Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/mz82R5k5teCu96OGhEaxkA9mDbI.roa
File: mz82R5k5teCu96OGhEaxkA9mDbI.roa (raw, json)
Hash identifier: zVoIeMOERNZ+q0V+MI/i/ROfu3LFP8B9bFWaQH+tPdc=
Subject key identifier: 9B:3F:36:47:99:39:B5:E0:AE:F7:A3:86:84:46:B1:90:0F:66:0D:B2
Certificate issuer: /CN=bfd070b0c9add92972fefc566c112d93717c4d6c
Certificate serial: 173F5E82
Authority key identifier: BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/mz82R5k5teCu96OGhEaxkA9mDbI.roa
Signing time: Sat 01 Jan 2022 02:01:32 +0000
ROA not before: Sat 01 Jan 2022 02:01:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49586
IP address blocks: 185.7.132.0/22 maxlen: 22
188.95.240.0/21 maxlen: 21
188.95.240.64/26 maxlen: 26
137.221.24.0/21 maxlen: 21
137.221.25.64/27 maxlen: 27
188.95.240.208/29 maxlen: 29
188.95.240.248/29 maxlen: 29
2a00:10b0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390028930 (0x173f5e82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd070b0c9add92972fefc566c112d93717c4d6c
Validity
Not Before: Jan 1 02:01:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b3f36479939b5e0aef7a3868446b1900f660db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:a5:24:ca:c5:41:ca:3f:2e:16:b2:af:12:
e4:c0:21:c5:76:90:de:05:53:67:d1:f1:01:ba:3b:
a1:70:bc:9b:4c:8c:91:4d:ed:9a:af:5f:a1:a7:05:
e6:ff:9e:c5:42:64:36:84:3c:e0:f7:0d:6c:94:7a:
af:5e:2e:f9:bb:69:64:de:e4:6f:33:07:f7:42:15:
7d:05:bb:36:37:d9:f9:bf:e9:d7:27:4a:04:d5:68:
03:40:fb:88:34:cf:93:cb:b5:db:8c:50:aa:7b:43:
9e:b7:5b:3f:03:35:ce:14:02:70:d4:56:a9:9f:66:
d2:3b:91:5e:dd:ab:c8:73:b1:5b:28:ca:02:f8:68:
03:ac:8d:01:86:ce:e1:f9:f9:47:f9:ee:ad:72:a1:
58:78:75:78:d3:eb:f7:bd:2c:58:70:f9:43:a7:29:
a1:a2:8e:ed:41:79:1c:36:60:65:ae:1d:e1:5c:5b:
ec:aa:c4:eb:4c:f1:c7:ed:a9:68:3f:a0:3b:31:64:
ae:a7:13:f2:06:44:11:19:6a:bb:b4:61:2c:1d:96:
4c:03:a5:96:59:4b:9d:9b:a5:db:47:fe:1c:a7:d2:
e3:74:8d:1a:d4:9e:fd:3d:2f:d8:00:94:40:52:af:
66:a5:27:76:bf:39:f9:3e:db:66:d8:d4:aa:d7:50:
c1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3F:36:47:99:39:B5:E0:AE:F7:A3:86:84:46:B1:90:0F:66:0D:B2
X509v3 Authority Key Identifier:
keyid:BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/mz82R5k5teCu96OGhEaxkA9mDbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.221.24.0/21
185.7.132.0/22
188.95.240.0/21
IPv6:
2a00:10b0::/29
Signature Algorithm: sha256WithRSAEncryption
62:29:02:a8:2e:7d:87:25:15:99:99:32:e0:89:03:cb:34:04:
fe:77:55:f0:40:9e:d3:55:52:12:1e:0a:b9:6c:a5:01:be:0d:
51:2c:4e:54:d0:4d:2a:ed:7f:e6:32:3d:9e:83:8d:69:31:6a:
13:2f:f5:80:11:59:2b:b3:8a:4b:dd:70:ca:47:a8:2e:77:a3:
1a:25:08:70:a4:94:55:17:ea:da:c1:0a:7e:68:b1:98:a7:89:
c3:13:9b:eb:11:fe:3d:e8:2a:2a:80:b3:7c:cf:3b:5f:b7:f1:
c9:16:58:50:65:32:f9:8d:70:a1:0d:7d:58:91:7e:f0:5e:76:
bf:0d:55:f5:bb:f2:1b:d4:59:e3:89:9b:d7:90:bc:4d:d1:d7:
a4:c7:8e:98:b8:08:d2:e9:b6:24:2f:ba:91:c6:34:26:f6:44:
b4:de:59:41:80:5f:7c:29:9a:f1:a4:16:d6:cb:d5:ca:60:e4:
50:ee:ee:2a:6d:75:c4:56:da:cf:5a:ab:89:ea:50:13:df:56:
c0:c2:fa:8d:54:a1:e2:ac:e0:88:d4:a6:07:04:75:d5:41:39:
e6:da:b8:5a:28:f3:25:b0:24:a0:b4:d0:24:6a:94:34:f4:b6:
98:da:c5:df:c8:4d:18:b5:22:2c:77:1f:6f:77:1b:81:36:8c:
42:78:0b:2e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEFz9egjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZmQwNzBiMGM5YWRkOTI5NzJmZWZjNTY2YzExMmQ5MzcxN2M0ZDZjMB4XDTIyMDEw
MTAyMDEzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWIzZjM2NDc5OTM5
YjVlMGFlZjdhMzg2ODQ0NmIxOTAwZjY2MGRiMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKxBpSTKxUHKPy4Wsq8S5MAhxXaQ3gVTZ9HxAbo7oXC8m0yM
kU3tmq9foacF5v+exUJkNoQ84PcNbJR6r14u+btpZN7kbzMH90IVfQW7NjfZ+b/p
1ydKBNVoA0D7iDTPk8u124xQqntDnrdbPwM1zhQCcNRWqZ9m0juRXt2ryHOxWyjK
AvhoA6yNAYbO4fn5R/nurXKhWHh1eNPr970sWHD5Q6cpoaKO7UF5HDZgZa4d4Vxb
7KrE60zxx+2paD+gOzFkrqcT8gZEERlqu7RhLB2WTAOllllLnZul20f+HKfS43SN
GtSe/T0v2ACUQFKvZqUndr85+T7bZtjUqtdQwdECAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBSbPzZHmTm14K73o4aERrGQD2YNsjAfBgNVHSMEGDAWgBS/0HCwya3ZKXL+
/FZsES2TcXxNbDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3Y5QndzTW10MlNseV92eFdiQkV0azNGOFRXdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTkvMTk1NDI3LTQ0MjUtNDU1Ni05ZWE2LTUzY2NhODFlOTIyNC8x
L216ODJSNWs1dGVDdTk2T0doRWF4a0E5bURiSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkv
MTk1NDI3LTQ0MjUtNDU1Ni05ZWE2LTUzY2NhODFlOTIyNC8xL3Y5QndzTW10MlNs
eV92eFdiQkV0azNGOFRXdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEA4ndGAMEArkHhAMEA7xf8DANBAIA
AjAHAwUDKgAQsDANBgkqhkiG9w0BAQsFAAOCAQEAYikCqC59hyUVmZky4IkDyzQE
/ndV8ECe01VSEh4KuWylAb4NUSxOVNBNKu1/5jI9noONaTFqEy/1gBFZK7OKS91w
ykeoLnejGiUIcKSUVRfq2sEKfmixmKeJwxOb6xH+PegqKoCzfM87X7fxyRZYUGUy
+Y1woQ19WJF+8F52vw1V9bvyG9RZ44mb15C8TdHXpMeOmLgI0um2JC+6kcY0JvZE
tN5ZQYBffCma8aQW1svVymDkUO7uKm11xFbaz1qriepQE99WwML6jVSh4qzgiNSm
BwR11UE55tq4WijzJbAkoLTQJGqUNPS2mNrF38hNGLUiLHcfb3cbgTaMQngLLg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:05 2024 by rpki-client on console-fra.rpki-client.org