Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/5TAMAsc6xnXsV3hhUwaU9V7FtG0.roa
File: 5TAMAsc6xnXsV3hhUwaU9V7FtG0.roa (raw, json)
Hash identifier: j1j0n4c02Sr75Je1f1YDREO/IwGI5tK2kIeQD8Dw7M8=
Subject key identifier: E5:30:0C:02:C7:3A:C6:75:EC:57:78:61:53:06:94:F5:5E:C5:B4:6D
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 0B4D4D9A
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/5TAMAsc6xnXsV3hhUwaU9V7FtG0.roa
Signing time: Wed 18 May 2022 15:04:23 +0000
ROA not before: Wed 18 May 2022 15:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9021
IP address blocks: 213.161.128.0/19 maxlen: 19
213.161.128.0/21 maxlen: 21
213.161.136.0/21 maxlen: 21
213.161.135.0/24 maxlen: 24
213.161.145.0/24 maxlen: 24
213.161.144.0/23 maxlen: 23
213.161.144.0/24 maxlen: 24
213.161.146.0/24 maxlen: 24
213.161.150.0/24 maxlen: 24
213.161.148.0/23 maxlen: 23
213.161.149.0/24 maxlen: 24
213.161.148.0/24 maxlen: 24
213.161.152.0/24 maxlen: 24
213.161.151.0/24 maxlen: 24
213.161.152.0/21 maxlen: 21
90.159.128.0/20 maxlen: 20
90.159.136.0/21 maxlen: 21
90.159.136.0/24 maxlen: 24
90.159.44.0/22 maxlen: 22
90.159.50.0/24 maxlen: 24
90.159.51.0/24 maxlen: 24
90.159.58.0/24 maxlen: 24
90.159.59.0/24 maxlen: 24
90.159.68.0/24 maxlen: 24
90.159.64.0/18 maxlen: 18
90.159.240.0/20 maxlen: 20
90.159.246.0/24 maxlen: 24
90.158.136.0/21 maxlen: 21
90.158.139.0/24 maxlen: 24
212.98.0.0/19 maxlen: 19
212.98.2.0/24 maxlen: 24
212.98.1.0/24 maxlen: 24
212.98.0.0/20 maxlen: 20
90.158.160.0/24 maxlen: 24
212.98.8.0/21 maxlen: 21
212.98.9.0/24 maxlen: 24
212.98.16.0/24 maxlen: 24
212.98.16.0/21 maxlen: 21
90.158.96.0/22 maxlen: 22
90.158.101.0/24 maxlen: 24
90.158.100.0/24 maxlen: 24
90.158.105.0/24 maxlen: 24
90.158.104.0/24 maxlen: 24
90.158.102.0/23 maxlen: 23
90.158.111.0/24 maxlen: 24
90.158.110.0/24 maxlen: 24
90.158.109.0/24 maxlen: 24
90.158.114.0/24 maxlen: 24
90.158.112.0/20 maxlen: 20
90.158.116.0/24 maxlen: 24
90.158.119.0/24 maxlen: 24
90.158.122.0/24 maxlen: 24
90.158.121.0/24 maxlen: 24
90.158.120.0/24 maxlen: 24
90.158.123.0/24 maxlen: 24
90.158.126.0/24 maxlen: 24
90.158.128.0/21 maxlen: 21
90.158.127.0/24 maxlen: 24
90.158.128.0/17 maxlen: 17
90.158.240.0/21 maxlen: 21
90.158.248.0/21 maxlen: 21
90.158.249.0/24 maxlen: 24
90.159.2.0/24 maxlen: 24
90.159.1.0/24 maxlen: 24
90.159.0.0/24 maxlen: 24
90.159.0.0/22 maxlen: 22
90.159.3.0/24 maxlen: 24
