Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/oQrrB2PdVHwn3ZtfSxNW9BclIt4.roa
File: oQrrB2PdVHwn3ZtfSxNW9BclIt4.roa (raw, json)
Hash identifier: A2tvThXXpF7ec/pDL6wy0cKq1glT+2PDS4mzOgZDvsI=
Subject key identifier: A1:0A:EB:07:63:DD:54:7C:27:DD:9B:5F:4B:13:56:F4:17:25:22:DE
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 429DFAFF
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/oQrrB2PdVHwn3ZtfSxNW9BclIt4.roa
Signing time: Sat 01 Jan 2022 06:04:59 +0000
ROA not before: Sat 01 Jan 2022 06:04:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25490
IP address blocks: 85.174.143.0/24 maxlen: 24
85.173.4.0/22 maxlen: 22
85.172.160.0/21 maxlen: 21
85.174.128.0/18 maxlen: 18
85.174.240.0/20 maxlen: 20
85.175.0.0/19 maxlen: 19
83.239.0.0/20 maxlen: 20
83.239.0.0/18 maxlen: 18
85.175.0.0/16 maxlen: 16
83.239.16.0/20 maxlen: 20
83.239.32.0/19 maxlen: 19
85.175.32.0/21 maxlen: 21
83.239.32.0/21 maxlen: 21
85.174.224.0/20 maxlen: 20
83.239.96.0/20 maxlen: 20
85.175.96.0/22 maxlen: 22
85.172.0.0/19 maxlen: 19
85.175.100.0/23 maxlen: 23
85.172.32.0/19 maxlen: 19
83.239.40.0/22 maxlen: 22
85.175.46.0/24 maxlen: 24
83.239.48.0/20 maxlen: 20
83.239.64.0/19 maxlen: 19
85.175.62.0/23 maxlen: 23
85.173.144.0/20 maxlen: 20
85.175.66.0/23 maxlen: 23
85.175.71.0/24 maxlen: 24
85.175.65.0/24 maxlen: 24
85.175.72.0/22 maxlen: 22
85.175.82.0/23 maxlen: 23
85.175.91.0/24 maxlen: 24
83.239.200.0/21 maxlen: 21
85.175.216.0/22 maxlen: 22
83.239.224.0/20 maxlen: 20
85.175.226.0/23 maxlen: 23
83.239.240.0/22 maxlen: 22
85.175.236.0/24 maxlen: 24
83.239.244.0/22 maxlen: 22
85.175.152.0/23 maxlen: 23
85.172.64.0/21 maxlen: 21
85.175.170.0/23 maxlen: 23
85.172.72.0/22 maxlen: 22
85.172.82.0/23 maxlen: 23
85.172.84.0/22 maxlen: 22
85.172.79.0/24 maxlen: 24
85.172.96.0/20 maxlen: 20
85.175.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117649663 (0x429dfaff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 1 06:04:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a10aeb0763dd547c27dd9b5f4b1356f4172522de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:16:fa:74:d3:80:b6:64:9f:87:79:45:b5:
75:83:34:dc:f8:7b:bc:2b:b6:2b:01:62:50:6f:2e:
55:2b:81:43:87:3c:48:b5:87:f6:fc:50:84:b6:8c:
52:47:8c:e1:e3:53:fb:16:05:f8:2d:23:21:4a:0c:
75:a0:62:3d:61:16:1e:60:f8:1f:7b:2a:c6:89:57:
07:7d:48:d1:77:59:10:ba:b7:d0:4d:51:37:67:d3:
7d:c3:86:f3:7a:ed:eb:a6:0c:eb:21:34:fb:1c:5d:
9f:1c:58:44:9f:8e:ec:85:3f:d7:93:8e:15:10:62:
7d:a2:75:02:b0:b5:cb:5a:a8:7d:1d:da:d3:2e:62:
83:5e:50:9b:81:39:23:db:60:1b:54:b4:d1:42:f5:
96:f4:cb:95:31:c6:4e:bc:e8:7b:43:76:5d:45:41:
cb:90:d6:3f:3f:a4:b7:c5:85:1d:cd:66:29:05:94:
3a:0b:23:40:e6:83:03:60:17:83:56:cf:89:54:b6:
c0:6c:b5:c2:f3:5b:11:ad:6f:e8:7b:87:3b:63:a8:
eb:48:e5:1d:a8:35:80:f7:9c:77:5d:67:1d:c4:74:
3f:05:e4:bf:e3:6d:5d:da:21:07:72:58:f7:ff:6e:
93:0a:2f:7c:7e:0a:2b:14:26:4e:91:9c:dd:4a:e4:
02:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0A:EB:07:63:DD:54:7C:27:DD:9B:5F:4B:13:56:F4:17:25:22:DE
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/oQrrB2PdVHwn3ZtfSxNW9BclIt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.239.0.0-83.239.111.255
83.239.200.0/21
83.239.224.0-83.239.247.255
85.172.0.0-85.172.75.255
85.172.79.0/24
85.172.82.0-85.172.87.255
85.172.96.0/20
85.172.160.0/21
85.173.4.0/22
85.173.144.0/20
85.174.128.0/18
85.174.224.0-85.175.255.255
Signature Algorithm: sha256WithRSAEncryption
67:af:19:9b:09:4c:e6:ee:1f:f8:3c:69:f5:54:2f:81:6c:2d:
04:e2:05:09:e5:27:58:54:6f:5d:5e:a5:25:b5:9d:d9:61:93:
2b:e9:c9:13:34:45:f8:da:79:24:24:a5:be:f5:90:e9:df:45:
70:8b:c2:d3:19:f3:87:eb:0b:4b:b0:1b:cc:e9:67:d1:f7:51:
27:2c:e7:63:31:85:12:a0:73:30:2e:04:b0:bd:3a:eb:93:67:
3c:89:ab:a6:2e:ef:d3:c6:1d:98:47:95:d0:2d:7a:b3:76:51:
89:e0:93:7b:12:03:0e:9e:4c:75:d9:ce:02:77:7d:33:21:4f:
e7:37:68:29:97:fa:3a:55:3d:0e:c0:32:f6:ea:6d:bf:0c:ab:
71:2b:ec:c3:4a:96:af:c1:61:16:bd:34:55:e3:58:3c:d5:dd:
ff:30:bc:35:05:73:55:a0:8d:78:6a:39:57:90:b8:1f:17:82:
0a:f3:77:40:b5:19:7b:b4:93:77:af:28:4b:59:ea:b8:ce:9b:
7b:f1:52:41:e4:70:01:d1:b5:2c:43:93:ea:18:31:bb:35:d2:
d8:02:ef:5b:0d:d7:ee:dd:3c:40:cd:6f:8e:f7:c8:60:98:ac:
6b:06:ef:08:8a:21:d3:97:16:5a:80:b6:b2:66:ec:3d:22:b3:
42:fe:e7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:56 2023 by rpki-client on console.sobornost.net