Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/6i8z3NiLXK_UPgLh3m9iZ0sUiIM.roa
File: 6i8z3NiLXK_UPgLh3m9iZ0sUiIM.roa (raw, json)
Hash identifier: qai3ndiWrnaY2c0ZimJLTo7Xc/D7aGjsQwyqgZsrwvI=
Subject key identifier: EA:2F:33:DC:D8:8B:5C:AF:D4:3E:02:E1:DE:6F:62:67:4B:14:88:83
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0682D417
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/6i8z3NiLXK_UPgLh3m9iZ0sUiIM.roa
Signing time: Fri 08 Apr 2022 05:46:40 +0000
ROA not before: Fri 08 Apr 2022 05:46:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25211
IP address blocks: 94.26.79.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
94.26.76.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
93.152.205.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
91.92.47.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109237271 (0x682d417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Apr 8 05:46:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea2f33dcd88b5cafd43e02e1de6f62674b148883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d2:10:34:31:98:58:11:87:d1:4d:36:08:51:
e2:f0:42:b0:67:82:92:f1:5c:05:10:43:f5:33:bb:
11:cb:fd:00:b5:50:0f:55:b6:79:11:32:32:98:0c:
ae:7b:34:3b:68:51:d5:2e:cc:4a:d1:d5:8d:a2:29:
44:32:5d:7b:e2:74:ab:77:19:a8:36:a3:37:74:c9:
5b:c7:68:6d:44:f0:03:54:cb:92:c5:6c:5b:f5:55:
20:f4:83:5b:29:74:ed:fd:0c:94:5d:90:79:98:03:
e0:da:7b:6f:fa:69:ee:ad:40:87:9b:48:0c:ca:ab:
11:b7:24:99:61:4b:6e:30:da:ec:cb:47:39:b2:3b:
0f:13:a0:57:88:c0:c7:ab:b5:94:75:6c:9c:fd:4e:
91:68:93:16:d0:2b:d0:33:db:92:2d:51:b3:0b:9f:
be:91:fd:31:72:a5:22:e8:ac:16:81:c7:97:33:dc:
b2:46:3b:62:eb:58:60:bf:7b:d9:07:e0:91:bb:34:
9c:64:3b:dd:68:8c:4c:a8:5a:6f:88:e5:38:6b:9f:
ca:14:01:23:91:23:f9:f0:0f:b8:2b:c4:b1:98:15:
d0:16:63:7b:3b:05:fd:ab:45:8a:43:e4:fa:90:71:
1a:72:9c:b8:ed:d8:97:20:d6:1b:e4:2d:f4:98:e5:
f8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2F:33:DC:D8:8B:5C:AF:D4:3E:02:E1:DE:6F:62:67:4B:14:88:83
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/6i8z3NiLXK_UPgLh3m9iZ0sUiIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.234.0/24
78.159.128.0/23
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/22
78.159.157.0-78.159.158.255
91.92.35.0/24
91.92.40.0/21
91.92.50.0-91.92.53.255
93.152.205.0-93.152.206.255
93.152.209.0-93.152.216.255
93.152.218.0/24
93.152.220.0/23
93.152.223.0-93.152.227.255
93.152.230.0/24
94.26.28.0/23
94.26.76.0/22
94.26.90.0/24
94.190.195.0/24
185.96.252.0/23
185.96.255.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:12:2d:bf:3b:73:65:5b:bd:bb:e5:2d:3f:57:85:78:06:61:
42:b9:2f:17:a5:6d:7f:a7:65:c9:02:29:09:b4:f4:53:12:71:
f8:2e:c8:c3:b6:3c:e7:93:8e:79:71:57:57:1c:ce:79:36:46:
74:ca:22:99:bb:fe:4b:7e:67:aa:12:fd:81:f0:f9:9f:7a:02:
21:25:57:4d:67:b3:df:83:55:78:ef:f9:70:18:5e:7a:45:cc:
19:79:c5:8e:b1:1e:d2:0c:6b:40:e5:b0:b9:f5:e3:9d:d0:1d:
78:3c:5f:81:12:c0:86:e9:1a:25:ca:dc:d6:63:de:47:94:48:
dd:b3:f4:13:13:12:58:0c:a7:94:16:d0:27:f7:bc:c7:d6:b0:
e8:05:3b:4c:ad:04:da:97:47:fe:37:7a:83:e3:f8:80:af:81:
ef:d1:bf:76:e9:cc:10:0f:1d:15:30:49:fc:2f:f3:2f:37:1a:
0c:42:04:94:61:41:1c:3e:bc:73:50:a5:04:58:07:73:88:c2:
e0:05:4e:0e:4d:77:8e:69:22:08:30:61:88:8a:0e:fe:b9:bd:
c0:82:71:1a:e6:10:9d:e1:db:24:aa:d9:0b:f1:28:83:ed:7a:
e9:b2:e8:ef:14:d6:4a:7f:6e:e1:8e:36:71:29:7b:78:28:5d:
19:82:42:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org