Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/3U_Uy-7WBLtv3baOdRhumsWjUt4.roa
File: 3U_Uy-7WBLtv3baOdRhumsWjUt4.roa (raw, json)
Hash identifier: 1QnRDC7eyI3bR6/y1iJKO2BEiPt39Ledp0exK/x3XsM=
Subject key identifier: DD:4F:D4:CB:EE:D6:04:BB:6F:DD:B6:8E:75:18:6E:9A:C5:A3:52:DE
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 075C1496
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/3U_Uy-7WBLtv3baOdRhumsWjUt4.roa
Signing time: Thu 30 Jun 2022 18:37:24 +0000
ROA not before: Thu 30 Jun 2022 18:37:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25211
IP address blocks: 94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
94.26.76.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
78.159.130.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
93.152.205.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
91.92.47.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.219.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.150.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
45.141.232.0/24 maxlen: 24
45.141.233.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123475094 (0x75c1496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 30 18:37:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd4fd4cbeed604bb6fddb68e75186e9ac5a352de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ed:5d:30:ee:3a:c4:0b:63:f3:1d:fa:4d:95:
8f:eb:c5:03:98:51:fd:51:a2:8f:71:d2:a9:46:be:
f5:09:ca:6b:99:64:31:3b:ed:b2:db:bc:18:9c:af:
63:d6:4c:58:cb:8e:37:f6:c3:62:ae:45:33:cd:05:
40:77:f7:0e:aa:27:7a:e5:6e:2a:02:ce:62:3d:b1:
75:01:b9:90:ac:62:a0:2e:89:aa:f0:b9:28:02:c1:
02:17:85:12:00:01:fe:78:17:35:38:f6:54:29:9e:
b5:e3:19:c7:6a:7c:68:95:06:5e:7a:13:98:bb:91:
68:a8:20:af:17:23:9b:ed:02:40:ad:1b:84:07:6f:
61:77:e2:72:e3:c6:b5:35:64:92:7c:fb:f7:11:15:
66:f7:2a:41:c8:96:ce:08:0b:66:5c:f1:eb:c2:50:
e1:78:d5:9b:23:7c:ef:3c:4f:87:05:fa:09:71:7a:
a8:aa:5c:14:8d:1d:97:6e:a3:11:26:8b:24:e3:ca:
02:c7:b2:ea:38:55:21:05:ca:54:62:f5:66:df:dc:
d6:3f:63:c3:2e:b9:e6:e6:71:47:11:a0:06:95:20:
b0:03:00:db:82:a3:21:11:95:37:6e:ed:ff:d7:8d:
2a:0c:d0:96:26:c8:45:69:11:b8:20:57:73:ab:59:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4F:D4:CB:EE:D6:04:BB:6F:DD:B6:8E:75:18:6E:9A:C5:A3:52:DE
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/3U_Uy-7WBLtv3baOdRhumsWjUt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0-45.141.234.255
78.159.128.0/22
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0-78.159.158.255
91.92.33.0-91.92.35.255
91.92.40.0/21
91.92.49.0-91.92.53.255
93.152.205.0-93.152.207.255
93.152.209.0-93.152.210.255
93.152.212.0/22
93.152.217.0-93.152.227.255
93.152.230.0/24
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/23
185.96.255.0/24
212.102.105.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:9b:0a:0c:2b:55:cc:d1:d1:82:b5:8e:ae:db:50:74:08:ea:
60:4c:05:d2:36:2c:ef:89:21:ee:e8:83:5d:d0:93:d7:04:d0:
a5:7d:53:7f:44:67:c0:12:f4:81:6c:59:be:33:57:a6:86:dd:
31:b3:90:ab:55:28:d0:e4:ae:ee:18:22:3a:c4:19:93:a9:e1:
66:b2:c5:5c:e0:0d:c2:53:da:b6:56:72:ed:0f:7c:f4:34:18:
49:35:66:1c:15:21:56:5a:a1:db:53:05:d8:cd:8f:06:e7:34:
45:cd:23:59:1f:17:aa:49:fb:5a:26:ef:21:21:ae:4e:a5:8b:
3e:33:2d:46:b0:62:96:60:bc:cb:68:c7:bf:65:3f:6c:1b:af:
54:d7:d2:8f:88:ca:db:cd:39:29:7c:8e:11:57:6f:70:7c:4d:
73:d9:df:42:aa:63:ae:ad:ec:a6:92:e1:e2:30:f7:e1:93:a4:
5e:c6:9e:10:85:dc:06:89:12:d0:31:9d:9d:15:94:ac:ed:ed:
4d:5a:6b:57:5b:2f:88:06:44:4a:28:eb:4c:4e:77:1b:3b:2b:
e1:ce:fa:8b:c1:10:20:b1:ae:a3:cd:dd:b3:6f:86:66:f9:f3:
6f:25:14:7a:05:ec:dc:06:1e:e5:80:24:ef:c9:f2:9b:09:9d:
85:ec:19:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org