Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/417Ez71QH6VhjueJgadys6cOGA8.roa
File: 417Ez71QH6VhjueJgadys6cOGA8.roa (raw, json)
Hash identifier: T6Q20SJ8nwtaKvcDFDrkqVy87jZ/IoyXpxyEeBMgnl8=
Subject key identifier: E3:5E:C4:CF:BD:50:1F:A5:61:8E:E7:89:81:A7:72:B3:A7:0E:18:0F
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 35BBA612
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/417Ez71QH6VhjueJgadys6cOGA8.roa
Signing time: Fri 11 Feb 2022 15:56:34 +0000
ROA not before: Fri 11 Feb 2022 15:56:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35699
IP address blocks: 45.145.244.0/22 maxlen: 24
62.56.192.0/20 maxlen: 24
216.147.96.0/20 maxlen: 24
87.236.180.0/22 maxlen: 24
45.230.12.0/22 maxlen: 24
91.126.32.0/19 maxlen: 24
91.126.64.0/19 maxlen: 24
185.239.36.0/22 maxlen: 24
147.161.64.0/18 maxlen: 24
91.126.16.0/20 maxlen: 24
91.126.160.0/19 maxlen: 24
74.126.176.0/20 maxlen: 24
143.131.192.0/18 maxlen: 24
110.93.8.0/22 maxlen: 24
185.203.208.0/22 maxlen: 24
91.126.96.0/19 maxlen: 24
64.190.114.0/23 maxlen: 24
91.126.128.0/19 maxlen: 24
135.129.224.0/20 maxlen: 24
98.96.184.0/21 maxlen: 24
103.202.232.0/22 maxlen: 24
45.130.132.0/22 maxlen: 24
91.126.192.0/19 maxlen: 24
45.133.138.0/23 maxlen: 24
147.136.252.0/23 maxlen: 24
91.126.224.0/19 maxlen: 24
91.126.232.0/21 maxlen: 24
173.243.32.0/20 maxlen: 24
2a00:1af4::/32 maxlen: 32
2a00:1af4:1000::/48 maxlen: 48
2a00:1af0::/29 maxlen: 29
2a00:1af4:1003::/48 maxlen: 48
2a00:1af1::/32 maxlen: 32
2a00:1af1::/36 maxlen: 36
2a00:1af2::/32 maxlen: 32
2a00:1af3::/32 maxlen: 32
2a00:1af0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901490194 (0x35bba612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Feb 11 15:56:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e35ec4cfbd501fa5618ee78981a772b3a70e180f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6c:af:98:7b:8f:2e:f7:78:f9:34:75:26:61:
93:87:29:82:e4:1c:96:ac:b9:da:d3:41:a0:2d:70:
54:78:57:99:64:f4:5d:c2:c8:58:08:36:c9:70:2f:
1d:a3:23:2d:81:51:df:0f:58:9a:74:36:7d:7a:88:
85:86:3f:75:c4:35:57:f4:cf:e0:27:9a:1c:1f:3a:
35:44:63:85:6c:7c:e7:9f:84:6b:60:73:c9:40:b3:
bf:42:e5:4f:87:73:d1:73:d9:ad:87:27:39:60:39:
81:4d:c2:e2:a6:b5:b7:b1:94:89:ce:c9:4e:1b:76:
3e:90:85:25:b3:9b:f7:e8:19:99:5e:8a:ea:17:f8:
d2:44:41:9d:11:8a:d8:fe:83:96:19:fb:e4:79:04:
d8:c8:91:e7:f2:e6:15:ae:3e:0c:44:bb:1b:35:b2:
9a:39:f9:e4:a3:d3:4c:7c:d4:90:06:67:3c:33:7b:
c3:74:fc:79:7a:f8:3c:f0:0f:d3:03:ab:63:eb:93:
c4:01:2a:66:54:aa:42:65:0f:16:f3:7f:4f:9d:2c:
8c:52:8a:59:1e:02:9a:d0:92:9d:a3:15:92:52:d6:
c7:0b:52:d5:34:67:7a:87:34:f3:f1:89:53:b6:fe:
d2:02:ce:2f:f0:74:d0:e4:9c:1a:77:11:6d:16:ea:
d1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5E:C4:CF:BD:50:1F:A5:61:8E:E7:89:81:A7:72:B3:A7:0E:18:0F
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/417Ez71QH6VhjueJgadys6cOGA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.132.0/22
45.133.138.0/23
45.145.244.0/22
45.230.12.0/22
62.56.192.0/20
64.190.114.0/23
74.126.176.0/20
87.236.180.0/22
91.126.16.0-91.126.255.255
98.96.184.0/21
103.202.232.0/22
110.93.8.0/22
135.129.224.0/20
143.131.192.0/18
147.136.252.0/23
147.161.64.0/18
173.243.32.0/20
185.203.208.0/22
185.239.36.0/22
216.147.96.0/20
IPv6:
2a00:1af0::/29
Signature Algorithm: sha256WithRSAEncryption
17:61:68:91:f2:86:c9:df:79:fc:e8:e9:c9:4d:f0:da:55:07:
f9:5f:4a:87:52:fd:23:09:b4:3f:bc:e8:6a:bc:7a:41:5f:0a:
bc:30:99:58:0a:c9:2a:c1:54:0b:14:74:88:5c:77:f3:99:da:
04:55:ee:19:06:b7:57:8e:54:7c:d4:7e:3c:1d:6a:e0:56:a5:
f2:4c:58:82:1e:93:d7:b2:2e:6f:c5:9e:3f:3d:e9:98:51:28:
42:1f:79:0c:b6:61:a6:6c:d0:c4:83:64:eb:19:f2:fe:ce:88:
5b:d1:01:42:05:3d:05:ba:0a:68:2b:88:a8:13:fe:d2:f7:f3:
46:5f:2b:59:58:94:9e:b1:c7:63:04:f1:0a:95:98:7c:fd:68:
64:2e:8a:eb:e3:48:fd:d5:32:cb:2a:7b:f1:97:c4:c9:32:e1:
ef:b9:b9:3f:31:76:6c:e9:11:f6:53:a5:0d:26:4c:75:c3:b2:
73:64:a9:d5:b8:c1:23:94:03:8f:17:c2:8a:07:7e:4c:b1:17:
10:fe:60:4e:be:af:3b:9d:1f:66:7d:71:6a:ac:92:85:96:87:
f7:f9:8c:b7:e9:34:13:0a:b4:99:4e:68:bd:be:1b:c9:dd:9c:
c1:83:e2:e8:e9:16:38:fe:31:0f:4c:e3:a5:be:9c:9d:78:c8:
52:60:bb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:56 2023 by rpki-client on console-ams.rpki-client.org