Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/Lhxg9R0qeUthZqtN2JAKxtqh4qU.roa
File: Lhxg9R0qeUthZqtN2JAKxtqh4qU.roa (raw, json)
Hash identifier: BtW/020WwxN7Pr/KGtywPNSPqgXYBVvMwYdRRGv2Zgo=
Subject key identifier: 2E:1C:60:F5:1D:2A:79:4B:61:66:AB:4D:D8:90:0A:C6:DA:A1:E2:A5
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 03E2EABC
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/Lhxg9R0qeUthZqtN2JAKxtqh4qU.roa
Signing time: Tue 04 Jan 2022 09:05:16 +0000
ROA not before: Tue 04 Jan 2022 09:05:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30860
IP address blocks: 45.11.58.0/24 maxlen: 24
45.11.57.0/24 maxlen: 24
45.11.56.0/24 maxlen: 24
195.66.210.0/24 maxlen: 24
45.11.59.0/24 maxlen: 24
176.119.24.0/24 maxlen: 24
176.119.25.0/24 maxlen: 24
176.119.26.0/24 maxlen: 24
176.119.26.0/23 maxlen: 23
176.119.30.0/24 maxlen: 24
176.119.31.0/24 maxlen: 24
176.119.29.0/24 maxlen: 24
176.119.27.0/24 maxlen: 24
176.119.28.0/24 maxlen: 24
95.214.233.0/24 maxlen: 24
95.214.232.0/24 maxlen: 24
95.214.234.0/23 maxlen: 23
45.134.172.0/22 maxlen: 24
152.89.63.0/24 maxlen: 24
152.89.61.0/24 maxlen: 24
152.89.62.0/24 maxlen: 24
152.89.60.0/24 maxlen: 24
91.208.115.0/24 maxlen: 24
45.12.3.0/24 maxlen: 24
45.12.0.0/22 maxlen: 24
45.12.1.0/24 maxlen: 24
193.23.181.0/24 maxlen: 24
31.42.187.0/24 maxlen: 24
185.66.88.0/23 maxlen: 23
185.66.90.0/24 maxlen: 24
185.66.91.0/24 maxlen: 24
62.182.80.0/23 maxlen: 23
62.182.85.0/24 maxlen: 24
62.182.84.0/24 maxlen: 24
62.182.82.0/23 maxlen: 23
185.254.198.0/24 maxlen: 24
185.254.199.0/24 maxlen: 24
185.254.196.0/23 maxlen: 23
62.182.87.0/24 maxlen: 24
62.182.86.0/24 maxlen: 24
31.42.186.0/24 maxlen: 24
31.42.184.0/23 maxlen: 23
2a09:2dc0::/29 maxlen: 29
2a09:2dc1::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65202876 (0x3e2eabc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Jan 4 09:05:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e1c60f51d2a794b6166ab4dd8900ac6daa1e2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:ba:2f:e6:0a:1e:d2:c3:09:8b:ef:f1:0e:
a6:c9:1f:a6:a1:4d:e8:d8:36:94:be:12:89:f3:49:
11:c5:42:60:42:e2:42:aa:78:80:92:8e:e3:b1:c6:
a1:35:91:39:44:42:9e:b8:5d:a5:2c:e2:be:b2:f4:
4d:86:14:bf:41:cf:92:4e:15:7e:fd:01:40:26:8d:
91:02:51:ea:a5:88:c6:99:8e:f9:42:cc:7a:d4:7d:
bd:71:8a:7e:d9:45:50:5b:c7:a9:41:87:10:4b:6e:
1f:fe:46:92:67:3c:72:46:35:ed:6f:67:29:96:a0:
a0:4a:54:3a:b7:fc:bc:9b:17:c5:14:e1:78:99:79:
13:ef:c4:48:b3:20:cd:cf:2a:9a:88:19:8e:c6:7d:
c0:4a:17:c1:5d:ad:03:de:32:1f:7b:a3:4e:ea:34:
19:f7:71:75:dd:3e:fa:a9:0f:e6:0c:dd:dd:d4:f8:
c4:ee:d3:d6:33:4f:ec:84:e7:0d:0e:8d:66:40:c7:
51:3c:a1:1f:93:4e:57:b1:0e:9a:f0:e8:aa:83:7c:
b5:85:50:9b:3c:ec:49:8e:bb:a7:8c:7e:13:f3:8f:
15:b1:29:65:cf:c9:38:3e:cf:d1:d1:00:a0:a0:f4:
5a:8d:38:11:86:cb:fe:e9:c4:93:50:e1:02:d2:53:
44:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1C:60:F5:1D:2A:79:4B:61:66:AB:4D:D8:90:0A:C6:DA:A1:E2:A5
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/Lhxg9R0qeUthZqtN2JAKxtqh4qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.184.0/22
45.11.56.0/22
45.12.0.0/22
45.134.172.0/22
62.182.80.0/21
91.208.115.0/24
95.214.232.0/22
152.89.60.0/22
176.119.24.0/21
185.66.88.0/22
185.254.196.0/22
193.23.181.0/24
195.66.210.0/24
IPv6:
2a09:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
10:19:20:d6:d8:82:94:75:a1:b3:9d:1c:09:75:db:72:c6:9a:
e2:7c:fd:7d:14:d5:9d:de:8e:a1:79:31:df:89:da:3a:b4:e3:
0d:1f:b7:5e:fe:46:f4:a1:86:5b:d8:a6:a8:b2:97:eb:0a:e1:
bd:3e:8a:83:43:f4:c1:de:17:a3:79:06:23:3e:a5:f9:df:67:
71:51:1e:86:39:77:67:6b:a6:b2:98:65:fe:d7:09:cd:ef:ce:
61:a5:e6:18:d5:65:65:de:ed:4f:5a:cd:e0:1b:4f:d9:91:1f:
b9:7c:9a:4a:e3:0a:71:41:25:c6:97:4d:e5:0c:66:34:46:1f:
9e:d9:ba:8b:c3:ff:fc:cd:bc:2e:c8:b7:c1:34:8b:6f:a9:58:
6c:eb:38:90:8e:1d:7e:0f:93:db:00:e0:ea:c5:38:32:48:b4:
fe:87:1c:28:d0:a6:5e:53:28:f6:b8:02:18:9b:f4:da:55:1d:
77:5c:e4:21:25:fc:6c:1c:0a:d1:9b:9f:27:03:35:02:c0:61:
a2:15:50:ea:10:d0:18:03:98:9b:15:5e:2a:67:7a:7d:1b:65:
42:1f:a3:a9:a1:32:c8:8a:04:91:b5:0c:73:1f:98:5f:13:ff:
3a:44:b4:77:0e:02:fe:81:ca:a0:52:bb:d8:10:a2:da:7b:be:
86:68:2a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:21 2024 by rpki-client on console-fra.rpki-client.org