Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/jIzLX5CQxDDEs4nC4MrLwOuEyUI.roa
File: jIzLX5CQxDDEs4nC4MrLwOuEyUI.roa (raw, json)
Hash identifier: HaqVcTMgb9+m1YEVhDX+jM74wesj8qINE/joqD6DU1M=
Subject key identifier: 8C:8C:CB:5F:90:90:C4:30:C4:B3:89:C2:E0:CA:CB:C0:EB:84:C9:42
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0362F35A
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/jIzLX5CQxDDEs4nC4MrLwOuEyUI.roa
Signing time: Tue 12 Apr 2022 15:32:55 +0000
ROA not before: Tue 12 Apr 2022 15:32:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.134.40.0/22 maxlen: 24
212.63.118.0/24 maxlen: 24
212.63.117.0/24 maxlen: 24
212.63.116.0/24 maxlen: 24
212.63.121.0/24 maxlen: 24
212.63.123.0/24 maxlen: 24
212.63.122.0/24 maxlen: 24
185.94.48.0/22 maxlen: 24
185.131.12.0/22 maxlen: 22
85.217.132.0/24 maxlen: 24
85.217.129.0/24 maxlen: 24
85.217.139.0/24 maxlen: 24
85.217.138.0/24 maxlen: 24
85.217.137.0/24 maxlen: 24
85.217.136.0/24 maxlen: 24
85.217.135.0/24 maxlen: 24
85.217.134.0/24 maxlen: 24
85.217.133.0/24 maxlen: 24
85.217.141.0/24 maxlen: 24
85.217.143.0/24 maxlen: 24
85.217.152.0/24 maxlen: 24
85.217.151.0/24 maxlen: 24
85.217.150.0/24 maxlen: 24
85.217.147.0/24 maxlen: 24
85.217.146.0/24 maxlen: 24
85.217.155.0/24 maxlen: 24
85.217.154.0/24 maxlen: 24
85.217.153.0/24 maxlen: 24
85.217.159.0/24 maxlen: 24
85.217.158.0/24 maxlen: 24
85.217.157.0/24 maxlen: 24
85.217.156.0/24 maxlen: 24
185.130.24.0/23 maxlen: 24
185.130.26.0/23 maxlen: 24
185.234.184.0/24 maxlen: 24
185.234.186.0/23 maxlen: 23
185.234.185.0/24 maxlen: 24
185.44.233.0/24 maxlen: 24
185.44.234.0/23 maxlen: 24
185.162.172.0/23 maxlen: 24
185.162.175.0/24 maxlen: 24
185.162.174.0/24 maxlen: 24
195.82.105.0/24 maxlen: 24
195.82.104.0/24 maxlen: 24
195.82.106.0/24 maxlen: 24
195.82.124.0/24 maxlen: 24
185.196.203.0/24 maxlen: 24
185.196.202.0/24 maxlen: 24
185.196.200.0/23 maxlen: 24
88.98.98.0/24 maxlen: 24
88.98.96.0/20 maxlen: 24
88.98.96.0/23 maxlen: 23
88.98.104.0/23 maxlen: 24
88.98.100.0/22 maxlen: 24
88.98.99.0/24 maxlen: 24
88.98.110.0/24 maxlen: 24
88.98.108.0/22 maxlen: 24
88.98.106.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56816474 (0x362f35a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Apr 12 15:32:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c8ccb5f9090c430c4b389c2e0cacbc0eb84c942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d0:23:44:a4:26:7e:c1:6a:96:56:77:9d:b2:
54:b4:5b:0d:19:3a:9f:58:2c:4c:ba:1a:9d:a8:dc:
a4:ec:d0:64:d5:6f:ac:10:00:9c:14:ef:2b:3a:4e:
26:e0:0a:c6:5f:53:d3:27:42:e1:ee:53:b9:87:d5:
93:ae:57:66:f4:4f:c8:73:6f:d5:49:08:6c:46:40:
18:a5:1c:d5:d1:91:1f:d4:a7:48:ff:3f:14:ac:36:
98:28:b1:28:fd:14:3c:0e:3a:a0:44:05:7c:82:48:
38:d0:1d:08:b3:93:1b:b3:25:0f:bf:15:da:76:58:
c3:c5:8a:19:18:95:72:fc:51:24:0d:85:f2:da:69:
80:e9:a1:0a:ee:dd:7a:5b:8b:55:7a:92:f1:d8:3e:
e9:7c:33:50:47:e2:bd:1d:62:24:d7:be:4e:03:dd:
d5:99:79:66:16:96:5c:e5:b9:2a:13:70:e5:34:e2:
4a:01:f4:57:7d:02:ee:f1:e2:58:20:ef:fa:1b:ae:
68:82:f0:b6:3f:5b:ed:93:28:fc:97:3e:b7:33:2c:
32:1b:1f:5e:81:f6:0c:df:f0:6e:b6:5b:e6:be:6c:
07:33:5a:9a:5c:dc:1f:4f:88:55:f5:5b:e8:4d:ff:
40:64:8d:d5:95:fe:03:cf:a9:84:e5:fc:67:52:ba:
ae:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8C:CB:5F:90:90:C4:30:C4:B3:89:C2:E0:CA:CB:C0:EB:84:C9:42
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/jIzLX5CQxDDEs4nC4MrLwOuEyUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.129.0/24
85.217.132.0-85.217.139.255
85.217.141.0/24
85.217.143.0/24
85.217.146.0/23
85.217.150.0-85.217.159.255
88.98.96.0/20
185.44.233.0-185.44.235.255
185.94.48.0/22
185.130.24.0/22
185.131.12.0/22
185.134.40.0/22
185.162.172.0/22
185.196.200.0/22
185.234.184.0/22
195.82.104.0-195.82.106.255
195.82.124.0/24
212.63.116.0-212.63.118.255
212.63.121.0-212.63.123.255
Signature Algorithm: sha256WithRSAEncryption
46:2d:30:f4:e9:c2:cc:07:2d:42:cc:bd:28:7a:9b:b7:09:7c:
6f:60:ab:41:08:10:b9:bd:6f:e5:1a:40:48:3c:44:c3:29:04:
b6:1b:30:b3:90:c5:56:86:7c:9b:8c:9c:6d:f8:b8:96:d5:25:
98:f0:c7:bb:83:68:06:b1:18:9e:50:83:e6:4c:33:0b:a0:4e:
fe:c0:1b:39:8d:b1:f9:63:da:63:d7:c2:c1:db:53:50:68:66:
3d:20:86:92:02:77:23:4e:fd:09:81:33:4c:3f:3d:6e:75:80:
3c:34:37:48:c3:2a:71:e9:cb:fd:d3:68:dc:10:e3:15:6b:7b:
7d:94:27:1c:4f:8b:79:0d:d7:a5:97:3e:75:0c:b7:d4:23:37:
86:c1:4e:26:9f:fd:9a:92:b6:45:28:6d:81:65:0e:f7:0f:9d:
9e:af:86:71:2e:45:58:70:91:9c:3e:97:95:68:e4:3c:7a:93:
ff:c2:72:fc:72:9a:1e:4e:be:78:a5:3e:cf:1d:5f:a0:ca:9e:
af:62:2d:20:36:01:3c:4d:3a:35:be:53:e9:87:ec:08:a8:86:
03:5e:28:29:04:10:18:7d:f3:ac:fd:39:a7:ef:3f:88:86:d6:
6e:4b:84:84:28:a1:3d:16:05:5b:54:4e:ec:7d:a0:2b:7e:02:
45:12:56:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:51 2024 by rpki-client on console-ams.rpki-client.org