Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/MVVwg2upDRxEg9oN1hgT8IlqSnI.roa
File: MVVwg2upDRxEg9oN1hgT8IlqSnI.roa (raw, json)
Hash identifier: zM/W/2f1W51T3jNXOUDDFFf1QiI/qj5hzau5f+2fIJM=
Subject key identifier: 31:55:70:83:6B:A9:0D:1C:44:83:DA:0D:D6:18:13:F0:89:6A:4A:72
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 37170A61
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/MVVwg2upDRxEg9oN1hgT8IlqSnI.roa
Signing time: Sat 01 Jan 2022 11:59:55 +0000
ROA not before: Sat 01 Jan 2022 11:59:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1653
IP address blocks: 93.115.160.0/21 maxlen: 21
89.44.248.0/21 maxlen: 22
89.41.160.0/21 maxlen: 21
193.11.0.0/16 maxlen: 24
86.105.112.0/21 maxlen: 21
89.34.184.0/21 maxlen: 21
91.250.192.0/19 maxlen: 19
89.33.136.0/21 maxlen: 23
194.47.0.0/16 maxlen: 16
193.10.0.0/16 maxlen: 24
89.34.240.0/21 maxlen: 21
188.240.144.0/20 maxlen: 24
188.211.240.0/21 maxlen: 21
86.104.48.0/20 maxlen: 20
89.44.0.0/21 maxlen: 24
212.25.128.0/19 maxlen: 19
89.32.72.0/21 maxlen: 21
86.104.200.0/21 maxlen: 21
94.176.224.0/21 maxlen: 25
37.156.192.0/20 maxlen: 26
89.43.232.0/21 maxlen: 21
89.32.32.0/21 maxlen: 21
86.104.152.0/21 maxlen: 21
89.37.176.0/21 maxlen: 21
77.238.32.0/19 maxlen: 19
188.241.160.0/20 maxlen: 20
89.45.232.0/21 maxlen: 21
89.45.236.0/22 maxlen: 22
86.106.160.0/21 maxlen: 21
89.47.184.0/21 maxlen: 21
89.46.17.0/24 maxlen: 24
89.46.16.0/21 maxlen: 21
89.46.16.0/24 maxlen: 24
89.46.18.0/24 maxlen: 24
89.46.20.0/22 maxlen: 22
2001:6b0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 924256865 (0x37170a61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 11:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=315570836ba90d1c4483da0dd61813f0896a4a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f1:92:02:25:d2:88:6f:dc:d6:af:af:35:ba:
f3:ce:a8:94:04:f4:d0:11:41:9a:3f:de:61:ba:2d:
fc:2b:8d:b0:a4:87:45:90:bb:3e:20:1e:11:f8:ca:
21:cf:1a:40:62:e5:e4:95:60:a8:69:6e:85:59:4b:
86:fa:1b:a6:9d:ce:ad:73:c3:ca:64:01:bf:8d:7c:
64:89:f2:c3:07:09:b7:22:53:bf:ef:82:f5:97:ac:
5d:78:17:09:2c:f9:14:1c:c6:34:5c:f6:e1:f0:3f:
9e:08:e3:6c:b8:97:d4:15:94:d3:1c:49:5a:78:a9:
4d:78:61:63:81:a8:f2:bb:06:a5:c0:1e:0f:3f:93:
c8:83:02:b8:3b:e4:ef:0e:d2:4f:7d:ab:2e:b5:f1:
e9:13:8b:58:94:78:d5:09:52:68:d0:13:10:d8:6f:
ce:3e:44:a9:94:db:8e:63:35:33:98:3d:1d:0f:c4:
eb:87:9e:f1:c0:c4:9d:80:fa:f1:5b:5d:f2:a0:5c:
a7:d9:b0:94:9d:87:43:4f:df:2d:fd:f4:81:a2:ee:
58:84:80:ca:7b:f1:9d:76:b7:a1:a3:a3:85:3c:17:
cc:a8:6a:ae:d5:76:7e:4e:8f:c2:8c:89:0d:f8:6e:
f3:ee:76:d1:0e:c5:99:0e:30:a8:d2:b1:7e:f7:c7:
6d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:55:70:83:6B:A9:0D:1C:44:83:DA:0D:D6:18:13:F0:89:6A:4A:72
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/MVVwg2upDRxEg9oN1hgT8IlqSnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.192.0/20
77.238.32.0/19
86.104.48.0/20
86.104.152.0/21
86.104.200.0/21
86.105.112.0/21
86.106.160.0/21
89.32.32.0/21
89.32.72.0/21
89.33.136.0/21
89.34.184.0/21
89.34.240.0/21
89.37.176.0/21
89.41.160.0/21
89.43.232.0/21
89.44.0.0/21
89.44.248.0/21
89.45.232.0/21
89.46.16.0/21
89.47.184.0/21
91.250.192.0/19
93.115.160.0/21
94.176.224.0/21
188.211.240.0/21
188.240.144.0/20
188.241.160.0/20
193.10.0.0/15
194.47.0.0/16
212.25.128.0/19
IPv6:
2001:6b0::/32
Signature Algorithm: sha256WithRSAEncryption
9e:f7:06:4b:8a:37:9a:cd:1b:9f:7c:99:50:87:05:54:df:92:
be:5b:7d:f3:91:0c:79:78:03:9c:b4:a8:d6:b4:99:29:ea:a7:
6a:32:3c:f8:23:ff:f7:d4:4e:4f:c0:dc:8f:f5:23:07:36:69:
10:e1:5a:f2:8d:7d:0c:14:ae:4f:b4:41:38:f4:78:3b:db:0c:
c6:7b:6d:2a:38:8b:91:4b:de:e8:83:3e:60:67:13:f8:31:e6:
1f:07:52:03:9f:87:06:60:4b:ab:ca:44:7f:06:e7:20:45:bb:
66:8a:2d:08:fe:be:b0:2c:ad:e9:da:56:e2:47:25:10:4a:13:
59:ce:9e:e6:b4:83:9c:b9:c2:cb:cb:5f:57:dc:10:0a:1e:16:
e2:79:7b:c9:5b:51:c8:bc:60:f0:55:d8:8d:36:c8:90:1a:c2:
91:27:21:06:03:30:4c:68:b1:95:eb:04:7f:18:38:d3:81:fe:
44:8b:9a:65:28:3e:db:8c:2b:d5:8e:13:53:5c:57:bf:c6:fb:
e0:bc:05:ec:9f:6e:9e:c2:d7:5a:2b:86:b1:53:3b:d9:ff:71:
8a:1d:4e:a2:8c:a5:74:a9:c9:a4:29:ba:70:89:2d:92:c3:90:
4a:8a:a5:b3:7b:69:57:97:2d:7d:bf:07:d1:13:43:26:db:da:
ac:10:e7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:57 2023 by rpki-client on console-fra.rpki-client.org