Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/Bt3qCcLi38lgu6nDmMOdZjbzpTw.roa
File: Bt3qCcLi38lgu6nDmMOdZjbzpTw.roa (raw, json)
Hash identifier: FrZ1sQlhV4F/10qYVGADUt+1WfcgRKeS5onC3hXGBPU=
Subject key identifier: 06:DD:EA:09:C2:E2:DF:C9:60:BB:A9:C3:98:C3:9D:66:36:F3:A5:3C
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 235AA933
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/Bt3qCcLi38lgu6nDmMOdZjbzpTw.roa
Signing time: Sat 01 Jan 2022 12:01:54 +0000
ROA not before: Sat 01 Jan 2022 12:01:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39611
IP address blocks: 185.49.24.0/22 maxlen: 22
185.49.24.0/24 maxlen: 24
185.49.25.0/24 maxlen: 24
185.49.26.0/24 maxlen: 24
185.49.27.0/24 maxlen: 24
213.207.39.0/24 maxlen: 24
213.207.40.0/24 maxlen: 24
213.207.40.0/22 maxlen: 22
213.207.43.0/24 maxlen: 24
213.207.41.0/24 maxlen: 24
213.207.42.0/24 maxlen: 24
213.207.44.0/22 maxlen: 22
213.207.44.0/24 maxlen: 24
213.207.45.0/24 maxlen: 24
213.207.46.0/24 maxlen: 24
213.207.47.0/24 maxlen: 24
213.207.48.0/20 maxlen: 20
213.207.48.0/21 maxlen: 21
213.207.50.0/24 maxlen: 24
213.207.48.0/24 maxlen: 24
213.207.48.0/22 maxlen: 22
213.207.49.0/24 maxlen: 24
213.207.51.0/24 maxlen: 24
213.207.55.0/24 maxlen: 24
213.207.57.0/24 maxlen: 24
213.207.52.0/22 maxlen: 22
213.207.53.0/24 maxlen: 24
213.207.54.0/24 maxlen: 24
213.207.52.0/24 maxlen: 24
213.207.56.0/22 maxlen: 22
213.207.56.0/21 maxlen: 21
213.207.56.0/24 maxlen: 24
213.207.58.0/24 maxlen: 24
213.207.60.0/24 maxlen: 24
213.207.60.0/22 maxlen: 22
213.207.61.0/24 maxlen: 24
213.207.59.0/24 maxlen: 24
213.207.63.0/24 maxlen: 24
213.207.62.0/24 maxlen: 24
213.207.37.0/24 maxlen: 24
213.207.38.0/24 maxlen: 24
213.207.35.0/24 maxlen: 24
213.207.32.0/22 maxlen: 22
213.207.32.0/24 maxlen: 24
213.207.33.0/24 maxlen: 24
213.207.34.0/24 maxlen: 24
213.207.32.0/19 maxlen: 19
213.207.32.0/20 maxlen: 20
213.207.36.0/22 maxlen: 22
213.207.36.0/24 maxlen: 24
2a01:9d24::/31 maxlen: 31
2a01:9d20::/29 maxlen: 29
2a01:9d22::/31 maxlen: 31
2a01:9d20::/31 maxlen: 31
2a01:9d26::/31 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593144115 (0x235aa933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Jan 1 12:01:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06ddea09c2e2dfc960bba9c398c39d6636f3a53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:1b:65:6c:eb:00:5d:4d:ec:27:c6:5d:fe:
9c:bb:68:36:16:0f:2e:d7:2c:38:82:bf:d2:5a:11:
de:e9:41:f1:f8:7a:b9:05:1c:1f:6d:7d:33:fe:7b:
24:22:8d:9b:6e:a0:4d:81:01:8a:5c:04:4f:5c:1a:
17:4b:3c:cd:52:66:7a:7c:38:c1:39:d0:c1:bf:ac:
a3:b2:09:62:c4:c3:e3:04:5d:6b:11:71:f9:87:1e:
b4:c4:89:38:4d:b4:ef:18:46:62:02:0e:45:92:55:
6f:fb:c7:b6:e6:45:82:8f:79:48:da:fa:20:33:de:
3d:48:0c:47:8a:33:67:d9:09:2d:de:d2:53:ee:a5:
48:19:b9:23:17:93:15:ec:db:22:9c:09:8d:19:5e:
a6:37:80:c9:eb:d4:93:0f:cb:f2:2b:6b:bb:c6:05:
b3:89:b0:e6:b2:79:fe:41:1c:ec:85:1c:86:ac:4b:
c1:29:ee:72:6a:e6:0c:69:aa:8b:06:be:46:cb:1f:
6c:00:7b:a3:07:06:da:14:82:02:fa:f9:3f:21:86:
07:b1:aa:c5:a1:d7:d0:35:2f:7a:cb:aa:75:4d:5a:
09:a1:67:71:2b:05:75:10:69:0e:6b:8d:8e:cc:ae:
a7:4c:0e:7b:1c:90:95:5c:b9:11:a6:66:dd:db:44:
32:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DD:EA:09:C2:E2:DF:C9:60:BB:A9:C3:98:C3:9D:66:36:F3:A5:3C
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/Bt3qCcLi38lgu6nDmMOdZjbzpTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.24.0/22
213.207.32.0/19
IPv6:
2a01:9d20::/29
Signature Algorithm: sha256WithRSAEncryption
b9:f9:aa:09:98:e3:e0:f1:be:7a:cf:e4:52:cc:3c:05:c5:6a:
03:a9:52:65:1e:76:ae:be:bc:5e:bd:19:7d:a1:99:b9:40:4f:
20:df:10:2d:f9:9f:11:c2:bd:e5:06:52:fc:0b:de:84:be:e9:
94:32:89:d7:9b:e7:e5:d2:e2:60:2a:f9:56:4e:5b:55:18:3e:
d7:9f:27:64:f4:f6:08:8a:9a:9a:5f:a3:1b:30:13:69:0c:f7:
cb:4f:a3:3f:2e:08:8b:fa:d2:07:73:ce:53:fe:79:f1:bf:26:
fb:c5:cb:8e:cc:36:bc:bf:60:c6:3e:41:e8:cc:96:55:25:50:
69:e0:07:e7:ff:4e:32:f5:f3:cf:16:51:b0:71:91:51:a8:f0:
65:ba:2b:fa:5e:35:d9:4d:1b:71:6d:29:a2:ba:d3:15:d0:a3:
1d:ab:a6:c2:b2:ad:3c:c5:f7:21:e1:75:b2:9e:c9:57:e2:6d:
1a:91:ca:96:19:81:b6:4d:84:26:40:19:0a:1b:64:98:53:b9:
a1:0d:89:53:ca:ec:e5:48:b5:15:5d:32:e3:74:47:57:16:2d:
27:f3:75:a1:76:74:7e:b9:27:60:21:ea:83:5b:32:4f:f2:87:
8a:a4:ea:e0:a7:82:73:48:ff:84:52:f2:5f:b4:66:2c:89:c9:
7f:f8:2b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net