Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/CElcdcKDybrCS-dcy1AweIqgPKo.roa
File: CElcdcKDybrCS-dcy1AweIqgPKo.roa (raw, json)
Hash identifier: w9xkALL6Qpf1HwTSzstQGEHMaR7zY73KH8nDHJbU33o=
Subject key identifier: 08:49:5C:75:C2:83:C9:BA:C2:4B:E7:5C:CB:50:30:78:8A:A0:3C:AA
Certificate issuer: /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial: 0E33574A
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/CElcdcKDybrCS-dcy1AweIqgPKo.roa
Signing time: Wed 02 Mar 2022 08:32:46 +0000
ROA not before: Wed 02 Mar 2022 08:32:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 37.19.195.0/24 maxlen: 24
37.19.198.0/23 maxlen: 23
37.19.196.0/23 maxlen: 23
45.134.142.0/24 maxlen: 24
45.134.140.0/24 maxlen: 24
37.19.201.0/24 maxlen: 24
37.19.200.0/24 maxlen: 24
37.19.205.0/24 maxlen: 24
37.19.211.0/24 maxlen: 24
37.19.210.0/24 maxlen: 24
37.19.209.0/24 maxlen: 24
37.19.212.0/23 maxlen: 23
37.19.217.0/24 maxlen: 24
37.19.221.0/24 maxlen: 24
37.19.220.0/24 maxlen: 24
37.19.223.0/24 maxlen: 24
156.146.37.0/24 maxlen: 24
156.146.39.0/24 maxlen: 24
156.146.41.0/24 maxlen: 24
156.146.46.0/23 maxlen: 23
156.146.46.0/24 maxlen: 24
156.146.45.0/24 maxlen: 24
156.146.51.0/24 maxlen: 24
156.146.50.0/24 maxlen: 24
156.146.48.0/24 maxlen: 24
156.146.47.0/24 maxlen: 24
156.146.57.0/24 maxlen: 24
156.146.55.0/24 maxlen: 24
156.146.54.0/24 maxlen: 24
156.146.60.0/24 maxlen: 24
156.146.63.0/24 maxlen: 24
156.146.62.0/24 maxlen: 24
138.199.10.0/23 maxlen: 23
84.17.36.0/24 maxlen: 24
138.199.7.0/24 maxlen: 24
138.199.6.0/24 maxlen: 24
84.17.43.0/24 maxlen: 24
138.199.16.0/24 maxlen: 24
138.199.13.0/24 maxlen: 24
138.199.18.0/23 maxlen: 23
84.17.51.0/24 maxlen: 24
84.17.49.0/24 maxlen: 24
84.17.48.0/24 maxlen: 24
138.199.18.0/24 maxlen: 24
84.17.48.0/23 maxlen: 23
138.199.21.0/24 maxlen: 24
138.199.19.0/24 maxlen: 24
84.17.52.0/24 maxlen: 24
138.199.28.0/23 maxlen: 23
138.199.31.0/24 maxlen: 24
138.199.30.0/24 maxlen: 24
138.199.34.0/23 maxlen: 23
138.199.38.0/24 maxlen: 24
138.199.35.0/24 maxlen: 24
138.199.34.0/24 maxlen: 24
138.199.33.0/24 maxlen: 24
138.199.39.0/24 maxlen: 24
138.199.43.0/24 maxlen: 24
138.199.42.0/24 maxlen: 24
138.199.46.0/23 maxlen: 23
138.199.50.0/24 maxlen: 24
138.199.49.0/24 maxlen: 24
138.199.48.0/24 maxlen: 24
138.199.47.0/24 maxlen: 24
138.199.52.0/24 maxlen: 24
138.199.58.0/24 maxlen: 24
138.199.56.0/24 maxlen: 24
138.199.55.0/24 maxlen: 24
138.199.54.0/24 maxlen: 24
138.199.63.0/24 maxlen: 24
138.199.62.0/24 maxlen: 24
138.199.61.0/24 maxlen: 24
138.199.60.0/23 maxlen: 23
138.199.60.0/24 maxlen: 24
138.199.59.0/24 maxlen: 24
143.244.54.0/23 maxlen: 23
143.244.52.0/22 maxlen: 22
143.244.52.0/23 maxlen: 23
45.136.155.0/24 maxlen: 24
45.136.154.0/24 maxlen: 24
212.102.37.0/24 maxlen: 24
212.102.35.0/24 maxlen: 24
212.102.39.0/24 maxlen: 24
212.102.51.0/24 maxlen: 24
212.102.49.0/24 maxlen: 24
212.102.47.0/24 maxlen: 24
212.102.57.0/24 maxlen: 24
212.102.53.0/24 maxlen: 24
185.156.44.0/24 maxlen: 24
185.156.46.0/24 maxlen: 24
143.244.34.0/24 maxlen: 24
143.244.41.0/24 maxlen: 24
143.244.44.0/24 maxlen: 24
143.244.47.0/24 maxlen: 24
143.244.46.0/24 maxlen: 24
45.134.212.0/24 maxlen: 24
45.134.213.0/24 maxlen: 24
