Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/PtNnPEJQxNONeBt5mxtZqLz4ii0.roa
File: PtNnPEJQxNONeBt5mxtZqLz4ii0.roa (raw, json)
Hash identifier: x0NEJ6vo8AZ0FpZfN1E5zIL7YpAez/Byn+bTwun74nk=
Subject key identifier: 3E:D3:67:3C:42:50:C4:D3:8D:78:1B:79:9B:1B:59:A8:BC:F8:8A:2D
Certificate issuer: /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial: 018465C55B868C215E6D5BAD86BD6C44B9BF
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/PtNnPEJQxNONeBt5mxtZqLz4ii0.roa
Signing time: Fri 11 Nov 2022 08:19:03 +0000
ROA not before: Fri 11 Nov 2022 08:19:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 37.19.195.0/24 maxlen: 24
37.19.198.0/23 maxlen: 23
37.19.196.0/23 maxlen: 23
45.134.142.0/24 maxlen: 24
45.134.140.0/24 maxlen: 24
37.19.201.0/24 maxlen: 24
37.19.205.0/24 maxlen: 24
37.19.200.0/24 maxlen: 24
37.19.211.0/24 maxlen: 24
37.19.209.0/24 maxlen: 24
37.19.210.0/24 maxlen: 24
37.19.212.0/23 maxlen: 23
37.19.217.0/24 maxlen: 24
37.19.221.0/24 maxlen: 24
37.19.223.0/24 maxlen: 24
37.19.220.0/24 maxlen: 24
156.146.37.0/24 maxlen: 24
156.146.39.0/24 maxlen: 24
156.146.41.0/24 maxlen: 24
156.146.45.0/24 maxlen: 24
156.146.51.0/24 maxlen: 24
156.146.47.0/24 maxlen: 24
156.146.46.0/23 maxlen: 23
156.146.46.0/24 maxlen: 24
156.146.50.0/24 maxlen: 24
156.146.48.0/24 maxlen: 24
156.146.57.0/24 maxlen: 24
156.146.55.0/24 maxlen: 24
156.146.54.0/24 maxlen: 24
156.146.63.0/24 maxlen: 24
156.146.60.0/24 maxlen: 24
156.146.62.0/24 maxlen: 24
84.17.36.0/24 maxlen: 24
138.199.7.0/24 maxlen: 24
138.199.10.0/23 maxlen: 23
138.199.6.0/24 maxlen: 24
138.199.13.0/24 maxlen: 24
84.17.43.0/24 maxlen: 24
138.199.16.0/24 maxlen: 24
84.17.48.0/24 maxlen: 24
84.17.48.0/23 maxlen: 23
138.199.21.0/24 maxlen: 24
138.199.19.0/24 maxlen: 24
138.199.18.0/23 maxlen: 23
84.17.51.0/24 maxlen: 24
84.17.49.0/24 maxlen: 24
138.199.18.0/24 maxlen: 24
84.17.52.0/24 maxlen: 24
138.199.31.0/24 maxlen: 24
138.199.28.0/23 maxlen: 23
138.199.30.0/24 maxlen: 24
138.199.35.0/24 maxlen: 24
138.199.33.0/24 maxlen: 24
138.199.34.0/23 maxlen: 23
138.199.38.0/24 maxlen: 24
138.199.34.0/24 maxlen: 24
138.199.39.0/24 maxlen: 24
138.199.43.0/24 maxlen: 24
138.199.42.0/24 maxlen: 24
138.199.49.0/24 maxlen: 24
138.199.47.0/24 maxlen: 24
138.199.46.0/23 maxlen: 23
138.199.50.0/24 maxlen: 24
138.199.48.0/24 maxlen: 24
138.199.55.0/24 maxlen: 24
138.199.52.0/24 maxlen: 24
138.199.58.0/24 maxlen: 24
138.199.56.0/24 maxlen: 24
138.199.54.0/24 maxlen: 24
138.199.63.0/24 maxlen: 24
138.199.61.0/24 maxlen: 24
138.199.59.0/24 maxlen: 24
138.199.62.0/24 maxlen: 24
138.199.60.0/23 maxlen: 23
138.199.60.0/24 maxlen: 24
169.150.248.0/24 maxlen: 24
169.150.198.0/24 maxlen: 24
169.150.196.0/24 maxlen: 24
169.150.199.0/24 maxlen: 24
169.150.197.0/24 maxlen: 24
169.150.205.0/24 maxlen: 24
169.150.203.0/24 maxlen: 24
169.150.201.0/24 maxlen: 24
169.150.204.0/24 maxlen: 24
