Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/DzOVeiqOBaFVplxILQmfOxatOE8.roa
File: DzOVeiqOBaFVplxILQmfOxatOE8.roa (raw, json)
Hash identifier: lGZVaujO7xvefonsweVMAfrRhAP2j0wKZPjbmUFSZDA=
Subject key identifier: 0F:33:95:7A:2A:8E:05:A1:55:A6:5C:48:2D:09:9F:3B:16:AD:38:4F
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1B5B1B9E
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/DzOVeiqOBaFVplxILQmfOxatOE8.roa
Signing time: Sat 01 Jan 2022 10:02:30 +0000
ROA not before: Sat 01 Jan 2022 10:02:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15545
IP address blocks: 195.228.135.0/24 maxlen: 24
80.249.160.0/22 maxlen: 22
80.249.165.0/24 maxlen: 24
46.107.224.0/24 maxlen: 24
188.36.230.0/23 maxlen: 23
195.228.245.0/24 maxlen: 24
80.249.174.0/23 maxlen: 23
80.249.174.0/24 maxlen: 24
84.2.37.0/24 maxlen: 24
84.2.32.0/23 maxlen: 23
84.2.34.0/23 maxlen: 23
84.2.36.0/23 maxlen: 23
84.2.39.0/24 maxlen: 24
84.2.38.0/23 maxlen: 23
84.2.42.0/23 maxlen: 23
194.38.104.0/22 maxlen: 22
84.2.46.0/23 maxlen: 23
31.46.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458955678 (0x1b5b1b9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 10:02:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f33957a2a8e05a155a65c482d099f3b16ad384f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:0e:50:cb:06:19:ae:e0:f1:f1:4b:94:66:
36:e0:0a:a9:c9:6e:2a:4f:74:3d:c0:ed:d4:cb:15:
d8:60:d4:66:9e:38:15:de:b9:a0:96:55:9f:98:2c:
82:c8:ee:b7:39:d3:a2:a4:77:58:2e:43:28:9b:27:
54:30:f9:fc:a6:67:5d:62:6c:ed:57:92:4e:33:2f:
c2:64:55:b7:f4:5b:86:9b:cf:d5:08:19:ab:f3:cf:
1a:30:4c:9d:9b:52:73:8f:34:f7:65:3d:1f:03:98:
3b:f0:f2:20:ea:07:9e:a1:5b:6b:09:9b:4e:c6:79:
8f:37:a2:ac:8c:bd:68:a8:1b:ed:93:3a:90:b5:33:
2f:a7:88:36:95:1c:76:a1:55:dc:78:94:27:f6:27:
52:ef:53:16:5b:9c:b7:7b:3c:e1:7e:99:01:ab:56:
2a:76:60:12:41:c6:8a:3f:d8:c0:05:7d:6e:b6:9a:
18:5d:01:66:57:0b:e0:a4:5d:58:e7:7d:fd:dd:ab:
cd:e6:6d:87:cd:00:64:34:e7:02:b3:89:60:f4:57:
77:1d:70:c4:5d:1f:85:ea:d2:d0:b3:2f:27:5b:ee:
12:37:83:e5:ea:01:5e:e8:f3:3c:2a:3d:d3:07:98:
89:75:b9:30:13:78:ba:10:7a:e3:16:d2:fe:b9:0d:
6b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:33:95:7A:2A:8E:05:A1:55:A6:5C:48:2D:09:9F:3B:16:AD:38:4F
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/DzOVeiqOBaFVplxILQmfOxatOE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.46.22.0/24
46.107.224.0/24
80.249.160.0/22
80.249.165.0/24
80.249.174.0/23
84.2.32.0/21
84.2.42.0/23
84.2.46.0/23
188.36.230.0/23
194.38.104.0/22
195.228.135.0/24
195.228.245.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ea:5f:2d:f6:54:ad:e3:a7:e9:d9:a8:90:79:06:dc:c7:23:
52:49:b3:21:d6:32:18:8f:d7:1b:4b:24:a3:60:23:5e:d0:15:
c8:ec:81:43:51:75:f4:7d:40:4d:6a:3d:27:5a:be:a8:05:2f:
8c:18:46:89:d8:69:a7:7c:7a:50:e2:b3:3f:ba:67:9d:7c:76:
f4:4f:ec:dd:90:8c:19:f9:76:15:ce:aa:d1:a1:5c:cf:b4:ee:
dd:77:99:27:27:3b:18:e3:20:95:66:82:83:5d:83:b2:43:02:
c2:31:e3:d3:92:2d:ec:96:aa:bc:5c:48:ef:b0:76:dc:10:65:
15:b3:67:f8:11:0f:19:98:19:16:93:96:1a:d4:85:a3:8f:ec:
6a:ef:e1:0c:bb:df:43:f7:39:da:d5:42:a6:b5:6f:a9:b8:aa:
5a:eb:8a:bd:26:5f:18:a3:64:95:57:37:4c:6d:76:eb:e1:78:
73:1c:b2:40:7b:51:a4:d3:91:9b:d1:3c:2f:38:61:eb:d5:4a:
c1:23:6b:84:85:77:46:52:39:91:cc:fc:66:b0:61:18:56:d4:
45:24:0a:1e:fc:9f:1d:5d:d7:a6:73:df:6c:3b:19:42:a7:af:
84:8f:d2:36:8a:e4:53:b9:88:60:d0:d2:bc:f9:39:aa:61:22:
9b:96:e0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:47 2024 by rpki-client on console-fra.rpki-client.org