Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/oZUKLg4fLXIjgu_uKYwcDYZJu08.roa
File: oZUKLg4fLXIjgu_uKYwcDYZJu08.roa (raw, json)
Hash identifier: j/gbJ73Tr6plHki6lY0zGd0qcaQgm8xkZ6vY9sK3Kpc=
Subject key identifier: A1:95:0A:2E:0E:1F:2D:72:23:82:EF:EE:29:8C:1C:0D:86:49:BB:4F
Certificate issuer: /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial: 0F0B4A55
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/oZUKLg4fLXIjgu_uKYwcDYZJu08.roa
Signing time: Mon 23 May 2022 14:14:29 +0000
ROA not before: Mon 23 May 2022 14:14:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 37.19.195.0/24 maxlen: 24
37.19.198.0/23 maxlen: 23
37.19.196.0/23 maxlen: 23
45.134.142.0/24 maxlen: 24
45.134.140.0/24 maxlen: 24
37.19.201.0/24 maxlen: 24
37.19.200.0/24 maxlen: 24
37.19.205.0/24 maxlen: 24
37.19.211.0/24 maxlen: 24
37.19.210.0/24 maxlen: 24
37.19.209.0/24 maxlen: 24
37.19.212.0/23 maxlen: 23
37.19.217.0/24 maxlen: 24
37.19.221.0/24 maxlen: 24
37.19.220.0/24 maxlen: 24
37.19.223.0/24 maxlen: 24
156.146.37.0/24 maxlen: 24
156.146.39.0/24 maxlen: 24
156.146.41.0/24 maxlen: 24
156.146.46.0/23 maxlen: 23
156.146.46.0/24 maxlen: 24
156.146.45.0/24 maxlen: 24
156.146.51.0/24 maxlen: 24
156.146.50.0/24 maxlen: 24
156.146.48.0/24 maxlen: 24
156.146.47.0/24 maxlen: 24
156.146.57.0/24 maxlen: 24
156.146.55.0/24 maxlen: 24
156.146.54.0/24 maxlen: 24
156.146.60.0/24 maxlen: 24
156.146.63.0/24 maxlen: 24
156.146.62.0/24 maxlen: 24
138.199.10.0/23 maxlen: 23
84.17.36.0/24 maxlen: 24
138.199.7.0/24 maxlen: 24
138.199.6.0/24 maxlen: 24
84.17.43.0/24 maxlen: 24
138.199.16.0/24 maxlen: 24
138.199.13.0/24 maxlen: 24
138.199.18.0/23 maxlen: 23
84.17.51.0/24 maxlen: 24
84.17.49.0/24 maxlen: 24
84.17.48.0/24 maxlen: 24
138.199.18.0/24 maxlen: 24
84.17.48.0/23 maxlen: 23
138.199.21.0/24 maxlen: 24
138.199.19.0/24 maxlen: 24
84.17.52.0/24 maxlen: 24
138.199.28.0/23 maxlen: 23
138.199.31.0/24 maxlen: 24
138.199.30.0/24 maxlen: 24
138.199.34.0/23 maxlen: 23
138.199.38.0/24 maxlen: 24
138.199.35.0/24 maxlen: 24
138.199.34.0/24 maxlen: 24
138.199.33.0/24 maxlen: 24
138.199.39.0/24 maxlen: 24
138.199.43.0/24 maxlen: 24
138.199.42.0/24 maxlen: 24
138.199.46.0/23 maxlen: 23
138.199.50.0/24 maxlen: 24
138.199.49.0/24 maxlen: 24
138.199.48.0/24 maxlen: 24
138.199.47.0/24 maxlen: 24
138.199.52.0/24 maxlen: 24
138.199.58.0/24 maxlen: 24
138.199.56.0/24 maxlen: 24
138.199.55.0/24 maxlen: 24
138.199.54.0/24 maxlen: 24
138.199.63.0/24 maxlen: 24
138.199.62.0/24 maxlen: 24
138.199.61.0/24 maxlen: 24
138.199.60.0/23 maxlen: 23
138.199.60.0/24 maxlen: 24
138.199.59.0/24 maxlen: 24
169.150.198.0/24 maxlen: 24
169.150.197.0/24 maxlen: 24
169.150.196.0/24 maxlen: 24
169.150.199.0/24 maxlen: 24
169.150.205.0/24 maxlen: 24
169.150.204.0/24 maxlen: 24
