Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/qr6Im1EVLOhv_3--ZZYxjyZvtTI.roa
File: qr6Im1EVLOhv_3--ZZYxjyZvtTI.roa (raw, json)
Hash identifier: DhPumAPD94hIc9MoCuMJFAVFaeB84L4RnEE0e6tMRs0=
Subject key identifier: AA:BE:88:9B:51:15:2C:E8:6F:FF:7F:BE:65:96:31:8F:26:6F:B5:32
Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial: 37815A39
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/qr6Im1EVLOhv_3--ZZYxjyZvtTI.roa
Signing time: Sat 01 Jan 2022 11:54:32 +0000
ROA not before: Sat 01 Jan 2022 11:54:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57809
IP address blocks: 23.90.192.0/18 maxlen: 18
185.87.100.0/22 maxlen: 22
185.20.16.0/22 maxlen: 22
185.134.156.0/22 maxlen: 22
45.133.68.0/22 maxlen: 22
185.133.80.0/22 maxlen: 22
79.99.160.0/21 maxlen: 21
92.119.232.0/22 maxlen: 22
185.197.108.0/22 maxlen: 22
5.183.248.0/22 maxlen: 22
45.89.76.0/22 maxlen: 22
45.92.180.0/22 maxlen: 22
185.48.252.0/22 maxlen: 22
45.129.218.0/24 maxlen: 24
185.163.136.0/22 maxlen: 22
45.129.216.0/24 maxlen: 24
45.129.217.0/24 maxlen: 24
185.241.140.0/22 maxlen: 22
88.218.12.0/22 maxlen: 22
185.191.36.0/22 maxlen: 22
185.163.212.0/22 maxlen: 22
185.86.88.0/22 maxlen: 22
45.86.96.0/22 maxlen: 22
185.163.220.0/22 maxlen: 22
31.204.80.0/21 maxlen: 21
185.163.228.0/22 maxlen: 22
2.59.144.0/22 maxlen: 22
185.186.88.0/22 maxlen: 22
185.169.156.0/22 maxlen: 22
185.132.64.0/22 maxlen: 22
185.135.176.0/22 maxlen: 22
45.142.108.0/22 maxlen: 22
195.216.140.0/22 maxlen: 22
46.18.120.0/22 maxlen: 22
46.18.124.0/24 maxlen: 24
46.18.125.0/24 maxlen: 24
46.18.126.0/23 maxlen: 23
185.254.8.0/22 maxlen: 22
185.138.116.0/22 maxlen: 22
5.10.128.0/21 maxlen: 21
45.80.252.0/22 maxlen: 22
185.98.116.0/22 maxlen: 22
45.152.16.0/22 maxlen: 22
62.192.156.0/22 maxlen: 22
2a00:41e0::/29 maxlen: 32
2a05:b780::/29 maxlen: 29
2a01:648::/29 maxlen: 32
2a00:6780::/29 maxlen: 32
2a05:c100::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 931224121 (0x37815a39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Validity
Not Before: Jan 1 11:54:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aabe889b51152ce86fff7fbe6596318f266fb532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:d9:61:40:95:d5:7a:47:11:45:d5:75:6e:
f1:54:2a:c4:1f:a1:9e:b6:53:df:29:c7:52:1e:85:
d0:5b:dd:bf:b3:17:e3:cd:dd:76:ea:d3:e5:27:9d:
54:db:a8:da:aa:7c:3d:80:98:cd:1e:3d:a3:b9:81:
72:b7:89:f2:a6:15:fb:1b:12:e1:2c:0f:53:a4:84:
de:3c:05:68:27:fa:d3:b0:24:0b:79:3f:a9:66:85:
