Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/CYFfFYBu3yfbq8JIuMNK3aGyjkM.roa
File: CYFfFYBu3yfbq8JIuMNK3aGyjkM.roa (raw, json)
Hash identifier: 9Ib0dB5MNh8xtv3I3n+593VIxi0MCCEItU2fe+bcTSk=
Subject key identifier: 09:81:5F:15:80:6E:DF:27:DB:AB:C2:48:B8:C3:4A:DD:A1:B2:8E:43
Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial: 0183419A52F4CF5AEA80A0B45195871CF30E
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/CYFfFYBu3yfbq8JIuMNK3aGyjkM.roa
Signing time: Thu 15 Sep 2022 14:42:56 +0000
ROA not before: Thu 15 Sep 2022 14:42:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42695
IP address blocks: 86.107.49.0/24 maxlen: 24
86.107.48.0/23 maxlen: 24
185.16.84.0/22 maxlen: 24
89.46.81.0/24 maxlen: 24
89.46.80.0/24 maxlen: 24
89.46.83.0/24 maxlen: 24
89.46.82.0/24 maxlen: 24
89.46.84.0/23 maxlen: 23
89.46.86.0/24 maxlen: 24
89.46.87.0/24 maxlen: 24
185.2.152.0/22 maxlen: 24
188.241.198.0/24 maxlen: 24
188.241.198.0/23 maxlen: 24
188.241.199.0/24 maxlen: 24
89.36.90.0/23 maxlen: 23
45.114.121.0/24 maxlen: 24
45.114.120.0/22 maxlen: 24
45.114.123.0/24 maxlen: 24
45.114.122.0/24 maxlen: 24
141.255.184.0/21 maxlen: 24
37.153.138.0/23 maxlen: 24
185.52.156.0/22 maxlen: 24
37.153.172.0/23 maxlen: 24
89.45.226.0/24 maxlen: 24
89.45.226.0/23 maxlen: 24
188.240.222.0/23 maxlen: 24
91.106.192.0/21 maxlen: 24
91.123.192.0/20 maxlen: 24
89.45.227.0/24 maxlen: 24
185.103.48.0/23 maxlen: 23
185.103.51.0/24 maxlen: 24
185.103.50.0/24 maxlen: 24
89.42.140.0/23 maxlen: 24
185.62.204.0/24 maxlen: 24
185.62.204.0/22 maxlen: 24
185.62.206.0/24 maxlen: 24
185.62.205.0/24 maxlen: 24
185.62.207.0/24 maxlen: 24
31.12.84.0/22 maxlen: 24
116.206.168.0/22 maxlen: 24
188.240.92.0/22 maxlen: 24
31.132.58.0/24 maxlen: 24
31.132.56.0/24 maxlen: 24
31.132.57.0/24 maxlen: 24
77.81.188.0/23 maxlen: 24
188.240.18.0/23 maxlen: 24
188.95.224.0/21 maxlen: 24
46.254.10.0/23 maxlen: 23
46.254.8.0/21 maxlen: 24
46.254.13.0/24 maxlen: 24
46.254.12.0/24 maxlen: 24
46.254.15.0/24 maxlen: 24
46.254.14.0/24 maxlen: 24
188.212.108.0/23 maxlen: 24
103.57.72.0/22 maxlen: 24
103.57.74.0/24 maxlen: 24
86.107.242.0/23 maxlen: 24
77.81.6.0/23 maxlen: 24
103.81.140.0/23 maxlen: 24
103.81.142.0/24 maxlen: 24
103.81.143.0/24 maxlen: 24
89.40.216.0/23 maxlen: 23
2a03:d7c0::/29 maxlen: 48
2a03:b000:200::/40 maxlen: 40
2a03:b000:800::/40 maxlen: 40
2a03:b000:b00::/40 maxlen: 40
2a03:b000:900::/40 maxlen: 40
2a03:b000:600::/40 maxlen: 40
2a03:b000:700::/40 maxlen: 40
2a03:b000:400::/40 maxlen: 40
2a04:f180::/29 maxlen: 48
2a06:2980::/29 maxlen: 48
2a00:16d8::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:41:9a:52:f4:cf:5a:ea:80:a0:b4:51:95:87:1c:f3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
Validity
