Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/AXJ9UegWZpMDxHcri-wEFYjgy9g.roa
File: AXJ9UegWZpMDxHcri-wEFYjgy9g.roa (raw, json)
Hash identifier: j+2D2sJ0zjf1JqYP0uW2RH3twPw4w6LclnHud1+jl3c=
Subject key identifier: 01:72:7D:51:E8:16:66:93:03:C4:77:2B:8B:EC:04:15:88:E0:CB:D8
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 14C78D7A
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/AXJ9UegWZpMDxHcri-wEFYjgy9g.roa
Signing time: Sat 01 Jan 2022 08:54:45 +0000
ROA not before: Sat 01 Jan 2022 08:54:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33915
IP address blocks: 213.124.0.0/18 maxlen: 18
213.124.0.0/17 maxlen: 17
217.100.128.0/17 maxlen: 17
185.130.174.0/23 maxlen: 23
212.178.96.0/19 maxlen: 19
213.124.128.0/19 maxlen: 19
213.124.128.0/20 maxlen: 20
213.124.144.0/20 maxlen: 20
212.178.128.0/20 maxlen: 20
80.114.128.0/18 maxlen: 18
80.114.128.0/19 maxlen: 19
212.178.128.0/19 maxlen: 19
213.124.64.0/18 maxlen: 18
212.178.64.0/19 maxlen: 19
212.178.64.0/18 maxlen: 18
195.35.192.0/18 maxlen: 18
195.35.128.0/18 maxlen: 18
195.35.128.0/17 maxlen: 17
217.102.224.0/21 maxlen: 21
217.100.0.0/17 maxlen: 17
217.100.0.0/16 maxlen: 16
91.221.96.0/23 maxlen: 23
213.125.128.0/17 maxlen: 17
212.203.0.0/20 maxlen: 20
212.203.0.0/19 maxlen: 19
213.34.160.0/19 maxlen: 19
213.34.160.0/20 maxlen: 20
212.203.16.0/20 maxlen: 20
213.34.176.0/20 maxlen: 20
80.112.160.0/19 maxlen: 19
213.126.64.0/18 maxlen: 18
213.132.160.0/20 maxlen: 20
213.132.160.0/19 maxlen: 19
195.85.128.0/19 maxlen: 19
195.85.128.0/18 maxlen: 18
213.132.176.0/20 maxlen: 20
217.105.192.0/20 maxlen: 20
217.105.192.0/19 maxlen: 19
80.112.128.0/19 maxlen: 19
80.115.224.0/19 maxlen: 19
80.112.128.0/18 maxlen: 18
80.115.224.0/20 maxlen: 20
213.126.0.0/18 maxlen: 18
213.126.0.0/17 maxlen: 17
217.105.208.0/20 maxlen: 20
80.115.240.0/20 maxlen: 20
195.85.160.0/19 maxlen: 19
212.178.192.0/20 maxlen: 20
212.178.192.0/19 maxlen: 19
212.178.208.0/20 maxlen: 20
80.242.224.0/19 maxlen: 19
80.242.224.0/20 maxlen: 20
213.125.0.0/17 maxlen: 17
213.125.0.0/16 maxlen: 16
212.178.144.0/20 maxlen: 20
80.114.160.0/19 maxlen: 19
213.34.80.0/20 maxlen: 20
80.242.240.0/20 maxlen: 20
213.34.64.0/19 maxlen: 19
213.34.64.0/20 maxlen: 20
2001:41f0::/32 maxlen: 32
2001:41f0:8000::/33 maxlen: 33
