Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/sMOmRR23qEEFSMd14ebcPy7rdOQ.roa
File: sMOmRR23qEEFSMd14ebcPy7rdOQ.roa (raw, json)
Hash identifier: QY/Cqa0GfX7JE1GWqyPtXQpDZRTXwOq/qNlQUoiLqP0=
Subject key identifier: B0:C3:A6:45:1D:B7:A8:41:05:48:C7:75:E1:E6:DC:3F:2E:EB:74:E4
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 3614FFE0
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/sMOmRR23qEEFSMd14ebcPy7rdOQ.roa
Signing time: Thu 07 Apr 2022 13:55:36 +0000
ROA not before: Thu 07 Apr 2022 13:55:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12479
IP address blocks: 213.76.218.0/24 maxlen: 24
213.76.216.0/22 maxlen: 22
213.76.224.0/21 maxlen: 21
213.76.220.0/22 maxlen: 22
213.76.232.0/21 maxlen: 21
213.76.240.0/21 maxlen: 21
213.76.248.0/21 maxlen: 21
213.76.192.0/20 maxlen: 20
213.76.192.0/18 maxlen: 18
213.76.208.0/22 maxlen: 22
80.52.108.0/22 maxlen: 22
80.52.112.0/20 maxlen: 20
80.49.64.0/20 maxlen: 20
80.52.64.0/21 maxlen: 21
80.52.64.0/18 maxlen: 18
80.52.72.0/22 maxlen: 22
80.52.76.0/22 maxlen: 22
80.52.84.0/22 maxlen: 22
80.52.80.0/21 maxlen: 21
80.52.80.0/22 maxlen: 22
80.52.84.0/24 maxlen: 24
80.52.88.0/21 maxlen: 21
80.52.96.0/21 maxlen: 21
80.52.104.0/22 maxlen: 22
80.49.120.0/24 maxlen: 24
80.49.120.0/22 maxlen: 22
80.49.124.0/22 maxlen: 22
80.49.64.0/18 maxlen: 18
80.49.80.0/20 maxlen: 20
80.49.96.0/20 maxlen: 20
80.49.112.0/21 maxlen: 21
79.162.188.0/22 maxlen: 22
79.162.136.0/22 maxlen: 22
79.162.140.0/22 maxlen: 22
79.162.144.0/22 maxlen: 22
79.162.152.0/24 maxlen: 24
79.162.148.0/22 maxlen: 22
79.162.155.0/24 maxlen: 24
79.162.154.0/24 maxlen: 24
79.162.153.0/24 maxlen: 24
79.162.156.0/22 maxlen: 22
79.162.160.0/22 maxlen: 22
79.162.164.0/22 maxlen: 22
79.162.168.0/22 maxlen: 22
79.162.172.0/22 maxlen: 22
79.162.176.0/22 maxlen: 22
79.162.184.0/22 maxlen: 22
79.162.180.0/22 maxlen: 22
213.77.176.0/22 maxlen: 22
213.77.180.0/22 maxlen: 22
213.77.184.0/22 maxlen: 22
213.77.192.0/20 maxlen: 20
213.77.188.0/22 maxlen: 22
213.77.208.0/20 maxlen: 20
213.77.224.0/22 maxlen: 22
213.77.128.0/22 maxlen: 22
213.77.128.0/17 maxlen: 17
213.77.132.0/22 maxlen: 22
213.77.136.0/22 maxlen: 22
213.77.133.0/24 maxlen: 24
213.77.140.0/22 maxlen: 22
213.77.144.0/21 maxlen: 21
213.77.152.0/21 maxlen: 21
213.77.160.0/20 maxlen: 20
79.162.128.0/18 maxlen: 24
79.162.128.0/22 maxlen: 22
79.162.132.0/22 maxlen: 22
213.77.228.0/22 maxlen: 22
213.77.232.0/22 maxlen: 22
213.77.236.0/22 maxlen: 22
