Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/qm69w4nVl3Z_zKNOLwnTU3DKsso.roa
File: qm69w4nVl3Z_zKNOLwnTU3DKsso.roa (raw, json)
Hash identifier: K7QK38ql4MVvF3JvxGgkSxwM4gRMPL5lumG6fV8ijMM=
Subject key identifier: AA:6E:BD:C3:89:D5:97:76:7F:CC:A3:4E:2F:09:D3:53:70:CA:B2:CA
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 0C0B2EA7
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/qm69w4nVl3Z_zKNOLwnTU3DKsso.roa
Signing time: Mon 14 Mar 2022 06:03:36 +0000
ROA not before: Mon 14 Mar 2022 06:03:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3225
IP address blocks: 91.140.220.0/22 maxlen: 24
91.140.224.0/24 maxlen: 24
91.140.224.0/22 maxlen: 22
91.140.226.0/24 maxlen: 24
91.140.233.0/24 maxlen: 24
91.140.228.0/22 maxlen: 22
91.140.234.0/24 maxlen: 24
91.140.238.0/24 maxlen: 24
91.140.239.0/24 maxlen: 24
91.140.236.0/24 maxlen: 24
91.140.237.0/24 maxlen: 24
91.140.242.0/24 maxlen: 24
91.140.244.0/22 maxlen: 22
91.140.246.0/24 maxlen: 24
91.140.248.0/24 maxlen: 24
91.140.249.0/24 maxlen: 24
91.140.248.0/22 maxlen: 22
91.140.252.0/24 maxlen: 24
91.140.252.0/22 maxlen: 22
91.140.255.0/24 maxlen: 24
91.140.164.0/22 maxlen: 22
185.16.4.0/22 maxlen: 22
91.140.160.0/22 maxlen: 22
91.140.172.0/22 maxlen: 22
94.187.224.0/19 maxlen: 19
91.140.180.0/22 maxlen: 22
94.187.224.0/22 maxlen: 22
91.140.192.0/22 maxlen: 22
94.187.232.0/22 maxlen: 22
91.140.188.0/22 maxlen: 22
94.187.228.0/22 maxlen: 22
94.187.236.0/22 maxlen: 22
91.140.196.0/22 maxlen: 24
94.187.240.0/22 maxlen: 22
91.140.200.0/24 maxlen: 24
91.140.203.0/24 maxlen: 24
94.187.244.0/22 maxlen: 22
91.140.204.0/22 maxlen: 22
91.140.202.0/24 maxlen: 24
91.140.212.0/22 maxlen: 22
94.187.252.0/22 maxlen: 22
94.187.248.0/22 maxlen: 22
91.140.208.0/22 maxlen: 22
91.140.128.0/22 maxlen: 22
91.140.128.0/17 maxlen: 24
91.140.132.0/22 maxlen: 22
91.140.136.0/22 maxlen: 22
91.140.152.0/22 maxlen: 22
91.140.148.0/24 maxlen: 24
91.140.148.0/22 maxlen: 22
194.54.241.0/24 maxlen: 24
194.54.248.0/22 maxlen: 22
194.54.252.0/22 maxlen: 22
194.54.192.0/22 maxlen: 22
194.54.194.0/23 maxlen: 23
194.54.196.0/22 maxlen: 22
194.54.204.0/22 maxlen: 22
194.54.208.0/22 maxlen: 22
194.54.212.0/22 maxlen: 22
194.54.216.0/22 maxlen: 22
194.54.220.0/22 maxlen: 22
194.54.224.0/22 maxlen: 22
194.54.232.0/22 maxlen: 22
194.54.228.0/22 maxlen: 22
194.54.236.0/22 maxlen: 22
194.54.240.0/22 maxlen: 22
