Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/1f4GA37Y1p99msUY8Ab4IdAwCAQ.roa
File: 1f4GA37Y1p99msUY8Ab4IdAwCAQ.roa (raw, json)
Hash identifier: wQ8gDyDxb5FmU4phHpC3Kjs0nhfAwGvlw/XuOOT5ClA=
Subject key identifier: D5:FE:06:03:7E:D8:D6:9F:7D:9A:C5:18:F0:06:F8:21:D0:30:08:04
Certificate issuer: /CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
Certificate serial: 0395C567
Authority key identifier: 83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/1f4GA37Y1p99msUY8Ab4IdAwCAQ.roa
Signing time: Sat 01 Jan 2022 03:52:44 +0000
ROA not before: Sat 01 Jan 2022 03:52:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6712
IP address blocks: 91.204.196.0/22 maxlen: 22
91.204.196.0/23 maxlen: 23
91.204.196.0/24 maxlen: 24
91.204.198.0/24 maxlen: 24
91.204.198.0/23 maxlen: 23
91.204.197.0/24 maxlen: 24
91.204.199.0/24 maxlen: 24
91.246.134.0/24 maxlen: 24
91.246.133.0/24 maxlen: 24
91.246.135.0/24 maxlen: 24
91.246.134.0/23 maxlen: 23
91.246.136.0/21 maxlen: 21
91.246.139.0/24 maxlen: 24
91.246.136.0/24 maxlen: 24
91.246.136.0/23 maxlen: 23
91.246.138.0/24 maxlen: 24
91.246.138.0/23 maxlen: 23
91.246.137.0/24 maxlen: 24
91.246.140.0/24 maxlen: 24
91.246.140.0/23 maxlen: 23
91.246.142.0/24 maxlen: 24
91.246.142.0/23 maxlen: 23
91.246.141.0/24 maxlen: 24
91.246.143.0/24 maxlen: 24
91.246.145.0/24 maxlen: 24
91.246.144.0/21 maxlen: 21
91.246.144.0/23 maxlen: 23
91.246.144.0/24 maxlen: 24
91.246.146.0/24 maxlen: 24
91.246.147.0/24 maxlen: 24
91.246.151.0/24 maxlen: 24
91.246.146.0/23 maxlen: 23
91.246.149.0/24 maxlen: 24
91.246.148.0/24 maxlen: 24
91.246.148.0/23 maxlen: 23
91.246.150.0/23 maxlen: 23
91.246.150.0/24 maxlen: 24
91.246.152.0/24 maxlen: 24
91.246.152.0/23 maxlen: 23
91.246.152.0/21 maxlen: 21
91.246.158.0/24 maxlen: 24
91.246.159.0/24 maxlen: 24
91.246.158.0/23 maxlen: 23
91.246.154.0/23 maxlen: 23
91.246.154.0/24 maxlen: 24
91.246.153.0/24 maxlen: 24
91.246.156.0/24 maxlen: 24
91.246.156.0/23 maxlen: 23
91.246.157.0/24 maxlen: 24
91.246.155.0/24 maxlen: 24
91.246.132.0/24 maxlen: 24
91.246.131.0/24 maxlen: 24
91.246.130.0/23 maxlen: 23
91.246.130.0/24 maxlen: 24
91.246.132.0/23 maxlen: 23
91.246.128.0/24 maxlen: 24
91.246.128.0/23 maxlen: 23
91.246.128.0/21 maxlen: 21
91.246.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60147047 (0x395c567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
Validity
Not Before: Jan 1 03:52:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5fe06037ed8d69f7d9ac518f006f821d0300804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8d:56:22:d0:4d:91:b6:16:44:4c:8e:47:cd:
35:c5:ae:92:1f:d0:91:9e:48:00:91:76:11:b3:97:
74:e4:7e:42:c9:5c:46:c3:cf:24:28:32:9e:8e:fe:
15:bf:00:c3:22:9f:b8:30:df:dc:78:33:9b:47:92:
58:7d:78:bf:38:26:3e:51:ba:0e:93:28:93:49:55:
46:d1:7b:8e:94:0d:c8:12:bd:6b:db:72:e6:4c:d3:
71:af:1e:be:bb:e5:95:93:79:d2:b0:cc:47:9f:3a:
19:7a:14:68:3b:14:05:9d:73:56:2e:92:18:16:9d:
12:38:ec:7b:bd:c1:8c:f5:8a:e6:cb:66:03:3e:9b:
ea:ee:a0:63:de:98:8d:0c:b3:a6:46:ca:d2:c2:a4:
a1:6b:26:57:f4:be:48:9d:8f:c4:ab:94:b4:2e:c4:
10:47:47:29:7e:62:1a:ad:95:19:40:95:68:66:04:
c3:f7:4c:0f:1e:ad:1f:02:58:28:69:5a:f2:70:36:
bf:f5:68:40:ae:9b:bc:13:23:47:fd:9a:1c:94:19:
49:52:2e:a7:88:11:f1:79:56:05:82:5a:a9:d8:d8:
a8:4a:0d:32:1b:40:48:37:f5:a8:b9:30:e9:67:3b:
f0:16:e6:e8:5e:5c:45:6a:55:cb:b3:e9:7b:30:1b:
14:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FE:06:03:7E:D8:D6:9F:7D:9A:C5:18:F0:06:F8:21:D0:30:08:04
X509v3 Authority Key Identifier:
keyid:83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/1f4GA37Y1p99msUY8Ab4IdAwCAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.196.0/22
91.246.128.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:b7:02:65:0b:83:cf:a9:74:7f:1b:9a:f6:cf:ba:96:20:24:
db:51:75:cf:c2:f7:1f:ef:03:27:96:73:96:bc:d0:69:4c:f8:
92:3f:3b:6e:b1:b7:10:db:df:16:cf:cf:bb:c6:3c:8e:11:c6:
81:6d:c2:4b:1c:e1:37:47:12:94:b0:1b:bd:42:1b:df:a9:06:
70:d6:b8:86:0d:66:99:ef:b1:b7:32:ed:06:87:d1:9c:a8:51:
c1:17:e3:23:7d:cb:d7:9c:09:a2:52:ab:1a:a1:c2:69:71:9b:
0d:19:72:76:81:17:a3:00:7d:cb:8c:99:0e:8e:fe:c3:5b:23:
32:34:24:61:24:6a:4a:cf:e1:15:0d:e0:f2:5c:f4:6a:d9:fe:
25:11:46:46:f3:00:56:2c:05:f0:2f:df:36:82:fe:d8:cb:9a:
b9:38:cf:b7:95:52:ec:8b:b1:63:32:1f:e6:c2:1d:65:16:1e:
2f:bb:ae:15:2d:7c:4e:f7:90:2d:3f:e9:c9:9f:2b:f6:d8:a1:
2c:8c:d2:2a:62:c5:70:ae:a0:ef:5d:a6:50:28:d8:1e:f1:ec:
a1:62:95:9c:78:ef:a4:c5:48:8b:cf:0a:fd:9c:18:5a:75:74:
33:d7:a7:c1:14:f0:06:3c:77:45:39:a8:54:c3:25:2e:8f:2b:
43:a6:01:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:55 2023 by rpki-client on console-fra.rpki-client.org