Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/qZ88qMNfw_0vacvYidG5h-63MTw.roa
File: qZ88qMNfw_0vacvYidG5h-63MTw.roa (raw, json)
Hash identifier: kiQTTywqEr9wCfmKSz2A2cL6pcmjNcVGiniorK9L86Y=
Subject key identifier: A9:9F:3C:A8:C3:5F:C3:FD:2F:69:CB:D8:89:D1:B9:87:EE:B7:31:3C
Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Certificate serial: 37DE2EBC
Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/qZ88qMNfw_0vacvYidG5h-63MTw.roa
Signing time: Wed 27 Apr 2022 10:40:49 +0000
ROA not before: Wed 27 Apr 2022 10:40:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6805
IP address blocks: 89.13.0.0/17 maxlen: 17
92.228.72.0/23 maxlen: 23
92.228.74.0/23 maxlen: 23
92.228.76.0/23 maxlen: 23
92.228.78.0/23 maxlen: 23
92.228.80.0/23 maxlen: 23
92.228.82.0/23 maxlen: 23
92.228.84.0/23 maxlen: 23
92.228.86.0/23 maxlen: 23
89.12.192.0/18 maxlen: 18
185.93.236.0/22 maxlen: 22
89.12.0.0/18 maxlen: 18
89.12.0.0/14 maxlen: 14
92.227.194.0/23 maxlen: 23
89.12.128.0/18 maxlen: 18
213.39.128.0/17 maxlen: 17
89.12.64.0/18 maxlen: 18
78.51.96.0/19 maxlen: 19
78.51.64.0/19 maxlen: 19
78.51.0.0/19 maxlen: 19
78.51.32.0/19 maxlen: 19
78.50.0.0/17 maxlen: 17
213.191.64.0/19 maxlen: 19
80.171.0.0/16 maxlen: 16
78.49.192.0/18 maxlen: 18
78.50.128.0/17 maxlen: 17
92.224.0.0/13 maxlen: 13
78.49.0.0/18 maxlen: 18
78.55.192.0/18 maxlen: 18
78.49.128.0/18 maxlen: 18
89.15.232.0/21 maxlen: 21
78.49.64.0/18 maxlen: 18
85.176.0.0/13 maxlen: 13
78.48.0.0/13 maxlen: 13
78.55.0.0/18 maxlen: 18
78.48.64.0/18 maxlen: 18
85.183.16.0/23 maxlen: 23
85.183.18.0/23 maxlen: 23
78.48.0.0/18 maxlen: 18
78.54.192.0/18 maxlen: 18
92.230.20.0/23 maxlen: 23
92.230.22.0/23 maxlen: 23
89.14.128.0/18 maxlen: 18
62.109.64.0/18 maxlen: 18
78.55.128.0/18 maxlen: 18
78.48.192.0/18 maxlen: 18
89.14.192.0/18 maxlen: 18
78.48.128.0/18 maxlen: 18
78.55.64.0/18 maxlen: 18
78.54.64.0/18 maxlen: 18
89.13.128.0/17 maxlen: 17
78.54.0.0/18 maxlen: 18
89.14.64.0/18 maxlen: 18
89.14.0.0/18 maxlen: 18
78.54.128.0/18 maxlen: 18
2a01:c20:7200::/47 maxlen: 47
2a01:c22:d600::/47 maxlen: 47
2a01:c22:8a00::/47 maxlen: 47
2a01:c22:a600::/47 maxlen: 47
2a01:c22:7000::/47 maxlen: 47
2a01:c22:ce00::/47 maxlen: 47
2a01:c22:ba00::/47 maxlen: 47
2a01:c22:1c00::/47 maxlen: 47
2a01:c22:be00::/47 maxlen: 47
2a01:c22:d200::/47 maxlen: 47
2a01:c22:7400::/47 maxlen: 47
2a01:c22:aa00::/47 maxlen: 47
2a01:c22:b200::/47 maxlen: 47
2a01:c22:c200::/47 maxlen: 47
2a01:c22:8600::/47 maxlen: 47
2a01:c22:ca00::/47 maxlen: 47
2a01:c22:b600::/47 maxlen: 47
2a01:c22:3600::/47 maxlen: 47
2a01:c22:8e00::/47 maxlen: 47
2a01:c22:6c00::/47 maxlen: 47
2a01:c22:ae00::/47 maxlen: 47
2a01:c22:7800::/47 maxlen: 47
2a01:c08::/47 maxlen: 47
2a01:c20:7000::/39 maxlen: 39
2a01:c22:6e00::/39 maxlen: 39
2a01:c22:8800::/39 maxlen: 39
2a01:c22:7600::/39 maxlen: 39
2a01:c22:8400::/39 maxlen: 39
2a01:c22:1e00::/39 maxlen: 39
2a01:c22:7200::/39 maxlen: 39
2a01:c22:7a00::/39 maxlen: 39
2a01:c22:8c00::/39 maxlen: 39
