Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/727qNo_SBWgvIQEWtB81tuP9ins.roa
File: 727qNo_SBWgvIQEWtB81tuP9ins.roa (raw, json)
Hash identifier: 0RIWK70UwX+u6Cu0IV4JnUqRR6JTHBqPh2O6iphKmpk=
Subject key identifier: EF:6E:EA:36:8F:D2:05:68:2F:21:01:16:B4:1F:35:B6:E3:FD:8A:7B
Certificate issuer: /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Certificate serial: 09E0D607
Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/727qNo_SBWgvIQEWtB81tuP9ins.roa
Signing time: Sat 01 Jan 2022 06:54:35 +0000
ROA not before: Sat 01 Jan 2022 06:54:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44901
IP address blocks: 185.206.145.0/24 maxlen: 24
185.206.144.0/24 maxlen: 24
185.206.147.0/24 maxlen: 24
185.206.146.0/24 maxlen: 24
212.73.150.0/24 maxlen: 24
94.156.35.0/24 maxlen: 24
91.92.111.0/24 maxlen: 24
91.92.108.0/24 maxlen: 24
91.92.120.0/24 maxlen: 24
91.92.128.0/24 maxlen: 24
91.92.136.0/24 maxlen: 24
91.92.144.0/24 maxlen: 24
94.156.144.0/24 maxlen: 24
185.203.117.0/24 maxlen: 24
185.203.116.0/24 maxlen: 24
185.203.118.0/24 maxlen: 24
185.203.119.0/24 maxlen: 24
88.80.145.0/24 maxlen: 24
88.80.151.0/24 maxlen: 24
88.80.150.0/24 maxlen: 24
88.80.148.0/24 maxlen: 24
88.80.147.0/24 maxlen: 24
88.80.149.0/24 maxlen: 24
88.80.146.0/24 maxlen: 24
185.141.63.0/24 maxlen: 24
185.141.62.0/24 maxlen: 24
185.141.61.0/24 maxlen: 24
185.205.210.0/24 maxlen: 24
185.205.209.0/24 maxlen: 24
85.217.170.0/24 maxlen: 24
85.217.171.0/24 maxlen: 24
94.156.189.0/24 maxlen: 24
193.37.213.0/24 maxlen: 24
193.37.212.0/24 maxlen: 24
193.37.215.0/24 maxlen: 24
193.37.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165729799 (0x9e0d607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Validity
Not Before: Jan 1 06:54:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef6eea368fd205682f210116b41f35b6e3fd8a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:2d:81:ef:39:f5:4d:07:1d:da:25:9d:19:
99:12:cc:e9:79:9d:c2:3b:dd:29:7e:1c:d9:91:29:
5f:25:25:b8:41:fa:5c:90:ad:69:f5:19:8d:24:66:
9b:a0:df:d0:b4:3c:a9:cc:01:bb:f4:93:90:fd:1f:
b3:13:0e:0f:60:a6:7d:88:8b:7a:f4:c5:9b:c3:4b:
73:b3:15:04:d3:6c:b6:ae:f5:02:10:25:82:89:54:
33:86:a4:c4:a4:03:ca:d2:39:c5:11:95:1d:5a:fd:
2e:f3:c8:d6:fa:6b:96:c3:93:f4:f2:26:f1:16:05:
32:1d:94:0d:68:45:1a:60:01:cd:37:b6:aa:a4:20:
1c:f7:0f:90:23:98:08:6c:a1:70:ea:5b:7d:f8:67:
02:95:aa:6c:a1:ea:c4:2f:dc:0f:8b:ec:f2:12:f1:
e7:4a:62:56:c6:80:f6:7b:a0:a5:86:f2:a2:2f:dc:
dd:39:3b:8b:b9:0c:5d:d2:d9:0a:96:73:6f:90:1a:
b7:ff:16:b8:e4:5d:19:88:dd:da:2c:1b:41:df:8e:
01:9d:a1:20:c7:24:e0:ef:f4:e4:e8:91:7e:57:27:
bc:63:3a:61:c3:82:92:9d:75:4e:a4:8f:f9:f9:49:
e5:32:c8:22:80:52:fd:dd:01:25:3f:9b:07:15:d3:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6E:EA:36:8F:D2:05:68:2F:21:01:16:B4:1F:35:B6:E3:FD:8A:7B
X509v3 Authority Key Identifier:
keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/727qNo_SBWgvIQEWtB81tuP9ins.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.170.0/23
88.80.145.0-88.80.151.255
91.92.108.0/24
91.92.111.0/24
91.92.120.0/24
91.92.128.0/24
91.92.136.0/24
91.92.144.0/24
94.156.35.0/24
94.156.144.0/24
94.156.189.0/24
185.141.61.0-185.141.63.255
185.203.116.0/22
185.205.209.0-185.205.210.255
185.206.144.0/22
193.37.212.0/22
212.73.150.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:63:59:f9:0c:37:f2:c1:f1:6a:b7:20:7e:3c:6e:55:90:9b:
c7:47:10:37:83:36:85:7b:8b:1d:90:5a:41:1a:2b:de:1b:2d:
cc:c1:b3:71:f3:61:5c:16:6d:4c:94:42:76:53:a2:50:d0:b3:
93:b4:84:19:28:1b:a5:46:35:e4:e9:1e:25:7b:dd:00:b5:5f:
82:25:dc:42:c3:12:4b:6d:59:b1:58:90:30:78:b8:39:9e:79:
6e:4a:f3:9c:1c:42:d1:43:a8:09:5e:15:42:4d:ca:d9:b0:02:
c8:6e:58:4e:25:13:ac:9f:8f:41:7a:46:4d:ef:68:8e:f3:0d:
2a:b0:9a:34:7d:06:81:ec:de:90:cb:0c:67:96:c7:90:b7:da:
64:11:fb:5c:f3:50:e1:25:ea:a1:16:0f:dd:ba:73:ff:61:05:
f3:cc:b7:f1:d3:3a:15:0e:42:8d:8f:90:41:3e:62:0c:95:49:
c1:d6:70:04:2b:ec:29:95:77:0a:16:fe:31:32:af:da:9e:73:
6a:2b:9f:5b:27:98:65:f0:48:33:10:de:fb:6a:77:66:11:11:
cf:68:a4:8d:fb:d0:f0:6b:cc:d7:0d:c7:b6:ce:c6:0b:32:b9:
54:85:63:61:26:5e:d1:77:83:f4:c0:da:f7:f8:4c:97:2b:71:
1f:c3:8e:63
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:39 2025 by rpki-client