90.159.0.0/16 maxlen: 16
90.159.10.0/24 maxlen: 24
90.159.15.0/24 maxlen: 24
90.159.20.0/24 maxlen: 24
90.159.26.0/24 maxlen: 24
90.159.29.0/24 maxlen: 24
90.159.27.0/24 maxlen: 24
90.159.31.0/24 maxlen: 24
90.159.33.0/24 maxlen: 24
90.159.36.0/24 maxlen: 24
90.159.34.0/24 maxlen: 24
90.159.38.0/24 maxlen: 24
90.159.37.0/24 maxlen: 24
212.98.28.0/22 maxlen: 22
90.158.200.0/23 maxlen: 23
213.143.255.0/24 maxlen: 24
213.143.254.0/24 maxlen: 24
90.158.28.0/24 maxlen: 24
90.158.27.0/24 maxlen: 24
90.158.26.0/24 maxlen: 24
90.158.31.0/24 maxlen: 24
90.158.30.0/24 maxlen: 24
90.158.29.0/24 maxlen: 24
90.158.32.0/24 maxlen: 24
90.158.33.0/24 maxlen: 24
90.158.37.0/24 maxlen: 24
90.158.36.0/24 maxlen: 24
90.158.39.0/24 maxlen: 24
90.158.41.0/24 maxlen: 24
90.158.44.0/24 maxlen: 24
90.158.43.0/24 maxlen: 24
90.158.50.0/23 maxlen: 23
90.158.51.0/24 maxlen: 24
90.158.46.0/24 maxlen: 24
90.158.45.0/24 maxlen: 24
90.158.48.0/20 maxlen: 20
90.158.48.0/24 maxlen: 24
90.158.47.0/24 maxlen: 24
90.158.52.0/23 maxlen: 23
90.158.53.0/24 maxlen: 24
90.158.52.0/24 maxlen: 24
90.158.56.0/24 maxlen: 24
90.158.55.0/24 maxlen: 24
90.158.54.0/23 maxlen: 23
90.158.60.0/24 maxlen: 24
90.158.62.0/24 maxlen: 24
90.158.64.0/21 maxlen: 21
90.158.64.0/24 maxlen: 24
90.158.66.0/24 maxlen: 24
90.158.65.0/24 maxlen: 24
90.158.68.0/24 maxlen: 24
90.158.67.0/24 maxlen: 24
90.158.73.0/24 maxlen: 24
90.158.72.0/24 maxlen: 24
90.158.72.0/22 maxlen: 22
90.158.75.0/24 maxlen: 24
90.158.74.0/24 maxlen: 24
90.158.0.0/23 maxlen: 23
90.158.0.0/22 maxlen: 22
90.158.0.0/18 maxlen: 18
90.158.3.0/24 maxlen: 24
90.158.0.0/16 maxlen: 16
90.158.8.0/24 maxlen: 24
90.158.16.0/24 maxlen: 24
90.158.15.0/24 maxlen: 24
90.158.18.0/24 maxlen: 24
90.158.19.0/24 maxlen: 24
90.158.24.0/24 maxlen: 24
213.143.224.0/20 maxlen: 20
213.143.226.0/24 maxlen: 24
213.143.226.0/23 maxlen: 23
213.143.228.0/24 maxlen: 24
213.143.227.0/24 maxlen: 24
213.143.230.0/24 maxlen: 24
213.143.229.0/24 maxlen: 24
213.143.233.0/24 maxlen: 24
213.143.235.0/24 maxlen: 24
213.143.234.0/24 maxlen: 24
213.143.238.0/24 maxlen: 24
213.143.236.0/22 maxlen: 22
213.143.240.0/24 maxlen: 24
213.143.240.0/22 maxlen: 22
213.143.239.0/24 maxlen: 24
213.143.240.0/20 maxlen: 20
213.143.241.0/24 maxlen: 24
213.143.244.0/22 maxlen: 22
213.143.243.0/24 maxlen: 24
213.143.252.0/24 maxlen: 24
213.143.251.0/24 maxlen: 24
