.86.6.0/23
185.86.12.0/24
185.86.14.0/23
185.86.152.0/24
185.86.155.0/24
185.87.120.0/24
185.88.172.0/22
185.98.61.0-185.98.63.255
185.141.33.0-185.141.35.255
185.184.24.0/22
185.185.232.0-185.185.234.255
185.243.180.0/22
185.249.200.0/22
185.250.210.0/24
185.254.28.0/22
185.254.236.0/22
193.35.152.0/22
193.160.140.0/22
193.223.104.0/22
194.62.52.0/22
IPv6:
2a05:bf00::/29
2a0b:2780::/29
Signature Algorithm: sha256WithRSAEncryption
21:2d:70:40:b4:96:4e:e5:47:cf:e6:81:78:03:5d:a6:29:3f:
0a:5a:95:7a:95:2b:89:c5:60:c6:de:ce:fa:9e:5b:b9:7e:31:
51:cb:f7:8e:41:63:bb:9b:6a:71:66:1e:49:97:8f:29:28:2e:
da:a7:fe:bf:ec:ba:07:4e:86:93:5d:26:db:67:6b:6d:00:42:
53:c1:ba:95:d8:4d:7a:c6:9d:28:d3:57:4d:c3:c6:84:79:61:
53:6c:61:e2:49:9b:f9:c6:97:29:4f:20:a3:51:fb:76:b8:d5:
34:d1:c8:ca:38:ab:23:07:39:b3:61:91:9d:f2:d8:a5:80:58:
c7:28:ff:70:1c:59:42:cc:8d:9f:36:17:9a:29:29:e1:70:8a:
f6:b8:4b:5e:72:0d:a3:91:14:2b:04:2e:6c:ff:91:b6:1e:83:
64:70:e1:6f:8a:0c:ae:d0:c9:12:e4:10:e3:dc:19:37:ed:69:
2c:d4:55:26:84:be:54:0c:ec:1b:fd:c3:e6:07:be:4f:76:52:
f5:8e:71:21:62:30:ce:2a:b6:3e:30:ad:02:27:c8:7b:44:40:
ce:3f:36:dd:16:d0:dd:c5:74:79:42:e7:48:bc:2f:1d:2e:98:
a9:a4:60:21:9a:b1:ae:f8:21:65:36:21:f0:df:8b:2e:ce:1b:
c8:10:7e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:24 2024 by rpki-client on console-ams.rpki-client.org