Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/h3KZ1G4wnbRR5bJAb_UTq6_4kIk.roa
File: h3KZ1G4wnbRR5bJAb_UTq6_4kIk.roa (raw, json)
Hash identifier: 03mUi+31UYHaj/95j4c96NPWe8S8OcXOqJOmsSDXxmQ=
Subject key identifier: 87:72:99:D4:6E:30:9D:B4:51:E5:B2:40:6F:F5:13:AB:AF:F8:90:89
Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial: 1D60F14B
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/h3KZ1G4wnbRR5bJAb_UTq6_4kIk.roa
Signing time: Mon 20 Jun 2022 07:59:44 +0000
ROA not before: Mon 20 Jun 2022 07:59:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20845
IP address blocks: 79.120.160.0/21 maxlen: 24
79.120.172.0/22 maxlen: 24
79.120.170.0/23 maxlen: 24
89.147.96.0/22 maxlen: 24
89.147.112.0/21 maxlen: 24
212.40.64.0/19 maxlen: 24
79.120.252.0/22 maxlen: 24
79.120.248.0/23 maxlen: 24
85.66.0.0/15 maxlen: 24
77.234.64.0/19 maxlen: 24
176.241.0.0/18 maxlen: 24
92.52.224.0/19 maxlen: 24
89.147.64.0/20 maxlen: 24
193.226.192.0/23 maxlen: 24
89.186.96.0/23 maxlen: 24
89.186.102.0/23 maxlen: 24
193.226.212.0/22 maxlen: 24
89.186.112.0/22 maxlen: 24
89.186.108.0/22 maxlen: 24
89.186.106.0/23 maxlen: 24
89.186.118.0/23 maxlen: 24
193.226.226.0/23 maxlen: 24
193.226.232.0/23 maxlen: 24
89.186.120.0/21 maxlen: 24
193.226.240.0/23 maxlen: 24
193.226.238.0/23 maxlen: 24
81.17.176.0/20 maxlen: 24
193.226.244.0/22 maxlen: 24
193.226.248.0/23 maxlen: 24
195.38.96.0/19 maxlen: 24
94.247.88.0/21 maxlen: 24
62.77.196.0/22 maxlen: 24
82.131.184.0/21 maxlen: 24
82.131.182.0/23 maxlen: 24
82.131.198.0/24 maxlen: 24
82.131.196.0/23 maxlen: 24
82.131.128.0/19 maxlen: 24
62.165.192.0/18 maxlen: 24
82.131.200.0/21 maxlen: 24
62.77.240.0/23 maxlen: 24
82.131.216.0/21 maxlen: 24
82.131.224.0/19 maxlen: 24
62.77.248.0/21 maxlen: 24
91.83.154.0/23 maxlen: 24
178.164.128.0/17 maxlen: 24
91.83.184.0/21 maxlen: 24
91.83.180.0/22 maxlen: 24
91.83.192.0/20 maxlen: 24
91.83.94.0/23 maxlen: 24
91.83.102.0/23 maxlen: 24
91.83.110.0/23 maxlen: 24
91.83.120.0/23 maxlen: 24
91.83.136.0/21 maxlen: 24
87.97.0.0/18 maxlen: 24
92.245.64.0/19 maxlen: 24
91.83.144.0/23 maxlen: 24
82.144.164.0/22 maxlen: 24
82.144.172.0/22 maxlen: 24
82.144.176.0/23 maxlen: 24
82.144.188.0/23 maxlen: 24
78.131.0.0/17 maxlen: 24
87.97.80.0/20 maxlen: 24
87.97.96.0/19 maxlen: 24
91.83.252.0/23 maxlen: 24
91.82.188.0/22 maxlen: 24
213.197.72.0/21 maxlen: 24
213.197.80.0/20 maxlen: 24
91.82.212.0/22 maxlen: 24
91.82.210.0/23 maxlen: 24
91.82.232.0/22 maxlen: 24
