Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/AZ8yphlQy5Adn13PjqOJbVMsBRc.roa
File: AZ8yphlQy5Adn13PjqOJbVMsBRc.roa (raw, json)
Hash identifier: JwvgiCzvrq5pMQfiFtvuzPxaPWBAfRuDv+2GZc0oDkk=
Subject key identifier: 01:9F:32:A6:19:50:CB:90:1D:9F:5D:CF:8E:A3:89:6D:53:2C:05:17
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 072FFC05
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/AZ8yphlQy5Adn13PjqOJbVMsBRc.roa
Signing time: Sat 01 Jan 2022 13:02:29 +0000
ROA not before: Sat 01 Jan 2022 13:02:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197216
IP address blocks: 185.55.230.0/24 maxlen: 24
185.55.229.0/24 maxlen: 24
185.55.228.0/24 maxlen: 24
185.239.124.0/24 maxlen: 24
185.55.231.0/24 maxlen: 24
185.199.36.0/22 maxlen: 22
195.189.80.0/22 maxlen: 22
79.98.105.0/24 maxlen: 24
185.228.24.0/22 maxlen: 22
79.98.104.0/24 maxlen: 24
79.98.108.0/24 maxlen: 24
79.98.107.0/24 maxlen: 24
79.98.106.0/24 maxlen: 24
79.98.111.0/24 maxlen: 24
79.98.110.0/24 maxlen: 24
79.98.109.0/24 maxlen: 24
185.52.205.0/24 maxlen: 24
185.52.204.0/24 maxlen: 24
185.52.204.0/22 maxlen: 22
2a02:80e0::/30 maxlen: 30
2a01:b6a0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120585221 (0x72ffc05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Jan 1 13:02:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=019f32a61950cb901d9f5dcf8ea3896d532c0517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dc:1f:ac:84:cf:58:ad:1a:00:d5:24:0d:f6:
be:3a:ce:87:cd:ab:6b:fb:bf:52:b9:ee:db:79:17:
a4:7b:cb:f9:ee:7e:b4:ba:34:40:f1:30:c3:d3:6a:
75:82:d7:4f:38:4b:b6:61:e7:fb:6f:47:2a:69:2a:
0b:86:c8:11:b2:23:f6:e6:9a:f0:53:35:9d:8e:29:
8b:54:3e:00:17:12:be:7c:5a:bd:cd:e1:d9:90:f7:
10:f0:ab:9b:60:31:e8:d4:ad:2b:3f:82:f8:b0:db:
1e:3e:22:b9:8a:06:d0:f0:7a:35:f8:5e:c5:a2:a9:
06:f4:ac:ae:e9:6c:47:9a:b9:70:40:82:c8:06:ef:
34:7f:77:e8:03:d5:67:6d:9f:63:42:6a:75:6b:8f:
0c:7d:da:70:93:20:09:d4:12:49:84:ad:dd:2a:22:
93:2e:54:45:27:b2:8c:72:9b:2e:46:94:84:10:a8:
b5:c5:82:86:70:7f:e6:88:be:29:55:bc:45:1d:b8:
83:ac:d3:4d:aa:6d:f3:30:ed:40:23:76:ef:bc:66:
26:66:fb:53:21:18:97:1a:e6:8c:61:42:c9:8c:4c:
4f:12:e4:d1:94:d9:e8:50:8c:83:59:7e:07:99:db:
5f:d1:5a:00:01:f5:73:cf:70:0f:68:d6:b8:6e:f4:
65:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9F:32:A6:19:50:CB:90:1D:9F:5D:CF:8E:A3:89:6D:53:2C:05:17
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/AZ8yphlQy5Adn13PjqOJbVMsBRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.104.0/21
185.52.204.0/22
185.55.228.0/22
185.199.36.0/22
185.228.24.0/22
185.239.124.0/24
195.189.80.0/22
IPv6:
2a01:b6a0::/32
2a02:80e0::/30
Signature Algorithm: sha256WithRSAEncryption
84:56:3e:6c:1b:4b:55:ef:b1:fa:51:41:86:e4:d7:de:06:82:
bd:8f:89:b9:6a:80:11:3e:cc:bc:d4:52:55:1c:2a:ab:e8:05:
f6:c5:8d:d2:e2:5c:92:10:fe:3d:b6:ee:07:a0:a3:df:f5:21:
e9:52:ab:16:50:3a:80:1f:66:ea:c0:b8:d0:fb:84:46:a1:f4:
da:d2:7c:20:52:f7:ab:41:3b:fe:0d:d5:9f:95:a4:1f:ce:a4:
fe:77:95:a3:b1:e3:85:3c:06:43:0c:08:59:f6:7d:03:d6:89:
8d:cd:f3:5b:33:61:df:70:38:5a:49:99:d6:fb:d5:97:56:5e:
68:d4:d5:10:9b:89:47:37:7b:0c:bb:32:0a:50:2d:b5:97:84:
63:3a:49:ae:a0:7b:a1:62:31:ba:a7:0e:a3:fc:93:23:47:eb:
65:11:40:10:93:a7:ff:13:67:21:1f:dd:a8:c3:d6:9b:e4:21:
72:e3:4a:b2:50:91:84:aa:f7:dc:d8:ed:a5:91:a3:52:4c:a0:
59:b9:66:bd:7f:c8:53:dd:ec:c3:34:f2:df:f8:68:54:38:92:
06:61:ab:bf:c9:41:28:9b:ea:32:38:49:cf:31:e5:48:b4:11:
6e:66:d7:9b:d7:16:65:4c:cd:7c:42:cc:27:41:c0:b5:27:44:
38:8f:c7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:24 2024 by rpki-client on console-ams.rpki-client.org