Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/NvIi_8ozOooPplxZnLPQ6glgiRM.roa
File: NvIi_8ozOooPplxZnLPQ6glgiRM.roa (raw, json)
Hash identifier: 6BsWknpUSVGO02QwlEmepol/aYhqjArKIKFHji6eBkw=
Subject key identifier: 36:F2:22:FF:CA:33:3A:8A:0F:A6:5C:59:9C:B3:D0:EA:09:60:89:13
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01833A5FB533217461A9323675E3C1B37540
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/NvIi_8ozOooPplxZnLPQ6glgiRM.roa
Signing time: Wed 14 Sep 2022 05:01:34 +0000
ROA not before: Wed 14 Sep 2022 05:01:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49100
IP address blocks: 185.177.232.0/22 maxlen: 22
85.9.64.0/18 maxlen: 18
194.33.122.0/23 maxlen: 23
5.202.0.0/16 maxlen: 24
109.232.7.0/24 maxlen: 24
109.232.5.0/24 maxlen: 24
109.232.6.0/24 maxlen: 24
185.131.30.0/23 maxlen: 23
185.131.28.0/22 maxlen: 22
193.32.80.0/23 maxlen: 23
185.180.52.0/22 maxlen: 22
77.237.160.0/19 maxlen: 19
185.103.128.0/22 maxlen: 22
185.83.88.0/24 maxlen: 24
185.83.89.0/24 maxlen: 24
185.83.90.0/23 maxlen: 23
109.125.176.0/22 maxlen: 22
109.125.184.0/22 maxlen: 22
109.125.182.0/23 maxlen: 23
109.125.191.0/24 maxlen: 24
109.125.189.0/24 maxlen: 24
109.125.190.0/24 maxlen: 24
91.209.242.0/24 maxlen: 24
109.125.160.0/19 maxlen: 19
185.126.40.0/22 maxlen: 22
185.125.244.0/22 maxlen: 22
185.72.24.0/22 maxlen: 22
185.125.248.0/21 maxlen: 21
185.125.255.0/24 maxlen: 24
185.72.27.0/24 maxlen: 24
185.126.0.0/20 maxlen: 20
185.126.16.0/22 maxlen: 22
185.126.16.0/23 maxlen: 23
5.202.82.0/24 maxlen: 24
5.202.100.0/24 maxlen: 24
5.202.110.0/24 maxlen: 24
95.215.160.0/22 maxlen: 22
185.155.8.0/21 maxlen: 21
185.169.20.0/22 maxlen: 22
91.239.214.0/24 maxlen: 24
185.169.36.0/22 maxlen: 22
185.169.37.0/24 maxlen: 24
188.253.32.0/19 maxlen: 24
5.202.166.0/23 maxlen: 23
2a07:8f40::/29 maxlen: 29
2a0a:4e00::/29 maxlen: 29
2a07:8f00::/29 maxlen: 29
2001:4c88::/32 maxlen: 32
2a02:cd80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3a:5f:b5:33:21:74:61:a9:32:36:75:e3:c1:b3:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Sep 14 05:01:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36f222ffca333a8a0fa65c599cb3d0ea09608913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:74:e5:36:81:ef:54:35:ce:b9:d6:ee:c4:
05:e7:91:ff:06:73:af:39:0a:20:d8:31:b5:93:f8:
62:c7:dc:3b:3d:6f:9d:f7:95:2b:50:c4:4a:0c:33:
9e:03:1d:03:13:86:13:a8:49:13:c9:df:1b:e4:07:
c1:16:a6:1e:7f:6f:13:98:fc:b2:9d:56:ac:c9:22:
f7:21:e3:bb:cb:c6:8a:23:91:69:72:4f:b4:27:96:
82:8b:52:6f:3a:c0:4e:69:46:39:d8:49:0e:59:25:
a2:af:38:17:8a:f4:c7:99:49:0e:4c:1c:cd:50:71:
b1:68:73:ab:d0:1b:2a:ec:21:38:d9:1e:93:d9:0a:
87:c1:77:70:6b:03:de:01:7b:e5:e3:7b:97:a9:09:
a7:9c:78:fd:29:58:fc:20:0a:44:78:c0:3c:32:65:
9a:58:55:39:43:9a:7c:2c:3b:9f:44:37:9c:22:68:
1d:a8:d4:ae:86:67:cc:5e:51:df:ba:78:02:ee:c6:
26:16:a3:20:7d:63:c8:3b:63:bc:97:c0:ec:3d:41:
34:49:0d:ab:7b:c9:24:33:a5:be:74:c9:14:86:2e:
4e:60:a0:e5:ac:5e:3d:5e:83:f6:9e:0b:21:5b:d2:
40:23:85:53:f7:ae:35:b2:79:2a:40:51:00:d9:af:
00:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F2:22:FF:CA:33:3A:8A:0F:A6:5C:59:9C:B3:D0:EA:09:60:89:13
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/NvIi_8ozOooPplxZnLPQ6glgiRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.0.0/16
77.237.160.0/19
85.9.64.0/18
91.209.242.0/24
91.239.214.0/24
95.215.160.0/22
109.125.160.0/19
109.232.5.0-109.232.7.255
185.72.24.0/22
185.83.88.0/22
185.103.128.0/22
185.125.244.0-185.126.19.255
185.126.40.0/22
185.131.28.0/22
185.155.8.0/21
185.169.20.0/22
185.169.36.0/22
185.177.232.0/22
185.180.52.0/22
188.253.32.0/19
193.32.80.0/23
194.33.122.0/23
IPv6:
2001:4c88::/32
2a02:cd80::/29
2a07:8f00::/29
2a07:8f40::/29
2a0a:4e00::/29
Signature Algorithm: sha256WithRSAEncryption
82:ee:90:53:d0:eb:74:3f:87:a5:ca:0c:95:74:18:b5:df:05:
25:21:de:a9:7d:97:c8:a6:c9:30:33:e2:8b:5f:da:9c:69:e6:
41:85:dd:c1:ae:83:52:38:0a:c7:af:e2:39:21:39:ef:41:c1:
7b:cc:1a:fe:02:05:a0:b2:a9:04:c6:26:74:82:d1:f6:cf:4c:
e8:e8:1b:c5:59:0c:ca:7a:f6:04:16:65:0b:f7:d2:d0:5d:12:
6e:07:c7:50:fc:0e:12:03:b7:bd:7a:0c:61:f3:4f:cc:85:05:
7e:a8:d6:5a:e0:1c:85:a5:fa:40:dd:0c:3b:01:e8:8d:ff:1c:
cc:3a:0f:e6:2f:2e:34:01:2a:46:ae:cc:58:db:6c:49:a6:3f:
60:fb:ad:c2:99:e4:1c:96:da:45:18:0f:4d:69:77:d1:10:b8:
e2:09:a4:69:a8:b7:5b:09:16:14:50:98:e1:b0:0d:3d:c1:46:
96:83:1a:0b:89:ee:fe:0d:86:1e:54:bf:af:d5:5d:d5:eb:3c:
74:31:05:cd:70:52:40:10:52:13:2f:69:ce:c5:a9:bb:d2:75:
06:7c:7b:4b:eb:ca:d2:27:ca:23:0e:29:ae:b3:c4:80:15:2e:
0b:14:d5:1a:ad:b1:af:00:2a:b5:51:d8:75:78:b2:28:4d:e8:
f0:1a:24:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:33 2024 by rpki-client on console-ams.rpki-client.org