Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/u7NlA5SNoQFTpuNoyGAHG7r8ssk.roa
File: u7NlA5SNoQFTpuNoyGAHG7r8ssk.roa (raw, json)
Hash identifier: WRqlK2LG8Fl0bZ3WjsopOJBTKzuDL3tSJ9/wkVf3WVI=
Subject key identifier: BB:B3:65:03:94:8D:A1:01:53:A6:E3:68:C8:60:07:1B:BA:FC:B2:C9
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 0181D016DEED5AED87F02E3C25E997D93E59
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/u7NlA5SNoQFTpuNoyGAHG7r8ssk.roa
Signing time: Tue 05 Jul 2022 20:39:28 +0000
ROA not before: Tue 05 Jul 2022 20:39:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13335
IP address blocks: 188.114.98.0/24 maxlen: 24
188.114.97.0/24 maxlen: 24
188.114.96.0/24 maxlen: 24
188.114.104.0/24 maxlen: 24
188.114.100.0/24 maxlen: 24
188.114.99.0/24 maxlen: 24
188.114.101.0/24 maxlen: 24
188.114.103.0/24 maxlen: 24
188.114.102.0/24 maxlen: 24
188.114.111.0/24 maxlen: 24
188.114.106.0/23 maxlen: 23
188.114.108.0/24 maxlen: 24
188.114.110.0/24 maxlen: 24
188.114.109.0/24 maxlen: 24
141.101.67.0/24 maxlen: 24
141.101.66.0/24 maxlen: 24
141.101.69.0/24 maxlen: 24
141.101.68.0/24 maxlen: 24
141.101.71.0/24 maxlen: 24
141.101.70.0/24 maxlen: 24
141.101.65.0/24 maxlen: 24
141.101.74.0/24 maxlen: 24
141.101.73.0/24 maxlen: 24
141.101.76.0/23 maxlen: 23
141.101.75.0/24 maxlen: 24
141.101.72.0/24 maxlen: 24
141.101.83.0/24 maxlen: 24
141.101.82.0/24 maxlen: 24
141.101.84.0/24 maxlen: 24
141.101.85.0/24 maxlen: 24
141.101.88.0/22 maxlen: 22
141.101.90.0/24 maxlen: 24
141.101.95.0/24 maxlen: 24
141.101.94.0/24 maxlen: 24
141.101.97.0/24 maxlen: 24
141.101.96.0/24 maxlen: 24
141.101.98.0/24 maxlen: 24
141.101.104.0/24 maxlen: 24
141.101.105.0/24 maxlen: 24
141.101.100.0/22 maxlen: 22
141.101.99.0/24 maxlen: 24
141.101.109.0/24 maxlen: 24
141.101.108.0/24 maxlen: 24
141.101.111.0/24 maxlen: 24
141.101.110.0/24 maxlen: 24
141.101.112.0/23 maxlen: 23
141.101.107.0/24 maxlen: 24
141.101.106.0/24 maxlen: 24
141.101.112.0/20 maxlen: 20
141.101.114.0/23 maxlen: 23
141.101.64.0/24 maxlen: 24
141.101.120.0/22 maxlen: 22
2a06:98c0:1c04::/48 maxlen: 48
2a06:98c1:310b::/48 maxlen: 48
2a06:98c1:3101::/48 maxlen: 48
2a06:98c1:50::/45 maxlen: 45
2a06:98c1:3108::/48 maxlen: 48
2a06:98c1:3123::/48 maxlen: 48
2a06:98c1:310f::/48 maxlen: 48
2a06:98c0:1c01::/48 maxlen: 48
2a06:98c1:3200::/48 maxlen: 48
2a06:98c1:3100::/48 maxlen: 48
2a06:98c0:1c05::/48 maxlen: 48
2a06:98c0:1c08::/48 maxlen: 48
2a06:98c1:3122::/48 maxlen: 48
2a06:98c1:3107::/48 maxlen: 48
2a06:98c1:310e::/48 maxlen: 48
2a06:98c0:1c02::/48 maxlen: 48
2a06:98c1:3104::/48 maxlen: 48
2a06:98c1:3106::/48 maxlen: 48
2a06:98c1:3121::/48 maxlen: 48
2a06:98c0:1c09::/48 maxlen: 48
2a06:98c1:310d::/48 maxlen: 48
2a06:98c1:3103::/48 maxlen: 48
2a06:98c1:54::/48 maxlen: 48
2a06:98c1:310a::/48 maxlen: 48
2a06:98c0:1c06::/48 maxlen: 48
