Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/spuGMXGNf4IcALMlvSs98MltnR8.roa
File: spuGMXGNf4IcALMlvSs98MltnR8.roa (raw, json)
Hash identifier: vyx0ci1cQ1oLnnfBLJ7RVKzU0RfY2LCTqslQ3pSivEw=
Subject key identifier: B2:9B:86:31:71:8D:7F:82:1C:00:B3:25:BD:2B:3D:F0:C9:6D:9D:1F
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 143E76D9
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/spuGMXGNf4IcALMlvSs98MltnR8.roa
Signing time: Mon 10 Jan 2022 04:32:44 +0000
ROA not before: Mon 10 Jan 2022 04:32:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13335
IP address blocks: 188.114.98.0/24 maxlen: 24
188.114.97.0/24 maxlen: 24
188.114.96.0/24 maxlen: 24
188.114.104.0/24 maxlen: 24
188.114.100.0/24 maxlen: 24
188.114.99.0/24 maxlen: 24
188.114.101.0/24 maxlen: 24
188.114.103.0/24 maxlen: 24
188.114.102.0/24 maxlen: 24
188.114.111.0/24 maxlen: 24
188.114.106.0/23 maxlen: 23
188.114.108.0/24 maxlen: 24
188.114.110.0/24 maxlen: 24
188.114.109.0/24 maxlen: 24
141.101.67.0/24 maxlen: 24
141.101.66.0/24 maxlen: 24
141.101.69.0/24 maxlen: 24
141.101.68.0/24 maxlen: 24
141.101.71.0/24 maxlen: 24
141.101.70.0/24 maxlen: 24
141.101.65.0/24 maxlen: 24
141.101.74.0/24 maxlen: 24
141.101.73.0/24 maxlen: 24
141.101.76.0/23 maxlen: 23
141.101.75.0/24 maxlen: 24
141.101.72.0/24 maxlen: 24
141.101.83.0/24 maxlen: 24
141.101.82.0/24 maxlen: 24
141.101.84.0/24 maxlen: 24
141.101.85.0/24 maxlen: 24
141.101.88.0/22 maxlen: 22
141.101.95.0/24 maxlen: 24
141.101.94.0/24 maxlen: 24
141.101.97.0/24 maxlen: 24
141.101.96.0/24 maxlen: 24
141.101.98.0/24 maxlen: 24
141.101.104.0/24 maxlen: 24
141.101.105.0/24 maxlen: 24
141.101.100.0/22 maxlen: 22
141.101.99.0/24 maxlen: 24
141.101.107.0/24 maxlen: 24
141.101.106.0/24 maxlen: 24
141.101.109.0/24 maxlen: 24
141.101.108.0/24 maxlen: 24
141.101.111.0/24 maxlen: 24
141.101.110.0/24 maxlen: 24
141.101.112.0/23 maxlen: 23
141.101.112.0/20 maxlen: 20
141.101.114.0/23 maxlen: 23
141.101.64.0/24 maxlen: 24
141.101.120.0/22 maxlen: 22
2a06:98c1:310b::/48 maxlen: 48
2a06:98c1:3101::/48 maxlen: 48
2a06:98c1:50::/45 maxlen: 45
2a06:98c1:3108::/48 maxlen: 48
2a06:98c1:310f::/48 maxlen: 48
2a06:98c1:3100::/48 maxlen: 48
2a06:98c1:3107::/48 maxlen: 48
2a06:98c1:310e::/48 maxlen: 48
2a06:98c1:3104::/48 maxlen: 48
2a06:98c1:3106::/48 maxlen: 48
2a06:98c1:3121::/48 maxlen: 48
2a06:98c1:310d::/48 maxlen: 48
2a06:98c1:3103::/48 maxlen: 48
2a06:98c1:54::/48 maxlen: 48
2a06:98c1:310a::/48 maxlen: 48
2a06:98c1:3120::/48 maxlen: 48
2a06:98c1:3105::/48 maxlen: 48
