Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/y1ugjGoAyJY1y4n3RApq0atSmQU.roa
File: y1ugjGoAyJY1y4n3RApq0atSmQU.roa (raw, json)
Hash identifier: g4QUkanrthB3jyjFDnMzjCV6BIftuyQFy7Dv7T8vOxA=
Subject key identifier: CB:5B:A0:8C:6A:00:C8:96:35:CB:89:F7:44:0A:6A:D1:AB:52:99:05
Certificate issuer: /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial: 0E7DF876
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/y1ugjGoAyJY1y4n3RApq0atSmQU.roa
Signing time: Tue 29 Mar 2022 09:32:13 +0000
ROA not before: Tue 29 Mar 2022 09:32:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 37.19.195.0/24 maxlen: 24
37.19.198.0/23 maxlen: 23
37.19.196.0/23 maxlen: 23
45.134.142.0/24 maxlen: 24
45.134.140.0/24 maxlen: 24
37.19.201.0/24 maxlen: 24
37.19.200.0/24 maxlen: 24
37.19.205.0/24 maxlen: 24
37.19.211.0/24 maxlen: 24
37.19.210.0/24 maxlen: 24
37.19.209.0/24 maxlen: 24
37.19.212.0/23 maxlen: 23
37.19.217.0/24 maxlen: 24
37.19.221.0/24 maxlen: 24
37.19.220.0/24 maxlen: 24
37.19.223.0/24 maxlen: 24
156.146.37.0/24 maxlen: 24
156.146.39.0/24 maxlen: 24
156.146.41.0/24 maxlen: 24
156.146.46.0/23 maxlen: 23
156.146.46.0/24 maxlen: 24
156.146.45.0/24 maxlen: 24
156.146.51.0/24 maxlen: 24
156.146.50.0/24 maxlen: 24
156.146.48.0/24 maxlen: 24
156.146.47.0/24 maxlen: 24
156.146.57.0/24 maxlen: 24
156.146.55.0/24 maxlen: 24
156.146.54.0/24 maxlen: 24
156.146.60.0/24 maxlen: 24
156.146.63.0/24 maxlen: 24
156.146.62.0/24 maxlen: 24
138.199.10.0/23 maxlen: 23
84.17.36.0/24 maxlen: 24
138.199.7.0/24 maxlen: 24
138.199.6.0/24 maxlen: 24
84.17.43.0/24 maxlen: 24
138.199.16.0/24 maxlen: 24
138.199.13.0/24 maxlen: 24
138.199.18.0/23 maxlen: 23
84.17.51.0/24 maxlen: 24
84.17.49.0/24 maxlen: 24
84.17.48.0/24 maxlen: 24
138.199.18.0/24 maxlen: 24
84.17.48.0/23 maxlen: 23
138.199.21.0/24 maxlen: 24
138.199.19.0/24 maxlen: 24
84.17.52.0/24 maxlen: 24
138.199.28.0/23 maxlen: 23
138.199.31.0/24 maxlen: 24
138.199.30.0/24 maxlen: 24
138.199.34.0/23 maxlen: 23
138.199.38.0/24 maxlen: 24
138.199.35.0/24 maxlen: 24
138.199.34.0/24 maxlen: 24
138.199.33.0/24 maxlen: 24
138.199.39.0/24 maxlen: 24
138.199.43.0/24 maxlen: 24
138.199.42.0/24 maxlen: 24
138.199.46.0/23 maxlen: 23
138.199.50.0/24 maxlen: 24
138.199.49.0/24 maxlen: 24
138.199.48.0/24 maxlen: 24
138.199.47.0/24 maxlen: 24
138.199.52.0/24 maxlen: 24
138.199.58.0/24 maxlen: 24
138.199.56.0/24 maxlen: 24
138.199.55.0/24 maxlen: 24
138.199.54.0/24 maxlen: 24
138.199.63.0/24 maxlen: 24
138.199.62.0/24 maxlen: 24
138.199.61.0/24 maxlen: 24
138.199.60.0/23 maxlen: 23
138.199.60.0/24 maxlen: 24
138.199.59.0/24 maxlen: 24
169.150.198.0/24 maxlen: 24
169.150.197.0/24 maxlen: 24
169.150.196.0/24 maxlen: 24
169.150.199.0/24 maxlen: 24
169.150.203.0/24 maxlen: 24
169.150.201.0/24 maxlen: 24
143.244.54.0/23 maxlen: 23
143.244.52.0/22 maxlen: 22
143.244.52.0/23 maxlen: 23
45.136.155.0/24 maxlen: 24
45.136.154.0/24 maxlen: 24
212.102.37.0/24 maxlen: 24
212.102.35.0/24 maxlen: 24
212.102.39.0/24 maxlen: 24
212.102.51.0/24 maxlen: 24
212.102.49.0/24 maxlen: 24
212.102.47.0/24 maxlen: 24
212.102.57.0/24 maxlen: 24
212.102.53.0/24 maxlen: 24
185.156.44.0/24 maxlen: 24
185.156.46.0/24 maxlen: 24
143.244.34.0/24 maxlen: 24