91.82.228.0/22 maxlen: 24
91.82.240.0/22 maxlen: 24
91.82.144.0/22 maxlen: 24
91.82.172.0/23 maxlen: 24
91.82.168.0/22 maxlen: 24
91.82.176.0/21 maxlen: 24
185.62.128.0/22 maxlen: 24
217.197.176.0/20 maxlen: 24
185.29.80.0/22 maxlen: 24
91.83.52.0/22 maxlen: 24
193.110.56.0/21 maxlen: 24
85.238.64.0/19 maxlen: 24
91.82.250.0/23 maxlen: 24
91.83.0.0/19 maxlen: 24
91.83.32.0/21 maxlen: 24
91.82.0.0/21 maxlen: 24
91.82.24.0/21 maxlen: 24
80.95.64.0/19 maxlen: 24
188.142.128.0/19 maxlen: 24
91.82.82.0/23 maxlen: 24
188.143.0.0/17 maxlen: 24
91.82.132.0/22 maxlen: 24
91.82.130.0/23 maxlen: 24
91.82.32.0/21 maxlen: 24
91.82.56.0/23 maxlen: 24
91.82.64.0/21 maxlen: 24
91.82.60.0/23 maxlen: 24
84.236.0.0/17 maxlen: 24
92.249.128.0/17 maxlen: 24
81.0.82.0/23 maxlen: 24
81.0.84.0/22 maxlen: 24
81.0.90.0/23 maxlen: 24
81.0.92.0/22 maxlen: 24
81.0.98.0/23 maxlen: 24
89.148.64.0/18 maxlen: 24
94.21.0.0/16 maxlen: 24
81.0.108.0/23 maxlen: 24
81.0.122.0/23 maxlen: 24
81.0.126.0/23 maxlen: 24
2a01:368::/32 maxlen: 32
2a01:368::/29 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 492892491 (0x1d60f14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
Validity
Not Before: Jun 20 07:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=877299d46e309db451e5b2406ff513abaff89089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:d2:5c:25:d7:2a:b6:0d:69:24:d8:65:43:
cb:bb:6d:72:0e:62:03:68:5d:22:a6:77:f1:b9:47:
46:d4:ad:d5:db:32:91:80:5e:09:67:81:45:a8:07:
f0:ce:90:99:85:5b:94:83:2a:0d:07:5e:58:9f:58:
cb:85:1a:e6:2b:f2:05:83:0a:40:fd:7c:49:3a:4c:
06:07:02:38:d3:e4:ed:1c:b5:93:13:51:af:50:78:
67:2f:34:3b:b2:24:45:e3:21:4a:58:e3:ed:89:b6:
ab:b8:86:b0:39:1a:e0:c3:90:8a:1a:dc:13:ff:77:
6b:73:44:4f:78:01:2b:86:ca:3d:10:44:1c:19:47:
ac:be:d9:01:3b:6a:be:f1:60:0b:18:30:83:69:ad:
40:de:f4:32:c3:32:a1:88:f1:1e:a6:6c:23:5e:72:
3c:43:32:69:de:00:49:58:1e:c4:1d:16:c6:cd:ea:
1f:35:f1:57:c6:f6:1a:40:e2:0d:e6:50:93:47:d6:
f0:32:48:5b:b4:03:3d:4c:8e:f6:7f:92:21:91:5d:
23:4a:c8:59:63:ff:6a:55:97:b6:f8:7f:72:37:86:
df:36:b5:37:f5:1d:48:b9:70:51:6a:e2:23:b5:44:
93:34:86:97:26:72:39:c4:24:ba:a4:13:cb:cf:79:
73:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:72:99:D4:6E:30:9D:B4:51:E5:B2:40:6F:F5:13:AB:AF:F8:90:89
X509v3 Authority Key Identifier:
keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/h3KZ1G4wnbRR5bJAb_UTq6_4kIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.77.196.0/22
62.77.240.0/23
62.77.248.0/21