2a01:c22:3400::/39 maxlen: 39
2a01:c23:c600::/47 maxlen: 47
2a01:c23:8a00::/47 maxlen: 47
2a01:c23:9600::/47 maxlen: 47
2a01:c23:6600::/47 maxlen: 47
2a01:c23:8e00::/47 maxlen: 47
2a01:c23:5e00::/47 maxlen: 47
2a01:c23:c200::/47 maxlen: 47
2a01:c23:7200::/47 maxlen: 47
2a01:c23:9200::/47 maxlen: 47
2a01:c23:6a00::/47 maxlen: 47
2a01:c23:be00::/47 maxlen: 47
2a01:c23:6e00::/47 maxlen: 47
2a01:c23:7600::/47 maxlen: 47
2a01:c23:6200::/47 maxlen: 47
2a01:c23:ba00::/47 maxlen: 47
2a01:c00::/26 maxlen: 39
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937307836 (0x37de2ebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Validity
Not Before: Apr 27 10:40:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a99f3ca8c35fc3fd2f69cbd889d1b987eeb7313c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ac:85:c4:b2:d1:72:35:5e:29:57:f7:2a:49:
b4:1a:10:3c:28:c7:8b:1e:f8:44:37:7e:da:8e:68:
68:dc:8b:94:f8:b7:75:31:a8:ba:37:72:e2:af:b6:
d3:3c:02:81:c4:d8:01:6e:5b:95:4f:9c:51:c6:8f:
ad:54:b0:a0:f3:52:be:7f:cd:65:2a:20:de:3f:86:
bf:f2:5e:cf:5c:9f:92:e5:aa:a6:18:05:ec:e4:42:
a7:3a:44:b0:26:6f:b1:2c:7d:a3:3d:92:ea:a5:ab:
0f:c5:13:29:ce:9f:ae:3e:2c:30:60:ac:49:49:50:
ad:3c:1d:6f:56:78:ef:be:93:79:3b:cf:67:53:dd:
0c:4b:af:45:47:65:a9:e2:bd:b3:3c:28:e8:0d:aa:
9f:0d:64:77:ce:b7:62:12:a1:a7:d0:b7:bb:22:6a:
28:b0:d4:b0:2c:8b:31:07:f7:8b:05:9d:0d:38:72:
d5:e8:58:54:7a:8d:02:c8:d4:6d:07:b1:71:44:8b:
72:de:4c:64:1b:af:69:fc:ff:4f:b6:c3:81:df:10:
af:62:38:2a:95:d5:da:15:67:09:8c:42:5c:c5:ad:
ef:cb:fb:cb:22:69:83:03:50:9b:f9:89:96:e8:d6:
a6:77:eb:9f:cf:58:7b:63:86:75:34:eb:1c:77:9b:
fe:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9F:3C:A8:C3:5F:C3:FD:2F:69:CB:D8:89:D1:B9:87:EE:B7:31:3C
X509v3 Authority Key Identifier:
keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/qZ88qMNfw_0vacvYidG5h-63MTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.109.64.0/18
78.48.0.0/13
80.171.0.0/16
85.176.0.0/13
89.12.0.0/14
92.224.0.0/13
185.93.236.0/22
213.39.128.0/17
213.191.64.0/19
IPv6:
2a01:c00::/26
Signature Algorithm: sha256WithRSAEncryption
ba:fd:32:fe:96:85:8c:78:5c:0b:12:76:2e:84:0e:a6:c7:aa:
ef:d4:2b:ed:f4:ea:0f:3a:df:a9:6f:69:2c:c4:ba:20:f8:da:
84:f9:1e:1c:08:10:f8:24:09:02:4a:88:44:76:09:c0:93:c7:
8c:46:e6:1f:2a:07:a0:10:b7:39:6a:02:de:b6:d5:20:3f:96:
84:b5:d9:d4:12:bd:6e:6d:9b:1d:89:8d:c2:af:ee:6d:79:fd:
d7:2b:91:d8:0c:41:cf:a5:44:43:88:0c:5b:a1:b1:8e:53:3d:
d1:45:ef:c4:9f:97:34:f3:00:05:85:eb:4d:05:f3:e7:3b:f2:
3b:0b:cd:8f:fc:b2:db:1a:28:68:0f:7f:f5:eb:36:df:aa:1d:
3d:82:b1:95:16:0c:1d:9c:75:71:9b:b5:8e:5a:65:39:c4:11:
91:8b:33:b2:8a:2e:bf:af:f3:2e:1d:b9:c6:88:8c:b8:a9:8c:
ad:4d:14:0d:f8:dc:15:c4:51:b6:3c:9b:f3:cb:c4:d6:65:b0:
c5:ec:93:f1:27:81:d7:12:6a:13:f9:b4:6c:68:be:76:9b:ce:
a9:1c:2e:e6:6e:57:a6:0a:f8:30:1c:12:0f:a6:3f:37:33:38:
15:6d:4a:62:f5:b6:39:88:64:e5:32:15:0d:d9:6f:85:b7:b6:
51:f9:06:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:05 2023 by rpki-client on console.sobornost.net