Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/skWZRium3kpAUOipBhUqJuZwH5k.roa
File: skWZRium3kpAUOipBhUqJuZwH5k.roa (raw, json)
Hash identifier: vvL1YgkTOl83xX4W9t0JdYjyEjgMk568I8DWX+EVzBo=
Subject key identifier: B2:45:99:46:2B:A6:DE:4A:40:50:E8:A9:06:15:2A:26:E6:70:1F:99
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 018489D983A649F49EA97C5B11D8E9AE4D06
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/skWZRium3kpAUOipBhUqJuZwH5k.roa
Signing time: Fri 18 Nov 2022 08:27:24 +0000
ROA not before: Fri 18 Nov 2022 08:27:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202468
IP address blocks: 185.231.180.0/22 maxlen: 22
185.228.238.0/24 maxlen: 24
185.228.239.0/24 maxlen: 24
185.228.236.0/24 maxlen: 24
185.228.236.0/22 maxlen: 22
185.228.237.0/24 maxlen: 24
185.97.116.0/22 maxlen: 24
185.220.224.0/24 maxlen: 24
185.220.224.0/22 maxlen: 22
185.220.225.0/24 maxlen: 24
185.220.226.0/24 maxlen: 24
185.220.227.0/24 maxlen: 24
37.32.4.0/22 maxlen: 22
37.32.0.0/22 maxlen: 22
37.32.0.0/19 maxlen: 24
37.32.8.0/22 maxlen: 22
37.32.17.0/24 maxlen: 24
37.32.16.0/24 maxlen: 24
37.32.12.0/22 maxlen: 22
37.32.24.0/22 maxlen: 22
193.176.240.0/22 maxlen: 24
37.32.20.0/22 maxlen: 22
37.32.18.0/24 maxlen: 24
37.32.19.0/24 maxlen: 24
37.32.28.0/22 maxlen: 24
193.176.242.0/23 maxlen: 23
185.143.232.0/22 maxlen: 24
37.152.176.0/20 maxlen: 24
37.152.184.0/24 maxlen: 24
185.206.92.0/22 maxlen: 24
188.121.120.0/21 maxlen: 24
185.239.104.0/24 maxlen: 24
185.239.104.0/22 maxlen: 24
185.239.105.0/24 maxlen: 24
188.121.127.0/24 maxlen: 24
185.239.106.0/23 maxlen: 23
188.121.96.0/19 maxlen: 24
188.121.104.0/22 maxlen: 22
188.121.108.0/22 maxlen: 22
94.101.176.0/20 maxlen: 24
94.101.184.0/21 maxlen: 24
94.101.180.0/23 maxlen: 23
94.101.180.0/24 maxlen: 24
94.101.182.0/24 maxlen: 24
185.226.116.0/22 maxlen: 24
2a0c:a7c0:3::/48 maxlen: 48
2a0c:a7c0::/48 maxlen: 48
2a0c:a7c0:1::/48 maxlen: 48
2a07:3900::/29 maxlen: 29
2a0c:a7c0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:89:d9:83:a6:49:f4:9e:a9:7c:5b:11:d8:e9:ae:4d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Nov 18 08:27:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b24599462ba6de4a4050e8a906152a26e6701f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:e4:22:43:2f:10:65:16:d4:3c:1e:15:08:
5c:2b:de:30:12:ee:42:d0:7f:ba:86:c0:4c:79:69:
04:d3:99:0c:a9:bd:e2:c8:52:2c:1b:9d:c3:5a:26:
f8:d6:1d:e8:c4:b1:44:26:30:a3:78:46:d6:27:c7:
94:f9:ee:cc:cf:76:34:5e:54:63:f5:18:76:9b:3d:
c7:15:9f:4b:11:13:cb:06:03:2c:c5:17:e0:70:63:
98:d3:7e:d3:25:7e:f6:9a:cf:e6:26:4e:50:0e:31:
64:97:5d:f9:a5:c6:ba:b9:69:ee:4e:16:21:7a:6f:
6e:3d:5e:ef:37:52:d7:9a:9e:61:6b:50:a6:96:e1:
8d:20:fe:dc:e7:de:a0:7c:26:56:07:6b:5b:d4:76:
9e:6e:01:1f:2e:86:65:63:03:8c:a6:a5:d2:dc:5f:
c6:00:a8:65:0d:5c:e3:7d:92:cc:e6:fe:bc:9f:f8:
a8:e1:7a:af:f8:f0:03:aa:37:90:ea:8f:40:de:8a:
14:77:89:79:8d:c5:c9:f2:77:72:54:84:6e:65:54:
fe:3e:5b:3d:7b:40:91:28:d8:da:c9:09:9a:15:a0:
13:a6:e0:30:e0:4a:f3:b1:89:90:e2:6b:33:a3:6e:
0d:42:c7:da:bd:c8:d6:9c:d6:27:18:ac:7a:d5:2b:
ba:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:45:99:46:2B:A6:DE:4A:40:50:E8:A9:06:15:2A:26:E6:70:1F:99
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/skWZRium3kpAUOipBhUqJuZwH5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.0.0/19
37.152.176.0/20
94.101.176.0/20
185.97.116.0/22
185.143.232.0/22
185.206.92.0/22
185.220.224.0/22
185.226.116.0/22
185.228.236.0/22
185.231.180.0/22
185.239.104.0/22
188.121.96.0/19
193.176.240.0/22
IPv6:
2a07:3900::/29
2a0c:a7c0::/46
Signature Algorithm: sha256WithRSAEncryption
72:a9:3e:fc:0a:18:a8:f9:94:c3:cf:77:e4:39:5f:ef:2f:b1:
b9:e4:e3:18:ed:5d:97:03:35:b2:74:58:c8:64:e9:23:36:59:
c8:7d:7d:46:5c:7e:5f:a7:3d:5c:8a:51:59:c3:02:09:71:4d:
c6:7f:7e:dc:08:de:b1:fc:f0:f3:1c:58:14:0a:52:34:ef:c5:
47:37:3d:06:b0:06:99:a4:23:b8:14:ab:85:8b:fc:f3:df:db:
14:42:e7:d3:4f:ed:42:d3:b7:f7:34:f7:0c:31:0b:c5:98:dc:
cf:1e:df:49:55:58:54:f9:52:80:f4:2b:c7:49:bb:66:aa:59:
84:3d:68:f0:5e:78:7b:05:d5:cb:1d:58:74:37:7e:e3:ca:8f:
73:94:73:3a:a1:95:82:e8:0a:54:f1:6a:80:43:bb:1b:ab:aa:
67:78:69:52:14:e7:d2:09:f9:de:4d:19:aa:d1:9a:3a:cf:74:
8f:68:ec:66:a8:ec:6d:24:2d:c1:87:f2:8c:05:cc:be:87:f8:
ce:b4:8d:4e:79:27:a7:8a:76:40:f3:ad:c6:54:c3:8c:d5:7c:
07:96:32:6e:05:c3:21:0b:0f:2c:72:92:1c:e5:08:07:f0:23:
cc:e7:bc:3d:30:5d:26:60:df:b0:d6:a5:14:ec:d1:7e:c0:cc:
86:ad:4e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net