Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/su0dm4FCnV_4_W2pfzRz--RTZtg.roa
File: su0dm4FCnV_4_W2pfzRz--RTZtg.roa (raw, json)
Hash identifier: xGo1nfGTzfBy7xPTKd5qHtmM23MXRkBtGG6cAeMiihU=
Subject key identifier: B2:ED:1D:9B:81:42:9D:5F:F8:FD:6D:A9:7F:34:73:FB:E4:53:66:D8
Certificate issuer: /CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
Certificate serial: 047DFD88
Authority key identifier: C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/su0dm4FCnV_4_W2pfzRz--RTZtg.roa
Signing time: Sat 01 Jan 2022 13:54:15 +0000
ROA not before: Sat 01 Jan 2022 13:54:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3249
IP address blocks: 83.166.32.0/19 maxlen: 19
91.236.222.0/24 maxlen: 24
85.29.192.0/18 maxlen: 18
62.65.32.0/19 maxlen: 19
217.159.128.0/17 maxlen: 17
84.50.0.0/16 maxlen: 16
94.246.192.0/20 maxlen: 20
80.235.0.0/17 maxlen: 17
94.246.208.0/21 maxlen: 21
213.180.0.0/19 maxlen: 19
213.168.0.0/19 maxlen: 19
185.43.104.0/22 maxlen: 22
46.131.0.0/16 maxlen: 16
195.250.160.0/19 maxlen: 19
90.190.0.0/15 maxlen: 15
195.50.192.0/19 maxlen: 19
194.106.96.0/19 maxlen: 19
213.219.64.0/18 maxlen: 18
195.50.224.0/19 maxlen: 19
81.20.144.0/20 maxlen: 20
217.71.32.0/20 maxlen: 20
185.20.56.0/22 maxlen: 22
194.126.96.0/19 maxlen: 19
213.35.128.0/17 maxlen: 17
37.157.64.0/18 maxlen: 18
78.110.36.0/22 maxlen: 22
88.196.0.0/16 maxlen: 16
78.110.40.0/22 maxlen: 22
185.40.236.0/22 maxlen: 22
176.46.0.0/17 maxlen: 17
89.221.64.0/21 maxlen: 21
2001:7d0::/32 maxlen: 32
2a01:158::/32 maxlen: 32
2a00:16e0::/32 maxlen: 32
2a01:6da0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75365768 (0x47dfd88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
Validity
Not Before: Jan 1 13:54:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2ed1d9b81429d5ff8fd6da97f3473fbe45366d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ff:a6:6c:ca:55:7c:37:4c:08:fe:b5:ac:65:
97:17:cd:c8:f5:0e:91:5a:a3:6c:54:d4:c6:94:00:
bc:7d:58:2d:41:3a:fe:62:61:f0:b2:63:94:62:40:
24:71:a1:c6:a7:aa:a3:7e:70:d6:f0:04:e9:53:79:
6f:a9:79:ed:5c:cf:b5:c6:87:d2:62:f6:f5:97:77:
0a:b1:81:6f:91:82:41:6f:2a:ea:8f:2e:d1:0a:be:
7e:51:d3:41:e0:91:d8:3a:6a:6f:fb:be:19:37:df:
11:ea:bc:c3:13:6e:3c:7d:e6:c7:e2:08:68:f9:83:
95:92:f1:b4:1f:e3:0c:f7:79:8e:b1:a2:40:14:9c:
93:f5:e6:30:4c:f4:8d:73:e8:a0:37:b0:c0:11:fa:
4d:42:26:f2:8c:02:74:46:88:d8:1f:f7:c3:7e:bc:
c5:03:78:16:f3:a1:7a:15:c3:22:74:d8:69:7d:1b:
b0:d4:71:68:ac:01:93:11:db:8b:67:69:ff:f5:47:
69:e8:27:09:77:27:0b:1f:81:32:5d:5a:b4:fd:f7:
30:9a:72:c7:e2:af:2e:66:09:6a:5f:bd:d3:5a:f6:
fd:ff:a0:b6:38:ff:e8:95:7c:0a:57:ac:07:5f:5c:
c6:8f:e9:ab:7a:f6:32:05:3e:55:0c:06:c5:a8:3f:
aa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:ED:1D:9B:81:42:9D:5F:F8:FD:6D:A9:7F:34:73:FB:E4:53:66:D8
X509v3 Authority Key Identifier:
keyid:C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/su0dm4FCnV_4_W2pfzRz--RTZtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.64.0/18
46.131.0.0/16
62.65.32.0/19
78.110.36.0-78.110.43.255
80.235.0.0/17
81.20.144.0/20
83.166.32.0/19
84.50.0.0/16
85.29.192.0/18
88.196.0.0/16
89.221.64.0/21
90.190.0.0/15
91.236.222.0/24
94.246.192.0-94.246.215.255
176.46.0.0/17
185.20.56.0/22
185.40.236.0/22
185.43.104.0/22
194.106.96.0/19
194.126.96.0/19
195.50.192.0/18
195.250.160.0/19
213.35.128.0/17
213.168.0.0/19
213.180.0.0/19
213.219.64.0/18
217.71.32.0/20
217.159.128.0/17
IPv6:
2001:7d0::/32
2a00:16e0::/32
2a01:158::/32
2a01:6da0::/32
Signature Algorithm: sha256WithRSAEncryption
38:a7:fe:aa:78:11:6c:15:b5:e3:aa:01:2b:ac:e9:b2:f8:5a:
be:2f:28:7b:4a:38:a2:77:c2:ce:ea:d3:9a:ae:70:c8:67:75:
91:55:f0:5e:3d:2f:99:9b:a2:18:4a:78:be:97:58:12:cb:46:
af:6a:38:63:65:23:ba:76:a2:5c:52:79:2c:39:1b:a7:e7:0f:
a3:f7:66:ca:15:d2:83:99:1b:26:75:0c:bd:3a:cc:80:14:f5:
ac:3a:7b:79:0c:db:49:ea:16:06:f1:d5:e5:a8:67:fe:f7:46:
3a:c7:d1:e3:69:76:a1:c9:4d:40:85:a9:a9:db:88:f1:66:37:
90:89:fa:09:8b:5e:d3:e6:c2:67:bb:29:93:9f:e7:f4:1c:02:
cc:70:a1:b9:c7:5e:c1:7d:9e:f6:cb:e3:4e:e4:97:78:f1:36:
9b:bb:31:bc:bd:13:a7:db:20:84:df:6c:75:7c:20:d3:08:2e:
25:5e:9c:28:9f:8d:28:4e:db:0e:b7:c8:68:02:51:26:02:34:
f0:7f:05:33:44:54:2f:d6:be:b4:45:5c:11:ef:0f:f5:d7:2b:
8b:2e:85:13:5f:90:0f:20:13:a4:73:f0:51:d4:0e:c1:cd:d5:
c5:8a:c3:30:ca:95:ed:d3:34:37:4a:ec:85:2e:e5:df:52:64:
59:2c:64:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-fra.rpki-client.org