Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/YnH_A38vfcuhyC6DZ3K8mMModtY.roa
File: YnH_A38vfcuhyC6DZ3K8mMModtY.roa (raw, json)
Hash identifier: ky5HjUO1TIDPg0ySvkzYov893BdwUcN6nzHGHJZSPG4=
Subject key identifier: 62:71:FF:03:7F:2F:7D:CB:A1:C8:2E:83:67:72:BC:98:C3:28:76:D6
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0182648E9E97A8EB19B7323DD0E5E8C135B0
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/YnH_A38vfcuhyC6DZ3K8mMModtY.roa
Signing time: Wed 03 Aug 2022 16:34:04 +0000
ROA not before: Wed 03 Aug 2022 16:34:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25211
IP address blocks: 94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
94.26.76.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
93.152.205.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
91.92.47.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.219.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
93.152.217.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
45.141.232.0/24 maxlen: 24
45.141.233.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:64:8e:9e:97:a8:eb:19:b7:32:3d:d0:e5:e8:c1:35:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Aug 3 16:34:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6271ff037f2f7dcba1c82e836772bc98c32876d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:34:be:07:b5:56:e1:67:4c:c5:5e:43:2d:ff:
f2:ac:48:8d:8e:c1:50:d2:85:3c:e0:70:2f:14:7f:
d5:85:b7:16:79:52:9a:79:10:b8:d9:a0:e5:60:e9:
d4:5f:62:14:0c:51:25:74:a1:f9:7f:2c:43:7a:c6:
9a:1c:af:a1:1e:18:68:f8:dd:e3:df:1f:2b:73:b9:
c8:19:bb:33:49:4e:7d:85:b7:ee:d0:cb:2d:7d:33:
a2:01:75:3a:48:f6:4e:e4:9a:23:d3:44:04:c0:5a:
de:cb:14:96:d2:8b:ee:99:27:02:1a:93:8a:fd:15:
e8:78:70:62:d6:a9:08:a0:7f:bc:1c:79:1f:d4:bf:
66:b7:8b:b6:a7:92:6f:bf:03:37:2e:03:9c:4d:77:
31:66:8f:d7:dd:16:35:51:0d:34:cc:e7:f5:1a:26:
b0:ee:69:92:c2:31:17:a9:06:01:59:9d:40:f2:10:
ac:0a:0a:ce:76:6a:30:b4:de:04:3e:78:25:df:4a:
47:e5:76:15:ca:76:8f:6e:45:01:1e:36:84:d2:fc:
c2:18:27:30:8f:36:32:f6:d1:44:69:eb:21:8f:a9:
06:62:3e:9c:1f:6f:4b:9a:fa:f8:e8:23:85:d9:ef:
77:36:97:26:a5:5f:04:3c:57:eb:c0:63:b3:99:b9:
b0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:71:FF:03:7F:2F:7D:CB:A1:C8:2E:83:67:72:BC:98:C3:28:76:D6
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/YnH_A38vfcuhyC6DZ3K8mMModtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0-45.141.234.255
78.159.128.0/23
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/21
91.92.33.0-91.92.35.255
91.92.40.0/21
91.92.49.0-91.92.53.255
93.152.205.0-93.152.207.255
93.152.209.0-93.152.210.255
93.152.212.0/22
93.152.217.0-93.152.227.255
93.152.230.0/24
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/23
185.96.255.0/24
212.102.105.0/24
Signature Algorithm: sha256WithRSAEncryption
15:31:d1:75:dd:10:55:80:54:59:25:d9:59:5b:6c:ec:5b:43:
41:5d:ea:13:40:6d:e2:91:bc:85:33:32:f1:18:40:c3:e4:0a:
b4:1e:ec:2c:a9:52:d5:15:8b:c3:2e:52:41:d7:9e:78:7e:44:
7a:86:c4:16:4c:aa:69:70:44:6e:c9:ba:b3:52:3e:7b:57:d5:
85:f7:8e:f9:c2:5c:5e:ab:ac:b2:d1:e7:57:3d:45:8e:79:9c:
10:5e:7e:1a:19:7c:57:43:d6:36:cd:15:f5:cf:d4:3f:89:a8:
56:43:d6:0f:23:d2:b3:e7:8d:0b:0e:16:e8:c2:1e:24:08:0e:
6f:e4:19:90:ea:59:3a:97:5f:c2:9c:d0:3b:09:d8:b4:7a:11:
50:1e:77:19:c8:a7:ce:ac:ff:ba:8f:be:53:b7:0f:97:dd:2c:
1a:c7:85:dd:2a:21:90:d7:1a:d6:14:8a:ef:9c:38:75:f8:68:
2d:82:a5:cb:a7:ce:c0:31:2e:69:d7:99:fb:85:3b:fe:8e:81:
90:fb:eb:e6:70:fc:fc:e3:41:14:4e:cb:88:0f:7c:a2:c6:00:
04:5e:b8:54:1b:31:ef:2a:33:3d:0f:38:b6:6c:54:40:70:5e:
68:7b:3d:f0:f9:c2:d8:e9:12:66:71:28:83:2c:2e:71:36:f5:
e4:5f:f7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:42 2024 by rpki-client on console-fra.rpki-client.org