169.150.209.0/24 maxlen: 24
169.150.210.0/23 maxlen: 23
169.150.212.0/24 maxlen: 24
169.150.208.0/24 maxlen: 24
169.150.218.0/24 maxlen: 24
169.150.226.0/23 maxlen: 23
169.150.233.0/24 maxlen: 24
169.150.231.0/24 maxlen: 24
169.150.232.0/24 maxlen: 24
143.244.52.0/22 maxlen: 22
143.244.54.0/23 maxlen: 23
143.244.52.0/23 maxlen: 23
45.136.154.0/24 maxlen: 24
45.136.155.0/24 maxlen: 24
212.102.37.0/24 maxlen: 24
212.102.35.0/24 maxlen: 24
212.102.39.0/24 maxlen: 24
212.102.51.0/24 maxlen: 24
212.102.49.0/24 maxlen: 24
212.102.47.0/24 maxlen: 24
212.102.57.0/24 maxlen: 24
212.102.53.0/24 maxlen: 24
185.156.44.0/24 maxlen: 24
185.156.46.0/24 maxlen: 24
143.244.34.0/24 maxlen: 24
143.244.41.0/24 maxlen: 24
143.244.44.0/24 maxlen: 24
143.244.47.0/24 maxlen: 24
143.244.46.0/24 maxlen: 24
45.134.212.0/24 maxlen: 24
45.134.213.0/24 maxlen: 24
45.134.214.0/24 maxlen: 24
2a02:6ea0:1100::/40 maxlen: 40
2a02:6ea0:1c00::/40 maxlen: 40
2a02:6ea0:1400::/40 maxlen: 40
2a02:6ea0:2800::/40 maxlen: 40
2a02:6ea0:2b00::/40 maxlen: 40
2a02:6ea0:1700::/40 maxlen: 40
2a02:6ea0:2e00::/40 maxlen: 40
2a02:6ea0:3f00::/40 maxlen: 40
2a02:6ea0:3100::/40 maxlen: 40
2a02:6ea0:1a00::/40 maxlen: 40
2a02:6ea0:2000::/40 maxlen: 40
2a02:6ea0:3600::/40 maxlen: 40
2a02:6ea0:2500::/40 maxlen: 40
2a02:6ea0:1600::/40 maxlen: 40
2a02:6ea0:1000::/40 maxlen: 40
2a02:6ea0:2100::/40 maxlen: 40
2a02:6ea0:2400::/40 maxlen: 40
2a02:6ea0:3800::/40 maxlen: 40
2a02:6ea0:2700::/40 maxlen: 40
2a02:6ea0:1300::/40 maxlen: 40
2a02:6ea0:2a00::/40 maxlen: 40
2a02:6ea0:3b00::/40 maxlen: 40
2a02:6ea0:1900::/40 maxlen: 40
2a02:6ea0:2d00::/40 maxlen: 40
2a02:6ea0:3200::/40 maxlen: 40
2a02:6ea0:1e00::/40 maxlen: 40
2a02:6ea0:3000::/40 maxlen: 40
2a02:6ea0:2200::/40 maxlen: 40
2a02:6ea0:2600::/40 maxlen: 40
2a02:6ea0:1500::/40 maxlen: 40
2a02:6ea0:2900::/40 maxlen: 40
2a02:6ea0:1200::/40 maxlen: 40
2a02:6ea0:2300::/40 maxlen: 40
2a02:6ea0:3700::/40 maxlen: 40
2a02:6ea0:2c00::/40 maxlen: 40
2a02:6ea0:1b00::/40 maxlen: 40
2a02:6ea0:1800::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:65:c5:5b:86:8c:21:5e:6d:5b:ad:86:bd:6c:44:b9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Validity
Not Before: Nov 11 08:19:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ed3673c4250c4d38d781b799b1b59a8bcf88a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:79:29:8d:5a:d8:65:e9:9c:ae:a1:98:dd:
1c:46:89:a4:1f:3c:af:a6:7e:2f:18:b9:32:70:56:
05:c9:d7:73:e2:55:20:81:7d:91:e3:61:4d:4b:44:
80:25:cf:5e:24:55:95:87:23:73:df:97:fe:51:ef:
75:7b:40:fc:5e:a6:d9:7e:57:51:78:d4:59:de:fd:
c5:7a:eb:2a:54:0c:3f:cf:fc:9f:df:c2:68:72:6e:
d3:19:d1:ba:fe:79:d6:2e:b7:f8:d8:fb:f8:0a:3d:
27:57:aa:18:0a:d7:04:a9:99:a5:58:8c:85:83:03:
04:4a:30:34:2f:33:0c:e8:39:be:6e:9d:a6:56:22:
45:eb:1d:b4:6d:d8:a2:8c:73:c0:93:bd:7d:16:61:
70:bb:53:0f:9d:19:aa:fe:65:c4:d4:5e:12:6a:1a:
0a:0c:6b:ec:40:ae:c9:2e:18:bd:0a:19:aa:bf:c1:
f6:58:9a:a7:e2:42:cd:7e:70:05:94:11:c6:19:58:
b0:4e:f4:f0:da:77:e0:f6:92:1c:52:1b:24:21:e9:
86:27:01:b6:67:c3:59:0e:8a:d7:6a:c8:f5:c3:34:
52:19:a5:1f:05:f1:5c:1a:e5:be:2d:c2:ba:83:a4:
9c:9e:dc:e2:4e:89:aa:ff:f6:54:0a:2f:c8:31:4c:
c0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D3:67:3C:42:50:C4:D3:8D:78:1B:79:9B:1B:59:A8:BC:F8:8A:2D
X509v3 Authority Key Identifier:
keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/PtNnPEJQxNONeBt5mxtZqLz4ii0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.195.0-37.19.201.255
37.19.205.0/24
37.19.209.0-37.19.213.255
37.19.217.0/24
37.19.220.0/23
37.19.223.0/24
45.134.140.0/24
45.134.142.0/24
45.134.212.0-45.134.214.255
45.136.154.0/23
84.17.36.0/24
84.17.43.0/24
84.17.48.0/23
84.17.51.0-84.17.52.255
138.199.6.0/23
138.199.10.0/23
138.199.13.0/24
138.199.16.0/24
138.199.18.0/23
138.199.21.0/24
138.199.28.0/22
138.199.33.0-138.199.35.255
138.199.38.0/23
138.199.42.0/23
138.199.46.0-138.199.50.255
138.199.52.0/24
138.199.54.0-138.199.56.255
138.199.58.0-138.199.63.255
143.244.34.0/24
143.244.41.0/24
143.244.44.0/24
143.244.46.0/23
143.244.52.0/22
156.146.37.0/24
156.146.39.0/24
156.146.41.0/24
156.146.45.0-156.146.48.255
156.146.50.0/23
156.146.54.0/23
156.146.57.0/24
156.146.60.0/24
156.146.62.0/23
169.150.196.0/22
169.150.201.0/24
169.150.203.0-169.150.205.255
169.150.208.0-169.150.212.255
169.150.218.0/24
169.150.226.0/23
169.150.231.0-169.150.233.255
169.150.248.0/24
185.156.44.0/24
185.156.46.0/24
212.102.35.0/24
212.102.37.0/24
212.102.39.0/24
212.102.47.0/24
212.102.49.0/24
212.102.51.0/24
212.102.53.0/24
212.102.57.0/24
IPv6:
2a02:6ea0:1000::-2a02:6ea0:1cff:ffff:ffff:ffff:ffff:ffff
2a02:6ea0:1e00::/40
2a02:6ea0:2000::-2a02:6ea0:2eff:ffff:ffff:ffff:ffff:ffff
2a02:6ea0:3000::-2a02:6ea0:32ff:ffff:ffff:ffff:ffff:ffff
2a02:6ea0:3600::-2a02:6ea0:38ff:ffff:ffff:ffff:ffff:ffff
2a02:6ea0:3b00::/40
2a02:6ea0:3f00::/40
Signature Algorithm: sha256WithRSAEncryption
13:93:14:e4:e6:44:fd:0d:0b:bb:d0:c6:29:ce:ad:34:72:ae:
6e:95:11:4a:a7:50:ec:31:8c:27:d1:72:62:99:9a:7c:a9:c6:
78:d8:84:39:4d:bd:04:d8:2e:9c:b1:aa:a8:7d:03:a8:81:19:
bb:47:63:77:ef:60:b2:9c:d7:62:1b:3f:c5:0a:0a:c8:ac:10:
cf:8c:4e:01:17:67:49:a4:b2:63:98:52:0b:e6:e4:98:8e:bc:
7d:9b:5e:ff:58:18:c2:da:c6:e9:d4:e1:95:c3:aa:9c:ab:f4:
6d:3b:fc:2d:dc:90:96:a3:4c:10:3b:c6:99:0f:a1:5b:b6:7e:
a0:56:b1:51:7d:1c:38:60:a4:5d:d5:85:cf:b0:b3:d6:82:d5:
95:e9:39:5b:a7:d5:ce:09:8b:98:83:20:37:bb:e6:14:6c:74:
b8:4e:60:5e:1c:b7:e3:5a:9b:70:88:5f:e5:0a:aa:a6:cd:18:
0b:8b:e4:a2:bc:7a:b7:dc:5b:97:65:b2:c6:e8:62:b8:2c:fd:
ed:6f:81:1a:ab:af:99:c6:52:a0:42:a3:77:f3:2e:1a:b9:28:
46:03:4a:e8:3e:ba:05:aa:76:0c:84:5a:61:ca:96:e7:91:d2:
05:fe:5a:52:35:70:f4:18:e8:0d:ed:22:43:d1:3c:39:e0:75:
3b:11:4e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:41 2024 by rpki-client on console-fra.rpki-client.org