2a06:98c1:3120::/48 maxlen: 48
2a06:98c1:3105::/48 maxlen: 48
2a06:98c0:1c0a::/48 maxlen: 48
2a06:98c1:310c::/48 maxlen: 48
2a06:98c0:1c03::/48 maxlen: 48
2a06:98c1:3102::/48 maxlen: 48
2a06:98c0:1c07::/48 maxlen: 48
2a06:98c0:1c00::/48 maxlen: 48
2a06:98c1:3109::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d0:16:de:ed:5a:ed:87:f0:2e:3c:25:e9:97:d9:3e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Jul 5 20:39:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbb36503948da10153a6e368c860071bbafcb2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:97:ac:15:f5:bd:79:9e:7f:25:83:10:be:
b4:55:d9:c4:5f:84:2e:c5:96:de:81:89:b7:52:36:
0e:af:87:91:81:73:5f:00:e0:1f:b1:5d:fd:06:ae:
63:f5:b1:c6:44:24:6d:f3:62:c0:ef:a5:a0:16:94:
e9:f9:68:9d:18:7e:0c:11:77:d8:1a:4c:dc:c5:3c:
93:5f:c6:b0:6b:98:45:a4:94:38:24:35:1b:90:4e:
83:50:3c:82:0d:63:b4:5b:00:7a:de:d5:ef:89:f9:
08:d7:a7:bb:81:32:b6:26:d9:30:dd:3c:33:92:6d:
52:5b:88:22:9e:ea:8a:45:fb:88:02:ad:9a:1e:26:
57:71:7b:a5:c5:93:e6:52:ea:15:78:e0:72:05:38:
47:de:8a:47:b4:02:f5:f1:9c:64:51:fb:ec:06:2c:
4d:31:08:c8:b7:c3:83:4a:f6:29:fa:ed:26:81:b5:
7d:4b:8f:8e:bc:95:87:6f:29:da:82:39:0c:33:07:
8b:7c:85:ad:1e:55:96:6c:5c:31:ee:76:4c:2a:71:
38:52:53:b1:d4:f6:92:7f:9e:9f:a8:42:74:5e:63:
c2:e2:d2:05:23:12:12:f5:3b:85:d6:b0:f6:88:19:
16:b0:1f:9f:37:aa:59:10:f3:70:36:15:ef:ad:49:
d9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B3:65:03:94:8D:A1:01:53:A6:E3:68:C8:60:07:1B:BA:FC:B2:C9
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/u7NlA5SNoQFTpuNoyGAHG7r8ssk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0-141.101.77.255
141.101.82.0-141.101.85.255
141.101.88.0/22
141.101.94.0-141.101.127.255
188.114.96.0-188.114.104.255
188.114.106.0-188.114.111.255
IPv6:
2a06:98c0:1c00::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
2a06:98c1:50::/45
2a06:98c1:3100::/44
2a06:98c1:3120::/46
2a06:98c1:3200::/48
Signature Algorithm: sha256WithRSAEncryption
6e:85:89:c0:a7:08:fc:65:ca:9c:78:7f:f5:1a:0a:43:30:9e:
e4:a1:63:1d:4a:e8:f6:c1:99:ac:aa:4e:73:25:94:1a:c5:55:
7e:69:92:87:7f:73:08:b9:1a:23:ec:99:90:30:3d:79:b5:45:
de:4c:f6:db:1d:41:e4:3c:22:23:c7:53:b6:8e:b7:38:8d:fb:
43:ba:6f:06:89:84:6b:5b:63:ec:c0:a4:61:0a:89:39:de:7e:
05:8e:8f:0f:19:52:df:2f:68:a9:74:b7:9b:1b:04:22:5c:1c:
a9:03:55:5c:10:c4:a4:b2:d5:06:c6:3f:56:2a:e4:dc:60:b0:
03:63:f7:f1:9d:65:ce:fc:7e:6d:e8:fd:7a:0a:4d:d6:a1:c4:
b8:c2:ea:16:19:3c:c9:af:a1:e5:96:dc:a8:b1:2d:f4:b5:86:
9a:bd:b6:20:4d:70:59:31:22:f7:26:40:65:39:ec:29:3a:68:
f6:df:65:13:7b:4c:a7:a0:27:7a:71:f6:ea:7c:55:27:d6:71:
5b:0f:e6:ac:bd:2f:25:5c:c7:7a:b3:1e:7f:c8:c9:33:68:43:
ec:98:ca:73:6e:ad:7f:67:21:0b:1f:9f:ec:ba:8a:e3:7f:4a:
04:7f:7f:13:87:60:a0:cb:3c:7c:e3:8d:20:d7:7c:7c:21:51:
29:3d:46:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:15 2024 by rpki-client on console-fra.rpki-client.org