Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/S36wT1_Dky5eRC7_vbroTsPRIz0.roa
File: S36wT1_Dky5eRC7_vbroTsPRIz0.roa (raw, json)
Hash identifier: oDdAfnuNqbuC8eWJa+PzGJ5i/L+ld8AseGrQh3T1QNY=
Subject key identifier: 4B:7E:B0:4F:5F:C3:93:2E:5E:44:2E:FF:BD:BA:E8:4E:C3:D1:23:3D
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 01843203A2AA7F68998103407503A62FA61F
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/S36wT1_Dky5eRC7_vbroTsPRIz0.roa
Signing time: Tue 01 Nov 2022 07:06:49 +0000
ROA not before: Tue 01 Nov 2022 07:06:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48503
IP address blocks: 185.234.60.0/22 maxlen: 22
79.133.184.0/22 maxlen: 22
79.133.188.0/22 maxlen: 22
91.234.208.0/24 maxlen: 24
91.234.209.0/24 maxlen: 24
85.193.120.0/21 maxlen: 21
185.234.24.0/22 maxlen: 22
85.193.96.0/21 maxlen: 21
85.193.104.0/21 maxlen: 21
85.193.112.0/21 maxlen: 21
188.124.232.0/22 maxlen: 22
188.124.236.0/22 maxlen: 22
188.124.244.0/23 maxlen: 23
188.124.246.0/23 maxlen: 23
176.64.0.0/21 maxlen: 21
176.64.8.0/21 maxlen: 21
176.64.16.0/21 maxlen: 21
176.64.24.0/21 maxlen: 21
176.64.32.0/24 maxlen: 24
176.64.34.0/24 maxlen: 24
176.64.33.0/24 maxlen: 24
176.64.35.0/24 maxlen: 24
185.212.246.0/24 maxlen: 24
185.212.245.0/24 maxlen: 24
185.212.244.0/24 maxlen: 24
81.91.180.0/22 maxlen: 22
185.212.247.0/24 maxlen: 24
81.91.184.0/22 maxlen: 22
185.44.84.0/23 maxlen: 23
185.44.86.0/23 maxlen: 23
93.157.176.0/23 maxlen: 23
81.211.150.0/24 maxlen: 24
93.157.178.0/23 maxlen: 23
93.157.181.0/24 maxlen: 24
93.157.180.0/24 maxlen: 24
93.157.183.0/24 maxlen: 24
93.157.182.0/24 maxlen: 24
81.211.172.0/24 maxlen: 24
81.211.196.0/24 maxlen: 24
81.211.195.0/24 maxlen: 24
79.137.171.0/24 maxlen: 24
81.211.198.0/24 maxlen: 24
79.137.170.0/24 maxlen: 24
81.211.197.0/24 maxlen: 24
81.211.199.0/24 maxlen: 24
81.211.194.0/24 maxlen: 24
81.211.193.0/24 maxlen: 24
81.211.130.0/24 maxlen: 24
81.211.133.0/24 maxlen: 24
81.211.201.0/24 maxlen: 24
81.211.203.0/24 maxlen: 24
79.137.176.0/23 maxlen: 23
81.211.202.0/24 maxlen: 24
81.211.204.0/24 maxlen: 24
79.137.178.0/23 maxlen: 23
81.211.207.0/24 maxlen: 24
81.211.251.0/24 maxlen: 24
81.211.250.0/24 maxlen: 24
212.96.64.0/24 maxlen: 24
212.96.67.0/24 maxlen: 24
212.96.66.0/24 maxlen: 24
212.96.68.0/24 maxlen: 24
212.96.70.0/23 maxlen: 23
212.96.69.0/24 maxlen: 24
212.96.65.0/24 maxlen: 24
212.96.72.0/23 maxlen: 23
212.96.74.0/23 maxlen: 23
212.96.77.0/24 maxlen: 24
212.96.76.0/24 maxlen: 24
212.96.78.0/24 maxlen: 24
212.96.80.0/23 maxlen: 23
212.96.82.0/24 maxlen: 24
212.96.84.0/24 maxlen: 24
212.96.83.0/24 maxlen: 24
212.96.85.0/24 maxlen: 24
212.96.79.0/24 maxlen: 24
212.96.86.0/23 maxlen: 23
212.96.88.0/24 maxlen: 24
212.96.91.0/24 maxlen: 24
212.96.90.0/24 maxlen: 24
212.96.95.0/24 maxlen: 24
212.96.94.0/24 maxlen: 24
212.96.93.0/24 maxlen: 24
212.96.92.0/24 maxlen: 24
95.163.145.0/24 maxlen: 24
91.103.104.0/24 maxlen: 24
91.103.105.0/24 maxlen: 24
193.41.131.0/24 maxlen: 24
193.41.130.0/24 maxlen: 24
89.223.112.0/22 maxlen: 22
89.223.116.0/22 maxlen: 22
62.122.104.0/23 maxlen: 23
62.122.106.0/23 maxlen: 23
62.122.108.0/24 maxlen: 24
62.122.109.0/24 maxlen: 24
185.250.30.0/23 maxlen: 23
