Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/B1vX5dbKqjOBlZ02Ojhu3m_AUjU.roa
File: B1vX5dbKqjOBlZ02Ojhu3m_AUjU.roa (raw, json)
Hash identifier: Ghjcpj+LtnPG7UIh+iX7CNCh5u7Tigy7JosnwUMkQkM=
Subject key identifier: 07:5B:D7:E5:D6:CA:AA:33:81:95:9D:36:3A:38:6E:DE:6F:C0:52:35
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 01827C02EE89F25700661A8494C03D9B07B5
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/B1vX5dbKqjOBlZ02Ojhu3m_AUjU.roa
Signing time: Mon 08 Aug 2022 05:52:23 +0000
ROA not before: Mon 08 Aug 2022 05:52:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48728
IP address blocks: 80.76.165.0/24 maxlen: 24
80.76.164.0/24 maxlen: 24
80.76.160.0/21 maxlen: 21
80.76.162.0/24 maxlen: 24
80.76.160.0/20 maxlen: 20
80.76.161.0/24 maxlen: 24
80.76.163.0/24 maxlen: 24
80.76.171.0/24 maxlen: 24
80.76.168.0/21 maxlen: 21
80.76.170.0/24 maxlen: 24
212.70.96.0/24 maxlen: 24
212.70.96.0/19 maxlen: 19
212.70.98.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.99.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.110.0/24 maxlen: 24
212.70.112.0/24 maxlen: 24
212.70.111.0/24 maxlen: 24
212.70.107.0/24 maxlen: 24
212.70.114.0/24 maxlen: 24
212.70.113.0/24 maxlen: 24
212.70.116.0/24 maxlen: 24
212.70.115.0/24 maxlen: 24
212.70.117.0/24 maxlen: 24
212.70.118.0/24 maxlen: 24
212.70.119.0/24 maxlen: 24
212.70.121.0/24 maxlen: 24
212.70.127.0/24 maxlen: 24
31.11.48.0/21 maxlen: 21
37.186.37.0/24 maxlen: 24
37.186.38.0/24 maxlen: 24
37.186.32.0/24 maxlen: 24
37.186.34.0/24 maxlen: 24
37.186.32.0/19 maxlen: 19
37.186.33.0/24 maxlen: 24
37.186.36.0/24 maxlen: 24
37.186.35.0/24 maxlen: 24
37.186.44.0/24 maxlen: 24
37.186.39.0/24 maxlen: 24
37.186.41.0/24 maxlen: 24
37.186.40.0/24 maxlen: 24
37.186.43.0/24 maxlen: 24
37.186.42.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
37.186.50.0/24 maxlen: 24
37.186.46.0/24 maxlen: 24
37.186.45.0/24 maxlen: 24
37.186.48.0/24 maxlen: 24
37.186.47.0/24 maxlen: 24
37.186.49.0/24 maxlen: 24
37.186.58.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.53.0/24 maxlen: 24
37.186.52.0/24 maxlen: 24
37.186.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.60.0/24 maxlen: 24
37.186.59.0/24 maxlen: 24
185.247.88.0/22 maxlen: 22
2a04:7f80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7c:02:ee:89:f2:57:00:66:1a:84:94:c0:3d:9b:07:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Aug 8 05:52:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=075bd7e5d6caaa3381959d363a386ede6fc05235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c7:a5:19:45:14:d8:d9:c3:a2:09:c6:55:52:
39:5c:cc:7b:3f:6b:16:e4:04:21:cf:7b:0c:d4:5d:
18:29:b4:36:be:19:56:6b:23:a7:b0:f9:8b:fc:22:
65:73:40:2b:cc:13:04:06:cc:79:b7:d1:07:c0:cc:
d8:63:2d:25:39:2b:fe:6b:07:ac:3f:fb:63:4b:5b:
32:ad:d0:cc:f2:83:89:3c:fe:b3:7f:8a:fa:20:bd:
90:7c:f9:22:d9:3f:72:59:11:7d:49:62:e8:f5:02:
84:26:35:a6:ce:ff:9a:ff:e6:a8:96:c0:42:21:22:
52:fc:ff:f5:10:1e:d7:9c:93:50:fa:84:27:8c:a1:
3e:23:94:4e:7a:9b:53:80:4e:f2:92:07:42:32:77:
1c:dd:f7:1f:2f:d5:30:4d:b3:23:1e:31:ca:03:c9:
43:42:8f:5a:b4:b6:02:60:a2:2f:d7:6b:a8:59:6f:
d7:e0:e9:25:a8:2c:11:d8:57:e7:30:0c:23:02:95:
1b:80:29:60:84:dc:88:3f:a9:e2:ac:78:30:0c:76:
db:05:23:72:14:d7:7e:be:11:cf:bb:9e:38:76:6d:
26:27:ad:11:1a:90:21:dc:59:de:c8:bd:de:15:4a:
c6:70:86:5e:d2:73:11:8c:7b:06:6a:78:18:00:84:
ce:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5B:D7:E5:D6:CA:AA:33:81:95:9D:36:3A:38:6E:DE:6F:C0:52:35
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/B1vX5dbKqjOBlZ02Ojhu3m_AUjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.32.0/19
80.76.160.0/20
185.247.88.0/22
212.70.96.0/19
IPv6:
2a04:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
d5:0c:9a:86:c3:18:39:8a:2d:b9:50:b1:4a:e3:c1:87:71:3b:
60:d8:24:8f:0e:75:0f:48:3b:59:07:e9:08:18:02:15:02:50:
51:55:d0:24:c9:31:cf:dc:c5:b5:d7:68:04:3c:39:58:a1:b1:
94:9c:9f:f0:5e:c3:d4:a3:15:fc:eb:5b:89:36:b9:e5:78:36:
45:9d:5d:21:f3:82:5b:38:2b:c4:bc:a8:11:c4:21:f7:ee:5a:
f4:37:fa:73:e5:a4:7c:ee:e2:df:af:7d:ac:78:bc:a1:c6:20:
90:9f:23:44:1c:33:40:0c:f9:4f:c8:76:35:fd:ee:e9:00:a1:
22:87:ff:4e:9b:f8:9c:05:f9:2d:f7:6a:8a:cc:93:7a:1d:ad:
a0:c9:0c:97:0e:8c:57:45:07:90:b3:15:41:5e:d4:fa:6f:91:
2a:0c:06:e3:ee:83:5e:14:35:9d:14:59:52:d2:43:97:78:ef:
25:f7:ab:70:ba:15:62:c2:62:0d:0f:14:cf:0f:a3:49:2c:54:
3b:2e:c5:5c:c8:9d:05:31:74:dd:44:b7:e0:84:0d:04:26:bd:
8c:6f:0f:84:81:17:d3:1b:e3:3a:85:f1:a8:b1:d9:34:e7:94:
45:cd:e0:43:24:5d:25:9f:d0:88:f8:56:32:a4:2b:6f:c4:48:
77:02:1e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:35 2023 by rpki-client on console-ams.rpki-client.org