2a06:98c1:310c::/48 maxlen: 48
2a06:98c1:3102::/48 maxlen: 48
2a06:98c1:3109::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339637977 (0x143e76d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Jan 10 04:32:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b29b8631718d7f821c00b325bd2b3df0c96d9d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:e2:8b:71:23:f6:5e:4b:f6:d8:72:32:e1:
42:59:d2:85:a8:aa:cc:b2:47:3f:f6:06:54:a1:e6:
f3:9b:5c:5e:dc:51:e1:57:d7:f2:7e:df:79:b0:06:
d1:cf:39:ac:d0:04:e5:0a:64:ff:c4:e0:72:ec:74:
70:8f:21:bf:7f:73:fd:31:65:df:b2:c9:9e:f2:40:
1d:8d:3c:45:32:38:0b:5b:6e:0b:de:fd:9d:4a:b4:
65:8c:70:bf:73:ec:08:9e:2b:54:33:3d:20:76:f8:
f2:75:17:62:1c:20:13:44:83:60:b2:82:9e:3f:39:
bd:b6:c3:8f:e9:6c:32:82:63:06:c7:b0:b3:ba:d8:
89:67:d7:fa:00:3e:4e:bf:73:6c:49:39:42:34:bb:
80:9b:c9:b8:66:81:e8:b4:c1:39:cf:0e:a8:3a:6e:
9c:71:53:86:17:2e:61:31:33:6f:7a:6c:a2:bf:b8:
db:b6:ab:bd:f8:7b:c9:1a:87:ff:85:b1:46:c2:ef:
b2:5d:d4:03:61:f6:db:14:82:b1:cf:27:56:dd:24:
7f:1e:f5:42:e7:f7:b8:eb:04:85:dd:c8:db:a1:98:
26:d0:64:97:55:12:b1:1d:4c:f7:62:79:5c:74:c2:
ce:4f:c2:55:8f:e1:0c:ea:6d:a4:e4:7a:db:b2:9e:
37:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9B:86:31:71:8D:7F:82:1C:00:B3:25:BD:2B:3D:F0:C9:6D:9D:1F
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/spuGMXGNf4IcALMlvSs98MltnR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0-141.101.77.255
141.101.82.0-141.101.85.255
141.101.88.0/22
141.101.94.0-141.101.127.255
188.114.96.0-188.114.104.255
188.114.106.0-188.114.111.255
IPv6:
2a06:98c1:50::/45
2a06:98c1:3100::/44
2a06:98c1:3120::/47
Signature Algorithm: sha256WithRSAEncryption
3c:a3:58:bc:d9:69:91:d2:e3:f0:9a:8d:b3:16:4d:cb:64:8a:
97:16:20:81:c3:5c:f2:62:20:97:58:1c:73:f9:2b:d5:84:3f:
b7:e4:a8:5f:f9:b5:41:c0:0b:bb:a8:dc:2a:f7:a7:be:0d:a6:
5f:19:9d:a3:1e:53:01:d8:dc:44:47:b9:a3:72:87:27:03:67:
a8:20:bb:4b:85:3a:be:ab:ad:02:5c:b6:44:39:13:94:61:58:
35:08:8b:1f:dd:87:e8:99:88:50:fa:ef:04:9e:39:a4:53:71:
74:fa:ad:bd:31:89:9a:c1:1a:cc:21:0b:f3:97:36:48:bb:40:
93:57:96:0c:23:ae:ee:c0:5c:eb:7e:6c:8b:a7:01:14:a4:68:
18:90:3d:17:9a:0e:d0:f6:bf:0b:f8:9a:1d:cb:02:d7:5b:78:
c2:ac:23:ae:c8:6b:8f:36:5d:ed:0f:16:f5:40:b9:eb:f2:3e:
a1:fa:cd:a8:6d:20:f7:d1:57:83:f9:85:0f:50:d8:99:e4:68:
dc:ed:fa:f5:04:c8:ef:fa:28:0a:9f:ff:ee:fa:f1:35:0f:13:
a1:8c:1d:e0:48:45:7f:6b:3f:eb:80:d9:30:73:b8:48:27:8f:
ad:36:37:60:86:0b:b0:39:03:44:ee:a4:32:15:2f:59:be:14:
26:ba:68:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:49 2024 by rpki-client on console-ams.rpki-client.org