Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/lMx-h3CW7rtiPp8oP1ez24QVm8s.roa
File: lMx-h3CW7rtiPp8oP1ez24QVm8s.roa (raw, json)
Hash identifier: dJmlcvsxRsRBaXpteyIVD+UPJBirHypgHvhNxDeIAPg=
Subject key identifier: 94:CC:7E:87:70:96:EE:BB:62:3E:9F:28:3F:57:B3:DB:84:15:9B:CB
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 07E00A33
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/lMx-h3CW7rtiPp8oP1ez24QVm8s.roa
Signing time: Tue 15 Mar 2022 21:21:30 +0000
ROA not before: Tue 15 Mar 2022 21:21:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200000
IP address blocks: 185.233.120.0/22 maxlen: 22
185.124.8.0/22 maxlen: 22
185.233.136.0/22 maxlen: 22
185.39.224.0/22 maxlen: 22
185.233.152.0/22 maxlen: 23
185.149.40.0/22 maxlen: 22
185.233.116.0/22 maxlen: 22
185.235.168.0/22 maxlen: 22
185.104.44.0/22 maxlen: 22
185.104.45.0/24 maxlen: 24
185.65.244.0/22 maxlen: 22
185.226.24.0/22 maxlen: 22
185.225.212.0/22 maxlen: 22
185.25.116.0/22 maxlen: 22
185.68.16.0/24 maxlen: 24
185.68.16.0/22 maxlen: 22
185.233.36.0/22 maxlen: 22
185.233.40.0/22 maxlen: 22
185.233.44.0/22 maxlen: 22
185.130.120.0/22 maxlen: 22
185.69.152.0/22 maxlen: 22
185.239.180.0/22 maxlen: 22
185.234.176.0/22 maxlen: 22
2a0c:c80::/29 maxlen: 29
2a0c:6080::/29 maxlen: 29
2a0c:684::/30 maxlen: 30
2a0c:d80::/29 maxlen: 29
2a0c:e80::/29 maxlen: 29
2a04:8000::/29 maxlen: 29
2a0d:6500::/29 maxlen: 29
2a0d:1100::/29 maxlen: 29
2a05:480::/29 maxlen: 29
2a0c:680::/29 maxlen: 29
2a0c:780::/29 maxlen: 29
2a00:7a60::/32 maxlen: 32
2a06:6440::/29 maxlen: 29
2a0c:681::/32 maxlen: 32
2a0c:682::/31 maxlen: 31
2a0c:a80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132123187 (0x7e00a33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: Mar 15 21:21:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94cc7e877096eebb623e9f283f57b3db84159bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f6:bd:c6:b6:ff:b4:5b:bb:1f:db:47:32:90:
86:d3:a9:bc:bf:1c:12:6b:4c:c3:78:2e:6d:0d:ad:
4c:58:f5:ae:22:59:31:b1:aa:1c:07:18:8b:71:fe:
4d:70:95:c4:bf:f8:3b:1a:46:5c:5d:61:bf:63:e0:
f6:35:fe:bb:fe:9b:c6:ea:6d:32:a8:b3:72:de:db:
8f:79:03:88:6d:b5:5d:4d:41:61:a8:41:54:43:af:
66:61:ce:bf:df:48:fe:c8:02:ce:dd:f9:2f:2d:42:
0e:a5:3b:ed:6a:96:cc:32:12:37:9f:85:25:c5:a5:
f4:81:29:8a:6e:d5:64:ec:02:bc:5a:d6:bd:5d:24:
54:57:4b:22:79:62:fb:0f:db:1b:bf:a5:e5:08:db:
32:5a:bc:16:36:81:40:21:6e:cd:db:12:c4:e3:15:
a7:eb:c4:71:e3:9d:18:53:8e:3a:4e:e8:67:ed:9d:
f1:a3:27:44:5c:01:6c:85:32:bf:30:bc:bb:1c:95:
50:43:33:84:35:24:b6:79:6d:36:a8:b2:7a:cc:22:
a6:95:31:0b:25:61:01:78:68:11:29:97:cd:45:1e:
d8:c9:4e:82:b1:ca:ae:90:d3:70:28:83:bd:b9:18:
63:ac:17:d0:00:62:43:cf:1a:25:dd:ca:4b:96:95:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CC:7E:87:70:96:EE:BB:62:3E:9F:28:3F:57:B3:DB:84:15:9B:CB
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/lMx-h3CW7rtiPp8oP1ez24QVm8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.116.0/22
185.39.224.0/22
185.65.244.0/22
185.68.16.0/22
185.69.152.0/22
185.104.44.0/22
185.124.8.0/22
185.130.120.0/22
185.149.40.0/22
185.225.212.0/22
185.226.24.0/22
185.233.36.0-185.233.47.255
185.233.116.0-185.233.123.255
185.233.136.0/22
185.233.152.0/22
185.234.176.0/22
185.235.168.0/22
185.239.180.0/22
IPv6:
2a00:7a60::/32
2a04:8000::/29
2a05:480::/29
2a06:6440::/29
2a0c:680::/29
2a0c:780::/29
2a0c:a80::/29
2a0c:c80::/29
2a0c:d80::/29
2a0c:e80::/29
2a0c:6080::/29
2a0d:1100::/29
2a0d:6500::/29
Signature Algorithm: sha256WithRSAEncryption
49:fe:b0:34:8d:4a:19:2c:50:de:77:22:c6:55:07:24:06:48:
77:3c:da:24:70:b5:64:3c:16:59:c2:1c:00:96:37:f8:e9:d0:
1e:41:c9:3d:db:ba:98:12:ea:74:40:9b:76:69:67:76:24:61:
48:b6:20:cc:83:4e:9b:98:ad:04:fc:1b:b1:fe:fe:28:4b:1a:
b9:d4:a7:1d:f4:6d:7a:1c:21:f3:43:70:b4:77:d4:18:99:dc:
07:0e:a6:89:4e:2d:07:7a:91:94:a6:4f:90:dc:ea:2b:ef:72:
ba:54:33:5f:9f:c1:2d:ff:58:5e:ee:34:76:bf:e4:69:eb:57:
f6:85:54:46:20:da:49:9a:42:dd:32:89:82:18:de:48:68:39:
f3:3a:38:a7:8f:d3:0d:ab:0f:4a:7c:23:d9:b8:f6:2a:bf:5f:
09:98:93:b6:89:e5:a2:44:cd:a3:02:66:9a:67:d4:75:5a:06:
ec:98:b2:6a:6b:2f:ea:78:e8:c4:49:63:e2:0b:c0:2b:55:c5:
6a:5f:5d:1d:5d:ce:07:91:b6:3b:cf:38:24:e5:d2:01:29:61:
ce:93:82:46:bd:8d:6b:2f:b4:bb:bd:18:f4:1b:50:7e:21:33:
12:70:19:eb:c9:6b:03:06:61:d7:cc:73:70:2b:34:90:1e:66:
8a:0a:9e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:07 2024 by rpki-client on console-ams.rpki-client.org