Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/FnRu9AvvWccnMQesUzXsGz2OqV8.roa
File: FnRu9AvvWccnMQesUzXsGz2OqV8.roa (raw, json)
Hash identifier: 2CWWNwkQym2cCd9liyclxNb/dFZjC2rJ9hXzlgbCCWo=
Subject key identifier: 16:74:6E:F4:0B:EF:59:C7:27:31:07:AC:53:35:EC:1B:3D:8E:A9:5F
Certificate issuer: /CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Certificate serial: 0B3D181B
Authority key identifier: E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/FnRu9AvvWccnMQesUzXsGz2OqV8.roa
Signing time: Sat 01 Jan 2022 00:54:24 +0000
ROA not before: Sat 01 Jan 2022 00:54:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202596
IP address blocks: 185.225.44.0/22 maxlen: 22
193.39.240.0/22 maxlen: 22
160.19.180.0/22 maxlen: 22
185.14.88.0/22 maxlen: 22
185.236.184.0/22 maxlen: 22
45.139.12.0/22 maxlen: 22
185.159.76.0/22 maxlen: 22
185.176.160.0/22 maxlen: 22
185.250.188.0/22 maxlen: 22
176.97.152.0/22 maxlen: 22
185.239.32.0/22 maxlen: 22
185.240.108.0/22 maxlen: 22
95.141.16.0/20 maxlen: 20
45.95.156.0/22 maxlen: 22
45.152.232.0/22 maxlen: 22
185.254.136.0/22 maxlen: 22
194.6.251.0/24 maxlen: 24
194.6.252.0/24 maxlen: 24
194.6.254.0/24 maxlen: 24
45.145.48.0/22 maxlen: 22
185.222.80.0/22 maxlen: 22
185.247.172.0/22 maxlen: 22
185.111.72.0/22 maxlen: 22
45.134.228.0/22 maxlen: 22
185.106.72.0/22 maxlen: 22
185.248.104.0/22 maxlen: 22
185.226.36.0/22 maxlen: 22
193.29.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188553243 (0xb3d181b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Validity
Not Before: Jan 1 00:54:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16746ef40bef59c7273107ac5335ec1b3d8ea95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:8d:b5:09:23:60:07:d1:02:b2:43:81:ea:
a2:75:2c:31:76:70:f8:c5:89:d9:6e:56:78:12:e4:
ec:a8:0f:e3:2e:82:7a:0f:50:c1:45:b8:33:ec:2e:
fd:17:c8:47:b6:35:5f:9d:be:56:62:9b:2a:cb:c1:
eb:83:5d:4c:a2:41:21:a5:14:b5:59:de:19:7e:4a:
ee:f2:99:cc:12:34:02:f9:89:63:9f:46:9e:30:31:
96:70:9d:aa:bd:24:0b:94:1d:09:65:00:18:fa:6c:
ba:70:47:82:6f:a9:d5:93:d3:f7:53:1c:6b:ef:f4:
e3:4f:0d:6f:99:45:05:2a:49:f3:df:60:43:a3:9d:
29:8e:cc:ad:39:68:4a:59:d9:84:ac:cc:bf:4d:39:
3e:78:68:b0:cc:63:9d:4c:66:ce:09:37:cd:06:64:
84:dd:c8:a0:98:60:f2:ca:47:90:46:1d:07:2b:22:
44:f1:06:89:d8:1f:b4:7e:73:1e:ce:1a:02:e0:33:
ed:06:26:1d:fe:98:01:d4:01:47:2f:4b:ae:52:fd:
07:ab:88:46:0e:0d:7b:df:d5:54:88:9a:24:7b:bb:
16:06:f5:07:98:46:c2:3c:78:f6:01:9d:09:59:2f:
e3:32:16:86:8c:2d:8d:0d:bc:31:44:c7:a7:39:6c:
85:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:74:6E:F4:0B:EF:59:C7:27:31:07:AC:53:35:EC:1B:3D:8E:A9:5F
X509v3 Authority Key Identifier:
keyid:E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/FnRu9AvvWccnMQesUzXsGz2OqV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.156.0/22
45.134.228.0/22
45.139.12.0/22
45.145.48.0/22
45.152.232.0/22
95.141.16.0/20
160.19.180.0/22
176.97.152.0/22
185.14.88.0/22
185.106.72.0/22
185.111.72.0/22
185.159.76.0/22
185.176.160.0/22
185.222.80.0/22
185.225.44.0/22
185.226.36.0/22
185.236.184.0/22
185.239.32.0/22
185.240.108.0/22
185.247.172.0/22
185.248.104.0/22
185.250.188.0/22
185.254.136.0/22
193.29.28.0/22
193.39.240.0/22
194.6.251.0-194.6.252.255
194.6.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:cb:35:b1:18:9b:53:71:91:07:62:44:71:91:7c:3b:35:fe:
e8:0f:b8:76:65:e9:f2:55:60:20:e7:11:20:d3:18:c0:86:60:
d8:6d:27:79:18:8a:9b:4b:6a:53:3d:80:2e:55:53:59:52:32:
45:06:0d:cf:2a:ed:4b:2c:cd:f5:4c:4c:05:a6:c8:ca:63:95:
14:d8:ca:5b:82:e5:4c:72:fb:03:46:2f:8b:14:0c:a0:f1:17:
16:41:46:6c:bc:f3:4c:33:51:34:21:98:0c:e7:89:4d:43:19:
18:ce:54:35:42:92:93:6f:3c:3c:68:d9:a5:d6:a5:60:8a:14:
99:dc:d9:76:1d:c6:7d:0d:e2:8d:98:55:b9:43:9d:2d:27:3f:
5c:69:91:c3:87:4a:03:42:49:90:99:51:cb:84:c8:a6:15:63:
71:46:20:ae:2c:bf:47:09:14:d0:72:ea:64:81:d9:0d:88:eb:
9a:4b:03:f4:2f:4f:c7:f8:d2:4d:ab:f2:02:cf:fe:9f:70:c3:
6f:87:95:d6:37:5c:d6:ce:95:af:8e:70:66:59:9b:bc:89:aa:
99:ba:2c:a4:90:b8:fa:b9:07:70:25:35:5e:9c:30:cf:ce:20:
96:e1:15:2e:6e:39:03:de:0d:e3:29:0e:69:7a:8f:e0:5a:b2:
73:cd:36:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:58 2024 by rpki-client on console-fra.rpki-client.org