Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/j1MIOVHWSQiG6c6xxzBVgvkN000.roa
File: j1MIOVHWSQiG6c6xxzBVgvkN000.roa (raw, json)
Hash identifier: HWkzQDAdjkOsxnMcXufU5lIlA+hFHBS347CwlpEdYt8=
Subject key identifier: 8F:53:08:39:51:D6:49:08:86:E9:CE:B1:C7:30:55:82:F9:0D:D3:4D
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 374288EF
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/j1MIOVHWSQiG6c6xxzBVgvkN000.roa
Signing time: Sat 01 Jan 2022 14:58:32 +0000
ROA not before: Sat 01 Jan 2022 14:58:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39651
IP address blocks: 83.177.232.0/21 maxlen: 21
83.188.0.0/18 maxlen: 18
90.144.64.0/19 maxlen: 19
213.102.64.0/19 maxlen: 19
90.141.0.0/19 maxlen: 19
77.218.32.0/19 maxlen: 19
83.177.192.0/19 maxlen: 19
83.177.200.0/21 maxlen: 21
83.177.224.0/19 maxlen: 19
90.143.0.0/19 maxlen: 19
188.148.0.0/14 maxlen: 14
83.190.64.0/18 maxlen: 18
193.14.192.0/20 maxlen: 20
213.102.80.0/20 maxlen: 20
83.191.160.0/19 maxlen: 19
87.227.0.0/17 maxlen: 17
213.100.192.0/19 maxlen: 19
90.141.40.0/21 maxlen: 21
90.141.48.0/20 maxlen: 20
83.182.32.0/19 maxlen: 19
83.188.224.0/19 maxlen: 19
91.130.0.0/18 maxlen: 18
90.143.128.0/17 maxlen: 17
193.13.160.0/20 maxlen: 20
90.129.224.0/19 maxlen: 19
91.128.160.0/19 maxlen: 19
83.180.224.0/19 maxlen: 19
90.142.32.0/19 maxlen: 19
90.142.48.0/20 maxlen: 20
91.128.192.0/19 maxlen: 19
213.103.128.0/19 maxlen: 19
83.177.160.0/19 maxlen: 19
83.181.0.0/19 maxlen: 19
90.133.128.0/19 maxlen: 19
91.128.128.0/19 maxlen: 19
90.133.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927107311 (0x374288ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Jan 1 14:58:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f53083951d6490886e9ceb1c7305582f90dd34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:19:bb:53:fa:7d:73:a8:cf:88:7f:ce:16:03:
5e:8a:b9:12:3f:85:b3:24:71:2e:e1:d1:f3:c3:d0:
f3:da:e0:cb:35:96:f5:49:62:27:c2:92:67:d5:58:
bf:0a:70:91:99:fc:c8:cb:6e:f4:ff:14:cf:6d:07:
5b:9e:09:e5:7d:58:9b:ec:2e:ad:cd:8d:6f:70:7b:
83:76:56:00:ed:f8:da:fb:7d:b9:ed:fa:63:bd:91:
bd:26:e7:31:da:d7:24:45:8e:73:0b:24:ca:fd:40:
96:06:e8:38:b9:b8:f0:15:c3:9e:76:58:98:b4:49:
bc:85:c7:f8:83:b4:c5:b1:c6:af:9c:dc:bb:fb:d1:
ef:c5:ce:50:86:0f:98:dd:d2:20:87:00:b7:bf:81:
b1:05:67:c6:c3:84:7a:ed:e0:91:05:68:fa:70:dc:
aa:61:73:c2:9d:3a:a2:a6:71:5c:79:ab:cb:cc:63:
9c:3e:83:93:36:4a:a1:4b:83:36:09:44:a8:6b:6d:
d9:28:6c:8b:46:1c:3a:49:9f:d6:76:99:9a:74:59:
a3:89:35:07:1f:66:27:aa:7b:94:96:10:f9:be:23:
a8:35:f3:ea:0c:37:c6:c8:85:8a:6c:74:89:9f:ff:
cd:98:7b:fc:bd:17:0c:17:99:7c:7d:70:5a:f6:88:
30:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:53:08:39:51:D6:49:08:86:E9:CE:B1:C7:30:55:82:F9:0D:D3:4D
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/j1MIOVHWSQiG6c6xxzBVgvkN000.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.218.32.0/19
83.177.160.0-83.177.255.255
83.180.224.0-83.181.31.255
83.182.32.0/19
83.188.0.0/18
83.188.224.0/19
83.190.64.0/18
83.191.160.0/19
87.227.0.0/17
90.129.224.0/19
90.133.128.0/18
90.141.0.0/19
90.141.40.0-90.141.63.255
90.142.32.0/19
90.143.0.0/19
90.143.128.0/17
90.144.64.0/19
91.128.128.0-91.128.223.255
91.130.0.0/18
188.148.0.0/14
193.13.160.0/20
193.14.192.0/20
213.100.192.0/19
213.102.64.0/19
213.103.128.0/19
Signature Algorithm: sha256WithRSAEncryption
27:61:5f:84:43:df:fa:a0:68:a9:b0:97:1a:35:ae:c1:73:06:
9c:c3:be:7b:7d:ee:b5:e6:72:33:34:53:f4:f1:41:8b:2d:6d:
67:b9:07:0f:86:92:22:f0:59:0e:33:0d:29:a1:c7:07:f7:64:
d7:4e:6e:8e:42:14:bf:57:ec:40:79:a2:19:93:c3:b2:b9:90:
bc:a0:6f:60:94:3d:5e:fc:f9:45:25:3f:70:95:62:01:f8:81:
0c:c9:29:21:26:d0:5f:c5:03:be:ec:b9:29:26:b8:68:1c:18:
6a:1e:48:3a:03:0d:8a:6e:65:e4:08:d1:0d:a9:9a:87:09:08:
a9:47:68:64:66:b8:59:ad:62:72:02:a0:1e:7c:bb:66:a7:c2:
cc:2a:ce:6f:08:3a:3d:ee:f2:9a:35:84:b9:4a:99:61:9c:d3:
64:6a:00:ca:6c:d8:68:a2:09:ac:3e:58:7d:9c:84:49:59:6d:
25:27:1e:50:5d:bf:6f:c7:e8:9e:1a:c3:38:95:a8:e8:a3:90:
1e:e3:70:0e:6b:ac:ea:34:6b:4e:8d:b2:bb:e4:99:39:25:64:
73:6b:4b:72:17:1a:3e:96:ea:bb:ea:9d:68:9f:43:5b:b8:c5:
a1:6b:d1:51:32:dd:77:72:21:7c:5d:41:3b:d5:63:7c:c8:d5:
93:c4:22:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:19 2024 by rpki-client on console-fra.rpki-client.org