Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/saQ9xEBFtZqWtjalPwUEMqXeNno.roa
File: saQ9xEBFtZqWtjalPwUEMqXeNno.roa (raw, json)
Hash identifier: qABM+JDOxHY3orsQipG/mknWj90Kth91sdE0IzWcsjc=
Subject key identifier: B1:A4:3D:C4:40:45:B5:9A:96:B6:36:A5:3F:05:04:32:A5:DE:36:7A
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 3917EFD1
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/saQ9xEBFtZqWtjalPwUEMqXeNno.roa
Signing time: Tue 26 Apr 2022 12:37:28 +0000
ROA not before: Tue 26 Apr 2022 12:37:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49544
IP address blocks: 185.41.140.0/22 maxlen: 22
213.179.192.0/19 maxlen: 19
213.179.192.0/22 maxlen: 22
213.179.196.0/22 maxlen: 22
91.216.207.0/24 maxlen: 24
188.122.64.0/19 maxlen: 24
91.198.152.0/24 maxlen: 24
185.52.12.0/22 maxlen: 24
185.50.104.0/22 maxlen: 22
213.163.64.0/19 maxlen: 24
162.245.204.0/22 maxlen: 22
5.200.0.0/19 maxlen: 24
185.179.202.0/23 maxlen: 24
213.179.204.0/22 maxlen: 22
213.179.200.0/22 maxlen: 22
185.179.200.0/23 maxlen: 24
213.179.210.0/23 maxlen: 23
213.179.209.0/24 maxlen: 24
213.179.212.0/22 maxlen: 22
213.179.216.0/22 maxlen: 22
213.179.220.0/22 maxlen: 22
146.247.76.0/22 maxlen: 22
109.200.192.0/19 maxlen: 24
109.200.194.0/23 maxlen: 23
109.200.208.0/22 maxlen: 22
162.244.52.0/22 maxlen: 23
185.197.24.0/22 maxlen: 23
104.153.84.0/22 maxlen: 22
193.43.218.0/23 maxlen: 23
31.204.132.0/22 maxlen: 22
31.204.128.0/19 maxlen: 24
31.204.158.0/24 maxlen: 24
31.204.156.0/23 maxlen: 23
138.128.136.0/22 maxlen: 22
91.195.234.0/23 maxlen: 23
138.128.140.0/22 maxlen: 22
2a01:9580::/32 maxlen: 34
2a04:c600::/29 maxlen: 34
2a00:1630::/29 maxlen: 32
2a00:1631::/32 maxlen: 32
2a00:1637::/32 maxlen: 32
2a00:1d26::/32 maxlen: 34
2a00:1630::/32 maxlen: 48
2a00:1632::/32 maxlen: 32
2a00:1d20::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 957870033 (0x3917efd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: Apr 26 12:37:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1a43dc44045b59a96b636a53f050432a5de367a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:f3:9e:c1:02:6a:5b:08:57:6e:20:df:4f:
e7:b4:22:cb:98:4d:25:5c:74:02:4e:32:c6:e5:2f:
be:df:54:79:72:9a:c7:75:f1:c2:66:bc:e2:b5:2d:
21:c9:81:49:6a:b2:95:dc:f8:b1:03:b3:a3:70:34:
61:65:1f:33:01:22:08:8f:78:10:a3:3a:90:75:7b:
de:b4:35:2d:9d:f9:66:49:2d:57:cc:c0:b0:5a:23:
f0:8b:9b:76:2c:b9:d9:cb:e5:a6:45:07:86:30:94:
b9:43:93:cb:e0:19:e8:87:39:9d:57:0c:4b:b2:93:
5c:46:ec:11:c8:e1:9c:91:d8:15:b1:2b:38:d6:7b:
25:8f:bc:2a:6f:9b:53:f4:09:c6:25:4f:f9:8d:13:
9f:e3:47:68:41:4a:29:ef:fa:ff:ea:59:58:93:56:
49:24:ca:40:04:60:ff:e6:3d:6f:3b:08:cd:69:28:
36:d5:d3:aa:81:8f:a9:18:b1:e3:74:a1:32:50:8e:
b0:af:22:77:0c:ba:9f:1c:91:77:5b:18:3a:b8:fe:
51:b4:77:33:76:a1:23:4e:36:16:dc:3b:d6:ae:de:
db:75:35:eb:59:bf:38:e7:2c:10:44:0a:e3:a2:44:
7c:95:6e:e2:6c:ff:f6:da:fc:76:e3:6b:94:63:ac:
bd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A4:3D:C4:40:45:B5:9A:96:B6:36:A5:3F:05:04:32:A5:DE:36:7A
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/saQ9xEBFtZqWtjalPwUEMqXeNno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.200.0.0/19
31.204.128.0/19
91.195.234.0/23
91.198.152.0/24
91.216.207.0/24
104.153.84.0/22
109.200.192.0/19
138.128.136.0/21
146.247.76.0/22
162.244.52.0/22
162.245.204.0/22
185.41.140.0/22
185.50.104.0/22
185.52.12.0/22
185.179.200.0/22
185.197.24.0/22
188.122.64.0/19
193.43.218.0/23
213.163.64.0/19
213.179.192.0/19
IPv6:
2a00:1630::/29
2a00:1d20::/29
2a01:9580::/32
2a04:c600::/29
Signature Algorithm: sha256WithRSAEncryption
89:a9:ab:4a:5b:9a:5a:24:d7:4b:b9:a0:63:49:b9:69:8b:12:
59:de:df:1d:84:06:dc:a0:d0:04:0f:4c:2c:b6:be:bb:50:0d:
43:70:e0:4b:92:b7:27:fe:cd:f5:bb:9b:10:35:2d:dd:cc:1f:
a7:9d:a1:ce:08:79:6d:83:6e:bf:66:65:b6:3f:e5:97:f4:a1:
b9:a6:f2:ce:63:2e:13:68:b5:dd:cd:60:b2:fb:35:79:e6:3c:
f3:13:44:76:46:6c:12:eb:34:2b:dc:98:95:7a:21:5b:79:eb:
5b:b3:28:2b:20:cd:e3:ac:9a:db:5f:c4:41:85:86:4c:9a:c9:
43:a6:6e:7a:fe:ef:3b:9f:88:23:9a:0f:2e:53:68:19:34:7b:
42:e6:f7:3a:4c:42:36:12:13:05:81:62:72:68:17:b4:c8:ee:
16:9e:96:95:99:ab:15:43:d6:85:32:04:d2:21:db:75:b3:29:
22:56:69:a0:57:c7:78:6a:2c:c7:49:62:7f:15:bb:6e:49:b9:
ae:46:75:15:21:32:3f:f3:a1:eb:ce:55:55:92:69:13:1c:8f:
03:2d:10:9f:b8:db:c8:e8:37:fa:b2:b1:35:38:c2:b3:9a:7c:
c3:db:cd:fe:a0:bb:16:b5:0f:4d:3c:37:34:a4:e5:80:08:32:
7b:1c:0e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:10 2023 by rpki-client on console-fra.rpki-client.org