Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/JkZGHCKfJ1ly_p2vSTMFbjF9jHw.roa
File: JkZGHCKfJ1ly_p2vSTMFbjF9jHw.roa (raw, json)
Hash identifier: IfpyI/jmxVlOOwif8EL3zRNw0OuWt13JopB7/ofuH38=
Subject key identifier: 26:46:46:1C:22:9F:27:59:72:FE:9D:AF:49:33:05:6E:31:7D:8C:7C
Certificate issuer: /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial: 01856B8A009D000FF40D199CD1E89E35BEFB
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/JkZGHCKfJ1ly_p2vSTMFbjF9jHw.roa
Signing time: Sun 01 Jan 2023 04:14:44 +0000
ROA not before: Sun 01 Jan 2023 04:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210218
IP address blocks: 94.240.56.0/22 maxlen: 22
77.75.58.0/23 maxlen: 23
77.75.56.0/23 maxlen: 23
87.120.177.0/24 maxlen: 24
94.156.16.0/22 maxlen: 22
91.243.184.0/22 maxlen: 22
193.46.172.0/22 maxlen: 22
45.12.248.0/22 maxlen: 22
87.120.111.0/24 maxlen: 24
194.76.204.0/22 maxlen: 22
2.59.248.0/22 maxlen: 22
195.225.120.0/22 maxlen: 22
193.36.232.0/22 maxlen: 22
193.207.0.0/24 maxlen: 24
45.8.74.0/23 maxlen: 23
2.58.138.0/23 maxlen: 23
2.58.136.0/23 maxlen: 23
193.19.200.0/22 maxlen: 22
87.120.224.0/24 maxlen: 24
193.56.248.0/22 maxlen: 22
193.58.184.0/22 maxlen: 22
80.249.124.0/22 maxlen: 22
78.40.164.0/22 maxlen: 22
78.40.160.0/22 maxlen: 22
94.156.240.0/22 maxlen: 22
87.121.66.0/23 maxlen: 23
87.120.63.0/24 maxlen: 24
91.197.196.0/22 maxlen: 22
212.24.0.0/19 maxlen: 19
193.56.16.0/22 maxlen: 22
194.147.8.0/22 maxlen: 22
178.175.184.0/22 maxlen: 22
178.175.184.0/21 maxlen: 21
95.214.124.0/23 maxlen: 23
212.22.128.0/19 maxlen: 19
95.214.126.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:00:9d:00:0f:f4:0d:19:9c:d1:e8:9e:35:be:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a6a589ee848a8052238191b98035e775122725
Validity
Not Before: Jan 1 04:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2646461c229f275972fe9daf4933056e317d8c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:c0:13:ee:43:4e:7a:ac:16:b3:65:ab:67:
86:dc:38:cb:32:3d:99:c0:3c:07:32:c1:80:9a:e6:
8e:9f:4b:c2:49:e2:db:a0:58:4b:c6:f7:47:7c:d3:
b8:33:20:ea:1c:c2:6f:c0:14:17:36:16:d9:1a:38:
d0:50:10:24:5d:8b:89:14:6e:b0:3a:c4:a5:14:ee:
98:19:d6:eb:82:d2:3e:09:ff:6f:1f:fc:de:2e:70:
d6:03:e8:3b:6d:6c:18:34:9e:dd:02:69:b6:99:63:
59:79:11:79:5e:c1:23:d2:42:4c:53:10:ce:76:b6:
fa:38:1a:ef:73:e9:0c:41:18:08:91:1a:8e:5f:09:
9c:6e:f3:3f:18:af:01:15:ec:e8:ef:b0:f3:d9:81:
05:b1:fa:88:d1:cf:a8:5c:a6:e9:29:2a:47:5b:aa:
fe:df:f0:e8:43:58:31:a3:3e:89:14:bb:1f:0e:7d:
11:9c:0f:81:a4:75:c5:93:53:7d:fa:b2:72:9b:c8:
fe:6c:7f:34:76:4c:64:ba:2a:62:e0:4c:b6:ac:f3:
1e:b8:fe:1c:6c:cd:8e:f9:9c:67:c8:de:45:f5:bc:
d9:60:8d:14:a3:f5:bf:e3:bd:f1:1a:69:3a:0e:ab:
e4:74:f3:26:b1:80:1d:29:ba:07:a1:b5:51:57:5d:
82:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:46:46:1C:22:9F:27:59:72:FE:9D:AF:49:33:05:6E:31:7D:8C:7C
X509v3 Authority Key Identifier:
keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/JkZGHCKfJ1ly_p2vSTMFbjF9jHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.136.0/22
2.59.248.0/22
45.8.74.0/23
45.12.248.0/22
77.75.56.0/22
78.40.160.0/21
80.249.124.0/22
87.120.63.0/24
87.120.111.0/24
87.120.177.0/24
87.120.224.0/24
87.121.66.0/23
91.197.196.0/22
91.243.184.0/22
94.156.16.0/22
94.156.240.0/22
94.240.56.0/22
95.214.124.0/22
178.175.184.0/21
193.19.200.0/22
193.36.232.0/22
193.46.172.0/22
193.56.16.0/22
193.56.248.0/22
193.58.184.0/22
193.207.0.0/24
194.76.204.0/22
194.147.8.0/22
195.225.120.0/22
212.22.128.0/19
212.24.0.0/19
Signature Algorithm: sha256WithRSAEncryption
13:2d:f1:27:4e:0a:cf:ad:b3:d6:40:af:87:c4:9e:24:73:64:
83:8a:bf:84:0f:07:52:a9:33:a2:79:e6:d7:6f:6f:ba:9b:53:
43:93:1f:78:54:13:79:68:04:41:de:3d:b1:1a:17:d7:de:93:
21:16:40:6e:76:8a:97:43:3f:b4:10:d0:7b:32:d7:f0:36:fd:
66:1b:3c:8a:af:51:95:8b:f7:16:ae:55:7e:b0:88:16:87:6c:
5f:25:3c:70:4b:e9:12:15:2c:89:04:0e:8c:22:ed:08:4f:30:
d4:58:75:38:0c:49:24:68:38:5b:85:26:20:83:3c:e5:63:45:
3e:b1:b1:10:8d:b1:fa:83:91:d3:16:b0:72:5e:2c:52:5a:6a:
16:27:1e:6d:cb:52:67:e9:28:77:07:43:82:21:e2:c0:99:94:
a7:2b:3d:7a:b4:6c:39:1d:30:c1:8d:20:66:5e:e8:4d:88:27:
9b:44:e4:46:65:c1:4b:e8:02:f6:bb:16:aa:e4:81:9a:04:b0:
c9:92:b2:81:1e:ab:d6:65:6b:bc:65:d2:03:fd:c8:85:04:fc:
5c:68:ca:46:93:18:d7:97:db:74:44:ad:82:cc:f8:13:20:0a:
f0:33:43:9a:5f:38:3d:ab:be:3a:6b:62:f0:68:ff:ec:45:5d:
7f:56:fa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:27 2025 by rpki-client