Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/zOY5SKDF80gOP3U9D9Ylw-Rni4g.roa
File: zOY5SKDF80gOP3U9D9Ylw-Rni4g.roa (raw, json)
Hash identifier: 4pcUsfIF73/5t5LSb+s1uTTVYvEF9OrFRL2fcfSOiYM=
Subject key identifier: CC:E6:39:48:A0:C5:F3:48:0E:3F:75:3D:0F:D6:25:C3:E4:67:8B:88
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 03B27619
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/zOY5SKDF80gOP3U9D9Ylw-Rni4g.roa
Signing time: Sat 01 Jan 2022 04:53:14 +0000
ROA not before: Sat 01 Jan 2022 04:53:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48503
IP address blocks: 185.234.60.0/22 maxlen: 22
79.133.184.0/22 maxlen: 22
79.133.188.0/22 maxlen: 22
91.234.208.0/24 maxlen: 24
91.234.209.0/24 maxlen: 24
85.193.120.0/21 maxlen: 21
185.234.24.0/22 maxlen: 22
85.193.96.0/21 maxlen: 21
85.193.104.0/21 maxlen: 21
85.193.112.0/21 maxlen: 21
188.124.232.0/22 maxlen: 22
188.124.236.0/22 maxlen: 22
188.124.244.0/23 maxlen: 23
188.124.246.0/23 maxlen: 23
176.64.0.0/21 maxlen: 21
176.64.8.0/21 maxlen: 21
176.64.16.0/21 maxlen: 21
176.64.24.0/21 maxlen: 21
176.64.32.0/24 maxlen: 24
176.64.34.0/24 maxlen: 24
176.64.33.0/24 maxlen: 24
176.64.35.0/24 maxlen: 24
185.212.246.0/24 maxlen: 24
185.212.245.0/24 maxlen: 24
185.212.244.0/24 maxlen: 24
81.91.180.0/22 maxlen: 22
185.212.247.0/24 maxlen: 24
81.91.184.0/22 maxlen: 22
185.44.84.0/23 maxlen: 23
185.44.86.0/23 maxlen: 23
93.157.176.0/23 maxlen: 23
81.211.150.0/24 maxlen: 24
93.157.178.0/23 maxlen: 23
93.157.181.0/24 maxlen: 24
93.157.180.0/24 maxlen: 24
93.157.183.0/24 maxlen: 24
93.157.182.0/24 maxlen: 24
81.211.172.0/24 maxlen: 24
81.211.195.0/24 maxlen: 24
81.211.196.0/24 maxlen: 24
81.211.198.0/24 maxlen: 24
79.137.171.0/24 maxlen: 24
81.211.197.0/24 maxlen: 24
79.137.170.0/24 maxlen: 24
81.211.199.0/24 maxlen: 24
81.211.194.0/24 maxlen: 24
81.211.193.0/24 maxlen: 24
81.211.130.0/24 maxlen: 24
81.211.133.0/24 maxlen: 24
81.211.201.0/24 maxlen: 24
81.211.203.0/24 maxlen: 24
79.137.176.0/23 maxlen: 23
81.211.202.0/24 maxlen: 24
81.211.204.0/24 maxlen: 24
79.137.178.0/23 maxlen: 23
81.211.250.0/24 maxlen: 24
212.96.64.0/24 maxlen: 24
212.96.67.0/24 maxlen: 24
212.96.66.0/24 maxlen: 24
212.96.68.0/24 maxlen: 24
212.96.70.0/23 maxlen: 23
212.96.69.0/24 maxlen: 24
212.96.65.0/24 maxlen: 24
212.96.72.0/23 maxlen: 23
212.96.74.0/23 maxlen: 23
212.96.77.0/24 maxlen: 24
212.96.76.0/24 maxlen: 24
212.96.78.0/24 maxlen: 24
212.96.80.0/23 maxlen: 23
212.96.82.0/24 maxlen: 24
212.96.84.0/24 maxlen: 24
212.96.83.0/24 maxlen: 24
212.96.85.0/24 maxlen: 24
212.96.79.0/24 maxlen: 24
212.96.86.0/23 maxlen: 23
212.96.88.0/24 maxlen: 24
212.96.91.0/24 maxlen: 24
212.96.90.0/24 maxlen: 24
212.96.95.0/24 maxlen: 24
212.96.94.0/24 maxlen: 24
212.96.93.0/24 maxlen: 24
212.96.92.0/24 maxlen: 24
95.163.145.0/24 maxlen: 24
91.103.104.0/24 maxlen: 24
91.103.105.0/24 maxlen: 24
193.41.131.0/24 maxlen: 24
193.41.130.0/24 maxlen: 24
89.223.112.0/22 maxlen: 22
89.223.116.0/22 maxlen: 22
62.122.104.0/23 maxlen: 23
62.122.106.0/23 maxlen: 23
62.122.108.0/24 maxlen: 24
62.122.109.0/24 maxlen: 24
185.250.30.0/23 maxlen: 23
185.250.28.0/23 maxlen: 23