2a01:7780::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202059431 (0xc0b2ea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: Mar 14 06:03:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa6ebdc389d597767fcca34e2f09d35370cab2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:d0:cb:27:da:a1:02:d4:4c:93:3e:7d:b2:
e6:eb:9d:7a:59:52:44:59:39:73:b7:b2:d7:96:70:
dd:d2:0e:8f:7b:65:39:9d:03:51:4e:2a:ae:6a:db:
64:2c:8f:18:38:e7:ef:20:9d:52:cf:6a:58:69:7b:
9b:3f:bf:70:be:30:c9:5c:ea:7c:ab:3a:2e:96:6d:
12:05:db:f0:f7:af:cd:69:91:86:9f:fb:4c:9c:44:
0e:fb:78:9d:e6:39:37:48:76:cc:d0:ea:07:e5:83:
47:b6:08:a8:0b:71:04:1f:30:66:af:32:11:aa:33:
87:5d:0e:de:89:81:58:a4:ec:bb:dd:ed:53:af:30:
7c:3a:0c:14:3c:83:be:58:09:4a:64:e3:a1:ac:56:
d8:6e:a3:6d:c8:23:07:e7:46:c9:ce:01:8b:ae:81:
25:af:de:31:8d:0c:fe:2e:e8:ec:b4:78:2e:50:72:
0c:5b:81:4d:bd:70:e2:6a:ee:48:56:9c:51:76:64:
06:e5:40:38:96:4e:4f:14:d4:f4:95:dc:18:4e:4d:
4d:ba:6b:ba:98:3a:36:1c:a6:ec:73:58:44:ac:70:
e1:75:cb:76:35:a7:ae:9d:84:e4:69:65:72:5c:70:
7c:03:08:5d:c9:17:09:bd:fb:e2:c6:fe:f9:51:9b:
60:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6E:BD:C3:89:D5:97:76:7F:CC:A3:4E:2F:09:D3:53:70:CA:B2:CA
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/qm69w4nVl3Z_zKNOLwnTU3DKsso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.140.128.0/17
94.187.224.0/19
185.16.4.0/22
194.54.192.0/21
194.54.204.0-194.54.243.255
194.54.248.0/21
IPv6:
2a01:7780::/32
Signature Algorithm: sha256WithRSAEncryption
92:1a:45:fb:4b:13:16:33:a0:a6:47:f6:a2:ed:cb:eb:5f:66:
39:c3:31:7e:5c:5b:13:81:48:18:25:30:42:f0:91:db:a4:0c:
cf:ba:54:c6:8c:94:3b:52:8f:2d:ab:fb:08:0a:2a:2c:70:73:
64:63:5b:e4:3e:9a:f5:bd:e6:b6:93:11:fb:db:80:90:cb:61:
13:b6:35:63:20:37:08:3a:72:0d:f6:1a:a1:5b:ac:62:38:b8:
bb:2f:fc:98:73:10:75:54:51:dd:f8:57:42:c4:a9:e0:a6:f3:
ff:59:30:16:13:16:7f:8f:3b:ea:5f:96:eb:5e:9a:4c:06:a3:
a4:ab:d2:56:07:eb:42:af:a9:d6:52:cb:d5:bf:c7:59:cb:cf:
1f:5d:9c:2f:a7:5e:1a:ab:8f:6c:82:ef:a4:68:f3:7e:6a:9a:
e3:8f:fb:db:6c:e4:c8:ad:b9:85:f1:45:dd:cf:5d:98:6c:5a:
19:19:df:bd:68:b7:d8:6d:b3:60:e3:47:cd:71:3a:83:ef:11:
48:2f:c5:c5:46:00:ee:63:26:c8:ac:5c:20:f4:28:b2:83:18:
89:d3:47:42:ee:b8:cf:41:f0:4a:1a:18:df:81:3d:55:b3:ef:
20:78:df:43:7c:0e:cc:f6:b0:59:cf:41:b3:8f:78:33:08:8d:
eb:b9:a0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:58 2024 by rpki-client on console-ams.rpki-client.org