Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/gLoaSfcyVE9YYcw2U7OyNdRPQII.roa
File: gLoaSfcyVE9YYcw2U7OyNdRPQII.roa (raw, json)
Hash identifier: CriWkp7HDLFYhzpdoc62EyT8rzDP0VOyJPlKgUw/r28=
Subject key identifier: 80:BA:1A:49:F7:32:54:4F:58:61:CC:36:53:B3:B2:35:D4:4F:40:82
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 064D9602
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/gLoaSfcyVE9YYcw2U7OyNdRPQII.roa
Signing time: Thu 17 Mar 2022 15:09:48 +0000
ROA not before: Thu 17 Mar 2022 15:09:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25211
IP address blocks: 94.26.79.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
94.26.76.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
93.152.205.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
91.92.47.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105747970 (0x64d9602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Mar 17 15:09:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80ba1a49f732544f5861cc3653b3b235d44f4082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:06:fe:b7:41:3e:20:04:e9:b8:e1:cd:ac:1a:
6d:4b:39:09:ad:c2:be:c6:be:d7:e3:32:d2:66:c7:
d7:42:47:4b:74:34:8a:dc:10:4d:21:d3:9d:42:cd:
1f:44:f6:a5:28:8d:53:4b:3a:ba:1c:8d:40:eb:f9:
eb:6e:35:7b:71:5b:f8:ed:69:42:87:d8:a9:ed:b8:
84:23:0e:05:45:28:41:08:10:dd:0b:09:1e:08:85:
d7:cf:fc:30:25:c4:7d:3b:b1:50:b9:b3:e9:de:b3:
67:6d:0b:87:61:ad:4c:4d:a6:c8:a1:17:c3:82:6b:
38:34:53:75:0f:e1:a5:a5:d0:90:9e:d9:f5:3e:c3:
0b:3f:6b:99:17:ea:5a:a4:9a:a0:dc:73:ce:b3:ae:
32:a1:a2:03:23:6d:8e:15:32:e9:7d:38:c9:ed:32:
8f:9b:a4:53:a8:96:15:f3:7f:95:ad:29:59:71:35:
94:3e:0d:7d:aa:31:ff:f4:d1:91:47:08:0e:30:97:
0c:91:fd:b7:4b:af:f2:2c:79:90:cd:99:33:2c:c7:
b3:9f:fb:16:84:b3:da:84:0c:72:9f:c5:a9:dc:df:
3e:21:0d:bd:2e:5b:0f:9e:b5:22:0e:b2:6c:ab:94:
de:b1:82:ef:fb:bb:1e:72:70:c9:bb:46:8b:13:8c:
ec:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BA:1A:49:F7:32:54:4F:58:61:CC:36:53:B3:B2:35:D4:4F:40:82
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/gLoaSfcyVE9YYcw2U7OyNdRPQII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.128.0/23
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/22
78.159.157.0-78.159.158.255
91.92.35.0/24
91.92.40.0/21
91.92.50.0-91.92.53.255
93.152.205.0-93.152.206.255
93.152.209.0/24
93.152.211.0-93.152.216.255
93.152.220.0/23
93.152.224.0-93.152.226.255
94.26.28.0/23
94.26.76.0/22
94.190.195.0/24
185.96.252.0/23
185.96.255.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
71:f2:2a:bf:47:cf:f6:00:05:d7:2b:89:6b:7f:0e:d1:e3:15:
69:35:70:cd:38:36:8c:2c:2f:e0:2e:33:4a:f5:36:e3:af:be:
2d:ce:c2:7e:6d:be:70:9e:d1:b1:a6:a8:25:34:48:ce:4f:eb:
b6:cc:18:25:3b:cc:0a:2e:0b:31:39:51:30:73:4a:35:78:19:
78:78:e6:24:b6:dd:37:3c:10:8d:80:ee:12:14:a9:4f:2d:4a:
3c:dd:27:67:1b:85:f7:78:43:18:24:e3:93:cd:15:ff:d5:11:
4b:5a:50:90:9e:46:4b:ec:21:b8:e2:94:84:58:b2:bd:76:d2:
41:12:20:ea:b7:ab:e3:14:37:53:b1:d2:f4:9e:a2:63:c5:14:
7f:4b:9c:8c:cc:45:29:c2:0d:8b:96:18:3a:48:04:98:7c:fd:
90:2b:37:45:82:86:06:95:c3:e1:17:65:db:40:a9:46:b5:42:
51:c8:e3:aa:f7:16:b0:60:d4:0a:f0:3b:9c:16:13:48:65:61:
7c:db:a6:a8:2d:42:a1:c2:81:97:be:44:07:a1:43:5b:98:57:
41:86:7f:f2:1f:31:f6:7f:fc:9f:94:f6:b6:0d:1c:68:5a:d8:
5f:63:19:78:18:e7:42:e5:12:94:4d:27:c8:5e:2e:e5:8b:a8:
4c:f3:76:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:07 2023 by rpki-client on console-fra.rpki-client.org