09:a2:1b:c8:3e:ee:9f:38:be:eb:89:dc:5d:83:14:
6e:5a:f5:b5:b2:86:9d:fe:1e:47:31:62:c7:9f:b0:
57:8f:bb:e2:67:05:73:80:fc:32:f2:68:1a:af:a1:
be:42:26:0c:ba:89:fc:1a:1d:1c:9c:fa:41:65:f4:
c9:ed:97:82:1d:0e:da:7d:b7:b0:15:55:c8:87:c8:
79:45:eb:a6:fa:16:ce:c7:63:27:69:1c:f0:e7:d6:
e7:c3:7e:bd:09:e0:3b:d5:fb:8e:59:b0:51:cf:c8:
fc:fe:20:35:02:12:95:ea:1c:69:86:45:72:6c:7e:
67:21:a1:e5:f7:b2:68:dd:5e:a6:d7:22:f7:78:b2:
b7:a7:cf:e2:f1:15:c9:6c:0a:ef:90:65:87:f5:dc:
d7:d1:38:58:88:16:27:9f:0f:31:3d:a2:79:c4:b2:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BE:88:9B:51:15:2C:E8:6F:FF:7F:BE:65:96:31:8F:26:6F:B5:32
X509v3 Authority Key Identifier:
keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/qr6Im1EVLOhv_3--ZZYxjyZvtTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.144.0/22
5.10.128.0/21
5.183.248.0/22
23.90.192.0/18
31.204.80.0/21
45.80.252.0/22
45.86.96.0/22
45.89.76.0/22
45.92.180.0/22
45.129.216.0-45.129.218.255
45.133.68.0/22
45.142.108.0/22
45.152.16.0/22
46.18.120.0/21
62.192.156.0/22
79.99.160.0/21
88.218.12.0/22
92.119.232.0/22
185.20.16.0/22
185.48.252.0/22
185.86.88.0/22
185.87.100.0/22
185.98.116.0/22
185.132.64.0/22
185.133.80.0/22
185.134.156.0/22
185.135.176.0/22
185.138.116.0/22
185.163.136.0/22
185.163.212.0/22
185.163.220.0/22
185.163.228.0/22
185.169.156.0/22
185.186.88.0/22
185.191.36.0/22
185.197.108.0/22
185.241.140.0/22
185.254.8.0/22
195.216.140.0/22
IPv6:
2a00:41e0::/29
2a00:6780::/29
2a01:648::/29
2a05:b780::/29
2a05:c100::/29
Signature Algorithm: sha256WithRSAEncryption
64:00:29:33:8e:06:21:4a:97:03:ef:14:b8:d2:63:76:40:c1:
5d:e6:90:a3:2d:6a:13:27:1f:ff:48:b3:f0:1b:3d:3b:83:b8:
0f:7b:f1:34:fd:92:ff:46:d9:c7:e7:4f:b7:12:fc:df:9f:e0:
98:ee:5a:86:f1:2c:8b:69:ae:da:2a:5a:61:e8:0b:bb:67:bd:
a4:4b:91:84:41:66:31:65:0f:dc:5c:cb:33:74:5b:05:13:5e:
ca:4b:20:7d:18:50:b4:41:0d:18:9e:e3:21:49:68:ef:ff:e8:
d6:06:09:fa:eb:62:d1:a1:4d:63:8b:d3:a1:e0:52:39:37:4c:
d8:f4:fd:95:c4:39:63:f1:d6:e7:6a:39:fc:5c:15:41:e2:20:
41:09:57:d9:23:9c:87:6f:81:a1:b7:fe:74:88:a2:a0:88:7f:
4d:ce:e1:35:7b:8b:4b:a4:f0:64:7e:e7:31:22:d3:f9:10:5c:
1b:a1:ac:bf:40:6e:7a:ce:11:e7:7d:e5:8f:87:fe:fd:d1:2e:
28:ce:d2:92:a2:ea:bc:d7:7b:1e:60:91:d7:d2:e6:19:e6:5e:
4f:a7:7e:b8:f9:6f:c9:d6:8f:3c:a7:a7:06:9e:09:c0:21:92:
34:4e:42:5d:9d:8c:32:1a:c7:ea:52:94:3e:a5:e1:53:c4:72:
5e:11:8f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:14 2023 by rpki-client on console-fra.rpki-client.org