Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/dv3Gr6IC38sAOb8KvKW6QDtnkQY.roa
File: dv3Gr6IC38sAOb8KvKW6QDtnkQY.roa (raw, json)
Hash identifier: mO68CN8nkKueuZc3V2oMYMd9W7teqsQY1frfPNlXbGA=
Subject key identifier: 76:FD:C6:AF:A2:02:DF:CB:00:39:BF:0A:BC:A5:BA:40:3B:67:91:06
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 01847CEAA860787D2901004495379BFBDAC6
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/dv3Gr6IC38sAOb8KvKW6QDtnkQY.roa
Signing time: Tue 15 Nov 2022 20:11:04 +0000
ROA not before: Tue 15 Nov 2022 20:11:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13335
IP address blocks: 188.114.98.0/24 maxlen: 24
188.114.97.0/24 maxlen: 24
188.114.96.0/24 maxlen: 24
188.114.104.0/24 maxlen: 24
188.114.100.0/24 maxlen: 24
188.114.99.0/24 maxlen: 24
188.114.101.0/24 maxlen: 24
188.114.103.0/24 maxlen: 24
188.114.102.0/24 maxlen: 24
188.114.111.0/24 maxlen: 24
188.114.106.0/23 maxlen: 23
188.114.108.0/24 maxlen: 24
188.114.110.0/24 maxlen: 24
188.114.109.0/24 maxlen: 24
141.101.67.0/24 maxlen: 24
141.101.66.0/24 maxlen: 24
141.101.69.0/24 maxlen: 24
141.101.68.0/24 maxlen: 24
141.101.71.0/24 maxlen: 24
141.101.70.0/24 maxlen: 24
141.101.65.0/24 maxlen: 24
141.101.74.0/24 maxlen: 24
141.101.73.0/24 maxlen: 24
141.101.76.0/23 maxlen: 23
141.101.75.0/24 maxlen: 24
141.101.72.0/24 maxlen: 24
141.101.83.0/24 maxlen: 24
141.101.82.0/24 maxlen: 24
141.101.84.0/24 maxlen: 24
141.101.85.0/24 maxlen: 24
141.101.88.0/22 maxlen: 22
141.101.87.0/24 maxlen: 24
141.101.90.0/24 maxlen: 24
141.101.86.0/24 maxlen: 24
141.101.95.0/24 maxlen: 24
141.101.94.0/24 maxlen: 24
141.101.97.0/24 maxlen: 24
141.101.96.0/24 maxlen: 24
141.101.98.0/24 maxlen: 24
141.101.92.0/24 maxlen: 24
141.101.104.0/24 maxlen: 24
141.101.105.0/24 maxlen: 24
141.101.100.0/22 maxlen: 22
141.101.99.0/24 maxlen: 24
141.101.109.0/24 maxlen: 24
141.101.108.0/24 maxlen: 24
141.101.111.0/24 maxlen: 24
141.101.110.0/24 maxlen: 24
141.101.112.0/23 maxlen: 23
141.101.107.0/24 maxlen: 24
141.101.106.0/24 maxlen: 24
141.101.112.0/20 maxlen: 20
141.101.114.0/23 maxlen: 23
141.101.64.0/24 maxlen: 24
141.101.120.0/22 maxlen: 22
2a06:98c0:1c04::/48 maxlen: 48
2a06:98c1:310b::/48 maxlen: 48
2a06:98c1:3101::/48 maxlen: 48
2a06:98c1:50::/45 maxlen: 45
2a06:98c0:1c0e::/48 maxlen: 48
2a06:98c1:3108::/48 maxlen: 48
2a06:98c1:3123::/48 maxlen: 48
2a06:98c1:310f::/48 maxlen: 48
2a06:98c0:1c01::/48 maxlen: 48
2a06:98c1:3200::/48 maxlen: 48
2a06:98c1:3100::/48 maxlen: 48
2a06:98c0:1c05::/48 maxlen: 48
2a06:98c0:1c08::/48 maxlen: 48
2a06:98c1:3122::/48 maxlen: 48
2a06:98c1:3107::/48 maxlen: 48
2a06:98c1:58::/48 maxlen: 48
2a06:98c0:1c0c::/48 maxlen: 48
2a06:98c1:310e::/48 maxlen: 48
2a06:98c0:1c02::/48 maxlen: 48
2a06:98c1:3104::/48 maxlen: 48
2a06:98c1:3106::/48 maxlen: 48
2a06:98c1:3121::/48 maxlen: 48
2a06:98c0:1c09::/48 maxlen: 48
2a06:98c1:310d::/48 maxlen: 48
2a06:98c1:3103::/48 maxlen: 48
2a06:98c0:1c0d::/48 maxlen: 48
2a06:98c1:54::/48 maxlen: 48
