Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/2eDvcEcRU2gIFLtCbXfNxgtTM1Q.roa
File: 2eDvcEcRU2gIFLtCbXfNxgtTM1Q.roa (raw, json)
Hash identifier: ocj5xyWRblvuIhFxD6Uv5pM7cAfDno7v2x0A9b3qFTE=
Subject key identifier: D9:E0:EF:70:47:11:53:68:08:14:BB:42:6D:77:CD:C6:0B:53:33:54
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0184234147B94648CB1B69AF70B62C2BA68F
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/2eDvcEcRU2gIFLtCbXfNxgtTM1Q.roa
Signing time: Sat 29 Oct 2022 10:19:51 +0000
ROA not before: Sat 29 Oct 2022 10:19:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59504
IP address blocks: 194.113.104.114/32 maxlen: 32
95.215.110.0/23 maxlen: 23
95.215.108.0/23 maxlen: 23
45.151.136.0/24 maxlen: 24
185.197.73.0/24 maxlen: 24
185.197.72.0/24 maxlen: 24
80.76.40.0/24 maxlen: 24
185.156.179.0/24 maxlen: 24
185.156.178.0/24 maxlen: 24
185.156.178.0/23 maxlen: 23
185.156.177.0/24 maxlen: 24
185.156.176.0/24 maxlen: 24
185.156.176.0/22 maxlen: 22
193.38.232.0/23 maxlen: 23
193.38.234.0/24 maxlen: 24
185.254.190.0/24 maxlen: 24
185.254.189.0/24 maxlen: 24
185.254.188.0/24 maxlen: 24
194.113.104.0/24 maxlen: 24
194.113.107.0/24 maxlen: 24
185.177.115.0/24 maxlen: 24
185.177.113.0/24 maxlen: 24
185.220.35.0/24 maxlen: 24
185.220.34.0/24 maxlen: 24
185.220.33.0/24 maxlen: 24
185.220.32.0/24 maxlen: 24
185.230.142.0/24 maxlen: 24
185.230.140.0/23 maxlen: 23
45.142.208.0/24 maxlen: 24
84.54.37.0/24 maxlen: 24
84.54.39.0/24 maxlen: 24
185.118.64.0/24 maxlen: 24
185.118.64.0/22 maxlen: 22
185.118.66.0/24 maxlen: 24
185.118.66.0/23 maxlen: 23
185.118.65.0/24 maxlen: 24
185.246.117.0/24 maxlen: 24
185.246.116.0/24 maxlen: 24
185.246.119.0/24 maxlen: 24
2a05:fb41::/32 maxlen: 32
2a07:14c0:1::/48 maxlen: 48
2a0d:60c1::/32 maxlen: 32
2a0a:4782::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a0d:7747::/32 maxlen: 32
2a05:fb42::/32 maxlen: 32
2a0a:4780::/32 maxlen: 32
2a0d:60c3::/32 maxlen: 32
2a07:14c1::/32 maxlen: 32
2a0d:60c0::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a07:14c7::/32 maxlen: 32
2a05:fb44::/32 maxlen: 32
2a07:14c6::/32 maxlen: 32
2a07:14c0:3000::/36 maxlen: 36
2a07:14c0:4000::/36 maxlen: 36
2a07:14c0:5000::/36 maxlen: 36
2a07:14c0:1000::/36 maxlen: 36
2a07:14c0:6000::/36 maxlen: 36
2a07:14c0:d000::/36 maxlen: 36
2a0c:5241::/32 maxlen: 32
2a0d:7740::/32 maxlen: 32
2a0c:5247:f000::/36 maxlen: 36
2a0c:5247:e000::/36 maxlen: 36
2a0c:5247:d000::/36 maxlen: 36
2a0c:5247:c000::/36 maxlen: 36
2a0c:5247:7000::/36 maxlen: 36
2a0c:5245::/32 maxlen: 32
2a0a:4785::/32 maxlen: 32
2a07:14c0::/48 maxlen: 48
2a05:fb45::/32 maxlen: 32
2a07:14c2::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:23:41:47:b9:46:48:cb:1b:69:af:70:b6:2c:2b:a6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Oct 29 10:19:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9e0ef70471153680814bb426d77cdc60b533354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ac:87:bf:01:f6:b4:7c:39:d9:1e:e7:8f:0b:
7c:3b:8f:83:6e:13:52:5f:6f:32:11:13:5a:4c:03:
d7:8e:0f:04:d2:27:cd:0c:7a:bf:7c:f9:08:b0:90:
05:ed:84:57:5c:3b:5e:4f:ae:e2:61:fa:8c:61:38:
cf:c5:d7:5c:56:a5:21:2b:cf:b9:2f:f7:89:89:8b:
c6:26:eb:09:1f:af:f2:95:a3:56:f1:26:1f:17:1e:
87:86:da:e0:e6:90:6c:71:14:f3:64:a5:30:3d:26:
25:10:5a:c1:11:68:9a:ff:71:2d:e5:48:28:ec:6a:
f5:59:08:21:68:3e:5b:d2:62:26:f0:e9:c8:0a:0c:
b4:bd:94:9a:a7:54:0e:d4:32:df:7d:a7:fc:17:aa:
b0:93:f5:8c:82:04:1f:51:26:10:4c:6a:c2:3f:d4:
f3:ee:c4:ef:b2:a6:79:0a:df:11:ac:47:6f:32:0b:
1b:1e:30:62:c9:f9:2d:d4:a0:b7:02:c9:82:5d:e7:
0a:cb:a3:1f:a5:37:9c:e5:0d:fe:75:ac:e3:f9:4e:
85:6f:ee:4f:5f:a4:46:ea:17:ac:db:a2:8b:e0:d3:
60:15:6b:c5:a1:46:fe:ff:83:b3:a1:08:0a:e8:ad:
50:b2:48:22:4b:f8:bb:3a:3c:84:e0:eb:da:80:bb:
c4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E0:EF:70:47:11:53:68:08:14:BB:42:6D:77:CD:C6:0B:53:33:54
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/2eDvcEcRU2gIFLtCbXfNxgtTM1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.208.0/24
45.151.136.0/24
80.76.40.0/24
84.54.37.0/24
84.54.39.0/24
95.215.108.0/22
185.118.64.0/22
185.156.176.0/22
185.177.113.0/24
185.177.115.0/24
185.197.72.0/23
185.220.32.0/22
185.230.140.0-185.230.142.255
185.246.116.0/23
185.246.119.0/24
185.254.188.0-185.254.190.255
193.38.232.0-193.38.234.255
194.113.104.0/24
194.113.107.0/24
IPv6:
2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
2a05:fb44::/31
2a07:14c0::/47
2a07:14c0:1000::/36
2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
2a07:14c0:d000::/36
2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
2a07:14c6::/31
2a0a:4780::/30
2a0a:4785::/32
2a0c:5241::/32
2a0c:5245::/32
2a0c:5247:7000::/36
2a0c:5247:c000::/34
2a0d:60c0::/31
2a0d:60c3::/32
2a0d:7740::/32
2a0d:7747::/32
Signature Algorithm: sha256WithRSAEncryption
4e:c6:da:64:5a:2f:b4:e3:75:8a:6a:ea:b8:0a:6e:85:8d:21:
47:b7:97:a1:d9:41:01:81:2a:36:18:05:9d:06:37:ed:fa:86:
dd:93:c8:04:c6:04:37:a9:b4:6f:77:6b:df:08:4b:4f:96:07:
bc:d2:cb:9d:5f:a9:56:ab:79:08:57:e9:c8:c4:69:0a:37:b5:
a3:44:66:15:f2:b9:f0:90:eb:dd:8b:52:9f:9f:bb:e0:be:8f:
f6:ab:95:eb:0d:09:bd:35:b0:9c:57:1d:cb:54:90:47:d4:1f:
29:7a:72:fa:70:89:74:1f:36:1e:94:55:3e:cf:00:52:7c:ea:
15:e2:35:d6:2c:1c:b1:21:e3:1b:e2:43:49:3a:43:a0:a3:7f:
22:c7:69:75:e0:f5:8b:94:21:cb:4a:97:30:55:d3:8c:92:43:
e7:bd:cd:34:43:90:28:46:87:9e:e6:67:f3:cd:9a:0e:4d:29:
65:67:b9:b1:d7:50:94:63:80:18:4d:ef:55:b4:88:2f:01:c0:
c2:33:d3:c3:22:35:c3:2f:c8:7a:ca:3d:c8:02:3d:b9:5a:61:
c1:f4:17:9b:66:cb:84:1c:a1:22:91:28:05:a6:0a:74:ae:63:
43:f1:dd:70:99:db:27:85:ee:c5:77:d7:93:fc:1f:34:d6:8e:
0b:f1:a6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org