Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/whOXDefNCJ448CBAgNFyKZ4m3hw.roa
File: whOXDefNCJ448CBAgNFyKZ4m3hw.roa (raw, json)
Hash identifier: GJfVSC3Kd77mwsbRlN6+hO/IBGTiFS1flfbWHgSkpXk=
Subject key identifier: C2:13:97:0D:E7:CD:08:9E:38:F0:20:40:80:D1:72:29:9E:26:DE:1C
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 02961D9F
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/whOXDefNCJ448CBAgNFyKZ4m3hw.roa
Signing time: Tue 11 Jan 2022 11:27:40 +0000
ROA not before: Tue 11 Jan 2022 11:27:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.134.40.0/22 maxlen: 24
212.63.118.0/24 maxlen: 24
212.63.117.0/24 maxlen: 24
212.63.116.0/24 maxlen: 24
212.63.121.0/24 maxlen: 24
212.63.123.0/24 maxlen: 24
212.63.122.0/24 maxlen: 24
185.94.48.0/22 maxlen: 24
85.217.132.0/24 maxlen: 24
85.217.129.0/24 maxlen: 24
85.217.139.0/24 maxlen: 24
85.217.138.0/24 maxlen: 24
85.217.137.0/24 maxlen: 24
85.217.136.0/24 maxlen: 24
85.217.135.0/24 maxlen: 24
85.217.134.0/24 maxlen: 24
85.217.133.0/24 maxlen: 24
85.217.141.0/24 maxlen: 24
85.217.143.0/24 maxlen: 24
85.217.152.0/24 maxlen: 24
85.217.151.0/24 maxlen: 24
85.217.150.0/24 maxlen: 24
85.217.147.0/24 maxlen: 24
85.217.146.0/24 maxlen: 24
85.217.155.0/24 maxlen: 24
85.217.154.0/24 maxlen: 24
85.217.153.0/24 maxlen: 24
85.217.159.0/24 maxlen: 24
85.217.158.0/24 maxlen: 24
85.217.157.0/24 maxlen: 24
85.217.156.0/24 maxlen: 24
185.130.24.0/23 maxlen: 24
185.130.26.0/23 maxlen: 24
185.44.233.0/24 maxlen: 24
185.44.234.0/23 maxlen: 24
185.162.172.0/23 maxlen: 24
185.162.175.0/24 maxlen: 24
185.162.174.0/24 maxlen: 24
195.82.105.0/24 maxlen: 24
195.82.104.0/24 maxlen: 24
195.82.106.0/24 maxlen: 24
195.82.124.0/24 maxlen: 24
185.196.202.0/24 maxlen: 24
185.196.200.0/23 maxlen: 24
88.98.98.0/24 maxlen: 24
88.98.96.0/20 maxlen: 24
88.98.96.0/23 maxlen: 23
88.98.104.0/23 maxlen: 24
88.98.100.0/22 maxlen: 24
88.98.99.0/24 maxlen: 24
88.98.110.0/24 maxlen: 24
88.98.108.0/22 maxlen: 24
88.98.106.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43392415 (0x2961d9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 11 11:27:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c213970de7cd089e38f0204080d172299e26de1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e0:32:b8:db:1f:80:7d:41:90:c9:cb:a9:49:
1b:77:7e:29:08:d2:9b:96:75:3f:33:88:3a:10:34:
88:f5:f6:5f:a1:93:c9:94:65:53:ac:a7:f4:af:fa:
d7:a8:b3:cb:de:71:1a:0a:cf:7f:c3:51:46:5f:e7:
46:88:4d:be:69:74:58:14:9c:8a:6e:96:b3:52:d8:
ca:de:a9:04:26:8f:e1:97:1a:5b:82:99:1a:64:df:
7f:76:20:54:8e:b3:df:d5:5a:db:4a:0e:c3:a9:af:
44:61:b8:9c:f1:14:36:2a:1a:37:96:1d:ab:1f:e2:
1a:31:58:0f:76:e1:91:52:09:82:aa:bf:0a:53:43:
0e:98:11:10:16:8d:28:00:16:19:8e:19:cd:e7:0f:
1f:97:20:ee:e7:67:27:4d:73:0e:df:76:9f:3f:64:
75:e2:a0:4b:ef:b8:38:db:ad:8a:2b:89:da:d9:45:
00:23:e9:7b:69:0b:6c:c5:7f:b1:87:cb:6f:7b:69:
8b:21:40:86:2a:c2:ce:d7:53:5f:a8:5f:30:77:bc:
8a:da:cc:32:c5:cb:bd:92:c1:a4:eb:c1:59:47:ff:
17:de:60:4a:2d:0b:de:ce:dc:fd:08:9c:49:76:81:
74:da:3c:1c:ea:24:4e:60:9b:b2:38:38:7d:0e:93:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:13:97:0D:E7:CD:08:9E:38:F0:20:40:80:D1:72:29:9E:26:DE:1C
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/whOXDefNCJ448CBAgNFyKZ4m3hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.129.0/24
85.217.132.0-85.217.139.255
85.217.141.0/24
85.217.143.0/24
85.217.146.0/23
85.217.150.0-85.217.159.255
88.98.96.0/20
185.44.233.0-185.44.235.255
185.94.48.0/22
185.130.24.0/22
185.134.40.0/22
185.162.172.0/22
185.196.200.0-185.196.202.255
195.82.104.0-195.82.106.255
195.82.124.0/24
212.63.116.0-212.63.118.255
212.63.121.0-212.63.123.255
Signature Algorithm: sha256WithRSAEncryption
31:5c:d2:3b:31:89:47:73:cf:d7:ba:83:46:22:a4:d0:0b:5e:
02:aa:17:53:2b:86:1f:6e:26:3b:7d:e5:0b:5b:db:76:fd:b2:
e2:01:c0:87:84:83:bc:7c:42:08:9d:36:35:1c:42:11:22:da:
46:81:fa:ac:97:4e:e9:2b:73:62:2e:c6:08:b9:8b:cf:05:7c:
ec:16:0b:13:7e:57:5b:2f:a5:8d:2a:a9:54:7d:16:d2:e9:2c:
94:84:15:4a:3e:70:b9:2f:98:e8:62:d9:d1:f9:0a:bf:24:c1:
11:8e:5a:ea:e0:01:d6:34:e4:c6:1e:fe:f8:77:ab:66:27:6e:
bd:20:36:a6:36:70:5e:14:07:82:f1:1b:9b:c9:56:b1:50:2a:
a5:8f:86:80:81:60:83:a6:1c:c9:97:fa:07:ef:ca:5b:52:71:
9e:51:41:61:83:c6:7f:da:6c:28:cb:bf:77:77:31:60:cd:2c:
0c:9d:92:b1:5f:33:a5:77:46:fe:9d:c1:66:ad:19:de:2e:d9:
a7:42:22:96:8b:10:b7:14:37:cd:6e:71:8d:ee:23:6e:8a:2d:
fe:82:05:fc:e9:6e:3c:f5:4e:73:6c:0a:1c:c9:ed:2e:5f:4f:
da:5d:49:a0:69:70:8e:62:df:78:d7:e3:da:3e:0a:f4:ae:bd:
ce:1c:42:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:51 2024 by rpki-client on console-ams.rpki-client.org