Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/9O1kcddkSoiQeEy-Wo8jVSpW4MI.roa
File: 9O1kcddkSoiQeEy-Wo8jVSpW4MI.roa (raw, json)
Hash identifier: Od9Z2gVfE8MfdBvArpQ3jVxbBmcQA+LXifwisT6VvS0=
Subject key identifier: F4:ED:64:71:D7:64:4A:88:90:78:4C:BE:5A:8F:23:55:2A:56:E0:C2
Certificate issuer: /CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Certificate serial: 1ED763EE
Authority key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/9O1kcddkSoiQeEy-Wo8jVSpW4MI.roa
Signing time: Sat 01 Jan 2022 08:56:10 +0000
ROA not before: Sat 01 Jan 2022 08:56:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16333
IP address blocks: 185.2.188.0/22 maxlen: 22
217.16.64.0/19 maxlen: 19
217.16.64.0/20 maxlen: 20
217.16.80.0/20 maxlen: 20
217.16.88.0/22 maxlen: 22
217.16.87.0/24 maxlen: 24
212.110.80.0/21 maxlen: 21
212.110.88.0/22 maxlen: 22
146.255.69.0/24 maxlen: 24
92.53.40.0/22 maxlen: 22
146.255.86.0/24 maxlen: 24
185.80.164.0/22 maxlen: 22
185.100.244.0/22 maxlen: 22
85.30.64.0/19 maxlen: 19
85.30.64.0/21 maxlen: 21
85.30.64.0/18 maxlen: 18
85.30.72.0/22 maxlen: 22
78.157.4.0/24 maxlen: 24
78.157.3.0/24 maxlen: 24
78.157.2.0/24 maxlen: 24
78.157.1.0/24 maxlen: 24
78.157.0.0/24 maxlen: 24
78.157.7.0/24 maxlen: 24
78.157.6.0/24 maxlen: 24
78.157.5.0/24 maxlen: 24
109.69.40.0/21 maxlen: 21
79.126.128.0/18 maxlen: 18
79.126.128.0/17 maxlen: 17
5.32.178.0/23 maxlen: 23
185.89.244.0/22 maxlen: 22
5.32.180.0/24 maxlen: 24
5.32.182.0/24 maxlen: 24
212.110.64.0/23 maxlen: 23
92.53.4.0/22 maxlen: 22
79.126.192.0/18 maxlen: 18
78.157.24.0/24 maxlen: 24
78.157.23.0/24 maxlen: 24
78.157.22.0/24 maxlen: 24
78.157.21.0/24 maxlen: 24
78.157.20.0/24 maxlen: 24
78.157.31.0/24 maxlen: 24
78.157.30.0/24 maxlen: 24
78.157.29.0/24 maxlen: 24
78.157.28.0/24 maxlen: 24
78.157.27.0/24 maxlen: 24
78.157.26.0/24 maxlen: 24
78.157.25.0/24 maxlen: 24
31.11.68.0/22 maxlen: 22
31.11.64.0/18 maxlen: 19
31.11.72.0/21 maxlen: 21
31.11.80.0/21 maxlen: 21
31.11.88.0/21 maxlen: 21
185.5.4.0/22 maxlen: 22
89.31.152.0/21 maxlen: 21
31.11.96.0/21 maxlen: 21
31.11.104.0/21 maxlen: 21
31.11.112.0/21 maxlen: 21
217.196.192.0/20 maxlen: 20
31.11.120.0/21 maxlen: 21
212.158.176.0/20 maxlen: 24
85.30.80.0/22 maxlen: 22
85.30.92.0/22 maxlen: 22
85.30.96.0/19 maxlen: 19
85.30.96.0/22 maxlen: 22
85.30.101.0/24 maxlen: 24
85.30.104.0/22 maxlen: 22
85.30.112.0/24 maxlen: 24
85.30.110.0/24 maxlen: 24
85.30.120.0/21 maxlen: 21
85.30.119.0/24 maxlen: 24
95.128.186.0/24 maxlen: 24
2a01:5b8::/29 maxlen: 29
2a01:5b8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517432302 (0x1ed763ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Validity
