Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/4vULcrscOnv5YNQPBTQ8M0dzviA.roa
File: 4vULcrscOnv5YNQPBTQ8M0dzviA.roa (raw, json)
Hash identifier: XpV4OAHdiTJnmIH7TwjT6XK9lspOC71AtE9kcjqLqLU=
Subject key identifier: E2:F5:0B:72:BB:1C:3A:7B:F9:60:D4:0F:05:34:3C:33:47:73:BE:20
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 01839331F659E7C6270A88E308920428D0A8
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/4vULcrscOnv5YNQPBTQ8M0dzviA.roa
Signing time: Sat 01 Oct 2022 10:57:48 +0000
ROA not before: Sat 01 Oct 2022 10:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48715
IP address blocks: 185.141.105.0/24 maxlen: 24
185.141.104.0/24 maxlen: 24
185.141.104.0/22 maxlen: 22
185.141.107.0/24 maxlen: 24
185.141.106.0/24 maxlen: 24
185.18.212.0/22 maxlen: 22
185.18.212.0/24 maxlen: 24
185.18.213.0/24 maxlen: 24
185.18.214.0/24 maxlen: 24
185.18.215.0/24 maxlen: 24
195.211.44.0/24 maxlen: 24
195.211.44.0/22 maxlen: 22
195.211.47.0/24 maxlen: 24
195.211.45.0/24 maxlen: 24
195.211.46.0/24 maxlen: 24
195.110.38.0/23 maxlen: 23
91.236.168.0/23 maxlen: 23
152.89.44.0/22 maxlen: 22
152.89.47.0/24 maxlen: 24
152.89.45.0/24 maxlen: 24
185.51.200.0/22 maxlen: 22
185.51.200.0/24 maxlen: 24
185.51.203.0/24 maxlen: 24
185.51.201.0/24 maxlen: 24
185.51.202.0/24 maxlen: 24
185.112.150.0/23 maxlen: 23
185.112.150.0/24 maxlen: 24
185.112.151.0/24 maxlen: 24
185.112.149.0/24 maxlen: 24
185.121.131.0/24 maxlen: 24
185.121.130.0/24 maxlen: 24
185.121.130.0/23 maxlen: 23
88.135.38.0/24 maxlen: 24
88.135.36.0/22 maxlen: 22
88.135.36.0/24 maxlen: 24
88.135.37.0/24 maxlen: 24
185.141.132.0/24 maxlen: 24
185.141.132.0/22 maxlen: 22
185.141.134.0/24 maxlen: 24
185.141.135.0/24 maxlen: 24
185.141.133.0/24 maxlen: 24
188.209.152.0/24 maxlen: 24
188.209.152.0/23 maxlen: 23
188.209.153.0/24 maxlen: 24
88.135.39.0/24 maxlen: 24
185.128.138.0/24 maxlen: 24
185.128.139.0/24 maxlen: 24
185.128.136.0/22 maxlen: 22
185.128.137.0/24 maxlen: 24
185.128.136.0/24 maxlen: 24
2a0a:5e80::/48 maxlen: 48
2a0a:5e80::/64 maxlen: 64
2a0a:5e80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:93:31:f6:59:e7:c6:27:0a:88:e3:08:92:04:28:d0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Oct 1 10:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2f50b72bb1c3a7bf960d40f05343c334773be20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:56:03:94:2a:20:5b:2d:c8:b5:49:23:5f:
f4:7b:e2:cd:b1:4b:93:c8:af:9f:81:a5:0a:05:a0:
f6:c2:81:bd:5d:b2:4d:24:0c:ed:12:10:4f:4c:08:
34:ff:28:87:17:cd:92:67:14:56:f3:2c:08:6a:80:
53:65:5d:63:a8:4b:4b:a0:c4:fb:d3:c5:28:17:4d:
96:cc:f3:a8:3b:c1:ad:fa:78:e6:3d:cf:28:dc:b6:
72:27:14:1e:12:83:fa:6f:0b:42:13:77:87:da:7e:
39:38:d5:f8:82:ac:37:b8:2b:ba:fe:e0:20:15:73:
49:bf:49:bf:d4:47:07:81:f5:91:43:fa:e3:d1:40:
40:a4:0e:18:2b:6c:ea:8f:37:d1:50:35:59:25:be:
e4:be:59:4e:e6:56:5d:d6:05:0d:7b:38:e7:c1:9d:
d7:0a:07:ef:64:e0:6e:11:16:5b:b8:62:28:20:d3:
f1:7d:69:8e:a3:4a:9c:d9:e2:a6:41:be:76:83:60:
b1:55:e5:fa:21:fc:fb:cd:ea:69:27:a9:ec:f5:51:
db:5c:0a:cc:35:00:7c:0e:d6:db:0d:63:83:82:90:
5c:34:5e:da:3f:7a:f4:c8:e6:b4:88:21:87:d4:6e:
9a:4a:fb:9f:6d:51:cf:5b:7a:a0:98:2e:82:ad:95:
d3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F5:0B:72:BB:1C:3A:7B:F9:60:D4:0F:05:34:3C:33:47:73:BE:20
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/4vULcrscOnv5YNQPBTQ8M0dzviA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.36.0/22
91.236.168.0/23
152.89.44.0/22
185.18.212.0/22
185.51.200.0/22
185.112.149.0-185.112.151.255
185.121.130.0/23
185.128.136.0/22
185.141.104.0/22
185.141.132.0/22
188.209.152.0/23
195.110.38.0/23
195.211.44.0/22
IPv6:
2a0a:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
0b:b7:b7:32:ac:5f:46:88:ec:38:9a:84:08:c8:d6:34:af:e5:
64:6f:7c:a6:6e:dd:52:1d:1a:c5:d4:56:d5:5a:f8:de:26:6d:
53:79:e4:c6:fc:a1:fe:35:97:80:ca:a8:dd:01:91:d2:fa:91:
64:cd:f6:38:32:0b:5e:8e:5a:1d:d3:71:92:5f:3b:db:3a:d3:
73:d3:ef:6f:49:9b:41:fa:76:6b:d8:9f:c6:fb:4c:af:f1:9c:
8e:23:1b:c3:74:a9:6e:17:ab:44:85:e7:bd:15:c4:c0:8c:eb:
e8:c9:db:b7:f7:fe:b7:e9:6b:2f:3e:7b:dc:e4:b0:e1:54:5b:
68:6b:a5:eb:b1:15:64:ed:d9:02:f6:cf:f5:1e:2e:bc:62:a3:
71:8e:a7:5b:99:bb:c4:10:c7:a5:f8:94:53:89:f4:6b:fb:c5:
f6:78:eb:21:51:de:97:24:74:f3:d7:b1:38:93:48:66:88:36:
53:fa:0b:50:aa:5f:01:08:e6:75:85:85:20:a2:b1:b0:02:8a:
43:e1:f1:ca:d9:48:9d:5f:e6:d8:9c:7c:a0:80:1e:25:9b:2d:
ea:93:ad:0d:91:43:c6:58:21:a1:b1:6c:61:62:0d:47:d4:17:
29:f8:d3:49:51:e0:b3:67:db:34:95:b8:d8:b4:95:07:23:7e:
7c:5c:ab:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:58 2023 by rpki-client on console-fra.rpki-client.org