Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/I_DAIXz1XWZ1uc1MUdDv6WB1YKo.roa
File: I_DAIXz1XWZ1uc1MUdDv6WB1YKo.roa (raw, json)
Hash identifier: eq6clkM75X7yML2ae8t9e+CQd5jpCbA4CUHx4sACPHc=
Subject key identifier: 23:F0:C0:21:7C:F5:5D:66:75:B9:CD:4C:51:D0:EF:E9:60:75:60:AA
Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial: 16F67D2B
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/I_DAIXz1XWZ1uc1MUdDv6WB1YKo.roa
Signing time: Thu 10 Mar 2022 07:46:21 +0000
ROA not before: Thu 10 Mar 2022 07:46:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42695
IP address blocks: 86.107.49.0/24 maxlen: 24
86.107.48.0/24 maxlen: 24
89.46.81.0/24 maxlen: 24
89.46.80.0/24 maxlen: 24
89.46.83.0/24 maxlen: 24
89.46.82.0/24 maxlen: 24
89.46.84.0/23 maxlen: 23
89.46.86.0/24 maxlen: 24
89.46.87.0/24 maxlen: 24
185.2.152.0/22 maxlen: 22
188.241.198.0/24 maxlen: 24
188.241.199.0/24 maxlen: 24
89.36.90.0/23 maxlen: 23
45.114.121.0/24 maxlen: 24
45.114.120.0/22 maxlen: 24
45.114.123.0/24 maxlen: 24
45.114.122.0/24 maxlen: 24
141.255.184.0/21 maxlen: 21
37.153.138.0/23 maxlen: 24
185.52.156.0/22 maxlen: 24
89.45.226.0/24 maxlen: 24
37.153.172.0/23 maxlen: 23
188.240.222.0/23 maxlen: 23
91.106.192.0/21 maxlen: 24
91.123.192.0/20 maxlen: 32
89.45.227.0/24 maxlen: 24
185.103.48.0/23 maxlen: 23
185.103.51.0/24 maxlen: 24
185.103.50.0/24 maxlen: 24
89.42.140.0/23 maxlen: 23
185.62.204.0/24 maxlen: 24
185.62.206.0/24 maxlen: 24
185.62.205.0/24 maxlen: 24
185.62.207.0/24 maxlen: 24
116.206.168.0/22 maxlen: 22
188.240.92.0/22 maxlen: 24
77.81.188.0/23 maxlen: 23
188.240.18.0/23 maxlen: 23
188.95.224.0/21 maxlen: 24
46.254.10.0/23 maxlen: 23
46.254.8.0/21 maxlen: 24
46.254.13.0/24 maxlen: 24
46.254.12.0/24 maxlen: 24
46.254.15.0/24 maxlen: 24
46.254.14.0/24 maxlen: 24
188.212.108.0/23 maxlen: 23
103.57.74.0/24 maxlen: 24
103.57.75.0/24 maxlen: 24
86.107.242.0/23 maxlen: 23
77.81.6.0/23 maxlen: 23
103.81.140.0/22 maxlen: 24
89.40.216.0/23 maxlen: 23
2a03:d7c0::/29 maxlen: 48
2a03:b000:3002::/48 maxlen: 48
2a03:b000:800::/40 maxlen: 40
2a03:b000:600::/40 maxlen: 40
2a03:b000:900::/40 maxlen: 40
2a03:b000:b00::/40 maxlen: 40
2a03:b000::/40 maxlen: 40
2a03:b000:500::/40 maxlen: 40
2a03:b000:200::/40 maxlen: 40
2a03:b000:700::/40 maxlen: 40
2a03:b000:400::/40 maxlen: 40
2a03:b000:100::/40 maxlen: 40
2a03:b000:c00::/40 maxlen: 40
2a04:f180::/29 maxlen: 48
2a06:2980::/29 maxlen: 48
2a00:16d8::/32 maxlen: 48
2a03:b000:3001::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385252651 (0x16f67d2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
Validity
Not Before: Mar 10 07:46:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23f0c0217cf55d6675b9cd4c51d0efe9607560aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:35:03:99:e8:ba:21:70:99:6e:36:db:7a:
cf:09:fe:ce:52:43:3d:87:b0:15:83:b4:36:cc:38:
89:7e:5f:48:ce:d5:40:dc:a3:d2:e6:78:dd:d3:c9:
87:1c:26:c0:94:8b:53:8d:5f:47:42:ec:f2:bc:53:
a2:b2:5c:8d:73:31:ba:32:36:42:4f:f8:a9:10:15:
14:34:b0:a7:ff:9c:16:1c:fd:a6:8a:eb:05:db:f9:
63:dd:14:c8:93:6f:87:e4:f8:d2:d0:5a:1f:3e:2d:
39:81:40:0b:85:29:9f:ab:37:57:e3:3d:c2:1e:85:
8a:c3:6a:c7:33:7a:d6:e0:2c:18:ca:cd:ed:bb:3b:
2e:00:67:24:af:bc:c5:82:44:23:bf:93:c1:53:b3:
31:f3:52:57:a4:eb:d5:61:bb:90:33:dc:74:fe:15:
80:7f:86:6e:e2:fd:f2:39:66:80:d7:ce:ba:8d:a9:
c9:a9:e5:09:f7:67:74:96:d8:32:15:e9:50:39:19:
62:c1:d4:76:c0:b9:9a:bd:74:ee:80:11:cd:03:66:
22:69:d3:39:22:94:5a:d0:a2:e2:fc:52:f7:47:88:
e2:95:ef:d9:c4:19:93:cd:59:c3:bf:00:2d:77:93:
bf:19:a6:b5:af:4d:65:27:aa:d2:00:64:4d:5b:ce:
fc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F0:C0:21:7C:F5:5D:66:75:B9:CD:4C:51:D0:EF:E9:60:75:60:AA
X509v3 Authority Key Identifier:
keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/I_DAIXz1XWZ1uc1MUdDv6WB1YKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.138.0/23
37.153.172.0/23
45.114.120.0/22
46.254.8.0/21
77.81.6.0/23
77.81.188.0/23
86.107.48.0/23
86.107.242.0/23
89.36.90.0/23
89.40.216.0/23
89.42.140.0/23
89.45.226.0/23
89.46.80.0/21
91.106.192.0/21
91.123.192.0/20
103.57.74.0/23
103.81.140.0/22
116.206.168.0/22
141.255.184.0/21
185.2.152.0/22
185.52.156.0/22
185.62.204.0/22
185.103.48.0/22
188.95.224.0/21
188.212.108.0/23
188.240.18.0/23
188.240.92.0/22
188.240.222.0/23
188.241.198.0/23
IPv6:
2a00:16d8::/32
2a03:b000::-2a03:b000:2ff:ffff:ffff:ffff:ffff:ffff
2a03:b000:400::-2a03:b000:9ff:ffff:ffff:ffff:ffff:ffff
2a03:b000:b00::-2a03:b000:cff:ffff:ffff:ffff:ffff:ffff
2a03:b000:3001::-2a03:b000:3002:ffff:ffff:ffff:ffff:ffff
2a03:d7c0::/29
2a04:f180::/29
2a06:2980::/29
Signature Algorithm: sha256WithRSAEncryption
92:ba:33:66:e5:91:4e:b6:55:15:06:3a:15:c3:2d:44:6c:56:
ca:23:a0:83:bf:43:3c:ba:35:8c:9c:c2:2f:2f:13:35:9c:b9:
c9:7c:ab:3e:12:68:6c:88:ec:6b:0f:d9:d2:82:e0:f2:a4:6e:
15:b7:15:65:b7:b6:11:91:85:bd:7e:56:8f:0f:e1:c4:4b:97:
98:42:e9:e9:d7:bd:03:c0:c9:d7:22:c9:37:b9:8d:7e:64:4d:
3e:c2:a7:b4:04:e5:d4:2b:8f:90:20:11:0e:79:04:df:0c:d0:
db:cc:10:33:51:6f:c3:66:6d:81:88:a1:33:a5:79:69:db:43:
a0:52:b0:45:b5:55:ec:1a:f3:1c:b9:7b:3f:e8:e2:a7:42:37:
a0:46:ba:37:5e:80:11:3e:a6:1b:0c:b4:93:77:b1:9a:58:6b:
b2:7a:05:9f:76:f7:89:0c:75:5b:2b:af:0c:7c:fa:dd:47:e0:
4b:84:c0:3e:2a:9a:fb:ba:81:de:93:36:58:da:e4:ca:7c:e8:
21:c5:e3:e6:53:18:a9:e3:7c:8d:db:4b:50:08:95:04:f7:cc:
01:3a:be:5d:3b:eb:72:c1:e3:f5:84:68:fa:3f:cd:71:62:40:
39:e6:c1:4f:80:98:79:bc:e3:eb:0b:b4:1a:fc:7c:59:d4:de:
e3:ad:85:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:52 2023 by rpki-client on console-fra.rpki-client.org