Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/FINOujjG166VAnIPWSS-ZoZzdiY.roa
File: FINOujjG166VAnIPWSS-ZoZzdiY.roa (raw, json)
Hash identifier: 7J6qBleY6WVZ/1WsnDT9I0G/5699iVHSM51Q0t9mmRA=
Subject key identifier: 14:83:4E:BA:38:C6:D7:AE:95:02:72:0F:59:24:BE:66:86:73:76:26
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 094DB648
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/FINOujjG166VAnIPWSS-ZoZzdiY.roa
Signing time: Sat 14 May 2022 06:16:40 +0000
ROA not before: Sat 14 May 2022 06:16:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 45.144.88.0/22 maxlen: 24
87.239.254.0/24 maxlen: 32
45.149.28.0/22 maxlen: 24
89.44.205.0/24 maxlen: 32
91.228.216.0/24 maxlen: 24
185.36.254.0/24 maxlen: 32
185.217.64.0/22 maxlen: 22
185.166.84.0/24 maxlen: 32
86.105.183.0/24 maxlen: 32
185.188.61.0/24 maxlen: 24
185.188.62.0/24 maxlen: 24
185.188.63.0/24 maxlen: 24
94.46.206.0/24 maxlen: 32
185.152.248.0/22 maxlen: 32
5.154.174.0/24 maxlen: 24
80.246.30.0/24 maxlen: 32
185.153.151.0/24 maxlen: 32
188.119.154.0/24 maxlen: 32
185.160.44.0/22 maxlen: 32
185.96.162.0/24 maxlen: 32
77.246.152.0/22 maxlen: 22
185.152.36.0/22 maxlen: 32
195.47.194.0/24 maxlen: 32
89.35.249.0/24 maxlen: 32
185.108.104.0/24 maxlen: 32
185.108.105.0/24 maxlen: 32
2a06:4a00::/29 maxlen: 32
2a05:28c0::/29 maxlen: 32
2a06:5700::/29 maxlen: 32
2a01:4740::/32 maxlen: 32
2a06:46c0::/29 maxlen: 32
2a06:5000::/29 maxlen: 32
2a05:f4c0::/29 maxlen: 29
2a06:3040::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156087880 (0x94db648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: May 14 06:16:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14834eba38c6d7ae9502720f5924be6686737626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:2a:59:3c:70:35:16:ad:50:f5:f8:91:5e:
9d:16:f0:89:5f:df:e1:30:e1:0a:ef:09:68:cf:97:
92:91:d0:42:43:38:c7:28:a8:1e:72:42:72:61:a3:
9f:29:c0:b5:75:34:d8:ba:d9:d4:03:f2:ce:64:d3:
ec:d1:15:9e:2a:df:81:b1:fc:e1:9d:c8:8c:5f:e9:
eb:7a:8f:6d:13:ff:e1:f5:58:c8:f8:68:c6:9b:39:
0f:fb:5c:d8:90:0c:aa:f6:3e:bc:45:e9:8a:48:f6:
81:86:06:a4:be:02:03:3f:0e:50:75:83:af:76:ed:
41:10:97:61:72:09:64:07:b4:01:97:24:38:cd:8b:
12:b0:ee:b6:6e:6c:0d:54:fa:36:72:3d:19:2c:ef:
0e:02:65:4f:ca:f8:79:92:c8:98:5f:c2:e1:f1:74:
e2:8d:16:27:e1:b4:9b:3a:0c:fc:f2:05:86:6d:27:
0c:df:91:12:b3:a3:95:26:ee:61:11:da:73:8e:da:
da:30:c0:5c:25:b1:8f:5f:6b:4d:d1:ec:46:2c:a3:
94:75:b6:c6:02:10:e6:07:4f:8a:a3:a3:cf:0f:21:
3a:cd:00:1f:46:a6:ff:56:1b:d6:3e:31:1f:ce:87:
2c:01:75:7a:a2:6f:f9:5f:e3:60:67:a3:5c:02:5a:
b9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:83:4E:BA:38:C6:D7:AE:95:02:72:0F:59:24:BE:66:86:73:76:26
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/FINOujjG166VAnIPWSS-ZoZzdiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
45.144.88.0/22
45.149.28.0/22
77.246.152.0/22
80.246.30.0/24
86.105.183.0/24
87.239.254.0/24
89.35.249.0/24
89.44.205.0/24
91.228.216.0/24
94.46.206.0/24
185.36.254.0/24
185.96.162.0/24
185.108.104.0/23
185.152.36.0/22
185.152.248.0/22
185.153.151.0/24
185.160.44.0/22
185.166.84.0/24
185.188.61.0-185.188.63.255
185.217.64.0/22
188.119.154.0/24
195.47.194.0/24
IPv6:
2a01:4740::/32
2a05:28c0::/29
2a05:f4c0::/29
2a06:3040::/29
2a06:46c0::/29
2a06:4a00::/29
2a06:5000::/29
2a06:5700::/29
Signature Algorithm: sha256WithRSAEncryption
c5:56:16:73:c5:a4:36:66:09:16:89:fe:2f:e1:c5:0e:4f:f8:
37:e2:dd:05:bd:f6:c4:e7:35:bb:38:fb:21:47:90:89:32:6b:
01:62:ee:3e:59:3a:21:96:4c:cc:71:a2:5f:03:ea:f1:d1:81:
3a:d0:7e:5b:28:08:7c:49:05:35:86:45:ce:12:d7:39:5e:66:
bb:20:d8:a5:05:dd:fd:70:48:8a:6c:21:b4:a6:b7:1a:24:fb:
f1:04:9c:00:0f:d9:12:43:16:d3:63:6c:9c:d1:46:27:2f:09:
4e:e4:98:14:c3:db:7b:17:0b:15:9a:85:76:b4:e5:eb:f9:b9:
1c:12:3b:ef:26:57:2b:56:85:47:c8:86:8f:81:fb:c1:5d:ef:
4c:55:91:22:c7:bd:f4:2e:a0:d4:52:a3:10:26:e3:19:22:d7:
f9:14:e7:a9:ee:f2:f6:63:ce:89:11:64:38:bc:c9:99:86:eb:
16:c6:20:f1:6c:80:c9:b6:61:a0:ce:e9:ff:be:57:60:25:5f:
ce:87:b5:75:2b:01:bd:0c:5c:d8:86:af:d9:ab:31:dd:1b:b4:
d6:27:dc:c2:ea:52:a6:00:94:b1:88:0c:74:0c:67:c5:27:ec:
01:33:68:6a:b7:4b:9b:8f:5b:76:36:04:29:75:fc:95:53:de:
b2:d4:1d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:22 2023 by rpki-client on console-ams.rpki-client.org