194.0.244.0/24 maxlen: 24
194.0.245.0/24 maxlen: 24
185.223.188.0/22 maxlen: 22
185.229.84.0/22 maxlen: 22
62.122.4.0/22 maxlen: 22
62.122.0.0/22 maxlen: 22
194.0.188.0/24 maxlen: 24
194.0.189.0/24 maxlen: 24
195.189.48.0/23 maxlen: 23
195.189.51.0/24 maxlen: 24
195.189.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62027289 (0x3b27619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Jan 1 04:53:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cce63948a0c5f3480e3f753d0fd625c3e4678b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:b6:4d:ff:49:7f:73:23:17:de:29:5a:31:
3a:fd:cc:7d:fe:b1:33:38:3b:2f:b2:1d:30:17:53:
87:a3:92:51:26:4e:a6:33:f5:6e:99:60:5c:6e:ef:
d4:1a:df:f9:b0:de:dc:86:05:63:00:4b:5f:55:46:
73:2b:2c:6f:1b:d3:b9:11:8a:91:25:df:37:6f:b0:
a3:17:33:ff:f5:16:e3:f8:1d:c6:97:5d:c4:39:49:
a5:6d:e1:86:d0:04:a0:17:e1:de:d1:f4:e3:bb:ee:
e7:74:9e:6f:f1:e3:cb:01:e1:41:de:51:b0:39:1a:
a1:5a:4a:2d:e7:4a:7c:b7:87:99:34:3a:78:df:7a:
c1:0f:bf:b3:c5:7d:ae:a0:75:1e:bd:16:c6:47:02:
2d:f9:01:3a:e2:3d:f4:fe:f1:e9:58:7e:3c:37:b3:
91:bc:f4:e7:56:c4:af:0e:bc:d2:2c:a7:e5:fc:52:
3b:0a:2e:02:84:f7:ae:a2:08:22:c3:25:b9:88:fe:
e1:d4:a7:a3:3a:2c:c8:10:79:95:1c:59:19:95:8c:
39:ed:01:b3:19:a2:36:b8:cf:d0:37:31:c2:f9:60:
5a:47:f3:91:cf:da:b8:23:78:5f:4d:8f:df:26:4d:
c1:83:f4:a3:04:8c:cd:ab:3b:0b:95:76:13:da:ac:
08:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E6:39:48:A0:C5:F3:48:0E:3F:75:3D:0F:D6:25:C3:E4:67:8B:88
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/zOY5SKDF80gOP3U9D9Ylw-Rni4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.0.0/21
62.122.104.0-62.122.109.255
79.133.184.0/21
79.137.170.0/23
79.137.176.0/22
81.91.180.0-81.91.187.255
81.211.130.0/24
81.211.133.0/24
81.211.150.0/24
81.211.172.0/24
81.211.193.0-81.211.199.255
81.211.201.0-81.211.204.255
81.211.250.0/24
85.193.96.0/19
89.223.112.0/21
91.103.104.0/23
91.234.208.0/23
93.157.176.0/21
95.163.145.0/24
176.64.0.0-176.64.35.255
185.44.84.0/22
185.212.244.0/22
185.223.188.0/22
185.229.84.0/22
185.234.24.0/22
185.234.60.0/22
185.250.28.0/22
188.124.232.0/21
188.124.244.0/22
193.41.130.0/23
194.0.188.0/23
194.0.244.0/23
195.189.48.0/22
212.96.64.0-212.96.88.255
212.96.90.0-212.96.95.255
Signature Algorithm: sha256WithRSAEncryption
80:eb:a8:d6:d1:d4:54:14:a8:1c:8f:5d:19:4c:8d:dd:87:ce:
39:8e:73:83:e4:01:3d:9f:0a:c1:9a:5f:f5:da:c1:fb:19:46:
04:ea:f9:12:62:bf:50:2a:44:d4:04:fc:b7:b4:3e:26:59:6c:
00:ce:98:a2:8c:89:83:2f:8b:60:5c:f0:49:53:6b:1b:b4:b7:
63:d3:d5:b9:e1:12:51:c9:b4:f9:b8:04:29:50:1f:86:55:3a:
1f:c1:fb:fc:35:82:59:68:b8:68:58:23:e3:ef:95:fc:8e:3a:
f6:7e:d3:cf:c6:fc:7f:87:1c:60:67:e3:3b:ec:9f:22:23:5c:
ea:45:ef:02:95:69:4b:5f:9a:4f:a1:a2:69:e7:5d:45:71:62:
91:38:9e:19:8a:30:35:4e:97:80:e1:8f:23:d4:19:05:9d:a4:
cf:13:70:9a:ea:a2:96:16:ca:e8:7d:f2:43:37:d1:ab:d5:70:
48:3b:08:97:6a:b2:dc:06:af:bd:fb:41:3d:11:17:b9:f6:e0:
47:16:2e:e2:db:0c:82:33:8d:53:8d:88:0f:bf:05:30:b4:f2:
d3:07:25:56:3f:1f:60:00:b0:63:4c:6a:bf:03:57:00:90:73:
2f:69:07:44:96:2a:c3:6d:00:2b:01:8d:bf:8e:b0:b7:9f:53:
39:15:ec:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:16 2023 by rpki-client on console-fra.rpki-client.org