Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Irhoz6-QZj99ja_Lswn_VXmLvAM.roa
File: Irhoz6-QZj99ja_Lswn_VXmLvAM.roa (raw, json)
Hash identifier: AOacvLH0RcKY5vxFUmtKStKPlFfusgnXvKb5tLAD1DA=
Subject key identifier: 22:B8:68:CF:AF:90:66:3F:7D:8D:AF:CB:B3:09:FF:55:79:8B:BC:03
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0961A89A
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Irhoz6-QZj99ja_Lswn_VXmLvAM.roa
Signing time: Fri 20 May 2022 13:14:29 +0000
ROA not before: Fri 20 May 2022 13:14:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13194
IP address blocks: 84.46.139.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.93.0/24 maxlen: 24
89.117.92.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
82.140.177.0/24 maxlen: 24
82.140.180.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.221.0/24 maxlen: 24
89.117.220.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
89.117.141.0/24 maxlen: 24
89.117.156.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
86.38.245.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
82.140.130.0/24 maxlen: 24
82.140.128.0/24 maxlen: 24
82.140.129.0/24 maxlen: 24
82.140.159.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
185.189.154.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
84.15.0.0/16 maxlen: 16
86.38.153.0/24 maxlen: 24
213.252.223.0/24 maxlen: 24
213.252.224.0/20 maxlen: 20
213.252.224.0/22 maxlen: 22
213.252.234.0/23 maxlen: 23
213.252.236.0/23 maxlen: 23
213.252.252.0/24 maxlen: 24
213.252.254.0/24 maxlen: 24
213.252.192.0/20 maxlen: 20
89.117.255.0/24 maxlen: 24
213.226.128.0/18 maxlen: 18
2a00:f500::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157395098 (0x961a89a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: May 20 13:14:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22b868cfaf90663f7d8dafcbb309ff55798bbc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8f:73:4f:18:40:a1:44:4f:02:eb:59:d5:47:
df:8e:e1:39:4b:3e:e2:6b:44:51:c0:a9:ef:78:94:
a1:87:00:6a:01:24:8c:13:8f:5d:a3:2f:d4:ec:39:
17:ea:a8:91:e0:6d:48:52:da:c9:8f:6b:3b:dc:8f:
65:5e:ea:d4:06:6b:6c:f1:38:da:37:f5:85:03:b0:
4a:9e:43:24:4f:c2:8d:74:48:b9:56:b0:bf:70:df:
96:10:fe:c8:f9:c8:47:dd:3e:9b:97:9e:39:d3:fd:
da:99:78:05:b6:e1:5a:b1:92:5f:d5:17:78:c8:5e:
94:67:32:0c:f2:de:c5:fb:37:06:99:79:f9:7d:e8:
72:24:67:03:55:69:be:f3:ff:07:97:5a:8b:52:15:
55:3e:c7:79:ca:aa:49:f7:ce:61:1d:ac:8d:d3:72:
63:87:2a:21:a0:47:56:dd:59:ff:0d:f1:d1:89:ff:
89:ab:18:5b:0d:0b:04:04:ae:77:13:e7:ae:d4:29:
04:96:7d:47:27:4e:e3:5f:ab:5c:cb:71:2b:4e:50:
91:f6:c6:d2:cf:8c:86:84:41:04:86:63:ca:de:b7:
23:0d:c1:ce:68:f1:9c:86:6e:c5:72:c0:c5:ad:f8:
90:a0:6c:84:23:5f:96:30:db:e2:69:66:df:db:4e:
2a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B8:68:CF:AF:90:66:3F:7D:8D:AF:CB:B3:09:FF:55:79:8B:BC:03
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/Irhoz6-QZj99ja_Lswn_VXmLvAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.128.0-82.140.130.255
82.140.159.0/24
82.140.177.0/24
82.140.180.0/24
84.15.0.0/16
84.46.139.0/24
84.46.204.0/24
84.46.207.0/24
86.38.72.0/22
86.38.152.0/23
86.38.215.0/24
86.38.230.0/24
86.38.245.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.92.0/23
89.117.125.0/24
89.117.127.0/24
89.117.138.0/24
89.117.141.0/24
89.117.156.0/24
89.117.165.0/24
89.117.220.0/23
89.117.223.0/24
89.117.255.0/24
185.189.154.0/24
213.226.128.0/18
213.252.192.0/20
213.252.223.0-213.252.239.255
213.252.252.0/24
213.252.254.0/24
IPv6:
2a00:f500::/29
Signature Algorithm: sha256WithRSAEncryption
5b:88:c4:e9:88:ad:bf:e7:34:a9:18:cb:d0:a8:74:47:95:ed:
2d:1e:55:5b:37:0b:10:c0:e1:a3:bf:3d:5e:26:d7:7f:be:d5:
34:3e:51:dc:98:33:63:af:54:68:ad:b5:b6:d2:ce:34:74:59:
93:3c:15:15:d4:8b:24:97:7f:96:d9:e9:03:5d:a5:e9:a7:50:
65:96:13:95:86:c0:f8:a2:a0:54:54:f5:27:b9:72:7a:53:6d:
d0:f1:55:6b:bc:ca:b6:1e:aa:ea:c1:82:83:f2:24:2d:07:e0:
44:ac:66:41:c8:fb:4a:14:31:5c:17:b3:09:c3:fc:65:f1:14:
97:73:61:d1:31:6d:dc:9c:4d:aa:f4:3c:b5:fa:37:30:f9:e8:
1f:4d:97:8b:6a:f0:90:d2:f9:c7:42:b3:21:ce:df:cb:9c:60:
b0:70:e6:c4:60:aa:2f:e4:75:a4:13:d1:76:0e:05:bf:77:a7:
a7:80:be:dd:9d:36:0b:37:8d:f8:bd:06:39:54:da:91:35:88:
15:45:96:4e:10:40:d2:dd:59:f4:9c:63:07:2d:45:28:55:3a:
27:00:cd:9b:83:4a:d9:28:74:3e:84:8e:dc:97:9c:f9:14:e2:
81:bc:52:e6:2d:cd:db:9c:a5:25:42:ac:89:f3:f1:63:df:7a:
9f:5c:ec:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:26 2023 by rpki-client on console-fra.rpki-client.org