62.165.192.0/18
77.234.64.0/19
78.131.0.0/17
79.120.160.0/21
79.120.170.0-79.120.175.255
79.120.248.0/23
79.120.252.0/22
80.95.64.0/19
81.0.82.0-81.0.87.255
81.0.90.0-81.0.95.255
81.0.98.0/23
81.0.108.0/23
81.0.122.0/23
81.0.126.0/23
81.17.176.0/20
82.131.128.0/19
82.131.182.0-82.131.191.255
82.131.196.0-82.131.198.255
82.131.200.0/21
82.131.216.0-82.131.255.255
82.144.164.0/22
82.144.172.0-82.144.177.255
82.144.188.0/23
84.236.0.0/17
85.66.0.0/15
85.238.64.0/19
87.97.0.0/18
87.97.80.0-87.97.127.255
89.147.64.0/20
89.147.96.0/22
89.147.112.0/21
89.148.64.0/18
89.186.96.0/23
89.186.102.0/23
89.186.106.0-89.186.115.255
89.186.118.0-89.186.127.255
91.82.0.0/21
91.82.24.0-91.82.39.255
91.82.56.0/23
91.82.60.0/23
91.82.64.0/21
91.82.82.0/23
91.82.130.0-91.82.135.255
91.82.144.0/22
91.82.168.0-91.82.173.255
91.82.176.0/21
91.82.188.0/22
91.82.210.0-91.82.215.255
91.82.228.0-91.82.235.255
91.82.240.0/22
91.82.250.0/23
91.83.0.0-91.83.39.255
91.83.52.0/22
91.83.94.0/23
91.83.102.0/23
91.83.110.0/23
91.83.120.0/23
91.83.136.0-91.83.145.255
91.83.154.0/23
91.83.180.0-91.83.207.255
91.83.252.0/23
92.52.224.0/19
92.245.64.0/19
92.249.128.0/17
94.21.0.0/16
94.247.88.0/21
176.241.0.0/18
178.164.128.0/17
185.29.80.0/22
185.62.128.0/22
188.142.128.0/19
188.143.0.0/17
193.110.56.0/21
193.226.192.0/23
193.226.212.0/22
193.226.226.0/23
193.226.232.0/23
193.226.238.0-193.226.241.255
193.226.244.0-193.226.249.255
195.38.96.0/19
212.40.64.0/19
213.197.72.0-213.197.95.255
217.197.176.0/20
IPv6:
2a01:368::/29
Signature Algorithm: sha256WithRSAEncryption
c4:53:e9:97:81:78:c1:1d:a5:ef:c4:8c:e8:93:07:7a:55:5b:
34:43:b9:0e:08:26:3e:ac:60:40:4c:4c:07:73:a2:6a:67:21:
23:8c:d4:95:71:42:e9:e9:3a:89:36:cf:9b:1f:3d:21:7f:a8:
5b:2b:e5:73:5f:50:13:bc:5a:d7:49:57:f1:c8:2e:ed:3c:49:
46:b3:21:1e:1c:6f:7b:6e:56:91:82:d6:d0:19:31:68:82:60:
ba:62:f8:63:7b:dc:b0:57:ba:f2:58:1f:af:44:7b:b3:6e:a9:
b8:eb:60:a0:e9:0e:9b:1f:53:d2:7a:10:af:e3:ec:81:b5:b3:
3f:aa:16:60:c2:5d:31:d6:a1:10:a6:a3:ad:51:ae:f3:52:a2:
b8:8d:23:76:94:ad:07:e3:a6:02:90:69:da:64:54:be:21:18:
c1:7b:31:5e:ab:7c:2f:97:c1:dc:40:b5:db:6d:5c:9c:c8:fa:
6a:d4:76:97:f6:f6:b3:8f:ed:31:b8:f4:40:a3:20:f7:c2:85:
22:d1:7b:02:32:d2:a4:1a:9c:e3:e1:75:66:c9:70:4e:e4:fc:
4f:aa:01:a9:45:7a:07:99:13:74:5a:e5:3e:a6:86:b5:94:56:
a4:f1:d9:83:4b:62:e1:60:67:2b:87:48:67:24:a0:17:17:ca:
f2:7c:39:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:45 2024 by rpki-client on console-fra.rpki-client.org