Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/URRbKjauVj7pDC2BLb2bO2JppfE.roa
File: URRbKjauVj7pDC2BLb2bO2JppfE.roa (raw, json)
Hash identifier: gr2yh8evJV+otWWpOKEhiVfdoZTpuMMQ9+NPI2UhqkM=
Subject key identifier: 51:14:5B:2A:36:AE:56:3E:E9:0C:2D:81:2D:BD:9B:3B:62:69:A5:F1
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 0BE198D8
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/URRbKjauVj7pDC2BLb2bO2JppfE.roa
Signing time: Tue 22 Feb 2022 15:34:58 +0000
ROA not before: Tue 22 Feb 2022 15:34:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3225
IP address blocks: 91.140.220.0/22 maxlen: 24
91.140.224.0/24 maxlen: 24
91.140.224.0/22 maxlen: 22
91.140.226.0/24 maxlen: 24
91.140.233.0/24 maxlen: 24
91.140.228.0/22 maxlen: 22
91.140.234.0/24 maxlen: 24
91.140.238.0/24 maxlen: 24
91.140.239.0/24 maxlen: 24
91.140.236.0/24 maxlen: 24
91.140.237.0/24 maxlen: 24
91.140.242.0/24 maxlen: 24
91.140.244.0/22 maxlen: 22
91.140.246.0/24 maxlen: 24
91.140.248.0/24 maxlen: 24
91.140.249.0/24 maxlen: 24
91.140.248.0/22 maxlen: 22
91.140.252.0/24 maxlen: 24
91.140.252.0/22 maxlen: 22
91.140.255.0/24 maxlen: 24
91.140.164.0/22 maxlen: 22
185.16.4.0/22 maxlen: 22
91.140.160.0/22 maxlen: 22
91.140.172.0/22 maxlen: 22
94.187.224.0/19 maxlen: 19
91.140.180.0/22 maxlen: 22
94.187.224.0/22 maxlen: 22
91.140.192.0/22 maxlen: 22
94.187.232.0/22 maxlen: 22
91.140.188.0/22 maxlen: 22
94.187.228.0/22 maxlen: 22
94.187.236.0/22 maxlen: 22
91.140.196.0/22 maxlen: 24
94.187.240.0/22 maxlen: 22
91.140.200.0/24 maxlen: 24
91.140.203.0/24 maxlen: 24
94.187.244.0/22 maxlen: 22
91.140.204.0/22 maxlen: 22
91.140.202.0/24 maxlen: 24
91.140.212.0/22 maxlen: 22
94.187.252.0/22 maxlen: 22
94.187.248.0/22 maxlen: 22
91.140.208.0/22 maxlen: 22
91.140.128.0/22 maxlen: 22
91.140.128.0/17 maxlen: 24
91.140.132.0/22 maxlen: 22
91.140.136.0/22 maxlen: 22
91.140.152.0/22 maxlen: 22
91.140.148.0/24 maxlen: 24
91.140.148.0/22 maxlen: 22
194.54.248.0/22 maxlen: 22
194.54.252.0/22 maxlen: 22
194.54.192.0/22 maxlen: 22
194.54.194.0/23 maxlen: 23
194.54.196.0/22 maxlen: 22
194.54.204.0/22 maxlen: 22
194.54.208.0/22 maxlen: 22
194.54.212.0/22 maxlen: 22
194.54.216.0/22 maxlen: 22
194.54.220.0/22 maxlen: 22
194.54.224.0/22 maxlen: 22
194.54.232.0/22 maxlen: 22
194.54.228.0/22 maxlen: 22
194.54.236.0/22 maxlen: 22
194.54.240.0/22 maxlen: 22
2a01:7780::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199334104 (0xbe198d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: Feb 22 15:34:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51145b2a36ae563ee90c2d812dbd9b3b6269a5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:99:63:d6:69:f5:01:ec:f8:e2:6e:1e:64:
b9:c5:a8:25:61:f3:80:15:49:1a:58:d0:d8:11:80:
a1:62:a5:46:d8:68:66:75:fd:d9:99:55:45:72:31:
63:f1:15:70:c2:d3:4c:5d:0d:cd:5c:56:83:99:ae:
99:aa:82:cc:04:00:39:93:fd:05:62:a8:48:9c:d9:
68:a2:58:a8:44:d2:dd:84:2e:b8:08:5d:da:61:e1:
c9:62:98:1c:e1:2c:b3:33:31:b7:41:4e:52:32:59:
8d:57:f1:23:63:d0:d0:6e:2a:da:00:a5:e6:b6:8e:
45:d2:38:43:5c:12:de:2d:2f:0d:11:f8:d6:a1:31:
6c:f8:6d:6e:32:75:0a:b6:39:e1:62:62:08:77:2f:
c2:7e:be:3e:a5:ef:66:8f:90:9f:a1:67:dd:fa:6d:
0f:52:e1:bb:0e:2b:92:0b:1d:17:86:20:4f:36:ba:
37:1f:58:6d:7c:c1:a0:b1:82:3a:3e:a9:53:08:8e:
5a:dd:6d:6b:af:c5:77:9f:1c:f2:29:a7:46:ee:75:
80:22:d9:6f:06:84:5a:5b:8a:4e:46:c7:0c:b2:0d:
ef:54:aa:94:44:f3:1f:c1:5c:20:3b:c1:93:5a:f6:
e1:55:82:29:8a:65:72:f1:0d:98:dd:b3:32:ba:1f:
08:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:14:5B:2A:36:AE:56:3E:E9:0C:2D:81:2D:BD:9B:3B:62:69:A5:F1
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/URRbKjauVj7pDC2BLb2bO2JppfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.140.128.0/17
94.187.224.0/19
185.16.4.0/22
194.54.192.0/21
194.54.204.0-194.54.243.255
194.54.248.0/21
IPv6:
2a01:7780::/32
Signature Algorithm: sha256WithRSAEncryption
b4:53:c0:79:df:55:0e:a7:03:dd:64:74:63:bf:41:ac:b9:3b:
e2:22:ec:94:0b:8b:50:09:97:14:ec:86:3e:92:ef:79:2b:27:
4b:07:ca:ba:91:eb:91:22:b9:fa:3d:27:8d:bd:03:a5:7d:9d:
f7:3d:ac:b2:c0:46:c3:17:e5:9c:1f:52:f9:17:78:ee:35:90:
3c:e2:6a:ce:0b:e1:68:d6:47:44:84:1a:94:6b:28:50:d7:46:
ca:9e:70:d0:7c:e7:95:7b:64:60:09:bf:5d:35:fc:71:af:15:
44:aa:1c:a7:08:88:cb:77:5a:82:f9:32:f5:50:80:2c:d3:c9:
8a:bc:f1:da:3b:92:d1:e3:26:33:ec:39:f9:ed:f8:ad:40:58:
cb:06:bd:e1:ed:41:6e:2e:7e:b1:77:40:bb:45:59:fe:82:c9:
9d:f1:1d:8c:3c:d3:36:61:14:11:a9:50:e6:50:b1:4b:6c:4a:
4a:3f:6f:d5:50:2d:b2:4d:e2:8e:46:37:cf:e3:04:5a:bf:b2:
4c:08:3d:d3:65:5d:20:6a:79:92:bf:08:c1:33:97:0b:9f:84:
58:c0:c1:3f:66:70:f8:d3:18:58:c1:6b:e3:99:ec:c1:51:3a:
39:76:15:c3:97:db:b3:0b:c1:98:89:85:90:08:ad:4c:d5:fe:
ac:63:e1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:56 2024 by rpki-client on console-fra.rpki-client.org