2a06:98c1:310a::/48 maxlen: 48
2a06:98c0:1c06::/48 maxlen: 48
2a06:98c1:3120::/48 maxlen: 48
2a06:98c1:3105::/48 maxlen: 48
2a06:98c0:1c0a::/48 maxlen: 48
2a06:98c1:310c::/48 maxlen: 48
2a06:98c0:1c03::/48 maxlen: 48
2a06:98c1:3102::/48 maxlen: 48
2a06:98c0:1c07::/48 maxlen: 48
2a06:98c0:1c00::/48 maxlen: 48
2a06:98c1:3109::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7c:ea:a8:60:78:7d:29:01:00:44:95:37:9b:fb:da:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Nov 15 20:11:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76fdc6afa202dfcb0039bf0abca5ba403b679106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:21:4d:0e:77:71:45:be:ed:01:07:cb:55:
d8:ab:c2:1d:a3:31:ef:ff:6d:ce:08:05:bf:ad:00:
c3:11:30:b4:af:3b:48:ca:4b:ca:ec:26:06:bc:d7:
42:72:a8:cf:27:b2:f4:75:af:45:cd:7a:bf:43:0b:
0e:64:8a:39:16:4c:08:cc:1b:b3:f3:3e:ac:84:36:
0e:f4:5f:8f:f2:a2:fe:33:26:46:d2:4f:5d:28:26:
44:51:8a:52:6d:14:f7:4c:69:ac:a2:3d:c0:1f:ff:
1a:bd:72:7f:ee:6e:dd:5c:6e:cc:82:ce:11:70:ab:
19:02:a0:80:79:a5:29:d8:8f:2e:6c:3b:05:3e:d5:
dd:1b:59:ac:76:cd:c6:88:75:bd:8e:59:55:21:f4:
50:1e:8c:34:8e:b1:4f:85:d0:d8:26:d1:8a:95:c6:
bc:32:c8:ee:09:e0:f8:7b:bb:1a:d0:ce:10:a4:db:
59:19:49:b5:c8:0f:65:9a:8b:0b:77:27:47:1c:c9:
98:b2:4e:d9:5a:0a:9b:b0:bd:33:94:7c:a1:41:e3:
98:dc:16:8b:0b:39:d5:28:08:8e:61:99:a5:a0:ba:
ae:ad:90:a7:e3:22:11:07:36:9a:e7:b4:fa:40:25:
88:ac:a4:81:63:f1:63:aa:82:18:3c:e4:95:56:66:
42:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FD:C6:AF:A2:02:DF:CB:00:39:BF:0A:BC:A5:BA:40:3B:67:91:06
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/dv3Gr6IC38sAOb8KvKW6QDtnkQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0-141.101.77.255
141.101.82.0-141.101.92.255
141.101.94.0-141.101.127.255
188.114.96.0-188.114.104.255
188.114.106.0-188.114.111.255
IPv6:
2a06:98c0:1c00::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c0c::-2a06:98c0:1c0e:ffff:ffff:ffff:ffff:ffff
2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
2a06:98c1:3100::/44
2a06:98c1:3120::/46
2a06:98c1:3200::/48
Signature Algorithm: sha256WithRSAEncryption
3b:4f:13:23:bf:0e:e3:90:3d:df:46:68:cd:42:f7:fb:eb:9e:
54:10:e3:9e:a0:89:69:95:7a:a9:09:ad:55:b5:bc:4f:e3:1d:
b4:c4:45:4b:89:79:7d:1f:a5:64:da:23:02:86:31:69:e3:4d:
83:b2:ef:ae:c2:57:e9:8d:b0:3c:d5:59:18:a7:85:38:f6:a0:
2c:84:d6:78:f2:04:7e:89:3c:e3:26:a9:7a:27:5b:b8:1a:8b:
8c:8f:3b:4e:43:36:b6:1b:44:ca:b4:8f:b0:d4:73:ba:0f:f2:
23:c6:62:99:96:c9:48:b8:e9:c7:ba:fd:37:03:bf:77:95:5e:
44:e1:72:0b:ab:f2:12:db:46:9b:1b:77:f6:a7:48:42:be:b1:
33:12:de:76:9f:8a:c7:2e:ab:d1:4e:d5:8e:c0:ad:0f:e1:88:
ec:53:1c:bc:54:48:93:3f:f6:a7:57:e4:1f:93:b8:01:9e:dc:
ed:91:00:4f:ee:13:20:7c:63:fe:3f:29:57:43:08:a3:57:92:
bb:e1:c7:49:f1:1b:48:4f:76:5a:91:cf:3b:0d:59:26:f2:e5:
57:e9:68:88:84:b4:2d:02:82:2b:bf:34:0c:0c:5b:b1:c3:f1:
b6:50:4f:36:e1:66:27:d1:22:7d:19:ff:c3:c2:3a:1d:37:6d:
77:41:bc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:15 2024 by rpki-client on console-fra.rpki-client.org