45.134.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238245706 (0xe33574a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Validity
Not Before: Mar 2 08:32:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08495c75c283c9bac24be75ccb5030788aa03caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:a6:02:97:a9:5f:7f:6b:9d:14:99:c4:41:
0a:8a:02:b8:bd:ec:01:f5:30:48:b2:63:22:15:15:
f4:60:a1:1a:48:c4:89:78:35:40:8f:34:06:ce:65:
70:b0:68:c0:68:59:6d:22:7d:ee:5b:70:84:ef:56:
ce:df:0f:7d:22:a3:1a:f1:c5:ab:72:4e:24:ca:3f:
f0:3e:e5:42:04:30:6c:ae:f9:b9:4b:b4:a6:e0:a6:
3b:7b:dd:1e:f2:d1:77:fc:cc:a5:7f:8d:2b:ae:7a:
eb:f3:8e:d7:6d:f1:40:49:2d:fb:49:16:7e:18:91:
a4:89:36:db:07:27:a5:4c:0e:30:99:18:c2:1b:9f:
e3:dd:c1:d9:51:57:f7:ee:c3:af:29:5b:94:d1:62:
fb:88:a2:83:94:7f:cc:03:98:9e:67:6e:e4:ff:2b:
8c:55:f8:bf:0d:2a:a5:c7:0e:f3:af:5b:06:5b:40:
5d:3f:bd:72:41:d2:c6:51:2b:de:c0:05:44:3a:b1:
48:9e:91:06:f5:e6:5f:e3:85:9a:62:11:48:7f:6b:
e7:a9:0f:29:f0:18:eb:10:e7:8a:d6:eb:29:03:06:
03:f6:5a:e5:c0:eb:f7:7e:73:8f:52:7d:43:66:30:
af:08:0c:7e:c5:b8:1d:d3:0b:56:9e:5e:53:99:86:
71:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:49:5C:75:C2:83:C9:BA:C2:4B:E7:5C:CB:50:30:78:8A:A0:3C:AA
X509v3 Authority Key Identifier:
keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/CElcdcKDybrCS-dcy1AweIqgPKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.195.0-37.19.201.255
37.19.205.0/24
37.19.209.0-37.19.213.255
37.19.217.0/24
37.19.220.0/23
37.19.223.0/24
45.134.140.0/24
45.134.142.0/24
45.134.212.0-45.134.214.255
45.136.154.0/23
84.17.36.0/24
84.17.43.0/24
84.17.48.0/23
84.17.51.0-84.17.52.255
138.199.6.0/23
138.199.10.0/23
138.199.13.0/24
138.199.16.0/24
138.199.18.0/23
138.199.21.0/24
138.199.28.0/22
138.199.33.0-138.199.35.255
138.199.38.0/23
138.199.42.0/23
138.199.46.0-138.199.50.255
138.199.52.0/24
138.199.54.0-138.199.56.255
138.199.58.0-138.199.63.255
143.244.34.0/24
143.244.41.0/24
143.244.44.0/24
143.244.46.0/23
143.244.52.0/22
156.146.37.0/24
156.146.39.0/24
156.146.41.0/24
156.146.45.0-156.146.48.255
156.146.50.0/23
156.146.54.0/23
156.146.57.0/24
156.146.60.0/24
156.146.62.0/23
185.156.44.0/24
185.156.46.0/24
212.102.35.0/24
212.102.37.0/24
212.102.39.0/24
212.102.47.0/24
212.102.49.0/24
212.102.51.0/24
212.102.53.0/24
212.102.57.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ee:11:d2:fb:2e:10:81:20:47:f5:bb:40:0c:42:f3:b7:45:
2f:4c:30:dd:0b:7f:0d:da:10:c9:ac:cd:6b:4c:51:8c:b1:ce:
5d:b1:82:7a:b5:4a:2a:4a:8f:7e:e6:10:5d:5f:b7:7f:21:fc:
2c:23:51:12:cf:84:c9:4b:18:7f:1b:1e:a8:0a:93:33:36:b2:
b0:81:ac:04:c7:04:94:5c:80:2a:6f:ae:eb:6e:92:53:a9:cb:
82:db:b4:3f:da:6b:1e:54:41:fd:db:2c:46:d6:b6:6e:ca:5d:
25:0f:67:4e:81:b4:f9:5f:c7:45:f9:67:42:3d:77:59:ff:d1:
cf:e1:e6:85:c3:38:4e:2a:98:5b:53:fe:4c:c7:0a:92:29:08:
ca:2a:f2:d1:55:0c:80:49:37:6c:0f:6f:1f:7d:5f:c6:56:71:
7f:85:f8:28:69:95:6a:ef:d8:2a:ee:76:51:d0:cb:a3:07:1a:
72:a3:18:c9:ae:97:68:e3:8e:9f:f7:cd:5a:80:56:95:31:8c:
43:fa:4a:57:33:c3:13:6f:6a:99:7a:de:79:d9:f9:2b:a7:d7:
94:ab:85:9d:ba:55:5f:8b:51:0d:b7:42:d1:79:56:6e:9a:cf:
8b:de:a1:3f:ed:84:b6:26:74:ac:74:d0:86:a0:39:74:c9:ee:
58:80:aa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:41 2025 by rpki-client