Not Before: Jan 1 08:56:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4ed6471d7644a8890784cbe5a8f23552a56e0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:7a:4c:b0:7e:e0:39:92:93:c5:65:76:fe:
ba:41:65:cd:06:fe:be:30:5b:8e:d0:53:bd:0c:81:
c4:0f:03:be:d9:4f:4c:b2:19:cf:51:85:66:25:d5:
92:6d:a7:ac:be:b1:fc:03:bb:1f:89:ee:19:25:20:
79:80:61:e5:31:2e:70:79:6f:97:6c:bf:b6:87:96:
44:91:ab:62:b8:57:f4:7e:9a:00:3b:1a:22:da:82:
f1:6b:6e:a5:41:c9:2f:bc:4e:af:58:71:8d:ae:b1:
5b:47:bb:57:f2:3e:d6:71:1f:70:9c:5e:d1:69:93:
a7:ea:5b:71:2b:4f:9b:84:4d:52:18:93:e9:6b:90:
40:9f:83:1f:14:21:17:ad:83:f0:54:30:42:ff:13:
44:f2:49:68:c8:ce:22:66:4c:7c:5a:ea:96:26:dc:
75:79:50:98:ec:aa:da:66:80:6b:7c:67:cb:b4:c2:
2b:f3:e9:ec:76:55:e3:94:aa:07:4b:96:7d:d1:a2:
7a:30:88:74:43:ad:b6:98:3d:29:97:d7:86:ed:40:
9c:e5:dd:cd:40:8e:ba:f0:5d:84:94:8a:1c:1f:81:
b1:e7:0a:e2:1f:52:cf:81:40:d4:8f:c7:09:a8:76:
a4:4a:7d:6b:22:30:3e:db:4a:3b:eb:b5:fe:3c:9b:
34:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:ED:64:71:D7:64:4A:88:90:78:4C:BE:5A:8F:23:55:2A:56:E0:C2
X509v3 Authority Key Identifier:
keyid:99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/9O1kcddkSoiQeEy-Wo8jVSpW4MI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.178.0-5.32.180.255
5.32.182.0/24
31.11.64.0/18
78.157.0.0/21
78.157.20.0-78.157.31.255
79.126.128.0/17
85.30.64.0/18
89.31.152.0/21
92.53.4.0/22
92.53.40.0/22
95.128.186.0/24
109.69.40.0/21
146.255.69.0/24
146.255.86.0/24
185.2.188.0/22
185.5.4.0/22
185.80.164.0/22
185.89.244.0/22
185.100.244.0/22
212.110.64.0/23
212.110.80.0-212.110.91.255
212.158.176.0/20
217.16.64.0/19
217.196.192.0/20
IPv6:
2a01:5b8::/29
Signature Algorithm: sha256WithRSAEncryption
10:99:81:65:bf:04:f7:58:a2:39:f6:4e:64:91:32:52:87:df:
f7:08:16:d1:db:77:27:f3:00:02:e5:f2:11:e9:34:c3:c4:88:
fa:00:02:c4:c2:dc:f9:3f:17:68:9e:34:d8:7b:4a:b8:44:3d:
2e:56:d1:69:3f:d4:79:9e:37:00:9a:35:70:b3:bc:3f:49:92:
e4:90:f5:7f:bd:a8:dd:8d:92:ee:a0:20:50:55:1a:9c:bc:45:
9c:c0:f2:93:97:61:ec:be:ff:55:c5:a3:ce:f1:92:7b:e5:3b:
53:fc:f0:a2:e3:29:a0:6c:00:88:e5:d9:49:b4:81:3b:8f:49:
d0:9d:49:da:76:ec:97:86:90:73:16:57:76:cc:89:f7:e5:07:
d3:df:76:03:31:f3:bd:2e:dd:10:72:e9:8d:5d:4b:9b:41:07:
d3:49:cb:a1:17:55:06:39:4b:f7:fc:48:19:0c:2d:e0:81:10:
d4:17:be:c6:05:42:60:b8:85:c6:6e:3b:37:db:0f:b3:a5:43:
0f:85:eb:37:e2:49:c9:c8:20:ca:4f:18:bb:9e:65:6d:5a:c5:
17:f5:43:64:6f:6b:6a:3a:ed:7e:f2:c0:47:54:fb:77:e2:a4:
b1:23:7f:b1:b9:2a:60:2c:13:73:4c:1d:c8:c4:06:44:18:93:
9a:74:6d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:32 2023 by rpki-client on console.sobornost.net