Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/4JPry_0BTTUlU0A0_la7vuIelxY.roa
File: 4JPry_0BTTUlU0A0_la7vuIelxY.roa (raw, json)
Hash identifier: 85rrpP4/eZgLEgDuyumUBaDGumhhUtiq6+WWHV33Xik=
Subject key identifier: E0:93:EB:CB:FD:01:4D:35:25:53:40:34:FE:56:BB:BE:E2:1E:97:16
Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial: 1582DEFA
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/4JPry_0BTTUlU0A0_la7vuIelxY.roa
Signing time: Sat 01 Jan 2022 14:59:12 +0000
ROA not before: Sat 01 Jan 2022 14:59:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16202
IP address blocks: 92.206.160.0/19 maxlen: 19
89.186.128.0/19 maxlen: 19
89.186.128.0/21 maxlen: 21
89.186.128.0/20 maxlen: 20
77.64.224.0/20 maxlen: 20
77.64.240.0/20 maxlen: 20
77.64.252.0/23 maxlen: 23
77.64.254.0/23 maxlen: 23
92.206.128.0/18 maxlen: 18
92.206.190.0/23 maxlen: 23
89.186.136.0/21 maxlen: 21
217.68.160.0/19 maxlen: 19
217.68.160.0/20 maxlen: 20
89.186.144.0/20 maxlen: 20
89.186.144.0/21 maxlen: 21
92.206.192.0/18 maxlen: 18
217.68.176.0/20 maxlen: 20
89.186.152.0/21 maxlen: 21
92.206.224.0/19 maxlen: 19
77.64.160.0/19 maxlen: 19
83.221.72.0/21 maxlen: 21
83.221.80.0/20 maxlen: 20
83.221.80.0/21 maxlen: 21
83.221.88.0/21 maxlen: 21
77.64.192.0/19 maxlen: 19
77.64.192.0/20 maxlen: 20
92.206.64.0/18 maxlen: 18
185.44.148.0/22 maxlen: 22
185.44.150.0/23 maxlen: 23
77.64.208.0/20 maxlen: 20
77.64.128.0/17 maxlen: 17
77.64.128.0/19 maxlen: 19
77.64.128.0/18 maxlen: 18
92.206.0.0/17 maxlen: 17
92.206.0.0/18 maxlen: 18
92.206.0.0/16 maxlen: 16
77.64.146.0/23 maxlen: 23
83.221.64.0/19 maxlen: 19
83.221.64.0/21 maxlen: 21
83.221.64.0/20 maxlen: 20
2a02:2454:8000::/33 maxlen: 33
2a00:c1a0::/32 maxlen: 32
2a00:c1a0::/34 maxlen: 34
2a00:c1a0:8000::/34 maxlen: 34
2a00:c1a0:4000::/34 maxlen: 34
2a00:c1a0:c000::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360898298 (0x1582defa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Validity
Not Before: Jan 1 14:59:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e093ebcbfd014d3525534034fe56bbbee21e9716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:e3:5e:b3:5b:b7:87:d8:c4:8e:f2:90:ce:
88:81:13:ae:10:8c:8d:70:b9:60:1d:d5:3c:a7:91:
23:ab:de:a0:4c:b8:e1:27:06:57:e4:b7:4c:bb:d0:
73:d8:f2:c6:09:06:18:4b:62:bf:eb:85:cb:54:5d:
d0:01:c0:f3:9a:c7:d9:f1:e0:41:a3:8f:7e:74:c3:
1e:45:15:b0:5e:78:c1:78:55:32:61:f6:be:74:6e:
6e:cc:31:51:b7:84:f4:b3:5a:ab:b3:2f:98:54:34:
35:b0:f4:a2:f6:d0:51:31:e2:d1:7f:82:cb:8d:09:
9f:fb:b4:75:4a:bf:2d:20:d9:50:de:2b:71:82:89:
78:08:d8:20:e9:1d:0e:05:31:d7:f4:21:0c:81:22:
ed:98:89:1f:75:22:cd:c3:05:f3:7c:27:3f:1c:9e:
34:d6:25:fa:30:fb:99:2c:8a:94:5b:34:8b:4b:ce:
bb:e6:b2:b0:ed:4c:fe:e1:4b:d4:49:cd:fb:39:e7:
52:fa:d5:30:3c:22:49:87:50:66:c6:c2:18:a1:13:
e3:a2:3d:36:59:2e:9b:9d:45:92:1f:2a:4f:3c:e8:
f8:e3:9f:e9:05:34:8c:ad:4b:ea:ed:a6:51:5d:b4:
34:6f:08:be:4d:71:84:c0:96:be:2e:8e:24:5b:64:
a2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:93:EB:CB:FD:01:4D:35:25:53:40:34:FE:56:BB:BE:E2:1E:97:16
X509v3 Authority Key Identifier:
keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/4JPry_0BTTUlU0A0_la7vuIelxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.64.128.0/17
83.221.64.0/19
89.186.128.0/19
92.206.0.0/16
185.44.148.0/22
217.68.160.0/19
IPv6:
2a00:c1a0::/32
2a02:2454:8000::/33
Signature Algorithm: sha256WithRSAEncryption
6a:72:d4:99:f8:c3:e8:5d:bc:c9:34:bb:3d:14:49:f4:d1:f9:
16:94:b1:c1:35:b3:e5:a4:60:08:46:07:2f:28:65:04:80:3c:
2b:df:1d:28:98:ac:f1:86:f1:de:b7:28:8d:bb:84:43:3b:b7:
15:f0:c3:c8:c8:89:e1:df:e0:54:35:2e:fd:76:bd:0c:cf:ab:
21:e1:1b:f1:8d:93:13:8f:24:28:90:c5:9a:d7:f1:42:90:c4:
c6:8c:69:dd:16:ca:07:a8:13:5b:e8:f2:71:5b:32:c4:f5:cd:
a5:2d:0c:48:90:57:0c:be:f7:6f:2e:c7:e8:4f:5c:f1:69:78:
f3:fa:d7:aa:32:15:4d:7b:40:f5:a0:d6:65:57:16:70:ee:bc:
41:6e:b0:07:ab:e1:38:d5:ae:12:e2:c5:a5:f1:d8:3b:ac:d0:
d6:86:02:af:bb:18:20:71:19:4f:ec:29:79:3e:58:57:b6:a0:
be:fc:04:83:0c:ca:7e:0c:9d:b5:7c:4b:9e:a4:28:72:a3:46:
29:0c:e3:68:b3:54:95:2d:64:87:4d:c8:d1:0b:21:bf:c4:59:
11:f7:7e:41:ba:64:82:d7:a1:38:cb:8c:58:d9:5a:dd:d0:8b:
f2:8c:93:71:e5:17:cd:5e:6e:81:14:4c:42:d2:ad:ec:7d:60:
f6:01:9d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:42 2024 by rpki-client on console-fra.rpki-client.org