Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/z5NVjIbfFGIByNEtQY-yp2_mXRY.roa
File: z5NVjIbfFGIByNEtQY-yp2_mXRY.roa (raw, json)
Hash identifier: 8oOYa84pZ8KCjh9JRXNqrEgdoiPpk3oIWwAayrkuCdk=
Subject key identifier: CF:93:55:8C:86:DF:14:62:01:C8:D1:2D:41:8F:B2:A7:6F:E6:5D:16
Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial: 308A6FDA
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/z5NVjIbfFGIByNEtQY-yp2_mXRY.roa
Signing time: Sat 01 Jan 2022 14:04:57 +0000
ROA not before: Sat 01 Jan 2022 14:04:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47394
IP address blocks: 46.255.144.0/24 maxlen: 24
46.255.144.0/22 maxlen: 22
46.255.144.0/21 maxlen: 21
46.255.145.0/24 maxlen: 24
95.107.150.0/24 maxlen: 24
95.107.146.0/23 maxlen: 23
95.107.157.0/24 maxlen: 24
95.107.159.0/24 maxlen: 24
95.107.156.0/24 maxlen: 24
95.107.162.0/24 maxlen: 24
95.107.164.0/24 maxlen: 24
95.107.165.0/24 maxlen: 24
95.107.166.0/24 maxlen: 24
95.107.160.0/22 maxlen: 22
95.107.160.0/21 maxlen: 21
95.107.160.0/24 maxlen: 24
95.107.162.0/23 maxlen: 23
95.107.164.0/22 maxlen: 22
95.107.172.0/23 maxlen: 23
95.107.168.0/22 maxlen: 22
95.107.167.0/24 maxlen: 24
95.107.168.0/23 maxlen: 23
95.107.176.0/21 maxlen: 21
95.107.174.0/24 maxlen: 24
95.107.177.0/24 maxlen: 24
95.107.184.0/22 maxlen: 22
95.107.182.0/24 maxlen: 24
95.107.184.0/21 maxlen: 21
95.107.192.0/24 maxlen: 24
95.107.188.0/22 maxlen: 22
95.107.188.0/24 maxlen: 24
95.107.192.0/22 maxlen: 22
95.107.196.0/22 maxlen: 22
95.107.195.0/24 maxlen: 24
95.107.196.0/23 maxlen: 23
95.107.196.0/24 maxlen: 24
95.107.198.0/23 maxlen: 23
95.107.193.0/24 maxlen: 24
95.107.194.0/24 maxlen: 24
95.107.194.0/23 maxlen: 23
46.255.148.0/24 maxlen: 24
46.255.149.0/24 maxlen: 24
46.255.150.0/24 maxlen: 24
46.255.151.0/24 maxlen: 24
46.255.146.0/24 maxlen: 24
46.255.147.0/24 maxlen: 24
46.255.148.0/22 maxlen: 22
95.107.128.0/21 maxlen: 21
95.107.132.0/24 maxlen: 24
95.107.136.0/24 maxlen: 24
95.107.135.0/24 maxlen: 24
95.107.136.0/21 maxlen: 21
95.107.144.0/23 maxlen: 23
95.107.141.0/24 maxlen: 24
185.118.148.0/22 maxlen: 22
141.8.200.0/21 maxlen: 21
185.122.228.0/24 maxlen: 24
185.122.228.0/23 maxlen: 23
185.122.228.0/22 maxlen: 22
95.107.254.0/23 maxlen: 23
95.107.200.0/24 maxlen: 24
95.107.201.0/24 maxlen: 24
95.107.200.0/21 maxlen: 21
95.107.204.0/22 maxlen: 22
95.107.202.0/23 maxlen: 23
95.107.212.0/23 maxlen: 23
95.107.212.0/24 maxlen: 24
95.107.209.0/24 maxlen: 24
95.107.212.0/22 maxlen: 22
95.107.208.0/23 maxlen: 23
95.107.208.0/21 maxlen: 21
95.107.208.0/22 maxlen: 22
95.107.208.0/20 maxlen: 20
95.107.216.0/22 maxlen: 22
95.107.216.0/21 maxlen: 21
95.107.216.0/23 maxlen: 23
95.107.218.0/23 maxlen: 23
95.107.224.0/20 maxlen: 20
95.107.224.0/22 maxlen: 22
95.107.220.0/23 maxlen: 23
95.107.222.0/23 maxlen: 23
95.107.220.0/22 maxlen: 22
95.107.228.0/24 maxlen: 24
