Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/cVUs3uO2ykHPlLM3pxeSG7i1zaQ.roa
File: cVUs3uO2ykHPlLM3pxeSG7i1zaQ.roa (raw, json)
Hash identifier: QpoHFwoq6GFB7QHxepheR5XHfmoI+JSaD+3T2347u1E=
Subject key identifier: 71:55:2C:DE:E3:B6:CA:41:CF:94:B3:37:A7:17:92:1B:B8:B5:CD:A4
Certificate issuer: /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial: 382E29F4
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/cVUs3uO2ykHPlLM3pxeSG7i1zaQ.roa
Signing time: Tue 01 Feb 2022 07:22:34 +0000
ROA not before: Tue 01 Feb 2022 07:22:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20911
IP address blocks: 178.254.246.0/24 maxlen: 24
178.254.245.0/24 maxlen: 24
178.254.244.0/24 maxlen: 24
178.254.243.0/24 maxlen: 24
178.254.242.0/24 maxlen: 24
178.254.241.0/24 maxlen: 24
178.254.240.0/20 maxlen: 20
178.254.248.0/24 maxlen: 24
178.254.247.0/24 maxlen: 24
178.254.253.0/24 maxlen: 24
178.254.252.0/24 maxlen: 24
178.254.251.0/24 maxlen: 24
178.254.250.0/24 maxlen: 24
178.254.249.0/24 maxlen: 24
178.254.255.0/24 maxlen: 24
178.254.254.0/24 maxlen: 24
178.254.192.0/24 maxlen: 24
178.254.199.0/24 maxlen: 24
178.254.198.0/23 maxlen: 23
178.254.198.0/24 maxlen: 24
178.254.197.0/24 maxlen: 24
178.254.193.0/24 maxlen: 24
178.254.200.0/24 maxlen: 24
178.254.206.0/23 maxlen: 23
178.254.206.0/24 maxlen: 24
178.254.205.0/24 maxlen: 24
178.254.204.0/22 maxlen: 22
178.254.204.0/24 maxlen: 24
178.254.203.0/24 maxlen: 24
178.254.202.0/24 maxlen: 24
178.254.201.0/24 maxlen: 24
178.254.200.0/23 maxlen: 23
178.254.212.0/23 maxlen: 23
178.254.213.0/24 maxlen: 24
178.254.212.0/24 maxlen: 24
178.254.211.0/24 maxlen: 24
178.254.210.0/24 maxlen: 24
178.254.209.0/24 maxlen: 24
178.254.208.0/24 maxlen: 24
178.254.208.0/22 maxlen: 22
178.254.207.0/24 maxlen: 24
178.254.219.0/24 maxlen: 24
178.254.218.0/24 maxlen: 24
178.254.217.0/24 maxlen: 24
178.254.216.0/24 maxlen: 24
178.254.216.0/21 maxlen: 21
178.254.226.0/24 maxlen: 24
178.254.225.0/24 maxlen: 24
178.254.224.0/23 maxlen: 23
178.254.224.0/24 maxlen: 24
178.254.223.0/24 maxlen: 24
178.254.222.0/24 maxlen: 24
178.254.221.0/24 maxlen: 24
178.254.220.0/24 maxlen: 24
178.254.228.0/24 maxlen: 24
178.254.233.0/24 maxlen: 24
178.254.232.0/24 maxlen: 24
178.254.232.0/21 maxlen: 21
178.254.231.0/24 maxlen: 24
178.254.230.0/24 maxlen: 24
178.254.229.0/24 maxlen: 24
178.254.228.0/22 maxlen: 22
178.254.227.0/24 maxlen: 24
178.254.240.0/24 maxlen: 24
178.254.239.0/24 maxlen: 24
178.254.238.0/24 maxlen: 24
178.254.237.0/24 maxlen: 24
178.254.236.0/24 maxlen: 24
178.254.235.0/24 maxlen: 24
178.254.234.0/24 maxlen: 24
93.152.229.0/24 maxlen: 24
93.152.228.0/24 maxlen: 24
93.152.228.0/23 maxlen: 23
93.152.253.0/24 maxlen: 24
93.152.252.0/23 maxlen: 23
93.152.252.0/24 maxlen: 24
93.152.251.0/24 maxlen: 24
93.152.250.0/24 maxlen: 24
93.152.249.0/24 maxlen: 24
93.152.248.0/24 maxlen: 24
93.152.248.0/22 maxlen: 22
93.152.255.0/24 maxlen: 24
93.152.254.0/24 maxlen: 24
93.152.254.0/23 maxlen: 23
46.229.207.128/25 maxlen: 25
46.229.206.128/25 maxlen: 25