213.143.250.0/24 maxlen: 24
213.143.253.0/24 maxlen: 24
2a00:1f90::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189615514 (0xb4d4d9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: May 18 15:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5300c02c73ac675ec577861530694f55ec5b46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:94:bc:80:d5:88:75:24:23:f4:73:c3:10:
2d:27:bc:ca:1e:7d:c2:65:37:60:f3:d0:a5:e9:db:
0b:4b:7f:b6:41:52:25:89:3f:9b:ce:85:b7:27:ff:
1a:88:2a:4f:27:ce:ec:54:36:01:e6:3f:78:33:a8:
ce:84:f7:7e:c4:f5:15:b8:56:08:6f:00:5e:82:c0:
9b:4f:d1:da:ed:6d:16:7f:9f:85:6b:ec:ca:7d:79:
21:ac:8b:51:8c:8a:bf:fa:57:ff:85:77:64:77:bd:
8b:d2:dc:90:8d:65:38:f1:9b:d4:67:ed:c3:b3:3c:
cf:24:96:d4:fc:1a:46:87:b4:2e:77:83:48:b4:2c:
8b:3d:12:ac:92:1b:4d:06:e7:f6:1f:8f:51:85:e5:
86:c9:aa:3f:e3:f0:35:79:b2:c2:19:2c:81:ea:8d:
1c:86:bc:8a:5f:f6:3d:8a:26:f6:b7:ae:5f:ac:91:
48:22:81:f1:bf:16:13:ae:5a:e3:57:24:b1:14:8c:
ec:33:8f:f7:a6:34:a6:2f:97:8e:13:f7:64:c3:c6:
a5:93:ba:d2:31:10:8f:df:05:bc:d7:13:b4:a0:4b:
da:7d:14:4a:6b:22:1c:19:62:a6:51:48:85:51:70:
f2:eb:1c:d2:f2:07:47:2b:61:7d:90:49:9d:d1:1c:
86:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:30:0C:02:C7:3A:C6:75:EC:57:78:61:53:06:94:F5:5E:C5:B4:6D
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/5TAMAsc6xnXsV3hhUwaU9V7FtG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.158.0.0/15
212.98.0.0/19
213.143.224.0/19
213.161.128.0/19
IPv6:
2a00:1f90::/32
Signature Algorithm: sha256WithRSAEncryption
07:cc:c0:13:30:95:5d:9c:27:63:78:28:5f:f4:e1:78:7f:2d:
65:a3:ea:be:e7:83:b4:0c:d1:95:c9:44:bc:2b:a9:dd:97:5b:
05:f0:b4:61:bc:ec:85:79:f5:18:8b:06:e7:21:48:09:c2:9c:
53:6c:56:92:7e:98:31:a9:7c:c1:31:f2:75:8f:70:7f:18:3a:
41:eb:a2:41:bf:17:af:12:7a:65:4e:f2:53:09:1a:c4:5b:2a:
8d:19:4f:78:67:27:09:21:3c:dd:25:6f:7c:eb:64:95:fb:91:
25:18:4e:64:85:0d:94:fd:c4:73:8e:e7:fb:a4:91:54:9c:15:
a2:97:b5:d1:9e:fb:e8:ae:40:4f:a7:cf:30:b9:f9:dc:ae:11:
d6:14:b5:b5:5a:c9:f6:25:ec:a8:a7:c4:45:11:b3:74:f8:5a:
f7:20:c0:68:1f:3d:2c:fb:84:c2:a7:de:e2:cb:db:4e:48:10:
5e:22:84:db:89:b5:7c:76:10:3e:40:ba:76:7c:76:c2:b5:5b:
8f:27:0b:8d:cd:73:75:ca:96:cd:69:84:31:e6:e2:03:75:a3:
01:60:ed:2a:51:a4:7a:fa:67:2e:59:70:88:f9:75:05:ea:80:
ed:d5:1b:f5:2b:73:46:d2:e5:ee:7b:a3:5a:73:27:2f:64:8c:
09:86:7e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:14 2024 by rpki-client on console-fra.rpki-client.org