Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/wqzJ7i8X6ccaMvhdLQe2JsE-jG4.roa
File: wqzJ7i8X6ccaMvhdLQe2JsE-jG4.roa (raw, json)
Hash identifier: itYelTKPQ0KgU6i6OYdxWHnpkd6UUD4ULpZqsB4tZPw=
Subject key identifier: C2:AC:C9:EE:2F:17:E9:C7:1A:32:F8:5D:2D:07:B6:26:C1:3E:8C:6E
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 051239F9
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/wqzJ7i8X6ccaMvhdLQe2JsE-jG4.roa
Signing time: Tue 17 May 2022 14:45:29 +0000
ROA not before: Tue 17 May 2022 14:45:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199552
IP address blocks: 37.35.55.0/24 maxlen: 24
146.66.219.0/24 maxlen: 24
146.66.218.0/24 maxlen: 24
178.157.92.0/24 maxlen: 24
178.157.108.0/24 maxlen: 24
178.157.111.0/24 maxlen: 24
178.157.110.0/24 maxlen: 24
188.74.128.0/24 maxlen: 24
188.119.144.0/22 maxlen: 22
5.157.240.0/21 maxlen: 21
91.235.123.0/24 maxlen: 24
188.74.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85080569 (0x51239f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: May 17 14:45:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2acc9ee2f17e9c71a32f85d2d07b626c13e8c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d9:98:89:82:7f:d3:e2:f1:d7:a0:6f:60:28:
bd:89:4a:01:38:ec:31:ec:69:c7:2c:68:62:38:86:
0e:dc:c5:a4:b8:85:34:c9:1d:e3:d8:22:4c:4c:62:
65:8b:f5:df:b6:1b:e4:f7:de:43:21:13:ef:dc:36:
bf:26:66:a9:84:85:22:a3:6d:38:7a:a5:53:05:bf:
99:8e:eb:c2:61:6c:17:76:48:33:97:f3:1a:9d:e9:
db:56:28:25:de:24:49:57:da:30:d0:fb:de:79:19:
ca:cc:47:5f:49:a1:f2:33:13:b1:61:9d:a8:3b:8d:
5b:b7:70:ab:34:82:6a:20:64:4a:35:92:aa:4a:71:
0a:04:d1:c5:83:cf:40:2a:94:87:b2:31:c9:38:60:
81:6f:b1:88:33:25:b1:28:05:21:4d:f7:9f:42:da:
0e:26:96:67:76:b2:50:01:3e:5b:78:d9:b6:70:4c:
f8:b0:24:0e:e0:64:72:fd:cd:36:25:cd:2c:40:6e:
96:1d:83:24:f0:97:38:46:df:da:1e:ab:6e:91:ca:
fa:62:4c:27:be:ff:13:76:b6:67:3e:8a:cc:59:57:
80:a7:eb:4a:b3:0c:65:b6:2a:73:b4:93:b6:1e:ae:
a1:52:80:d7:10:70:eb:8d:95:75:ac:1a:f0:b2:43:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AC:C9:EE:2F:17:E9:C7:1A:32:F8:5D:2D:07:B6:26:C1:3E:8C:6E
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/wqzJ7i8X6ccaMvhdLQe2JsE-jG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.240.0/21
37.35.55.0/24
91.235.123.0/24
146.66.218.0/23
178.157.92.0/24
178.157.108.0/24
178.157.110.0/23
188.74.128.0/24
188.74.171.0/24
188.119.144.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:93:c7:b1:c9:48:8b:f7:ec:23:c7:38:65:d5:ef:08:c8:f0:
40:85:75:08:6e:67:77:88:9d:0b:0c:f5:34:93:a5:97:d8:18:
d0:2a:bf:66:3c:e4:2f:9a:d8:d6:1a:fc:5a:12:04:67:ab:4d:
47:0c:cb:9a:77:1a:f8:ab:bc:69:3a:bb:e9:b8:03:b4:27:1d:
c8:f4:d6:da:74:ce:c1:b9:14:35:9d:d5:70:95:24:51:a4:5d:
b7:fb:c7:82:c8:65:48:7b:e4:27:93:96:04:d6:19:c5:1f:67:
14:a6:81:03:bd:e6:47:76:7c:d4:63:ee:07:b2:eb:fd:3d:59:
1d:7e:bf:3c:c5:c1:55:69:4c:07:d7:f5:ea:c5:3b:43:eb:d6:
61:dc:3e:e1:54:80:6d:f8:cb:12:0f:46:5e:b0:95:ac:a7:32:
e4:6b:10:55:99:f2:07:85:98:95:f4:da:5a:86:41:a4:9b:0e:
2d:22:f5:95:1a:59:9a:b0:e8:e2:cc:68:37:ea:ba:0e:11:ff:
11:35:7b:14:13:bf:cf:25:9c:00:27:5e:63:01:50:61:31:fe:
d7:cf:99:c4:e4:92:14:da:11:aa:e9:2a:12:06:0b:57:8e:57:
90:97:a0:21:d7:21:09:f8:3f:59:70:7f:ab:d7:1f:8f:1f:ba:
19:39:24:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:25 2023 by rpki-client on console-fra.rpki-client.org