Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/FMgTKaPMu3n0U8fE2jQW0xTNHOA.roa
File: FMgTKaPMu3n0U8fE2jQW0xTNHOA.roa (raw, json)
Hash identifier: SOBtVahe0AQxxLWT/ydg0e3ymbJRtA0P+/t7EVVeDTo=
Subject key identifier: 14:C8:13:29:A3:CC:BB:79:F4:53:C7:C4:DA:34:16:D3:14:CD:1C:E0
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 065BCF1C
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/FMgTKaPMu3n0U8fE2jQW0xTNHOA.roa
Signing time: Tue 22 Mar 2022 12:30:08 +0000
ROA not before: Tue 22 Mar 2022 12:30:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25211
IP address blocks: 94.26.79.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
94.26.76.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
93.152.205.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
91.92.47.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106680092 (0x65bcf1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Mar 22 12:30:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14c81329a3ccbb79f453c7c4da3416d314cd1ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:9f:6d:df:5d:f3:02:eb:1e:27:71:80:6c:
cb:aa:ab:0a:a1:f0:71:06:43:47:c1:55:87:70:44:
68:0e:1f:86:95:e5:9a:a6:26:7e:a0:94:7e:7d:fe:
2a:6b:93:49:5b:8e:a8:08:f4:5b:8d:83:ad:2e:23:
f6:2f:3a:77:44:9f:dc:b6:a2:f1:93:61:49:47:99:
db:d5:2f:3a:cd:c7:c0:8b:1c:2d:c2:75:35:cd:f4:
07:a3:e9:70:a6:77:95:50:1e:e3:bc:3f:b7:f4:05:
1b:1c:b4:01:46:e7:f5:fa:8b:93:cf:46:09:ad:d5:
26:15:25:4b:a9:d1:28:aa:c6:50:3c:09:50:f7:aa:
da:ae:59:2c:80:ef:64:c9:1a:53:8a:df:9f:59:93:
37:cc:41:b5:df:e1:fd:f8:62:c6:81:07:a5:d4:a4:
dd:96:f6:94:cb:33:ab:d5:2b:a0:39:81:75:02:3e:
1b:d9:f7:c5:9f:74:d8:5b:71:45:d7:42:90:3a:02:
00:06:f9:37:ff:ed:22:c2:c2:af:7d:54:d8:7c:05:
0f:01:46:c1:bd:d9:39:df:6a:7c:6d:47:55:44:34:
b7:e5:32:c3:ff:1a:7d:a0:b1:29:29:72:8b:61:48:
fb:4b:44:47:a9:fb:cd:b6:20:d9:ce:86:70:df:4e:
4c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C8:13:29:A3:CC:BB:79:F4:53:C7:C4:DA:34:16:D3:14:CD:1C:E0
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/FMgTKaPMu3n0U8fE2jQW0xTNHOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.128.0/23
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/22
78.159.157.0-78.159.158.255
91.92.35.0/24
91.92.40.0/21
91.92.50.0-91.92.53.255
93.152.205.0-93.152.206.255
93.152.209.0-93.152.216.255
93.152.218.0/24
93.152.220.0/23
93.152.223.0-93.152.227.255
93.152.230.0/24
94.26.28.0/23
94.26.76.0/22
94.26.90.0/24
94.190.195.0/24
185.96.252.0/23
185.96.255.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
78:32:75:f6:df:61:44:12:c0:48:6b:b9:75:7b:0b:67:3d:92:
bd:42:d6:43:e8:de:07:fe:ec:0f:6a:e5:53:e7:e4:26:12:ad:
cf:a2:42:ce:ce:57:14:9a:65:a4:03:55:32:8e:14:34:bd:ee:
69:da:5e:4d:ee:bf:75:b9:80:73:45:cf:fc:6d:32:2d:80:60:
07:06:31:c3:29:b7:ed:0a:65:b3:d0:ed:e0:33:06:bf:3a:7b:
91:4d:c9:6c:ad:43:35:b8:ab:2e:cc:1a:86:ee:78:4c:3b:de:
35:96:45:f4:14:f6:a9:06:8e:ef:04:38:1f:a5:3a:1e:a3:4a:
e1:09:9d:96:a2:0a:f2:9a:11:15:f9:f4:79:5c:0d:74:2d:0d:
83:b6:f4:d2:44:66:94:e9:b9:a7:e4:64:2e:4a:f0:a5:ec:a6:
3a:5d:f2:85:50:00:4b:cb:db:6c:6f:e1:e6:74:dc:c0:d1:48:
4a:49:00:5d:bc:ad:48:d6:7f:8f:67:a3:d8:56:c8:b0:dc:20:
4c:3c:bc:a4:56:00:98:d3:4c:9e:e2:07:f7:db:53:7d:6b:4c:
2e:20:36:22:94:9e:38:18:c7:8a:41:81:00:ce:04:f1:e4:7d:
2f:d6:11:ee:36:9b:ba:49:c3:94:38:be:5b:5c:6c:d8:c4:86:
0d:99:0c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:07 2023 by rpki-client on console-fra.rpki-client.org