Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/zOfngP3qrryn_SDO_-2o_ZmtBrc.roa
File: zOfngP3qrryn_SDO_-2o_ZmtBrc.roa (raw, json)
Hash identifier: GU+grIIbdV10Q6ddXYSLtSwlDDDEp4sAI2hN+wcBp04=
Subject key identifier: CC:E7:E7:80:FD:EA:AE:BC:A7:FD:20:CE:FF:ED:A8:FD:99:AD:06:B7
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 37417E14
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/zOfngP3qrryn_SDO_-2o_ZmtBrc.roa
Signing time: Sat 01 Jan 2022 14:58:32 +0000
ROA not before: Sat 01 Jan 2022 14:58:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1257
IP address blocks: 83.188.0.0/18 maxlen: 18
83.177.232.0/21 maxlen: 21
90.144.64.0/19 maxlen: 19
213.102.64.0/19 maxlen: 19
90.141.0.0/19 maxlen: 19
77.218.32.0/19 maxlen: 19
83.177.192.0/19 maxlen: 19
83.177.200.0/21 maxlen: 21
83.177.224.0/19 maxlen: 19
90.143.0.0/19 maxlen: 19
188.148.0.0/14 maxlen: 14
83.190.64.0/18 maxlen: 18
193.14.192.0/20 maxlen: 20
213.102.80.0/20 maxlen: 20
87.227.0.0/17 maxlen: 17
83.191.160.0/19 maxlen: 19
213.100.192.0/19 maxlen: 19
90.141.40.0/21 maxlen: 21
90.141.48.0/20 maxlen: 20
83.182.32.0/19 maxlen: 19
83.188.224.0/19 maxlen: 19
91.130.0.0/18 maxlen: 18
90.143.128.0/17 maxlen: 17
193.13.160.0/20 maxlen: 20
90.129.224.0/19 maxlen: 19
91.128.160.0/19 maxlen: 19
90.142.32.0/19 maxlen: 19
83.180.224.0/19 maxlen: 19
90.142.48.0/20 maxlen: 20
91.128.192.0/19 maxlen: 19
213.103.128.0/19 maxlen: 19
83.181.0.0/19 maxlen: 19
83.177.160.0/19 maxlen: 19
90.133.128.0/19 maxlen: 19
81.216.23.0/24 maxlen: 24
81.216.18.0/23 maxlen: 23
91.128.128.0/19 maxlen: 19
90.133.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927038996 (0x37417e14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Jan 1 14:58:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cce7e780fdeaaebca7fd20ceffeda8fd99ad06b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:a9:44:1c:fa:a7:08:69:cb:87:86:24:45:
2f:4a:f4:53:10:1b:06:93:b7:6f:f1:47:77:6f:a5:
eb:8a:04:39:aa:83:5d:45:e2:ff:73:b1:e6:8f:27:
4f:8b:d4:09:1e:5c:d6:d4:6e:9b:f0:cf:f4:18:37:
67:22:cd:26:01:96:c7:f4:98:50:8d:37:cc:df:ea:
8c:27:f5:a1:29:d9:42:4a:f5:e1:c8:25:a8:77:c3:
0c:99:5d:47:62:ee:45:9b:45:ee:59:6c:0f:fe:da:
b8:b9:e2:fa:31:f7:f2:94:12:31:c9:44:0c:c9:a0:
a2:73:35:21:67:f0:0d:04:57:55:5a:7b:f8:17:31:
50:f1:4e:83:13:56:1b:2d:cd:85:c2:de:5e:46:d5:
1f:07:2d:d2:5a:ed:de:91:e0:49:4a:08:c0:2e:21:
4b:36:be:d6:c6:e3:8a:17:8c:b1:49:4c:a2:18:54:
60:00:5a:e7:ab:dd:ce:8c:da:9a:91:eb:ea:0d:d2:
6b:45:7a:dd:1e:95:1e:44:19:41:3f:0a:a7:c2:39:
c1:25:21:55:89:da:56:15:62:64:a1:f4:59:cb:66:
d0:85:23:01:b1:3a:be:27:4c:bb:c0:1a:51:62:34:
28:07:e3:76:09:10:2a:aa:31:cb:08:5d:9c:8b:a9:
53:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E7:E7:80:FD:EA:AE:BC:A7:FD:20:CE:FF:ED:A8:FD:99:AD:06:B7
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/zOfngP3qrryn_SDO_-2o_ZmtBrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.218.32.0/19
81.216.18.0/23
81.216.23.0/24
83.177.160.0-83.177.255.255
83.180.224.0-83.181.31.255
83.182.32.0/19
83.188.0.0/18
83.188.224.0/19
83.190.64.0/18
83.191.160.0/19
87.227.0.0/17
90.129.224.0/19
90.133.128.0/18
90.141.0.0/19
90.141.40.0-90.141.63.255
90.142.32.0/19
90.143.0.0/19
90.143.128.0/17
90.144.64.0/19
91.128.128.0-91.128.223.255
91.130.0.0/18
188.148.0.0/14
193.13.160.0/20
193.14.192.0/20
213.100.192.0/19
213.102.64.0/19
213.103.128.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:23:b8:1b:08:08:aa:9a:cf:26:1f:7c:6c:6f:da:8b:a9:92:
77:c0:b2:22:ad:ea:b4:33:d6:08:e8:cc:7c:5e:78:56:b0:39:
d4:79:f9:c0:0f:bb:70:e8:30:c8:32:74:b5:63:09:d2:b2:6c:
19:90:b5:0b:01:9b:9a:8f:60:72:65:1b:03:93:00:35:4d:07:
80:51:9b:e9:8a:59:86:6f:a0:dd:7c:39:e6:8a:13:4d:94:b4:
73:76:92:98:91:06:bb:e5:17:91:77:58:36:a5:4f:49:2e:91:
fa:13:7f:00:b5:37:f3:d4:67:2b:b5:cc:8c:a9:e1:69:d3:18:
08:a1:a6:82:ef:d2:24:77:01:48:fd:4d:a9:24:8b:97:49:44:
95:15:a4:9d:35:3a:24:25:fb:dc:55:25:eb:eb:d3:a8:50:0d:
a6:5e:6d:40:c7:25:7a:1a:1f:8d:64:d9:e6:c6:06:00:9d:ce:
34:0e:b1:88:ec:d2:44:ab:b9:4b:2b:52:ac:be:0b:4c:24:d4:
88:2a:b3:1a:2c:7f:3b:7d:ce:38:b9:48:22:34:95:7f:58:4f:
6d:14:77:86:8d:27:34:94:c3:21:e8:1d:0f:dc:58:22:5c:42:
ef:21:fc:62:a9:53:fe:8d:f0:da:d9:b6:67:7d:49:26:7a:2b:
38:47:84:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:27 2024 by rpki-client on console-ams.rpki-client.org