Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/chozAx80YIVxbvmPt-1VWTkyb7g.roa
File: chozAx80YIVxbvmPt-1VWTkyb7g.roa (raw, json)
Hash identifier: 4Dg3JlZ9DrfMH0UsBH135YyHlDH9bpRi4M5j1cYGPtI=
Subject key identifier: 72:1A:33:03:1F:34:60:85:71:6E:F9:8F:B7:ED:55:59:39:32:6F:B8
Certificate issuer: /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial: 0C6D6337
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/chozAx80YIVxbvmPt-1VWTkyb7g.roa
Signing time: Fri 25 Mar 2022 03:23:20 +0000
ROA not before: Fri 25 Mar 2022 03:23:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33924
IP address blocks: 31.222.44.0/24 maxlen: 24
31.222.44.0/22 maxlen: 22
31.222.40.0/22 maxlen: 22
31.222.40.0/21 maxlen: 21
31.222.40.0/24 maxlen: 24
31.222.41.0/24 maxlen: 24
31.222.42.0/24 maxlen: 24
31.222.43.0/24 maxlen: 24
31.222.45.0/24 maxlen: 24
31.222.46.0/24 maxlen: 24
31.222.47.0/24 maxlen: 24
185.55.44.0/22 maxlen: 22
185.55.44.0/24 maxlen: 24
185.55.44.0/23 maxlen: 23
185.55.45.0/24 maxlen: 24
185.55.46.0/23 maxlen: 23
185.55.46.0/24 maxlen: 24
185.55.47.0/24 maxlen: 24
84.20.64.0/19 maxlen: 19
84.20.64.0/20 maxlen: 20
84.20.64.0/24 maxlen: 24
84.20.64.0/22 maxlen: 22
84.20.64.0/21 maxlen: 21
84.20.65.0/24 maxlen: 24
84.20.66.0/24 maxlen: 24
84.20.67.0/24 maxlen: 24
84.20.68.0/24 maxlen: 24
84.20.68.0/22 maxlen: 22
84.20.69.0/24 maxlen: 24
84.20.70.0/24 maxlen: 24
84.20.71.0/24 maxlen: 24
84.20.78.0/24 maxlen: 24
84.20.72.0/24 maxlen: 24
84.20.72.0/22 maxlen: 22
84.20.78.0/23 maxlen: 23
84.20.73.0/24 maxlen: 24
84.20.74.0/24 maxlen: 24
84.20.75.0/24 maxlen: 24
84.20.76.0/23 maxlen: 23
84.20.76.0/24 maxlen: 24
84.20.76.0/22 maxlen: 22
84.20.77.0/24 maxlen: 24
84.20.85.0/24 maxlen: 24
84.20.83.0/24 maxlen: 24
84.20.82.0/24 maxlen: 24
84.20.84.0/24 maxlen: 24
84.20.84.0/22 maxlen: 22
84.20.79.0/24 maxlen: 24
84.20.80.0/22 maxlen: 22
84.20.80.0/24 maxlen: 24
84.20.80.0/21 maxlen: 21
84.20.81.0/24 maxlen: 24
84.20.86.0/24 maxlen: 24
84.20.87.0/24 maxlen: 24
84.20.88.0/23 maxlen: 23
84.20.88.0/24 maxlen: 24
84.20.88.0/22 maxlen: 22
84.20.89.0/24 maxlen: 24
84.20.90.0/24 maxlen: 24
84.20.91.0/24 maxlen: 24
84.20.94.0/24 maxlen: 24
84.20.94.0/23 maxlen: 23
84.20.95.0/24 maxlen: 24
84.20.92.0/24 maxlen: 24
2a00:6b81::/32 maxlen: 32
2a00:6b82::/32 maxlen: 32
2a00:6b84::/32 maxlen: 32
2a00:6b85::/32 maxlen: 32
2a00:6b80::/29 maxlen: 29
2a00:6b87::/32 maxlen: 32