169.150.203.0/24 maxlen: 24
169.150.201.0/24 maxlen: 24
169.150.210.0/23 maxlen: 23
169.150.212.0/24 maxlen: 24
169.150.209.0/24 maxlen: 24
169.150.208.0/24 maxlen: 24
169.150.218.0/24 maxlen: 24
169.150.226.0/23 maxlen: 23
143.244.54.0/23 maxlen: 23
143.244.52.0/22 maxlen: 22
143.244.52.0/23 maxlen: 23
45.136.155.0/24 maxlen: 24
45.136.154.0/24 maxlen: 24
212.102.37.0/24 maxlen: 24
212.102.35.0/24 maxlen: 24
212.102.39.0/24 maxlen: 24
212.102.51.0/24 maxlen: 24
212.102.49.0/24 maxlen: 24
212.102.47.0/24 maxlen: 24
212.102.57.0/24 maxlen: 24
212.102.53.0/24 maxlen: 24
185.156.44.0/24 maxlen: 24
185.156.46.0/24 maxlen: 24
143.244.34.0/24 maxlen: 24
143.244.41.0/24 maxlen: 24
143.244.44.0/24 maxlen: 24
143.244.47.0/24 maxlen: 24
143.244.46.0/24 maxlen: 24
45.134.212.0/24 maxlen: 24
45.134.213.0/24 maxlen: 24
45.134.214.0/24 maxlen: 24
2a02:6ea0:1100::/40 maxlen: 40
2a02:6ea0:1400::/40 maxlen: 40
2a02:6ea0:2800::/40 maxlen: 40
2a02:6ea0:1700::/40 maxlen: 40
2a02:6ea0:2b00::/40 maxlen: 40
2a02:6ea0:2400::/40 maxlen: 40
2a02:6ea0:1000::/40 maxlen: 40
2a02:6ea0:2100::/40 maxlen: 40
2a02:6ea0:1e00::/40 maxlen: 40
2a02:6ea0:3200::/40 maxlen: 40
2a02:6ea0:1300::/40 maxlen: 40
2a02:6ea0:2e00::/40 maxlen: 40
2a02:6ea0:3f00::/40 maxlen: 40
2a02:6ea0:3100::/40 maxlen: 40
2a02:6ea0:2300::/40 maxlen: 40
2a02:6ea0:2000::/40 maxlen: 40
2a02:6ea0:1a00::/40 maxlen: 40
2a02:6ea0:3800::/40 maxlen: 40
2a02:6ea0:1c00::/40 maxlen: 40
2a02:6ea0:2700::/40 maxlen: 40
2a02:6ea0:1600::/40 maxlen: 40
2a02:6ea0:2a00::/40 maxlen: 40
2a02:6ea0:1900::/40 maxlen: 40
2a02:6ea0:2d00::/40 maxlen: 40
2a02:6ea0:3000::/40 maxlen: 40
2a02:6ea0:2200::/40 maxlen: 40
2a02:6ea0:1b00::/40 maxlen: 40
2a02:6ea0:1800::/40 maxlen: 40
2a02:6ea0:2c00::/40 maxlen: 40
2a02:6ea0:1500::/40 maxlen: 40
2a02:6ea0:2900::/40 maxlen: 40
2a02:6ea0:2600::/40 maxlen: 40
2a02:6ea0:3700::/40 maxlen: 40
2a02:6ea0:1200::/40 maxlen: 40
2a02:6ea0:2500::/40 maxlen: 40
2a02:6ea0:3600::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252398165 (0xf0b4a55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Validity
Not Before: May 23 14:14:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1950a2e0e1f2d722382efee298c1c0d8649bb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:26:99:6d:ec:32:39:a1:05:5d:03:4c:db:
b3:46:ea:c6:8e:13:10:a3:97:49:21:f6:2f:3f:73:
ae:9c:10:cd:11:08:e6:78:d9:09:ce:de:a2:ea:b5:
86:36:5b:b9:3c:69:e0:8f:36:0c:81:2a:dc:68:f8:
e1:4b:d0:95:91:c0:0b:be:78:7b:2c:c5:65:de:ed:
a7:ca:43:1d:28:80:d7:df:08:bd:9f:66:a7:5f:72:
f3:69:8f:c9:ee:94:c0:82:66:da:54:c0:fc:67:f1:
7d:9e:91:eb:f4:3c:70:0e:f0:e3:a2:8f:4e:31:fa:
6e:df:36:36:98:f1:68:4e:c2:80:7a:9d:17:1a:86:
bb:d0:84:17:16:c6:ac:3a:0e:2a:82:87:c1:6b:7d:
7c:4b:20:c8:b8:75:08:71:b1:e7:f8:ca:68:97:c8:
a8:f0:4a:7a:c7:4f:e1:63:5f:75:3d:ab:e7:1a:c0:
