Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/nAeVKUPDeUYQ20Zbew_Y0UsrZ8U.roa
File: nAeVKUPDeUYQ20Zbew_Y0UsrZ8U.roa (raw, json)
Hash identifier: FhWMt6ojdNJB/oK81rCaZYgBvm4EiISb0Cr0ncNPpYE=
Subject key identifier: 9C:07:95:29:43:C3:79:46:10:DB:46:5B:7B:0F:D8:D1:4B:2B:67:C5
Certificate issuer: /CN=e5503498ff185d0c607353f43f55e911f62a6802
Certificate serial: 01828C78794C2F93517912BAB0D27F0F1729
Authority key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/nAeVKUPDeUYQ20Zbew_Y0UsrZ8U.roa
Signing time: Thu 11 Aug 2022 10:34:41 +0000
ROA not before: Thu 11 Aug 2022 10:34:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15943
IP address blocks: 149.233.128.0/17 maxlen: 24
84.242.16.0/20 maxlen: 24
185.82.16.0/22 maxlen: 24
213.21.32.0/20 maxlen: 24
95.129.0.0/21 maxlen: 24
149.249.16.0/20 maxlen: 24
185.207.4.0/22 maxlen: 22
37.122.136.0/21 maxlen: 24
185.29.240.0/22 maxlen: 24
216.83.208.0/20 maxlen: 24
192.119.48.0/20 maxlen: 24
109.230.96.0/20 maxlen: 20
192.196.192.0/20 maxlen: 24
185.232.32.0/22 maxlen: 24
213.195.24.0/21 maxlen: 21
185.220.216.0/22 maxlen: 24
94.72.168.0/21 maxlen: 24
176.109.192.0/20 maxlen: 24
95.163.160.0/20 maxlen: 24
94.72.184.0/21 maxlen: 24
185.23.224.0/22 maxlen: 24
185.215.236.0/22 maxlen: 24
81.25.160.0/20 maxlen: 24
149.224.0.0/16 maxlen: 24
94.72.128.0/21 maxlen: 24
46.22.0.0/20 maxlen: 24
95.81.0.0/19 maxlen: 24
77.223.8.0/21 maxlen: 21
149.249.248.0/22 maxlen: 24
77.223.16.0/20 maxlen: 20
45.157.100.0/22 maxlen: 22
193.218.16.0/20 maxlen: 24
212.127.32.0/19 maxlen: 24
213.209.64.0/18 maxlen: 24
195.123.96.0/20 maxlen: 24
134.101.128.0/17 maxlen: 24
188.136.224.0/19 maxlen: 24
31.29.32.0/19 maxlen: 24
84.46.0.0/17 maxlen: 24
46.59.128.0/17 maxlen: 24
31.172.104.0/21 maxlen: 24
2a04:4540::/29 maxlen: 29
2a02:2028::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8c:78:79:4c:2f:93:51:79:12:ba:b0:d2:7f:0f:17:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5503498ff185d0c607353f43f55e911f62a6802
Validity
Not Before: Aug 11 10:34:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c07952943c3794610db465b7b0fd8d14b2b67c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6c:cb:d6:79:d5:c5:37:fa:dc:81:d5:7d:e4:
f6:f1:20:13:8c:f2:be:3f:48:a4:bf:b1:f1:2f:12:
bd:c7:f6:e3:ef:fd:5d:e5:23:d6:b1:bb:a8:06:82:
71:ff:66:c1:56:09:39:00:76:cb:e6:b4:d4:70:df:
1a:01:12:bb:eb:fd:d4:f8:0a:92:c5:e4:65:7d:98:
6c:df:49:0a:75:0f:3a:01:11:c4:f1:4c:15:d4:fc:
d3:e4:57:e1:37:e7:a6:75:91:50:07:16:c4:04:6b:
8e:da:16:6a:20:c3:73:9f:04:30:7f:f6:3d:37:6b:
a9:be:e8:52:05:63:c2:ed:94:c2:de:31:b5:1d:73:
b1:8a:ae:2d:e4:f2:6a:4a:c8:65:57:ad:6a:89:fc:
b1:f7:85:b4:c3:25:30:ef:71:f0:0b:0c:74:af:14:
2e:6c:ee:1b:0b:aa:b1:7b:ea:29:13:21:f0:3f:17:
8a:b6:dd:41:e6:d3:ec:0e:7e:de:17:31:11:73:c1:
39:81:f7:bc:0e:bb:2c:a9:a5:5b:79:9c:c9:05:5b:
6f:e1:fd:ce:54:c1:a0:50:39:a2:18:68:eb:c0:73:
56:93:c9:58:00:e8:1d:00:10:bc:b6:ff:68:56:da:
59:d3:ef:42:4b:bc:a1:9f:b0:46:8a:1c:68:c5:01:
38:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:07:95:29:43:C3:79:46:10:DB:46:5B:7B:0F:D8:D1:4B:2B:67:C5
X509v3 Authority Key Identifier:
keyid:E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/nAeVKUPDeUYQ20Zbew_Y0UsrZ8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.29.32.0/19
31.172.104.0/21
37.122.136.0/21
45.157.100.0/22
46.22.0.0/20
46.59.128.0/17
77.223.8.0-77.223.31.255
81.25.160.0/20
84.46.0.0/17
84.242.16.0/20
94.72.128.0/21
94.72.168.0/21
94.72.184.0/21
95.81.0.0/19
95.129.0.0/21
95.163.160.0/20
109.230.96.0/20
134.101.128.0/17
149.224.0.0/16
149.233.128.0/17
149.249.16.0/20
149.249.248.0/22
176.109.192.0/20
185.23.224.0/22
185.29.240.0/22
185.82.16.0/22
185.207.4.0/22
185.215.236.0/22
185.220.216.0/22
185.232.32.0/22
188.136.224.0/19
192.119.48.0/20
192.196.192.0/20
193.218.16.0/20
195.123.96.0/20
212.127.32.0/19
213.21.32.0/20
213.195.24.0/21
213.209.64.0/18
216.83.208.0/20
IPv6:
2a02:2028::/32
2a04:4540::/29
Signature Algorithm: sha256WithRSAEncryption
26:d5:d5:72:31:97:f0:0b:a5:37:43:2a:f2:d2:d9:4b:bf:bf:
79:83:c4:73:89:a4:8a:8a:f0:82:97:38:0c:00:ae:bc:48:57:
ed:9c:98:b4:e9:7c:28:7c:8a:2a:af:00:37:0f:5a:1c:7f:3f:
5a:84:41:e4:ce:43:4f:80:6b:33:0f:0e:3b:f8:05:72:55:d3:
af:d7:25:dc:64:70:22:e3:f7:a7:ac:40:a9:a3:b7:bc:b1:b6:
b5:79:1a:21:ca:11:8d:ce:54:76:c8:5f:60:30:29:e1:f3:87:
8f:a4:c1:54:8e:11:ec:2e:0c:32:ca:4c:e2:8f:2b:3c:e2:12:
7c:1c:8f:7e:21:de:be:87:ba:01:cf:17:12:ad:0e:99:87:ed:
87:74:6b:98:6b:f8:bb:27:0d:b0:4d:88:f3:fd:81:ef:d9:a5:
e6:6f:e9:8f:6c:c5:39:2b:35:e3:f2:93:2e:97:ba:d7:6c:9d:
bf:9f:c5:89:25:83:47:94:2e:e5:66:ed:d3:4d:19:52:34:d3:
fb:93:2a:31:13:12:bc:ae:cd:10:bd:bf:83:83:51:fc:db:f1:
40:ac:16:48:78:9f:76:9d:5b:df:3a:e4:f7:b6:4f:b2:2f:0e:
cd:36:80:b9:1b:48:4f:d4:3e:bf:a5:92:91:9d:ef:c2:2b:22:
e5:65:ae:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:37 2023 by rpki-client on console-ams.rpki-client.org