Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/x1j1DT5jcZkPL0BZK4kNbWg3Ur0.roa
File: x1j1DT5jcZkPL0BZK4kNbWg3Ur0.roa (raw, json)
Hash identifier: yWhsgvNO6D8psLksbHaFtbFADKtV6YaI1kGoKYLfIyY=
Subject key identifier: C7:58:F5:0D:3E:63:71:99:0F:2F:40:59:2B:89:0D:6D:68:37:52:BD
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 1AFB2DA3
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/x1j1DT5jcZkPL0BZK4kNbWg3Ur0.roa
Signing time: Sat 01 Jan 2022 13:05:41 +0000
ROA not before: Sat 01 Jan 2022 13:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15557
IP address blocks: 80.124.0.0/16 maxlen: 16
217.19.192.0/20 maxlen: 20
212.198.0.0/16 maxlen: 16
217.70.80.0/20 maxlen: 20
79.80.0.0/12 maxlen: 12
185.147.204.0/22 maxlen: 22
77.144.0.0/12 maxlen: 12
195.3.0.0/18 maxlen: 18
77.137.196.0/22 maxlen: 22
85.168.0.0/14 maxlen: 14
77.137.200.0/21 maxlen: 21
77.137.208.0/20 maxlen: 20
195.146.192.0/19 maxlen: 19
84.96.0.0/13 maxlen: 13
77.136.172.0/24 maxlen: 24
77.136.173.0/24 maxlen: 24
77.136.175.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
87.231.0.0/16 maxlen: 16
62.39.0.0/16 maxlen: 16
77.140.0.0/14 maxlen: 14
89.2.0.0/15 maxlen: 15
62.106.128.0/17 maxlen: 17
217.112.224.0/20 maxlen: 20
194.183.192.0/19 maxlen: 19
213.245.0.0/16 maxlen: 16
62.241.64.0/18 maxlen: 18
81.220.0.0/16 maxlen: 16
89.156.0.0/14 maxlen: 14
213.169.160.0/19 maxlen: 19
109.0.0.0/11 maxlen: 11
93.0.0.0/11 maxlen: 11
81.1.0.0/18 maxlen: 18
81.65.0.0/16 maxlen: 16
77.136.63.0/24 maxlen: 24
62.129.160.0/19 maxlen: 19
62.8.0.0/19 maxlen: 19
77.136.0.0/16 maxlen: 16
77.136.47.0/24 maxlen: 24
37.64.0.0/13 maxlen: 13
77.128.0.0/13 maxlen: 13
80.236.0.0/17 maxlen: 17
212.94.160.0/19 maxlen: 19
81.185.160.0/20 maxlen: 20
80.125.0.0/16 maxlen: 16
83.141.128.0/17 maxlen: 17
84.205.128.0/19 maxlen: 19
77.134.204.0/24 maxlen: 24
84.205.144.0/20 maxlen: 20
81.64.0.0/14 maxlen: 14
213.128.32.0/19 maxlen: 19
80.118.0.0/15 maxlen: 15
194.242.176.0/20 maxlen: 20
92.88.0.0/13 maxlen: 13
91.68.0.0/22 maxlen: 22
195.132.0.0/16 maxlen: 16
85.68.0.0/15 maxlen: 15
195.98.96.0/19 maxlen: 19
91.68.0.0/14 maxlen: 14
77.192.0.0/12 maxlen: 12
86.64.0.0/12 maxlen: 12
82.216.0.0/16 maxlen: 16
2a02:8400::/25 maxlen: 25
2a00:6200::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452668835 (0x1afb2da3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 1 13:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c758f50d3e6371990f2f40592b890d6d683752bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:50:62:85:b2:ff:c5:c8:a0:e1:ed:f0:76:2a:
7a:df:0b:c0:07:35:6b:bb:2a:7e:2f:b0:7a:59:e8:
40:0c:db:71:0c:00:81:a0:bb:1d:ff:81:9e:09:f3:
b0:9a:17:0e:cd:74:6b:2c:5e:e1:ed:15:df:dd:75:
4f:cd:2d:f3:73:9c:f9:e3:85:80:27:63:3a:e1:c6:
e4:1d:eb:e5:c4:24:5e:21:24:c7:e6:12:62:24:43:
0c:39:30:95:ab:c7:a8:30:dc:14:e9:68:da:ae:03:
49:48:61:5b:b9:f6:a4:94:4a:84:3d:43:5e:32:48:
9b:0b:83:f4:1b:28:58:d1:f7:50:b1:de:15:97:58:
68:2c:3b:e3:78:5a:b2:e0:0a:f3:3c:5b:14:64:a0:
5f:ff:29:8d:e2:cb:11:e5:6d:a5:81:32:c5:09:54:
ae:d7:c7:8f:f1:8c:d6:c1:81:44:46:4a:d1:af:94:
55:4d:13:34:8a:e4:4b:d6:48:b0:d1:55:8f:d4:e0:
0d:89:68:02:0d:2b:df:d4:4a:51:a3:41:e3:53:41:
fb:34:8d:d8:4e:39:76:2e:82:4b:40:9f:d0:e5:90:
60:db:4a:78:86:f5:15:fc:7e:96:a2:69:b7:f0:13:
b6:00:58:3e:ea:9a:f4:0e:25:8e:95:f2:bf:21:72:
77:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:58:F5:0D:3E:63:71:99:0F:2F:40:59:2B:89:0D:6D:68:37:52:BD
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/x1j1DT5jcZkPL0BZK4kNbWg3Ur0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
62.8.0.0/19
62.39.0.0/16
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
79.80.0.0/12
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.160.0/20
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
185.147.204.0/22
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.98.96.0/19
195.132.0.0/16
195.146.192.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.169.160.0/19
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
a1:97:73:c0:c1:b6:33:4b:4f:cc:ce:01:2d:7c:9d:69:ca:b1:
be:26:96:85:c5:05:03:3b:b5:b7:22:48:50:7a:18:98:3d:8d:
40:ec:b4:91:6c:04:02:15:75:21:cf:72:f6:62:75:76:18:a4:
0f:48:20:59:57:16:34:cc:e3:a4:02:d4:9c:c0:3d:ff:65:44:
36:1d:06:b1:6e:3e:9a:5f:2b:a3:72:a0:94:bc:be:59:10:67:
70:e3:88:af:f0:0d:72:b2:89:2f:c6:77:cc:76:f3:28:d7:f7:
ca:70:a5:1a:c0:69:5b:ea:89:6c:1b:1d:8c:e3:05:1d:62:e8:
42:ef:00:fe:6d:b1:6d:59:90:e3:46:aa:12:99:06:fc:5b:62:
75:d4:54:d1:1e:5c:b0:d2:a6:26:3f:c7:ec:af:6b:a0:64:71:
dc:6e:62:57:9d:56:c4:bd:1d:a6:04:e6:71:dd:2f:cc:05:de:
3a:57:8a:86:61:64:f0:32:f3:72:da:5f:77:43:ed:5e:9e:c3:
2b:5a:f5:63:ee:ae:97:97:8d:8d:eb:95:fd:76:bc:c0:f5:43:
9b:99:b3:87:ad:08:c8:b4:ff:17:f3:e4:bf:1c:e2:bc:1e:b0:
0b:bd:54:67:43:49:1f:11:11:6c:d1:3a:09:2b:67:3a:37:59:
14:2a:5c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:55 2024 by rpki-client on console-fra.rpki-client.org