Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/Ih0BrZ5J4sUIgyllR-KYJI4pWgI.roa
File: Ih0BrZ5J4sUIgyllR-KYJI4pWgI.roa (raw, json)
Hash identifier: G5lz/S319gF7kdN/PoSPhScAjEv/CERD4zMUBMeAN6o=
Subject key identifier: 22:1D:01:AD:9E:49:E2:C5:08:83:29:65:47:E2:98:24:8E:29:5A:02
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 018471AEF6DC55DC9167D8956521C303FD03
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/Ih0BrZ5J4sUIgyllR-KYJI4pWgI.roa
Signing time: Sun 13 Nov 2022 15:50:02 +0000
ROA not before: Sun 13 Nov 2022 15:50:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202468
IP address blocks: 37.152.176.0/20 maxlen: 24
37.152.184.0/24 maxlen: 24
185.206.92.0/22 maxlen: 22
185.231.180.0/22 maxlen: 22
185.228.238.0/24 maxlen: 24
185.228.239.0/24 maxlen: 24
185.228.236.0/24 maxlen: 24
185.228.236.0/22 maxlen: 22
185.228.237.0/24 maxlen: 24
185.97.116.0/22 maxlen: 22
188.121.120.0/21 maxlen: 24
185.239.104.0/24 maxlen: 24
185.239.105.0/24 maxlen: 24
188.121.127.0/24 maxlen: 24
185.220.224.0/24 maxlen: 24
185.220.224.0/22 maxlen: 22
185.220.225.0/24 maxlen: 24
185.220.226.0/24 maxlen: 24
185.239.106.0/23 maxlen: 23
185.220.227.0/24 maxlen: 24
37.32.4.0/22 maxlen: 22
37.32.8.0/22 maxlen: 22
37.32.17.0/24 maxlen: 24
37.32.16.0/24 maxlen: 24
37.32.12.0/22 maxlen: 22
37.32.24.0/22 maxlen: 22
193.176.240.0/22 maxlen: 24
37.32.20.0/22 maxlen: 22
37.32.18.0/24 maxlen: 24
37.32.19.0/24 maxlen: 24
37.32.28.0/22 maxlen: 24
193.176.242.0/23 maxlen: 23
188.121.96.0/19 maxlen: 24
188.121.104.0/22 maxlen: 22
188.121.108.0/22 maxlen: 22
94.101.176.0/20 maxlen: 24
94.101.184.0/21 maxlen: 24
94.101.180.0/23 maxlen: 23
94.101.180.0/24 maxlen: 24
94.101.182.0/24 maxlen: 24
185.143.232.0/22 maxlen: 24
185.226.116.0/22 maxlen: 22
2a0c:a7c0:1::/48 maxlen: 48
2a0c:a7c0:3::/48 maxlen: 48
2a0c:a7c0::/48 maxlen: 48
2a07:3900::/29 maxlen: 29
2a0c:a7c0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:71:ae:f6:dc:55:dc:91:67:d8:95:65:21:c3:03:fd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Nov 13 15:50:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=221d01ad9e49e2c50883296547e298248e295a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:52:a0:96:c6:40:94:52:d0:07:19:ef:6b:23:
31:01:f4:b7:29:79:8b:4e:fb:39:0b:df:0f:7f:d0:
d4:1b:a6:14:d1:7f:9e:38:a2:b3:25:25:65:9b:d8:
9a:b1:58:51:fe:05:de:a7:e5:56:26:78:b0:b3:11:
8b:19:7c:e5:a9:f6:66:8c:5a:4e:d6:56:80:03:72:
33:bb:11:4f:9d:86:28:cb:b4:f1:75:f1:75:99:39:
2b:78:87:43:71:9f:28:79:67:86:8a:21:eb:a2:bb:
95:b9:94:d1:22:4c:b7:be:fe:71:99:c3:64:8a:cb:
cd:81:ad:d4:79:38:61:cd:b7:a1:0a:a2:ce:58:c0:
8e:da:6c:38:e5:c2:0e:7b:a6:72:00:6a:b7:dd:1d:
07:dd:8e:6a:a1:e3:43:9c:06:d2:32:b5:bd:3c:fa:
9c:97:e9:3d:d4:31:47:39:31:8b:59:16:49:bf:bb:
b8:bc:cd:76:6a:a0:7e:e1:8b:96:08:f6:8a:e2:1c:
f3:ab:60:8a:34:b3:10:a3:4b:e1:90:15:5e:9f:23:
1c:fa:cd:2e:1d:37:c9:b2:ee:a4:4c:64:2f:34:0e:
18:87:9c:33:6a:8f:e6:18:1f:d2:c3:63:1a:da:73:
37:33:b6:e9:14:45:8d:8e:71:56:ff:ba:f8:73:bd:
bf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1D:01:AD:9E:49:E2:C5:08:83:29:65:47:E2:98:24:8E:29:5A:02
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/Ih0BrZ5J4sUIgyllR-KYJI4pWgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.4.0-37.32.31.255
37.152.176.0/20
94.101.176.0/20
185.97.116.0/22
185.143.232.0/22
185.206.92.0/22
185.220.224.0/22
185.226.116.0/22
185.228.236.0/22
185.231.180.0/22
185.239.104.0/22
188.121.96.0/19
193.176.240.0/22
IPv6:
2a07:3900::/29
2a0c:a7c0::/46
Signature Algorithm: sha256WithRSAEncryption
77:14:65:e6:de:5c:8a:b1:1e:7e:e1:67:3c:0d:5e:f7:b8:35:
e8:83:47:c0:dc:5f:dc:4e:d1:ec:99:0e:da:34:83:d7:b8:31:
c5:c7:7d:4c:7d:9d:dd:c3:99:d4:cb:07:35:67:ee:06:50:fa:
00:5b:6c:1f:d0:81:62:86:dc:3a:3f:b2:69:25:4d:cb:3a:77:
81:b5:95:9b:29:ac:03:74:c2:03:f8:90:ac:ca:74:ba:01:4d:
b2:e7:72:97:75:9b:37:a6:94:8f:24:a1:59:43:26:ee:ad:51:
cc:07:29:02:a5:4c:a7:cf:89:11:dc:22:68:c9:e4:17:0a:6e:
8d:4b:b0:12:80:b4:34:6a:53:f1:74:31:28:60:61:e3:05:b4:
21:65:fe:d9:b1:46:11:39:e2:b2:84:44:77:36:2f:7c:47:ee:
35:04:27:01:f9:08:67:00:b6:e4:40:5d:ad:d8:a5:ba:08:38:
31:71:c4:fa:8b:be:7d:4d:c3:10:01:8b:50:a5:b3:e9:ac:49:
58:9d:cb:5d:db:b7:d4:b1:78:b6:65:e0:61:aa:c7:31:b6:b5:
3c:ba:e9:32:fb:b0:4d:30:b4:2a:10:15:14:89:7d:5a:74:12:
c5:75:1b:3d:aa:7b:32:e2:62:00:9e:12:84:3a:b0:b7:ff:f1:
af:6b:cd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:25 2023 by rpki-client on console-ams.rpki-client.org