Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/SsZtu4kkLyMd3t2CsCvJf_N3m8g.roa
File: SsZtu4kkLyMd3t2CsCvJf_N3m8g.roa (raw, json)
Hash identifier: znWSHC23TtzBhuq2EGy+V3//ozv+2ihIVVBlqA5SpMA=
Subject key identifier: 4A:C6:6D:BB:89:24:2F:23:1D:DE:DD:82:B0:2B:C9:7F:F3:77:9B:C8
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0184A39EB2117EC948512AA077283D84788A
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/SsZtu4kkLyMd3t2CsCvJf_N3m8g.roa
Signing time: Wed 23 Nov 2022 08:33:17 +0000
ROA not before: Wed 23 Nov 2022 08:33:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35196
IP address blocks: 185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.5.250.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.50.0/24 maxlen: 24
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
139.28.220.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.89.65.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
95.214.10.0/24 maxlen: 24
95.214.11.0/24 maxlen: 24
95.214.9.0/24 maxlen: 24
45.9.73.184/32 maxlen: 32
195.66.87.0/24 maxlen: 24
45.9.73.179/32 maxlen: 32
94.142.136.0/21 maxlen: 21
94.142.138.0/24 maxlen: 24
185.105.119.0/24 maxlen: 24
94.142.139.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
185.87.48.18/32 maxlen: 32
185.125.218.0/23 maxlen: 23
185.125.216.0/22 maxlen: 22
94.142.136.67/32 maxlen: 32
185.105.116.0/24 maxlen: 24
185.105.118.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.125.229.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.125.228.0/22 maxlen: 22
185.125.228.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
45.9.73.236/32 maxlen: 32
194.67.192.0/19 maxlen: 19
194.67.196.0/22 maxlen: 22
194.67.194.0/23 maxlen: 23
193.124.176.0/20 maxlen: 20
45.128.176.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
195.47.250.0/24 maxlen: 24
194.67.200.0/21 maxlen: 21
194.67.208.0/20 maxlen: 20
2a0a:9300:1000::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a09:5302:ffff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a3:9e:b2:11:7e:c9:48:51:2a:a0:77:28:3d:84:78:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Nov 23 08:33:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ac66dbb89242f231ddedd82b02bc97ff3779bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:30:b4:cb:42:04:14:40:00:10:09:e1:c3:f4:
ae:de:8e:09:9c:9c:9e:ee:46:31:aa:f4:be:84:38:
d2:fa:e2:65:c1:ff:fa:21:f3:23:d7:52:76:14:10:
47:36:2a:1d:49:2b:70:a0:df:99:a4:5c:d8:f3:fd:
c6:ff:53:11:8f:18:ea:8b:1f:3b:fc:06:45:5a:d5:
96:bd:59:8c:ac:15:dd:ce:4d:37:7f:2e:75:24:b7:
57:65:6a:4d:5a:d9:72:e6:10:c4:28:78:48:61:50:
d6:ae:e9:f2:c3:72:ae:d6:ed:da:83:33:e9:9e:09:
52:14:52:63:d4:f9:94:68:81:4c:67:a7:ca:27:72:
65:1f:ad:40:74:df:a4:7b:56:f2:59:d7:69:fa:9b:
70:1d:6f:7f:69:be:e1:ae:50:89:1d:75:ea:1c:19:
68:b3:14:0e:c3:27:bf:bf:dc:ff:66:59:d3:e2:08:
3a:00:75:03:66:f0:d0:1c:d1:88:d4:f4:ad:df:20:
d3:70:5f:2d:a6:c6:dd:e0:fd:a6:22:1c:6b:7e:0d:
69:2c:00:a0:d4:8b:44:7b:1e:1e:f7:cc:68:18:9a:
f2:c3:79:53:89:9f:e4:f5:c8:83:7d:a5:1a:d4:dd:
60:dc:68:7a:bc:c8:f0:16:d0:03:f4:fd:39:36:0d:
c5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C6:6D:BB:89:24:2F:23:1D:DE:DD:82:B0:2B:C9:7F:F3:77:9B:C8
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/SsZtu4kkLyMd3t2CsCvJf_N3m8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.73.179/32
45.9.73.184/32
45.9.73.236/32
45.89.65.0-45.89.67.255
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
95.214.9.0-95.214.11.255
139.28.220.0/24
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/22
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
193.124.176.0/20
194.67.192.0/19
195.47.250.0/24
195.66.87.0/24
IPv6:
2a09:5302:ffff::/48
2a0a:9300:1000::/48
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
Signature Algorithm: sha256WithRSAEncryption
34:cd:17:ee:9b:d5:1a:28:8d:da:8c:b5:ca:3a:63:21:16:b5:
e8:2a:83:ff:1d:f0:cf:ac:c7:46:5a:a5:d5:49:b4:39:42:cb:
68:9e:9d:ab:9e:a2:ab:63:1a:39:87:b8:36:3b:37:5a:17:54:
9c:da:01:fa:d8:e0:7e:bb:4e:a4:07:1a:3a:e8:db:26:d0:16:
7b:72:e7:3c:2c:d7:85:86:32:a7:53:ad:1b:8a:bd:54:31:50:
46:c9:91:d4:5a:9d:33:52:ff:34:f3:51:a8:45:f4:c5:17:2c:
a4:55:ce:cb:86:0c:f9:44:a8:ee:9b:18:96:16:3c:67:83:90:
10:bf:f2:4e:10:6b:6c:ef:01:e7:ce:40:7e:71:ba:83:d2:95:
f6:17:4b:f1:be:5f:b1:e1:26:56:3d:7b:b2:eb:77:24:4e:91:
6f:05:91:86:2c:e7:8e:36:b1:73:b1:5d:5f:e9:fe:65:e1:6d:
aa:53:f0:4a:ea:b9:0b:48:4e:30:ab:f0:23:b5:55:86:26:84:
2c:dc:4b:c1:0a:5f:47:a6:b6:29:98:df:9f:09:90:9a:a9:6e:
59:5b:44:52:82:32:1d:2c:9d:fd:89:07:c8:b9:66:3f:08:28:
ba:1f:ad:e4:de:5e:22:27:a6:52:d5:16:b4:17:bd:96:cd:f8:
62:1e:80:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:37 2023 by rpki-client on console-fra.rpki-client.org