1f:e4:ff:00:e8:28:26:2a:e3:ca:8c:5d:d8:40:aa:
d6:01:5b:b4:68:d5:a9:b2:a8:54:f1:a5:26:51:05:
76:2a:e1:0e:5f:b7:65:6a:5a:69:95:89:b4:78:c1:
67:bc:88:0e:03:25:ac:50:81:2e:f8:0f:43:82:ee:
dd:e8:9a:07:82:3b:95:a7:a8:b8:ae:78:10:ed:0d:
83:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:95:0A:2E:0E:1F:2D:72:23:82:EF:EE:29:8C:1C:0D:86:49:BB:4F
X509v3 Authority Key Identifier:
keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/oZUKLg4fLXIjgu_uKYwcDYZJu08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.195.0-37.19.201.255
37.19.205.0/24
37.19.209.0-37.19.213.255
37.19.217.0/24
37.19.220.0/23
37.19.223.0/24
45.134.140.0/24
45.134.142.0/24
45.134.212.0-45.134.214.255
45.136.154.0/23
84.17.36.0/24
84.17.43.0/24
84.17.48.0/23
84.17.51.0-84.17.52.255
138.199.6.0/23
138.199.10.0/23
138.199.13.0/24
138.199.16.0/24
138.199.18.0/23
138.199.21.0/24
138.199.28.0/22
138.199.33.0-138.199.35.255
138.199.38.0/23
138.199.42.0/23
138.199.46.0-138.199.50.255
138.199.52.0/24
138.199.54.0-138.199.56.255
138.199.58.0-138.199.63.255
143.244.34.0/24
143.244.41.0/24
143.244.44.0/24
143.244.46.0/23
143.244.52.0/22
156.146.37.0/24
156.146.39.0/24
156.146.41.0/24
156.146.45.0-156.146.48.255
156.146.50.0/23
156.146.54.0/23
156.146.57.0/24
156.146.60.0/24
156.146.62.0/23
169.150.196.0/22
169.150.201.0/24
169.150.203.0-169.150.205.255
169.150.208.0-169.150.212.255
169.150.218.0/24
169.150.226.0/23
185.156.44.0/24
185.156.46.0/24
212.102.35.0/24
212.102.37.0/24
212.102.39.0/24
212.102.47.0/24
212.102.49.0/24
212.102.51.0/24
212.102.53.0/24
212.102.57.0/24
IPv6:
2a02:6ea0:1000::-2a02:6ea0:1cff:ffff:ffff:ffff:ffff:ffff
2a02:6ea0:1e00::/40
2a02:6ea0:2000::-2a02:6ea0:2eff:ffff:ffff:ffff:ffff:ffff
2a02:6ea0:3000::-2a02:6ea0:32ff:ffff:ffff:ffff:ffff:ffff
2a02:6ea0:3600::-2a02:6ea0:38ff:ffff:ffff:ffff:ffff:ffff
2a02:6ea0:3f00::/40
Signature Algorithm: sha256WithRSAEncryption
4c:7b:38:25:48:12:24:51:fc:09:8d:b2:31:3b:e2:b3:df:93:
f8:e6:ee:2c:2a:bb:f9:f8:c5:ac:e8:a3:a4:88:62:ed:b1:f7:
c3:bc:5b:c2:83:dd:d3:20:ba:4e:26:05:2c:0d:f1:fb:4b:9f:
e3:b1:68:9f:87:84:2a:1f:11:d4:d4:8c:49:16:be:e2:3c:3b:
6c:16:4b:be:07:37:33:34:e0:37:03:94:09:69:ef:f6:b7:3f:
f5:d9:67:b2:8e:74:1e:db:a9:4e:39:51:e8:d4:94:d4:9c:57:
ed:e4:0d:a1:a6:b6:3a:1e:0c:6a:4f:58:62:20:3b:e4:a6:81:
ff:f5:b6:6c:81:f8:b6:39:34:c3:bc:71:2d:3e:13:c9:f6:b0:
af:48:cd:03:cf:f6:60:5d:10:c5:a0:f6:4c:b6:73:86:c2:ee:
2a:c2:19:db:1b:d4:cb:13:da:fb:76:4d:92:28:fe:78:e1:65:
79:d5:58:23:e7:1d:48:ec:dc:38:fc:8f:64:b5:d6:9a:ef:ce:
21:dd:3f:1c:83:27:a8:51:e5:8a:80:8e:29:76:2e:d8:c4:14:
5a:d9:9a:47:a9:4f:59:02:8b:a3:21:fa:cb:b2:07:9a:31:66:
f6:61:15:0a:0d:8e:43:79:d0:79:df:1b:df:f9:8a:e6:e8:d3:
c8:69:8a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:06 2024 by rpki-client on console-ams.rpki-client.org