Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/PAX0qlFRDY9V7n6MQWZyVLAZMbY.roa
File: PAX0qlFRDY9V7n6MQWZyVLAZMbY.roa (raw, json)
Hash identifier: kmJjsF5GbI5lzg1mUt2wy6o2yygsgf4EwgQC2acpoEw=
Subject key identifier: 3C:05:F4:AA:51:51:0D:8F:55:EE:7E:8C:41:66:72:54:B0:19:31:B6
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 05717937
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/PAX0qlFRDY9V7n6MQWZyVLAZMbY.roa
Signing time: Tue 01 Mar 2022 07:01:05 +0000
ROA not before: Tue 01 Mar 2022 07:01:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 185.95.102.0/23 maxlen: 24
185.95.101.0/24 maxlen: 24
185.76.240.0/23 maxlen: 24
185.76.242.0/24 maxlen: 24
185.81.174.0/24 maxlen: 24
185.81.184.0/24 maxlen: 24
185.81.187.0/24 maxlen: 24
185.97.3.0/24 maxlen: 24
185.97.1.0/24 maxlen: 24
194.104.9.0/24 maxlen: 24
194.104.8.0/24 maxlen: 24
185.73.182.0/23 maxlen: 24
185.75.132.0/23 maxlen: 24
185.75.134.0/24 maxlen: 24
213.108.3.0/24 maxlen: 24
213.108.1.0/24 maxlen: 24
213.108.0.0/24 maxlen: 24
185.96.80.0/24 maxlen: 24
5.183.252.0/24 maxlen: 24
185.77.220.0/22 maxlen: 24
83.171.225.0/24 maxlen: 24
77.220.192.0/24 maxlen: 24
77.220.195.0/24 maxlen: 24
185.96.38.0/24 maxlen: 24
185.89.104.0/23 maxlen: 24
185.89.108.0/22 maxlen: 24
141.98.84.0/24 maxlen: 24
185.81.172.0/23 maxlen: 24
45.10.165.0/24 maxlen: 24
45.10.164.0/24 maxlen: 24
185.88.38.0/24 maxlen: 24
45.10.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91322679 (0x5717937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Mar 1 07:01:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c05f4aa51510d8f55ee7e8c41667254b01931b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1a:31:39:6a:f5:04:77:01:88:e0:40:68:4c:
cb:16:38:bd:d1:5b:00:22:e9:16:fb:35:a5:4d:71:
fe:fd:0a:ca:55:ed:57:6d:26:27:f4:b9:d9:81:00:
b2:ad:85:5b:27:b9:1d:29:f1:5e:41:2e:42:53:a8:
f8:82:c6:f7:c7:8d:75:5e:17:9f:c8:14:c2:e1:e8:
d5:38:8f:73:15:69:4c:f7:0c:d2:35:b4:50:e9:89:
19:66:28:0f:61:cc:f2:3b:27:ec:79:de:f3:12:14:
bd:35:b9:bb:bf:b4:89:7e:b6:03:10:4d:30:0e:4a:
42:5f:c9:19:09:22:70:75:80:ae:e9:6f:c8:27:85:
24:db:ec:32:3e:6c:c7:9d:a6:c6:3e:45:09:63:22:
38:c3:93:4f:db:a6:d1:76:f8:b3:ca:c0:e2:34:9d:
36:71:46:1e:4b:a9:e2:f8:b3:66:84:94:12:4b:e6:
f4:e4:bf:35:41:f4:a2:4e:1f:fd:62:68:2a:2d:0a:
7f:c1:8a:87:59:19:3d:3b:a0:17:7a:da:76:f9:d3:
91:8c:06:75:38:5f:6e:b5:b0:96:7c:bf:2d:dd:15:
b7:7e:0d:62:14:e3:4a:35:10:38:1f:87:85:47:ec:
9a:8e:d3:da:78:35:e4:3f:8b:66:cd:9f:5d:51:16:
3e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:05:F4:AA:51:51:0D:8F:55:EE:7E:8C:41:66:72:54:B0:19:31:B6
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/PAX0qlFRDY9V7n6MQWZyVLAZMbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.252.0/24
45.10.164.0/23
45.10.167.0/24
77.220.192.0/24
77.220.195.0/24
83.171.225.0/24
141.98.84.0/24
185.73.182.0/23
185.75.132.0-185.75.134.255
185.76.240.0-185.76.242.255
185.77.220.0/22
185.81.172.0-185.81.174.255
185.81.184.0/24
185.81.187.0/24
185.88.38.0/24
185.89.104.0/23
185.89.108.0/22
185.95.101.0-185.95.103.255
185.96.38.0/24
185.96.80.0/24
185.97.1.0/24
185.97.3.0/24
194.104.8.0/23
213.108.0.0/23
213.108.3.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b2:55:5a:9c:1e:b0:c5:61:95:e1:77:89:3f:3d:37:25:10:
e2:10:85:2b:44:5e:1c:74:6b:24:88:77:dc:f4:f7:09:02:2e:
b2:f9:49:52:ae:e5:8d:28:22:01:c9:da:06:6a:d4:ae:8a:40:
7a:8a:eb:62:8e:1f:49:0a:bb:55:1f:7b:a5:f7:b6:9d:5d:f6:
ec:43:04:d4:67:ca:f4:43:0e:6c:58:4e:63:cd:b8:a8:33:25:
8b:fe:31:24:ec:0c:4b:30:7b:45:46:a4:9c:e8:38:0e:17:1b:
09:ba:47:11:b9:1a:d0:54:8a:ac:21:31:d1:1b:73:6a:70:36:
33:83:fc:a8:0d:52:15:78:cf:f0:a7:be:a5:5a:9d:be:9b:58:
d5:2d:26:dc:10:46:89:d4:85:43:cc:87:4a:f1:3a:f1:3b:fc:
75:a9:18:30:6a:f4:3a:f3:24:46:15:0b:78:35:e8:6d:0e:47:
5f:b7:d5:6f:b5:dc:d5:46:68:7b:10:1b:1b:80:98:a0:48:5c:
d6:a9:7a:3a:54:42:5a:7e:8d:7d:d3:96:c3:cc:c1:2a:7a:4d:
23:4d:1b:3d:77:bc:0b:01:94:f6:26:7f:80:e8:1b:19:17:73:
22:92:d7:d8:63:f2:0a:9f:09:c8:24:f3:7a:e2:d3:06:13:29:
89:6f:3b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org