95.107.228.0/22 maxlen: 22
95.107.232.0/22 maxlen: 22
95.107.240.0/23 maxlen: 23
95.107.238.0/23 maxlen: 23
95.107.240.0/22 maxlen: 22
95.107.234.0/23 maxlen: 23
95.107.236.0/22 maxlen: 22
95.107.240.0/20 maxlen: 20
95.107.244.0/22 maxlen: 22
95.107.252.0/22 maxlen: 22
95.107.248.0/24 maxlen: 24
95.107.248.0/23 maxlen: 23
95.107.248.0/22 maxlen: 22
2a03:8480::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 814378970 (0x308a6fda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
Validity
Not Before: Jan 1 14:04:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf93558c86df146201c8d12d418fb2a76fe65d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7e:7b:e7:bf:b8:a5:bb:86:4a:6c:2d:42:f5:
9e:a0:57:15:67:b8:b2:2b:2f:35:cc:df:5f:ed:16:
79:5d:b7:9b:f7:70:55:64:4d:6a:d8:7e:ba:3a:e2:
d7:17:5c:ac:f0:0d:3d:ae:a3:56:fd:28:c0:44:7b:
5e:87:f1:82:dd:29:23:67:a3:5f:72:3c:2e:ef:45:
52:3c:b6:c6:36:cb:d7:df:24:a3:d9:5e:db:7f:7a:
0f:6e:e9:50:ee:54:a9:dc:6f:4b:12:0c:c0:5a:36:
ce:f6:23:f2:1a:c3:c9:a7:b7:00:c4:36:d1:a0:43:
a4:65:c6:e4:fa:88:0c:bc:a4:73:0c:af:ff:b7:a4:
23:ca:2b:dc:bc:60:18:2a:a4:c1:bb:a8:27:8c:64:
50:aa:2d:5b:f3:a0:24:42:a5:31:d7:d4:be:7a:57:
a3:7d:9c:8c:fe:e3:03:b3:b2:6f:cf:ec:7b:b3:da:
e3:9f:24:98:de:c3:a2:ac:60:ce:ab:81:a5:a6:7a:
5c:26:56:ee:38:f3:1b:f0:56:b2:b8:c4:df:57:84:
1e:ca:ee:89:bb:e6:51:a4:23:64:e3:16:0c:25:71:
3c:30:be:20:5f:ba:74:91:b9:ba:3a:cc:fd:d1:26:
fb:68:0d:24:c1:93:5c:6e:4b:b4:79:b9:5e:a7:a8:
06:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:93:55:8C:86:DF:14:62:01:C8:D1:2D:41:8F:B2:A7:6F:E6:5D:16
X509v3 Authority Key Identifier:
keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/z5NVjIbfFGIByNEtQY-yp2_mXRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.144.0/21
95.107.128.0-95.107.147.255
95.107.150.0/24
95.107.156.0/23
95.107.159.0-95.107.174.255
95.107.176.0-95.107.255.255
141.8.200.0/21
185.118.148.0/22
185.122.228.0/22
IPv6:
2a03:8480::/32
Signature Algorithm: sha256WithRSAEncryption
55:0f:30:9b:b4:27:ee:67:7c:ab:4d:2e:fb:7d:3a:ac:f4:37:
8c:49:97:54:9c:78:7f:f0:83:73:0d:75:de:c7:4f:7c:fe:27:
14:b4:4d:76:ab:37:7a:2b:66:66:5c:95:07:da:14:de:d0:16:
89:46:92:90:ea:f4:22:4a:f1:62:fe:d8:be:51:8f:af:de:60:
ed:96:a3:6f:89:1d:7a:a8:e2:59:16:14:67:48:3e:2f:40:ec:
65:ab:71:90:7b:87:be:2f:d2:4b:3e:e6:78:75:77:91:58:3a:
2e:b0:98:81:18:33:1d:5f:72:b5:52:56:62:84:c4:47:9d:18:
b1:ce:4a:46:68:60:79:9d:49:d8:33:70:59:2f:37:6e:a0:9b:
9d:d0:3d:a1:1e:98:b2:21:e0:56:76:1a:f8:28:a0:bb:d1:c4:
72:f6:36:76:1d:15:46:b0:c2:17:04:9f:bd:18:e0:e4:35:5a:
3c:af:76:0d:61:07:49:b1:c2:11:93:57:a9:97:f5:52:6c:ea:
09:32:f7:17:e8:3b:f7:c7:05:2f:d2:37:17:2d:4d:37:53:35:
d0:56:24:31:b7:cb:78:41:39:0e:71:a9:88:0d:75:57:72:5a:
0a:36:4f:b4:a9:b5:6d:02:ee:db:d6:9a:cb:8d:38:8c:8a:78:
9b:33:7f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:21 2023 by rpki-client on console-ams.rpki-client.org