185.95.251.0/24 maxlen: 24
185.95.250.0/24 maxlen: 24
185.95.249.0/24 maxlen: 24
185.95.248.0/24 maxlen: 24
46.229.192.0/24 maxlen: 24
46.229.192.0/23 maxlen: 23
46.229.192.0/20 maxlen: 20
46.229.194.0/24 maxlen: 24
46.229.193.0/24 maxlen: 24
46.229.199.0/24 maxlen: 24
46.229.198.0/24 maxlen: 24
46.229.197.0/24 maxlen: 24
46.229.196.0/24 maxlen: 24
46.229.196.0/22 maxlen: 22
46.229.195.0/24 maxlen: 24
46.229.205.0/24 maxlen: 24
46.229.204.0/24 maxlen: 24
46.229.203.0/24 maxlen: 24
46.229.202.0/24 maxlen: 24
46.229.201.0/24 maxlen: 24
46.229.200.0/22 maxlen: 22
46.229.200.0/24 maxlen: 24
46.229.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 942549492 (0x382e29f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Validity
Not Before: Feb 1 07:22:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71552cdee3b6ca41cf94b337a717921bb8b5cda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:a0:e5:81:67:76:94:40:52:73:12:ed:8f:
73:12:62:77:73:c4:9e:16:c0:d7:ca:63:29:d6:85:
70:1e:7e:bc:3b:c1:fc:2d:aa:b1:14:21:46:94:e4:
9c:f1:10:33:44:24:d1:2e:0a:9c:01:db:b8:e2:40:
64:f7:10:8f:40:d3:3a:a6:6d:98:6f:37:93:6b:f7:
f3:c1:5f:4b:dd:98:50:72:4a:fc:14:94:57:61:9c:
ba:d1:7d:6d:98:7f:12:ec:96:86:60:59:e1:dd:7d:
ff:a4:55:39:21:99:3d:a3:3c:2b:c3:e5:cb:d3:20:
e4:75:96:4a:0f:fd:3b:c5:30:a8:42:e7:1c:bc:61:
2e:2e:e0:ae:05:e7:46:2d:c7:ff:e9:c8:af:aa:02:
2e:a8:d4:e5:8d:a5:66:15:02:e8:75:07:fc:3a:7c:
20:3e:c3:3f:25:a2:7c:df:fa:2b:9c:bc:27:05:99:
6f:f0:ca:77:a6:d9:ac:91:6a:eb:fc:0f:a9:b6:33:
09:4e:34:80:cc:c1:6b:d6:c1:e5:b8:2f:ff:2c:82:
db:5a:54:55:29:53:ea:69:c6:8d:06:3a:4b:8d:ca:
44:e9:9c:6c:a4:7b:62:a9:be:de:2c:ff:69:e7:1c:
6b:1e:97:e1:ff:1a:7d:f4:71:fb:5f:75:d0:93:f0:
84:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:55:2C:DE:E3:B6:CA:41:CF:94:B3:37:A7:17:92:1B:B8:B5:CD:A4
X509v3 Authority Key Identifier:
keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/cVUs3uO2ykHPlLM3pxeSG7i1zaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.192.0/20
93.152.228.0/23
93.152.248.0/21
178.254.192.0/23
178.254.197.0-178.254.213.255
178.254.216.0-178.254.255.255
185.95.248.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:f7:39:9f:98:c6:2f:69:60:f0:a5:06:d4:b6:9c:d3:54:95:
8d:50:4e:b6:e4:4f:c5:51:a9:7b:6e:49:e2:03:03:ab:c6:9e:
4c:d9:a1:d2:ea:40:59:33:23:96:7e:f5:a8:ea:6f:dc:60:43:
16:a6:fe:bd:ad:2b:fd:6a:29:f1:dd:9b:f5:2b:38:31:5c:70:
8f:e2:52:b0:bc:db:a7:db:7f:3d:b9:5a:c4:09:44:78:d8:f7:
a4:0e:8c:e4:b1:c1:8f:0d:f9:64:6b:39:08:f3:b0:76:ff:39:
0f:ff:7f:b4:d8:42:6d:5b:ec:74:44:a9:dd:73:69:3c:1e:ef:
92:9c:8b:16:af:b5:44:3f:28:e4:64:df:7d:0e:b1:de:9c:d7:
2f:f0:47:5f:13:a4:09:72:2c:b9:12:31:c3:3a:1c:9f:89:4a:
50:95:4a:a1:dd:15:e7:3f:c5:6b:c9:11:12:1b:d8:75:38:1c:
0e:af:f9:93:43:59:ba:82:c1:79:1d:52:db:21:f6:4b:a6:2a:
6b:ac:24:50:df:3c:0f:28:ed:bb:8f:af:75:a0:c3:af:4e:79:
8b:c8:92:ad:c2:2a:1c:d2:e1:a4:41:7d:28:8c:98:3c:4e:df:
a2:d1:f2:e1:97:44:23:6c:e2:9a:82:1d:86:bd:7d:c2:b4:07:
00:36:87:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:18 2024 by rpki-client on console-ams.rpki-client.org