213.77.236.0/23 maxlen: 23
213.77.240.0/22 maxlen: 22
213.77.244.0/22 maxlen: 22
213.77.248.0/22 maxlen: 22
213.77.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 907345888 (0x3614ffe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Apr 7 13:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0c3a6451db7a8410548c775e1e6dc3f2eeb74e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f1:56:ea:93:df:23:1a:13:ab:ce:ce:99:a2:
0d:2d:0e:99:19:1c:c6:95:27:3d:63:0d:0c:5b:9f:
3c:d7:cf:b2:67:c3:00:a5:0a:3d:27:b5:22:5a:4e:
fe:b2:20:e0:04:82:bc:ff:e3:10:1b:d0:0e:98:37:
97:2a:9f:55:de:d1:96:a9:69:5a:0b:10:52:a0:07:
65:c9:c2:14:c6:e3:c1:a8:7a:e2:6b:f1:34:54:89:
9d:53:fb:4a:40:c2:bd:40:e8:33:3d:b2:7b:b2:ef:
76:36:74:d8:d0:79:2a:2c:3c:71:f0:0c:16:da:d5:
29:d8:49:a9:ee:1c:81:59:11:b0:b5:56:d5:31:27:
f6:63:1a:1a:e3:8b:a1:49:3e:e2:84:77:d3:bd:02:
f3:d3:3f:e3:16:61:f8:6e:a4:73:67:c1:57:4b:2e:
8b:9f:b7:ad:de:05:b4:2d:75:43:ba:30:8d:42:e1:
04:21:73:ca:a8:17:c9:20:06:2a:85:3e:24:88:33:
e6:cb:1c:1d:3f:cd:b4:c8:e7:e7:3d:f7:0b:5b:ef:
c5:6a:57:07:63:45:83:f9:c6:e4:10:7f:11:73:d3:
3b:26:a4:94:a4:2f:31:75:12:28:02:92:2f:fd:ae:
b1:3a:cb:0b:ea:b0:f6:70:09:79:b5:a6:dd:61:9a:
e1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C3:A6:45:1D:B7:A8:41:05:48:C7:75:E1:E6:DC:3F:2E:EB:74:E4
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/sMOmRR23qEEFSMd14ebcPy7rdOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.162.128.0/18
80.49.64.0/18
80.52.64.0/18
213.76.192.0/18
213.77.128.0/17
Signature Algorithm: sha256WithRSAEncryption
17:60:f3:bf:22:07:ac:16:9c:cc:49:1d:45:89:1b:33:61:49:
2e:30:7f:2f:84:ef:00:e0:3f:a7:30:3a:0c:b7:83:e8:3d:8c:
3d:13:7b:8e:7d:2d:75:b3:f5:37:d4:8c:f9:fd:62:c9:cb:b9:
22:07:9c:30:98:26:49:ae:cf:9e:56:90:50:40:56:28:3e:d4:
4b:34:f1:57:f6:88:97:3d:ff:d3:1a:49:07:97:f1:fb:31:6a:
7e:9c:20:b3:e2:30:96:59:0f:66:62:32:c9:24:04:a8:de:eb:
e5:d0:d6:6a:64:31:1b:56:40:83:d1:4e:58:e4:79:b0:30:ed:
74:5d:7e:14:d1:e8:94:ec:82:d7:24:a4:1d:3a:ea:d1:1a:d0:
75:e2:3b:d5:44:27:7f:c4:8a:4a:cc:a0:52:04:cd:01:bc:5e:
71:35:29:b1:f1:da:63:1a:68:8a:8d:10:b3:b2:fb:af:57:08:
80:d4:80:b5:c6:c8:c6:3c:8a:26:37:a4:95:92:12:77:85:8d:
93:92:78:af:89:a6:6f:01:d2:d6:8f:ba:7d:b4:77:89:60:89:
36:8c:be:7d:98:d3:c2:9f:93:6c:fa:66:ab:40:c9:ab:2f:19:
20:e0:bd:99:e5:85:de:2a:ed:32:12:15:13:44:71:56:f5:92:
9e:5d:55:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:23 2024 by rpki-client on console-fra.rpki-client.org