Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/n4sx4OIYjZZ2NKXW4M9iZd4iaHo.roa
File: n4sx4OIYjZZ2NKXW4M9iZd4iaHo.roa (raw, json)
Hash identifier: OuHHS6zWZcj6jffvkh35aXd9D3hofC6H+KjKBaLYTkY=
Subject key identifier: 9F:8B:31:E0:E2:18:8D:96:76:34:A5:D6:E0:CF:62:65:DE:22:68:7A
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 0BD576A6
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/n4sx4OIYjZZ2NKXW4M9iZd4iaHo.roa
Signing time: Tue 22 Feb 2022 11:26:27 +0000
ROA not before: Tue 22 Feb 2022 11:26:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3225
IP address blocks: 91.140.220.0/22 maxlen: 22
91.140.224.0/24 maxlen: 24
91.140.224.0/22 maxlen: 22
91.140.233.0/24 maxlen: 24
91.140.228.0/22 maxlen: 22
91.140.234.0/24 maxlen: 24
91.140.238.0/24 maxlen: 24
91.140.239.0/24 maxlen: 24
91.140.236.0/24 maxlen: 24
91.140.237.0/24 maxlen: 24
91.140.242.0/24 maxlen: 24
91.140.244.0/22 maxlen: 22
91.140.249.0/24 maxlen: 24
91.140.248.0/22 maxlen: 22
91.140.252.0/24 maxlen: 24
91.140.252.0/22 maxlen: 22
91.140.255.0/24 maxlen: 24
91.140.164.0/22 maxlen: 22
185.16.4.0/22 maxlen: 22
91.140.160.0/22 maxlen: 22
91.140.172.0/22 maxlen: 22
94.187.224.0/19 maxlen: 19
91.140.180.0/22 maxlen: 22
94.187.224.0/22 maxlen: 22
91.140.192.0/22 maxlen: 22
94.187.232.0/22 maxlen: 22
91.140.188.0/22 maxlen: 22
94.187.228.0/22 maxlen: 22
94.187.236.0/22 maxlen: 22
91.140.196.0/22 maxlen: 22
94.187.240.0/22 maxlen: 22
91.140.203.0/24 maxlen: 24
94.187.244.0/22 maxlen: 22
91.140.204.0/22 maxlen: 22
91.140.202.0/24 maxlen: 24
91.140.212.0/22 maxlen: 22
94.187.252.0/22 maxlen: 22
94.187.248.0/22 maxlen: 22
91.140.208.0/22 maxlen: 22
91.140.128.0/22 maxlen: 22
91.140.128.0/17 maxlen: 17
91.140.132.0/22 maxlen: 22
91.140.136.0/22 maxlen: 22
91.140.152.0/22 maxlen: 22
91.140.148.0/24 maxlen: 24
91.140.148.0/22 maxlen: 22
194.54.248.0/22 maxlen: 22
194.54.252.0/22 maxlen: 22
194.54.192.0/22 maxlen: 22
194.54.194.0/23 maxlen: 23
194.54.196.0/22 maxlen: 22
194.54.204.0/22 maxlen: 22
194.54.208.0/22 maxlen: 22
194.54.212.0/22 maxlen: 22
194.54.216.0/22 maxlen: 22
194.54.220.0/22 maxlen: 22
194.54.224.0/22 maxlen: 22
194.54.232.0/22 maxlen: 22
194.54.228.0/22 maxlen: 22
194.54.236.0/22 maxlen: 22
194.54.240.0/22 maxlen: 22
2a01:7780::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198538918 (0xbd576a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: Feb 22 11:26:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f8b31e0e2188d967634a5d6e0cf6265de22687a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:e9:75:98:6e:a2:30:a7:ae:b7:12:a0:1f:
65:44:3f:09:a2:2c:6d:27:b8:04:10:ad:7a:ee:ef:
4b:fa:a8:06:88:50:de:85:6a:ee:76:be:30:c0:1c:
9f:7e:5a:d8:e2:c7:f3:b5:e4:b2:d7:27:f0:c9:c4:
be:41:9e:0a:d1:92:3a:86:53:79:0c:50:51:65:e6:
5c:bb:dd:3f:53:d1:ce:b9:e4:f4:a8:d7:e3:a9:fb:
de:a5:92:e4:e0:1c:26:4a:06:a9:8f:d4:70:a0:fe:
f8:e3:81:f0:52:7f:b1:93:24:b5:1c:f0:e4:c8:c4:
72:1f:2f:1e:8a:53:77:c7:f2:e0:3d:91:23:7f:b1:
05:09:42:34:43:cb:46:ae:f6:8f:d7:b8:ad:df:93:
83:72:4c:b0:12:b3:2d:56:60:e3:07:24:22:b7:12:
5e:95:ee:8f:ea:a9:2e:c9:0a:15:19:72:fa:a7:01:
0a:40:0a:09:ad:52:fc:4f:5d:9a:44:49:6d:cc:e2:
3d:b6:a3:e6:8c:6b:ef:2d:c8:c0:30:be:aa:87:67:
63:5f:45:59:e9:e8:41:05:9a:62:4b:54:a8:15:ab:
2a:d3:ab:60:9b:c6:e8:aa:46:5b:4c:f9:8f:42:ae:
b8:db:74:15:0f:28:59:d2:f8:1a:3a:b9:92:29:23:
b3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8B:31:E0:E2:18:8D:96:76:34:A5:D6:E0:CF:62:65:DE:22:68:7A
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/n4sx4OIYjZZ2NKXW4M9iZd4iaHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.140.128.0/17
94.187.224.0/19
185.16.4.0/22
194.54.192.0/21
194.54.204.0-194.54.243.255
194.54.248.0/21
IPv6:
2a01:7780::/32
Signature Algorithm: sha256WithRSAEncryption
53:b4:8d:59:c4:d3:53:91:9b:e7:46:c5:52:af:64:de:53:9f:
4e:a2:c9:c1:cf:9b:81:03:39:00:da:2a:c0:a3:b4:f9:61:93:
68:32:80:c3:77:ac:ce:cd:77:df:56:31:17:b4:26:1d:96:92:
73:1a:32:16:1d:22:73:fa:16:cd:92:28:f5:c8:c5:95:e6:46:
66:77:d6:e3:82:21:be:65:0e:e9:51:c6:e0:64:32:f2:ab:31:
87:67:9c:47:6c:81:01:25:40:b3:5c:4f:ed:fd:a8:43:19:eb:
84:a2:c1:b2:1d:58:ee:12:fe:5b:82:27:61:03:fe:9a:a3:38:
5f:9a:c5:b9:0e:0d:f0:25:f2:91:10:db:4a:41:53:a4:10:26:
0d:e8:19:f5:7d:34:2b:10:70:1c:b2:ea:1a:31:e0:74:76:05:
4f:bd:e6:3d:10:63:aa:18:1e:54:2f:d6:f3:76:fa:3c:b1:c8:
bb:70:0a:d0:4f:55:a0:5e:e7:f7:3b:80:af:14:bf:03:56:6c:
79:91:b2:f3:af:6c:18:5c:78:38:ec:30:c1:a0:51:d2:fc:13:
25:7d:18:c8:65:70:2e:8e:83:cf:33:1a:54:68:a8:62:f0:a8:
23:dd:64:79:f9:04:98:10:85:a0:53:88:21:ad:c3:62:e8:fb:
98:b5:47:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:02 2023 by rpki-client on console-fra.rpki-client.org