Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/om8QEDRgBXmnc1q8LzPQeSvfTPo.roa
File: om8QEDRgBXmnc1q8LzPQeSvfTPo.roa (raw, json)
Hash identifier: +oHjcET0n9QEoibyVeiGthxke0RoRjxHZSxlEWD4ZvA=
Subject key identifier: A2:6F:10:10:34:60:05:79:A7:73:5A:BC:2F:33:D0:79:2B:DF:4C:FA
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 194CFB38
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/om8QEDRgBXmnc1q8LzPQeSvfTPo.roa
Signing time: Sat 26 Mar 2022 01:15:38 +0000
ROA not before: Sat 26 Mar 2022 01:15:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 91.189.184.0/24 maxlen: 24
77.83.158.0/24 maxlen: 32
91.189.185.0/24 maxlen: 24
77.83.156.0/24 maxlen: 32
85.209.253.0/24 maxlen: 24
77.243.95.0/24 maxlen: 32
77.243.93.0/24 maxlen: 32
193.16.9.0/24 maxlen: 32
185.117.20.0/23 maxlen: 32
5.253.138.0/24 maxlen: 32
194.36.101.0/24 maxlen: 24
185.238.241.0/24 maxlen: 24
147.78.221.0/24 maxlen: 32
185.238.240.0/24 maxlen: 24
185.141.205.0/24 maxlen: 24
185.214.70.0/24 maxlen: 24
45.153.168.0/24 maxlen: 32
213.232.107.0/24 maxlen: 32
45.151.172.0/23 maxlen: 32
185.166.237.0/24 maxlen: 24
185.211.49.0/24 maxlen: 24
45.14.44.0/24 maxlen: 32
45.14.45.0/24 maxlen: 32
185.207.178.0/24 maxlen: 24
79.174.23.0/24 maxlen: 32
79.174.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424475448 (0x194cfb38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Mar 26 01:15:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a26f101034600579a7735abc2f33d0792bdf4cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:91:15:ee:80:79:32:ca:99:0c:1a:8d:cf:
03:47:99:36:db:53:01:8a:9b:d2:08:5d:4f:d2:16:
5d:25:36:3f:0a:45:ab:b1:85:55:6a:fd:ec:64:bb:
53:d0:c0:4d:60:25:54:e7:df:37:1a:8e:bb:ef:f4:
1a:2b:98:0f:a4:0c:36:5e:ff:85:5e:4f:c4:08:60:
e5:8f:14:79:fb:0f:aa:84:d1:a1:70:12:94:13:6a:
11:98:24:14:bc:ad:91:8a:78:1b:99:b0:dd:d8:18:
d4:f9:e2:8b:db:13:ba:e0:2a:6e:82:ce:40:37:bd:
51:4b:d6:37:b0:31:73:e0:af:ac:13:4c:9d:0a:db:
7f:04:42:de:80:14:1a:36:ff:fb:b9:1a:17:07:f1:
ab:f9:66:f7:9c:c6:ec:9c:f6:96:44:b0:3a:73:cf:
d1:2d:c7:5d:8b:21:b8:48:36:68:85:2b:5c:53:87:
46:e3:d6:b9:12:f0:54:e4:23:0a:36:e1:74:03:6c:
a1:bd:4e:7d:b1:64:a9:7c:65:df:f0:ec:fc:8c:69:
79:ce:99:01:7b:07:83:62:61:46:bf:c2:fe:61:de:
06:b4:1e:24:43:22:40:bf:e3:33:e2:e3:eb:f1:36:
9c:e6:b5:84:e3:01:51:1c:0e:40:ec:66:91:73:4b:
8b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6F:10:10:34:60:05:79:A7:73:5A:BC:2F:33:D0:79:2B:DF:4C:FA
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/om8QEDRgBXmnc1q8LzPQeSvfTPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.138.0/24
45.14.44.0/23
45.151.172.0/23
45.153.168.0/24
77.83.156.0/24
77.83.158.0/24
77.243.93.0/24
77.243.95.0/24
79.174.21.0/24
79.174.23.0/24
85.209.253.0/24
91.189.184.0/23
147.78.221.0/24
185.117.20.0/23
185.141.205.0/24
185.166.237.0/24
185.207.178.0/24
185.211.49.0/24
185.214.70.0/24
185.238.240.0/23
193.16.9.0/24
194.36.101.0/24
213.232.107.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:ff:97:65:2b:03:8e:2e:5e:ba:c7:61:9b:c1:3f:61:13:0e:
56:43:db:5b:d1:00:3e:42:b1:11:c4:fe:e3:74:23:31:44:b4:
f1:1f:31:c3:48:b0:fa:47:ef:5a:42:75:f0:cc:82:67:e7:2d:
47:60:fe:71:f1:d7:76:d1:0c:dc:58:7c:6d:13:55:5c:57:79:
9b:e1:c6:84:8a:4b:5b:f9:ee:af:c9:2d:d3:0f:33:18:48:aa:
df:50:ea:6e:e4:c0:d2:fd:d3:7f:8b:16:12:58:95:7e:d0:6e:
90:f2:d3:5d:4b:e1:8c:16:d4:7c:ed:37:34:09:0e:d7:b5:2b:
8a:73:d0:1a:3d:9d:25:59:42:90:6d:0e:b0:b0:07:8a:d1:9b:
44:a4:47:db:41:b6:4a:3a:45:30:4c:05:f3:23:63:89:74:84:
42:5f:17:30:21:c6:db:b8:32:5a:98:42:46:55:60:40:34:4a:
ca:af:f6:a3:38:25:e1:48:f4:e2:d1:a9:d8:65:5c:11:ff:2e:
f0:2d:58:52:f4:7b:9a:07:ea:13:f7:19:a5:b2:03:75:29:fe:
a3:c2:9a:e8:79:a3:5a:d2:74:a8:4a:9d:28:c3:85:18:21:29:
29:0e:8c:3c:73:2c:0e:1a:a9:12:0f:9f:03:dd:c1:76:e0:ac:
7c:54:5b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org