Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/2TdCZOF6ju0_SVwc5zER22Yo93I.roa
File: 2TdCZOF6ju0_SVwc5zER22Yo93I.roa (raw, json)
Hash identifier: mAB7e8haLjjwZSNcBcmuVFKJyfI2Shu4ITl9tGqAntw=
Subject key identifier: D9:37:42:64:E1:7A:8E:ED:3F:49:5C:1C:E7:31:11:DB:66:28:F7:72
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 187E0F01
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/2TdCZOF6ju0_SVwc5zER22Yo93I.roa
Signing time: Tue 21 Jun 2022 08:59:44 +0000
ROA not before: Tue 21 Jun 2022 08:59:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3267
IP address blocks: 82.137.137.0/24 maxlen: 24
86.110.96.0/19 maxlen: 19
86.110.96.0/22 maxlen: 22
193.27.214.0/24 maxlen: 24
193.27.214.0/23 maxlen: 23
194.85.32.0/20 maxlen: 20
86.110.101.0/24 maxlen: 24
86.110.112.0/20 maxlen: 20
194.85.174.0/23 maxlen: 23
80.250.164.0/22 maxlen: 22
80.250.160.0/19 maxlen: 19
80.250.162.0/24 maxlen: 24
80.250.163.0/24 maxlen: 24
80.250.160.0/23 maxlen: 23
80.250.172.0/23 maxlen: 23
80.250.168.0/22 maxlen: 22
80.250.168.0/24 maxlen: 24
80.250.169.0/24 maxlen: 24
80.250.170.0/23 maxlen: 23
80.250.176.0/20 maxlen: 20
80.250.175.0/24 maxlen: 24
194.85.160.0/21 maxlen: 21
194.85.168.0/22 maxlen: 22
194.190.241.0/24 maxlen: 24
194.190.242.0/23 maxlen: 23
194.190.244.0/22 maxlen: 22
194.190.248.0/21 maxlen: 21
85.142.64.0/24 maxlen: 24
85.142.78.0/24 maxlen: 24
194.190.224.0/21 maxlen: 21
194.190.224.0/19 maxlen: 19
194.190.224.0/20 maxlen: 20
194.190.232.0/22 maxlen: 22
194.190.239.0/24 maxlen: 24
194.190.240.0/24 maxlen: 24
194.190.236.0/23 maxlen: 23
194.190.238.0/24 maxlen: 24
2a07:a6c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410914561 (0x187e0f01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jun 21 08:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9374264e17a8eed3f495c1ce73111db6628f772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5b:a3:c7:27:69:6c:c6:fb:2e:e1:18:4d:61:
89:20:e2:8b:77:04:ce:a8:70:74:f3:4d:0b:40:46:
87:08:bb:db:dc:b6:63:5a:76:fc:fb:ab:0a:67:f1:
37:bf:f2:f8:b9:6d:11:06:ed:2c:7a:2b:40:aa:1e:
a9:24:c5:8e:e3:dd:c1:23:50:c4:a3:c2:0b:12:df:
6f:20:8e:38:af:1b:75:e6:4c:da:3c:ad:5f:f4:5d:
d4:7f:31:a3:39:1a:24:39:ab:d1:9e:08:5d:ab:4b:
5d:9e:c5:e8:0b:37:11:75:29:75:41:ec:74:39:82:
0b:ec:30:18:3d:02:97:f6:0a:ca:6b:5a:b4:2a:39:
86:1c:1d:ec:e1:13:dc:47:e6:62:ec:7b:f7:34:c2:
92:3d:8b:09:f6:47:97:c5:fd:5c:ff:50:1c:d0:5d:
f4:ca:80:75:b3:c5:3b:2d:c3:e8:0e:3c:71:92:5e:
0b:5c:0f:0f:d9:fa:50:fe:66:02:06:6a:25:e7:0e:
80:2a:b7:32:57:f5:2c:1e:94:6f:f0:90:ef:6c:60:
12:8d:4b:ce:7f:fa:a7:83:a0:31:81:6a:9c:9f:3a:
d9:dd:a2:a0:b6:48:77:3d:3e:75:ed:33:d9:1d:aa:
83:f3:b3:10:33:e2:a8:ef:b8:77:65:00:6b:1c:f0:
a4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:37:42:64:E1:7A:8E:ED:3F:49:5C:1C:E7:31:11:DB:66:28:F7:72
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/2TdCZOF6ju0_SVwc5zER22Yo93I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.160.0/19
82.137.137.0/24
85.142.64.0/24
85.142.78.0/24
86.110.96.0/19
193.27.214.0/23
194.85.32.0/20
194.85.160.0-194.85.171.255
194.85.174.0/23
194.190.224.0/19
IPv6:
2a07:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:a2:6b:0c:dc:ff:1a:d1:8b:3e:4e:93:84:0d:38:ff:5d:2a:
c3:b2:e7:4b:bd:ea:6e:6f:68:36:ae:ba:9a:34:e9:79:2c:ab:
54:54:57:14:f9:25:29:75:5b:0d:2e:8c:d6:a6:3c:b7:0f:f9:
d0:60:f5:9f:8c:12:a7:a7:1e:66:e9:4f:8f:d7:0f:05:6f:4d:
a2:8d:55:cb:0c:ec:28:6e:10:62:91:c2:37:5f:75:f8:e3:b0:
c8:56:18:2a:1f:5b:c2:d4:47:17:7a:3f:be:22:63:a3:c1:1a:
8e:e0:a5:2d:59:09:46:14:11:e9:ea:6e:a3:bd:f8:5d:90:88:
0d:7e:07:51:2a:21:9a:54:fd:16:cd:23:5d:ea:75:a5:b3:6b:
41:8c:70:9a:9e:8c:2e:99:cd:2e:9e:47:0a:77:04:ae:01:72:
12:23:57:85:1c:a3:a3:7f:e3:83:90:02:15:62:ff:de:c2:66:
ce:46:88:6b:09:dd:2b:39:33:b0:95:80:9f:52:c7:92:0e:eb:
c8:57:42:df:5d:2e:90:56:87:be:ac:0f:87:83:82:d0:2e:d8:
c3:7c:a8:fb:2a:f7:fa:28:26:d5:c7:09:7d:ec:66:5f:cf:39:
bb:cd:99:7b:15:22:79:8d:11:66:1d:37:d4:e3:20:72:b0:a6:
f8:8f:a3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org