2a00:6b83::/32 maxlen: 32
2a00:6b86::/32 maxlen: 32
2a00:6b80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208495415 (0xc6d6337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Validity
Not Before: Mar 25 03:23:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=721a33031f346085716ef98fb7ed555939326fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:7a:d7:21:3c:b6:2d:2d:30:4c:72:cb:34:
5f:1f:a5:5e:ec:47:29:20:5a:48:5e:9a:cd:e4:78:
cf:6d:e2:9c:46:c6:5c:73:60:10:75:1c:1a:17:cc:
db:12:d6:86:d1:d4:35:99:4f:d0:1c:49:4f:08:bf:
a8:76:7c:7f:fa:0c:72:21:56:4a:77:f4:45:7c:d6:
b9:ce:4e:2b:b2:d5:4d:22:3f:73:d3:56:63:a3:ef:
81:ac:36:62:b5:47:3b:80:e2:79:ee:3d:70:d6:fd:
12:7b:7a:e2:cc:06:b6:85:27:76:ae:30:7c:81:9a:
f7:68:59:07:94:41:0b:e4:06:35:3a:5b:27:ed:75:
ef:17:7f:e7:ba:ca:c9:4c:d4:5e:37:07:d5:61:73:
ac:12:46:90:a3:0c:a2:e4:d4:75:de:f7:c7:cf:d6:
37:5c:64:5a:07:a6:07:66:ca:3f:b1:67:7b:cb:3f:
99:f6:1b:c6:9c:3f:ab:c9:18:57:49:6f:04:d2:79:
d8:ba:46:b1:51:51:cb:18:0b:f8:4b:c3:14:f7:47:
5a:0e:49:6d:a5:3b:5b:75:a7:58:fb:ce:cb:14:4a:
76:b5:0b:0f:9d:63:d6:7b:fa:0e:86:c0:bb:ff:0d:
1b:23:9a:19:7f:00:6b:05:bd:7d:3f:19:2f:7f:9f:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1A:33:03:1F:34:60:85:71:6E:F9:8F:B7:ED:55:59:39:32:6F:B8
X509v3 Authority Key Identifier:
keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/chozAx80YIVxbvmPt-1VWTkyb7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.40.0/21
84.20.64.0/19
185.55.44.0/22
IPv6:
2a00:6b80::/29
Signature Algorithm: sha256WithRSAEncryption
a7:46:89:f8:3c:d5:84:eb:76:0a:71:63:1c:70:97:0a:0b:8e:
2a:48:08:b8:32:33:4c:08:6a:e0:03:52:14:87:19:16:ff:ce:
63:d7:b2:61:0b:fc:3b:bd:4d:61:fa:f8:ce:42:41:0a:03:c3:
45:13:2c:46:e8:d4:7e:cf:30:3b:c2:f0:a6:a7:30:98:89:65:
69:38:1b:5c:d2:d9:6a:91:12:41:89:1b:5b:c3:4e:c4:39:cc:
db:14:bf:1f:a7:6c:12:6d:f0:15:f9:33:86:5d:9b:33:99:33:
44:e7:d7:69:3d:3e:72:5f:3d:b8:ed:6e:a3:f8:30:1e:35:66:
85:19:53:d7:64:8b:90:58:6e:c1:69:05:3a:4f:33:7b:14:ad:
be:6c:9d:88:1f:29:4f:21:14:02:e8:89:a5:37:94:b1:0d:fa:
11:6e:c5:31:c5:67:f2:53:ef:f2:0a:ba:5d:db:bf:8f:4d:fc:
b5:0e:9a:96:82:78:ac:13:0a:95:d9:b3:39:dd:88:3b:32:7a:
8c:9e:0b:e8:9f:20:90:3a:de:89:94:85:0d:b3:dc:d9:70:76:
a6:5a:19:76:ec:01:ba:e0:0e:26:d8:e0:e1:b2:1e:e4:99:ef:
74:40:94:4d:f2:b6:19:30:b0:05:c6:d9:e4:82:9c:ce:ba:03:
d5:6e:45:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:14 2024 by rpki-client on console-ams.rpki-client.org