185.250.28.0/23 maxlen: 23
194.0.244.0/24 maxlen: 24
194.0.245.0/24 maxlen: 24
185.223.188.0/22 maxlen: 22
185.229.84.0/22 maxlen: 22
62.122.4.0/22 maxlen: 22
62.122.0.0/22 maxlen: 22
194.0.188.0/24 maxlen: 24
194.0.189.0/24 maxlen: 24
195.189.48.0/23 maxlen: 23
195.189.51.0/24 maxlen: 24
195.189.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:32:03:a2:aa:7f:68:99:81:03:40:75:03:a6:2f:a6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Nov 1 07:06:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b7eb04f5fc3932e5e442effbdbae84ec3d1233d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:72:9e:c3:ad:50:d2:40:ad:a2:cd:8d:c6:23:
9c:67:08:c2:8d:5a:50:26:7f:44:45:56:b5:ef:37:
70:2a:43:bf:9b:46:0b:b9:e3:b6:43:01:c5:84:f0:
31:ae:94:f0:bb:4c:47:85:b9:9b:60:aa:ec:46:2d:
11:ce:d8:cc:53:2f:1f:42:06:98:99:bc:98:40:fc:
22:a5:fe:1b:ca:2d:bc:09:9f:48:ad:23:4d:e0:dd:
07:0d:b5:8d:55:79:b6:06:3b:7e:ae:90:f8:2d:c6:
a9:0e:ae:b8:4a:c8:c7:36:27:2f:1f:ca:2d:58:d3:
5d:ee:f0:2d:58:8d:23:ff:a5:f3:e2:7f:b3:45:2d:
c1:4d:24:48:40:90:8d:cd:d6:e6:2e:de:37:97:ea:
77:9f:44:41:b5:99:fa:b0:8c:33:ad:59:b8:f7:b2:
4d:af:93:83:8d:9b:1b:f6:68:98:ea:9d:99:c2:25:
a5:03:db:07:b4:06:3c:02:61:95:b2:4f:9d:39:98:
89:ba:6c:f6:e2:d1:ad:85:9c:db:9d:bb:cd:ed:b2:
75:fe:d2:2d:fc:cb:94:6e:92:7f:51:06:c5:cc:3e:
6d:59:c4:04:b4:be:e2:9b:de:60:3a:08:60:1f:9c:
16:fb:cb:3c:25:8b:ff:79:cd:d1:11:1a:44:6a:5f:
f2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7E:B0:4F:5F:C3:93:2E:5E:44:2E:FF:BD:BA:E8:4E:C3:D1:23:3D
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/S36wT1_Dky5eRC7_vbroTsPRIz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.0.0/21
62.122.104.0-62.122.109.255
79.133.184.0/21
79.137.170.0/23
79.137.176.0/22
81.91.180.0-81.91.187.255
81.211.130.0/24
81.211.133.0/24
81.211.150.0/24
81.211.172.0/24
81.211.193.0-81.211.199.255
81.211.201.0-81.211.204.255
81.211.207.0/24
81.211.250.0/23
85.193.96.0/19
89.223.112.0/21
91.103.104.0/23
91.234.208.0/23
93.157.176.0/21
95.163.145.0/24
176.64.0.0-176.64.35.255
185.44.84.0/22
185.212.244.0/22
185.223.188.0/22
185.229.84.0/22
185.234.24.0/22
185.234.60.0/22
185.250.28.0/22
188.124.232.0/21
188.124.244.0/22
193.41.130.0/23
194.0.188.0/23
194.0.244.0/23
195.189.48.0/22
212.96.64.0-212.96.88.255
212.96.90.0-212.96.95.255
Signature Algorithm: sha256WithRSAEncryption
b2:5c:56:1a:bc:0f:f7:4f:76:68:42:58:7e:c2:93:a4:77:4b:
74:bc:9a:0a:a1:ee:45:d5:ba:64:a8:9f:3d:01:5c:45:65:d5:
aa:71:9d:9b:19:08:85:ca:ed:af:1a:16:be:6b:86:d7:1d:e6:
4b:d0:da:1d:fc:b3:08:49:cd:7a:8c:15:db:82:ff:03:99:6a:
af:12:7c:10:3c:ce:b0:3f:ea:f3:f4:41:4e:f7:5d:21:c8:c2:
1b:15:1b:7e:07:41:97:88:b6:31:df:2f:a0:a1:e8:ef:e4:b9:
33:96:fb:9e:e3:f7:6d:b7:ee:b6:a0:e9:6b:5e:3f:5e:8f:36:
13:d9:c0:c2:0a:e9:65:13:4d:75:17:cb:1b:f7:fa:fd:c9:86:
c5:71:d9:3c:d4:0f:71:3c:e5:37:56:20:ae:91:f5:77:58:d9:
36:66:94:d7:69:aa:8d:d3:e4:56:be:5a:27:aa:10:2f:5a:92:
07:73:dc:4b:1f:cd:ee:31:22:25:b8:87:2f:d0:dd:09:14:c9:
cd:69:1b:88:04:5c:ab:cc:5f:b6:cd:b8:c3:ca:8e:42:33:3f:
55:3d:10:9f:64:77:d2:f6:a9:c4:17:97:d0:bf:54:dc:1f:93:
e2:8c:45:3b:33:a1:89:3d:7f:82:a1:de:c8:c0:41:82:4d:a0:
4b:9a:34:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:16 2023 by rpki-client on console-fra.rpki-client.org