Not Before: Sep 15 14:42:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09815f15806edf27dbabc248b8c34adda1b28e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f0:b9:59:98:41:0b:e4:f5:65:8f:a9:31:2d:
e8:e2:44:b3:03:83:59:c3:bd:04:6a:85:0d:be:ab:
ee:14:b4:9f:06:1d:48:69:59:cc:bf:6e:a4:b2:1c:
94:b4:81:f1:c9:b2:01:44:35:9c:b3:89:87:0d:17:
56:8a:19:57:a5:f2:4a:4f:01:b6:d0:3a:3c:12:8a:
32:b6:21:48:5b:85:14:4b:7c:7a:ae:be:4f:6f:c7:
af:48:76:72:40:41:1c:55:3e:00:3a:81:ba:d0:48:
34:58:b2:b1:51:c2:60:6d:62:52:bd:7f:b9:fd:b2:
52:6d:45:61:38:b4:38:0f:9d:e7:4a:ce:7e:09:b7:
43:71:3d:86:e1:d6:1f:09:01:a6:5f:3b:57:f0:85:
8c:64:d9:bf:9b:b8:1f:83:ba:d9:b7:86:7f:e3:a1:
fd:c8:8f:44:0a:d5:d5:36:41:bd:23:3c:90:a9:b7:
cf:af:bd:af:ab:74:2b:43:03:77:c0:d8:52:59:fd:
f3:89:d2:0f:2c:03:da:7d:dd:7a:cb:28:b5:2a:9e:
92:2d:a6:d8:54:b0:20:1e:07:5e:27:e9:b4:70:c0:
cc:af:a9:2e:86:42:7b:f9:52:84:41:18:82:d8:55:
17:8e:3e:d2:55:dd:3f:0a:6c:69:ce:1d:25:19:5b:
98:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:81:5F:15:80:6E:DF:27:DB:AB:C2:48:B8:C3:4A:DD:A1:B2:8E:43
X509v3 Authority Key Identifier:
keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/CYFfFYBu3yfbq8JIuMNK3aGyjkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.84.0/22
31.132.56.0-31.132.58.255
37.153.138.0/23
37.153.172.0/23
45.114.120.0/22
46.254.8.0/21
77.81.6.0/23
77.81.188.0/23
86.107.48.0/23
86.107.242.0/23
89.36.90.0/23
89.40.216.0/23
89.42.140.0/23
89.45.226.0/23
89.46.80.0/21
91.106.192.0/21
91.123.192.0/20
103.57.72.0/22
103.81.140.0/22
116.206.168.0/22
141.255.184.0/21
185.2.152.0/22
185.16.84.0/22
185.52.156.0/22
185.62.204.0/22
185.103.48.0/22
188.95.224.0/21
188.212.108.0/23
188.240.18.0/23
188.240.92.0/22
188.240.222.0/23
188.241.198.0/23
IPv6:
2a00:16d8::/32
2a03:b000:200::/40
2a03:b000:400::/40
2a03:b000:600::-2a03:b000:9ff:ffff:ffff:ffff:ffff:ffff
2a03:b000:b00::/40
2a03:d7c0::/29
2a04:f180::/29
2a06:2980::/29
Signature Algorithm: sha256WithRSAEncryption
b9:64:89:55:7b:2e:d5:43:5f:11:5d:d0:77:96:6c:a1:7a:b1:
c3:fe:19:bd:33:de:38:4e:1a:63:dd:e6:36:f1:90:cb:cc:a9:
47:18:26:b9:af:c2:b0:4a:73:d2:69:98:b3:ad:a3:5b:0f:53:
cf:20:b6:9f:c7:c4:e0:3b:e2:5d:fe:ca:7d:66:e1:6c:00:9f:
50:c5:5a:32:fe:b6:5e:67:4a:eb:b4:c5:25:b4:08:5b:d5:da:
4c:ab:3b:93:66:3f:70:b6:02:ea:4c:88:b4:8c:76:db:88:14:
95:ea:ca:f7:bc:65:4f:58:67:27:57:8d:0e:11:07:e1:03:fb:
bb:2f:04:c9:31:6e:a3:a6:3c:2c:59:ac:ce:19:71:3e:03:02:
09:33:a9:e5:fc:cb:77:41:fb:41:d1:52:d8:69:20:f1:0b:55:
5e:69:46:ea:9b:46:e2:49:ed:34:49:e9:55:d3:09:93:11:13:
04:fe:1a:96:98:06:46:c4:9e:7c:ba:d8:3e:cd:46:bf:28:5a:
b8:ba:60:b5:ed:4a:0e:97:cc:83:db:ac:c8:45:7f:ad:cb:fa:
7c:30:6e:a5:3f:19:41:3d:39:b5:cd:69:d9:ae:9c:ba:38:cc:
47:b9:c7:a6:cb:15:27:d0:01:36:0c:2b:b7:45:21:1b:e0:6c:
25:d6:d1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:35 2023 by rpki-client on console-ams.rpki-client.org