Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/8AQw97Rd0os4KWKtTGBq6N6ZaU0.roa
File: 8AQw97Rd0os4KWKtTGBq6N6ZaU0.roa (raw, json)
Hash identifier: 8jEIrhAtN0R/iNUajgg2zJhSgJX1QKD55XEFZUQG4DE=
Subject key identifier: F0:04:30:F7:B4:5D:D2:8B:38:29:62:AD:4C:60:6A:E8:DE:99:69:4D
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018290F19BAC8A10322CD38CD264930B29C9
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/8AQw97Rd0os4KWKtTGBq6N6ZaU0.roa
Signing time: Fri 12 Aug 2022 07:25:29 +0000
ROA not before: Fri 12 Aug 2022 07:25:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59504
IP address blocks: 194.113.104.114/32 maxlen: 32
95.215.110.0/23 maxlen: 23
95.215.108.0/23 maxlen: 23
185.197.73.0/24 maxlen: 24
185.197.72.0/24 maxlen: 24
80.76.40.0/24 maxlen: 24
185.156.179.0/24 maxlen: 24
185.156.178.0/24 maxlen: 24
185.156.178.0/23 maxlen: 23
185.156.177.0/24 maxlen: 24
185.156.176.0/24 maxlen: 24
185.156.176.0/22 maxlen: 22
193.38.232.0/23 maxlen: 23
193.38.234.0/24 maxlen: 24
185.254.190.0/24 maxlen: 24
185.254.189.0/24 maxlen: 24
185.254.188.0/24 maxlen: 24
194.113.104.0/24 maxlen: 24
194.113.107.0/24 maxlen: 24
185.177.115.0/24 maxlen: 24
185.177.113.0/24 maxlen: 24
185.220.35.0/24 maxlen: 24
185.220.34.0/24 maxlen: 24
185.220.33.0/24 maxlen: 24
185.220.32.0/24 maxlen: 24
185.230.142.0/24 maxlen: 24
185.230.140.0/23 maxlen: 23
45.142.208.0/24 maxlen: 24
84.54.37.0/24 maxlen: 24
84.54.39.0/24 maxlen: 24
185.118.64.0/24 maxlen: 24
185.118.64.0/22 maxlen: 22
185.118.66.0/24 maxlen: 24
185.118.66.0/23 maxlen: 23
185.118.65.0/24 maxlen: 24
185.246.117.0/24 maxlen: 24
185.246.116.0/24 maxlen: 24
185.246.119.0/24 maxlen: 24
2a05:fb41::/32 maxlen: 32
2a07:14c0:1::/48 maxlen: 48
2a0d:60c1::/32 maxlen: 32
2a0a:4782::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a0d:7747::/32 maxlen: 32
2a05:fb42::/32 maxlen: 32
2a0a:4780::/32 maxlen: 32
2a0d:60c3::/32 maxlen: 32
2a07:14c1::/32 maxlen: 32
2a0d:60c0::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a07:14c7::/32 maxlen: 32
2a05:fb44::/32 maxlen: 32
2a07:14c6::/32 maxlen: 32
2a07:14c0:d000::/36 maxlen: 36
2a07:14c0:6000::/36 maxlen: 36
2a07:14c0:1000::/36 maxlen: 36
2a07:14c0:5000::/36 maxlen: 36
2a07:14c0:4000::/36 maxlen: 36
2a07:14c0:3000::/36 maxlen: 36
2a0c:5241::/32 maxlen: 32
2a0d:7740::/32 maxlen: 32
2a0c:5247:7000::/36 maxlen: 36
2a0c:5247:c000::/36 maxlen: 36
2a0c:5247:d000::/36 maxlen: 36
2a0c:5247:e000::/36 maxlen: 36
2a0c:5247:f000::/36 maxlen: 36
2a0c:5245::/32 maxlen: 32
2a0a:4785::/32 maxlen: 32
2a07:14c0::/48 maxlen: 48
2a05:fb45::/32 maxlen: 32
2a07:14c2::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:90:f1:9b:ac:8a:10:32:2c:d3:8c:d2:64:93:0b:29:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Aug 12 07:25:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f00430f7b45dd28b382962ad4c606ae8de99694d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7e:ec:d6:79:3d:49:af:da:6a:0f:4c:db:65:
dc:9c:1d:37:90:80:c1:ba:ca:e0:86:78:15:e9:41:
97:97:15:1b:a8:81:e5:ff:48:a0:b6:8c:8e:4a:fd:
17:c7:ea:c2:c5:1c:18:3c:72:74:ed:a6:86:ed:d1:
9f:ca:55:b7:59:d1:e3:b6:87:1e:ae:30:1f:12:7e:
9f:14:45:ab:04:d3:96:a6:d7:7b:3a:1b:a4:4d:ec:
f7:7e:9e:69:07:d3:d0:95:dd:b7:a9:55:6f:65:7a:
69:55:ee:4f:3a:76:60:35:74:ad:ef:6b:73:df:42:
db:ab:45:8a:84:ad:c3:33:51:8c:b6:14:05:2c:59:
3f:5e:f8:27:fb:db:a0:3f:4e:5d:83:3a:78:c0:b0:
c7:33:90:0a:7a:17:9e:57:c6:d8:ad:9c:d6:25:a7:
1e:15:3a:0f:f2:0c:8e:16:06:9d:ec:f4:ad:08:91:
93:a5:39:4e:3f:85:d0:0b:54:9a:66:78:95:44:ee:
f9:38:a0:33:cb:da:c9:80:e6:c8:a4:3c:02:0a:07:
7e:c8:06:d2:28:da:81:3e:73:3d:f6:cd:24:c3:11:
f3:47:37:99:3b:56:04:15:33:82:0e:e3:a7:07:f8:
97:da:9b:86:e1:dc:bc:15:60:9f:4e:32:8d:bf:60:
24:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:04:30:F7:B4:5D:D2:8B:38:29:62:AD:4C:60:6A:E8:DE:99:69:4D
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/8AQw97Rd0os4KWKtTGBq6N6ZaU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.208.0/24
80.76.40.0/24
84.54.37.0/24
84.54.39.0/24
95.215.108.0/22
185.118.64.0/22
185.156.176.0/22
185.177.113.0/24
185.177.115.0/24
185.197.72.0/23
185.220.32.0/22
185.230.140.0-185.230.142.255
185.246.116.0/23
185.246.119.0/24
185.254.188.0-185.254.190.255
193.38.232.0-193.38.234.255
194.113.104.0/24
194.113.107.0/24
IPv6:
2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
2a05:fb44::/31
2a07:14c0::/47
2a07:14c0:1000::/36
2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
2a07:14c0:d000::/36
2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
2a07:14c6::/31
2a0a:4780::/30
2a0a:4785::/32
2a0c:5241::/32
2a0c:5245::/32
2a0c:5247:7000::/36
2a0c:5247:c000::/34
2a0d:60c0::/31
2a0d:60c3::/32
2a0d:7740::/32
2a0d:7747::/32
Signature Algorithm: sha256WithRSAEncryption
16:fd:c3:d6:da:5e:e2:3f:06:4c:9d:9d:22:b1:c8:3a:e9:83:
86:6e:72:b9:ed:d1:d4:39:3b:eb:a6:75:9c:2f:90:35:8a:cc:
24:ba:5c:ba:ed:40:17:8c:db:bb:08:ea:41:ae:fe:dd:5c:65:
66:7c:33:7c:ea:98:cf:a2:ac:a3:1d:46:1a:20:e0:c2:90:31:
ed:f2:15:68:fa:77:16:5f:f5:11:17:b2:8b:6c:54:3a:ab:1f:
f7:40:7c:dc:5c:38:86:01:14:25:5a:64:57:57:8a:96:a1:2f:
38:cb:1c:6b:1f:a9:84:97:97:09:1f:d7:6e:f5:67:07:ab:25:
c0:0c:d8:27:82:22:7e:d5:81:a2:50:3e:7a:17:40:c1:23:87:
7e:29:12:9d:4e:c9:b7:26:d5:6b:4b:34:23:f2:40:6f:fa:c7:
8f:13:e3:4d:9e:03:be:6e:72:b3:e8:1c:e7:51:1c:89:1c:e3:
72:5b:9b:45:59:62:ca:3b:c0:de:66:d3:34:1b:ca:3e:c5:f2:
76:d9:28:6b:7b:36:95:74:40:31:74:20:ea:64:7b:00:9f:c0:
b6:f8:5d:e1:84:26:a9:02:c9:0a:e6:a7:02:fd:86:8a:7f:49:
48:19:43:35:ff:49:f0:dd:29:f8:28:3e:66:0c:a0:c8:ab:ee:
4f:03:bb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:45 2023 by rpki-client on console-fra.rpki-client.org