2001:41f0::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348622202 (0x14c78d7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Jan 1 08:54:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01727d51e816669303c4772b8bec041588e0cbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:d3:69:48:00:dc:31:8f:07:ff:d5:b4:c4:
99:bf:7f:3d:58:d5:fc:64:ab:c1:7f:2d:e1:7a:d4:
38:b5:a1:c9:46:8e:fc:da:78:e8:98:8b:41:f3:09:
61:8e:8f:52:ec:27:e0:6e:3f:3b:1a:f1:de:26:28:
fe:4e:84:7b:be:05:4a:60:cf:f9:7d:6c:a0:83:02:
e6:7c:b9:44:a2:a1:be:90:31:de:93:d4:64:22:f4:
e3:54:25:08:75:ce:92:3e:30:9a:f6:47:09:f3:51:
b7:c6:9e:4e:50:f2:4b:b0:fa:f0:35:c9:34:38:45:
de:63:63:79:c2:aa:9e:89:18:c7:f3:f8:1b:93:1c:
fd:a8:6a:f3:ef:01:3c:2e:52:15:55:f2:32:94:53:
b3:76:ba:bd:3c:b3:b6:96:d3:8c:b1:a1:5f:d8:1a:
4c:bf:fe:51:9f:57:bd:cc:22:4f:a0:1c:94:19:63:
36:aa:6c:be:e2:c1:39:e4:c3:64:f0:fa:68:e7:92:
50:6d:30:2c:0d:fc:e7:b0:05:52:4b:44:33:ec:5f:
08:bc:34:2a:6b:5a:e2:82:03:72:26:f6:9e:4b:bf:
41:be:d9:b7:7a:0f:cd:26:51:12:09:61:36:0d:45:
ba:50:5a:4f:8f:91:89:72:02:d0:fd:be:d5:0b:ac:
dd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:72:7D:51:E8:16:66:93:03:C4:77:2B:8B:EC:04:15:88:E0:CB:D8
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/AXJ9UegWZpMDxHcri-wEFYjgy9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.112.128.0/18
80.114.128.0/18
80.115.224.0/19
80.242.224.0/19
91.221.96.0/23
185.130.174.0/23
195.35.128.0/17
195.85.128.0/18
212.178.64.0-212.178.159.255
212.178.192.0/19
212.203.0.0/19
213.34.64.0/19
213.34.160.0/19
213.124.0.0-213.124.159.255
213.125.0.0-213.126.127.255
213.132.160.0/19
217.100.0.0/16
217.102.224.0/21
217.105.192.0/19
IPv6:
2001:41f0::/32
Signature Algorithm: sha256WithRSAEncryption
ad:f5:31:bc:a3:c4:c3:a3:f7:0e:6c:6d:5e:d3:bc:b5:4f:1d:
fe:1d:34:43:c5:0d:d6:93:46:97:9c:56:ff:7e:2b:c1:c6:99:
ae:cf:4c:3c:5d:cd:49:68:e0:c7:de:bf:df:5e:05:46:19:68:
59:4e:21:69:ee:b8:0e:b9:c4:01:b0:2b:f5:5f:1d:d2:95:63:
e9:ec:aa:de:7d:fd:66:59:fc:f0:d8:95:57:af:b2:db:13:b9:
54:86:1f:b6:5c:6b:53:cb:35:44:4f:60:65:b5:cf:5e:2d:07:
0d:53:af:0d:d0:ac:a5:2e:87:4d:1f:4c:55:78:c6:a6:3d:f5:
c6:1d:43:2e:19:40:27:d5:5f:14:2e:e1:ae:68:9a:3a:02:0f:
2d:ca:bf:86:64:95:2e:91:ec:86:1d:58:41:5d:94:07:27:41:
7d:d0:b0:1b:7c:ae:f0:31:b5:dc:e5:ee:c2:f0:86:37:ca:31:
a8:41:de:18:79:61:f3:5e:39:e9:3a:f3:9b:09:14:cb:90:84:
79:f7:23:b5:b9:e7:2c:18:bb:59:6a:09:55:e6:2e:ab:ac:89:
31:0b:19:a1:82:3d:7c:67:f7:61:ac:26:53:57:ba:6c:06:cd:
0a:93:c1:6a:20:ab:cb:3a:0a:95:0f:ec:22:7f:eb:25:3f:73:
96:9e:73:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:17 2023 by rpki-client on console.sobornost.net