Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Ok8HAIGqs5ZreB6qOn3z7c4i5hE.roa
File: Ok8HAIGqs5ZreB6qOn3z7c4i5hE.roa (raw, json)
Hash identifier: UoQdbA2LJiqolUCYGOs/iYnFHLZpIR1sgx9pah2suKI=
Subject key identifier: 3A:4F:07:00:81:AA:B3:96:6B:78:1E:AA:3A:7D:F3:ED:CE:22:E6:11
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 07DD3113
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Ok8HAIGqs5ZreB6qOn3z7c4i5hE.roa
Signing time: Sat 01 Jan 2022 08:01:02 +0000
ROA not before: Sat 01 Jan 2022 08:01:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59504
IP address blocks: 194.113.104.114/32 maxlen: 32
95.215.110.0/23 maxlen: 23
95.215.108.0/24 maxlen: 24
95.215.108.0/23 maxlen: 23
185.197.73.0/24 maxlen: 24
185.197.72.0/24 maxlen: 24
80.76.42.0/24 maxlen: 24
80.76.40.0/24 maxlen: 24
185.156.178.0/24 maxlen: 24
185.156.178.0/23 maxlen: 23
185.156.177.0/24 maxlen: 24
185.156.176.0/24 maxlen: 24
185.156.176.0/22 maxlen: 22
185.156.179.0/24 maxlen: 24
193.38.234.0/24 maxlen: 24
185.254.190.0/24 maxlen: 24
185.254.189.0/24 maxlen: 24
194.113.104.0/24 maxlen: 24
194.113.107.0/24 maxlen: 24
185.177.115.0/24 maxlen: 24
185.177.113.0/24 maxlen: 24
185.220.35.0/24 maxlen: 24
185.220.34.0/24 maxlen: 24
185.220.33.0/24 maxlen: 24
185.220.32.0/24 maxlen: 24
185.230.142.0/24 maxlen: 24
185.230.140.0/23 maxlen: 23
84.54.36.0/24 maxlen: 24
84.54.39.0/24 maxlen: 24
185.118.64.0/24 maxlen: 24
185.118.64.0/22 maxlen: 22
185.118.66.0/24 maxlen: 24
185.118.66.0/23 maxlen: 23
185.118.65.0/24 maxlen: 24
185.246.118.0/24 maxlen: 24
185.246.117.0/24 maxlen: 24
185.246.116.0/24 maxlen: 24
185.246.119.0/24 maxlen: 24
2a05:fb41::/32 maxlen: 32
2a0d:60c1::/32 maxlen: 32
2a07:14c0:1::/48 maxlen: 48
2a0a:4782::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a0d:7747::/32 maxlen: 32
2a05:fb42::/32 maxlen: 32
2a0a:4780::/32 maxlen: 32
2a0d:60c3::/32 maxlen: 32
2a07:14c1::/32 maxlen: 32
2a0d:60c0::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a07:14c7::/32 maxlen: 32
2a05:fb44::/32 maxlen: 32
2a07:14c6::/32 maxlen: 32
2a07:14c0:d000::/36 maxlen: 36
2a07:14c0:6000::/36 maxlen: 36
2a07:14c0:1000::/36 maxlen: 36
2a07:14c0:5000::/36 maxlen: 36
2a07:14c0:4000::/36 maxlen: 36
2a07:14c0:3000::/36 maxlen: 36
2a0c:5241::/32 maxlen: 32
2a0d:7740::/32 maxlen: 32
2a0c:5247:7000::/36 maxlen: 36
2a0c:5247:c000::/36 maxlen: 36
2a0c:5247:d000::/36 maxlen: 36
2a0c:5247:e000::/36 maxlen: 36
2a0c:5247:f000::/36 maxlen: 36
2a0c:5245::/32 maxlen: 32
2a0a:4785::/32 maxlen: 32
2a07:14c0::/48 maxlen: 48
2a05:fb45::/32 maxlen: 32
2a07:14c2::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131936531 (0x7dd3113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 08:01:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a4f070081aab3966b781eaa3a7df3edce22e611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:17:7f:f1:23:ff:40:f8:61:9b:06:65:c3:
ca:93:4d:f3:2b:39:fd:6b:68:d3:58:21:98:41:9e:
ef:82:e7:b7:4b:e1:53:7b:60:83:ea:1c:67:5a:cb:
ef:40:7a:76:1a:9d:b2:5b:c4:63:71:83:1d:72:8b:
a9:ba:f6:fa:2e:e7:06:e2:aa:98:ef:46:75:61:c2:
23:17:c3:e1:ad:c8:ab:7c:4d:60:e9:a4:b8:f3:af:
5f:bd:6a:cd:bb:19:86:86:ad:8c:47:6a:fa:be:1e:
f0:e3:d8:b0:20:3d:b5:d9:7f:cb:7d:d6:99:04:3d:
b6:a9:8b:db:60:94:89:22:6d:40:63:cc:f7:6e:9a:
b6:80:59:8a:d4:7c:f4:ad:34:84:b6:e2:f4:04:2b:
e0:bf:82:23:39:df:10:c4:b9:28:4a:bb:c8:80:69:
fe:b0:aa:9c:f1:3e:ec:c8:64:0c:3d:33:d5:8e:41:
c9:02:ab:23:b9:65:0d:5a:fe:ef:81:ef:f3:2c:6e:
56:9c:49:fa:4c:d9:a7:e9:74:e2:7a:ce:c1:bc:5d:
10:50:01:12:3f:f7:88:d3:bd:5f:31:6e:ab:ce:55:
b9:64:3d:c0:df:7e:9e:fc:03:28:b9:af:24:93:12:
79:f0:38:2e:fd:cd:14:d8:0f:d9:45:3e:35:91:a8:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4F:07:00:81:AA:B3:96:6B:78:1E:AA:3A:7D:F3:ED:CE:22:E6:11
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Ok8HAIGqs5ZreB6qOn3z7c4i5hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.40.0/24
80.76.42.0/24
84.54.36.0/24
84.54.39.0/24
95.215.108.0/22
185.118.64.0/22
185.156.176.0/22
185.177.113.0/24
185.177.115.0/24
185.197.72.0/23
185.220.32.0/22
185.230.140.0-185.230.142.255
185.246.116.0/22
185.254.189.0-185.254.190.255
193.38.234.0/24
194.113.104.0/24
194.113.107.0/24
IPv6:
2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
2a05:fb44::/31
2a07:14c0::/47
2a07:14c0:1000::/36
2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
2a07:14c0:d000::/36
2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
2a07:14c6::/31
2a0a:4780::/30
2a0a:4785::/32
2a0c:5241::/32
2a0c:5245::/32
2a0c:5247:7000::/36
2a0c:5247:c000::/34
2a0d:60c0::/31
2a0d:60c3::/32
2a0d:7740::/32
2a0d:7747::/32
Signature Algorithm: sha256WithRSAEncryption
70:6e:0b:4f:94:a9:2e:31:e4:87:55:6c:dd:e3:95:f2:03:46:
24:1e:57:a2:ec:f6:9e:78:6c:dd:3b:a6:75:5f:14:7b:a8:b5:
7b:bc:64:89:78:f5:1c:26:b1:4e:8b:f9:0c:36:4c:8d:5f:ec:
98:f6:a7:09:d2:cd:1b:4b:15:b1:49:95:5a:0e:d1:db:13:d2:
98:1f:fd:a8:b7:89:00:81:6a:27:ae:0f:be:cd:b7:78:e0:26:
d9:e2:81:e0:c8:ad:97:0f:91:75:de:26:9a:82:97:d4:d4:76:
36:8b:f5:aa:7c:98:60:f7:cb:51:4b:52:68:67:71:e3:d4:74:
71:49:e2:d9:eb:ed:00:fd:93:49:a3:61:39:d3:53:a9:43:44:
85:18:4c:7c:fc:5a:c7:98:22:7a:fb:79:d0:d3:d6:36:c2:b5:
cf:55:fc:c8:4a:81:c5:78:b4:c4:82:d7:7a:6c:6a:58:01:f6:
82:2e:90:e7:14:f3:4c:00:01:c3:57:4b:8e:49:1e:7c:32:11:
a0:eb:47:cc:6c:6d:97:f4:c2:07:20:74:fc:11:ee:4f:05:77:
df:1f:e2:d9:0c:e1:2d:3e:d6:cf:a6:eb:a1:ab:45:92:a0:bd:
34:b7:22:da:8f:53:0b:d8:41:c0:33:53:3b:fa:77:6e:4e:51:
22:45:a1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org