143.244.41.0/24 maxlen: 24
143.244.44.0/24 maxlen: 24
143.244.47.0/24 maxlen: 24
143.244.46.0/24 maxlen: 24
45.134.212.0/24 maxlen: 24
45.134.213.0/24 maxlen: 24
45.134.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243136630 (0xe7df876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Validity
Not Before: Mar 29 09:32:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb5ba08c6a00c89635cb89f7440a6ad1ab529905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:48:07:c3:8f:46:29:d1:56:82:ca:b6:bb:2b:
c2:92:83:84:57:2c:92:e1:e6:97:3c:e3:27:84:d8:
ab:ac:53:bf:b8:e0:30:6f:41:7c:7a:69:ce:ef:ff:
f8:b9:62:40:d2:91:99:fe:ca:d9:44:b3:3e:fd:e9:
ff:f6:ac:3c:03:13:fc:69:91:9a:d3:9f:b1:90:46:
dd:19:e3:24:dd:46:47:ed:cd:fb:32:8f:62:ca:b3:
99:ee:26:84:fa:11:e2:cf:5a:9c:0f:75:de:6b:fb:
71:02:6a:c1:cf:1a:c2:87:84:26:5e:50:18:ec:9f:
f0:e5:64:a7:48:ab:74:30:37:12:0d:5b:0d:88:37:
8c:b4:f6:66:5f:6b:d6:c9:76:c3:d5:7d:12:1e:27:
40:5e:23:99:21:73:a5:f2:79:b7:c0:03:21:a5:51:
a7:57:0e:3d:6c:7f:12:32:b7:ed:d6:54:1f:7c:6d:
9d:a1:c2:93:ed:aa:b1:07:e9:39:ab:e5:d7:7a:b5:
dd:10:80:90:b0:68:29:50:57:a4:16:2a:25:55:49:
6b:f7:7a:a5:42:ef:aa:77:ab:3c:dc:75:3e:53:e5:
6a:10:e7:00:97:8e:20:ac:6e:64:ca:7c:1f:74:a4:
d5:00:06:dd:d1:b3:21:d3:90:b6:89:c3:be:13:8b:
86:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5B:A0:8C:6A:00:C8:96:35:CB:89:F7:44:0A:6A:D1:AB:52:99:05
X509v3 Authority Key Identifier:
keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/y1ugjGoAyJY1y4n3RApq0atSmQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.195.0-37.19.201.255
37.19.205.0/24
37.19.209.0-37.19.213.255
37.19.217.0/24
37.19.220.0/23
37.19.223.0/24
45.134.140.0/24
45.134.142.0/24
45.134.212.0-45.134.214.255
45.136.154.0/23
84.17.36.0/24
84.17.43.0/24
84.17.48.0/23
84.17.51.0-84.17.52.255
138.199.6.0/23
138.199.10.0/23
138.199.13.0/24
138.199.16.0/24
138.199.18.0/23
138.199.21.0/24
138.199.28.0/22
138.199.33.0-138.199.35.255
138.199.38.0/23
138.199.42.0/23
138.199.46.0-138.199.50.255
138.199.52.0/24
138.199.54.0-138.199.56.255
138.199.58.0-138.199.63.255
143.244.34.0/24
143.244.41.0/24
143.244.44.0/24
143.244.46.0/23
143.244.52.0/22
156.146.37.0/24
156.146.39.0/24
156.146.41.0/24
156.146.45.0-156.146.48.255
156.146.50.0/23
156.146.54.0/23
156.146.57.0/24
156.146.60.0/24
156.146.62.0/23
169.150.196.0/22
169.150.201.0/24
169.150.203.0/24
185.156.44.0/24
185.156.46.0/24
212.102.35.0/24
212.102.37.0/24
212.102.39.0/24
212.102.47.0/24
212.102.49.0/24
212.102.51.0/24
212.102.53.0/24
212.102.57.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a0:dd:a3:4d:4b:c1:ff:45:c4:59:f5:5d:6c:51:d3:da:90:
b8:c8:82:66:a6:c4:6b:4b:ce:72:52:71:0f:36:f5:19:7f:21:
d0:0f:3b:c4:c6:a2:36:52:6e:27:93:1d:f5:eb:5c:42:07:da:
ed:77:a4:8f:97:9b:cc:7d:fe:be:c2:0e:48:80:99:52:e1:e7:
66:e0:31:e2:56:ba:85:05:44:db:36:cd:03:c6:5c:12:38:6a:
bd:d9:ff:da:a6:04:c1:36:e8:d5:bd:5b:7b:02:27:56:7f:e7:
97:1c:6a:45:d6:ba:db:86:6a:71:e3:ad:f7:b3:65:99:dc:a4:
be:8e:9e:5b:3d:60:1c:a4:b2:9a:27:68:0d:0f:79:e5:38:a3:
50:48:c2:85:01:56:be:bd:d1:7b:a1:96:08:af:55:ae:3f:5f:
27:2e:c6:ae:ac:4a:40:5c:7a:de:58:08:f5:6b:77:6e:5c:77:
b8:74:9c:2d:75:eb:dd:21:5d:c7:1c:96:b8:01:b4:0f:07:f0:
b2:cf:ef:2f:81:8d:c9:bb:4b:7e:a7:0b:e7:1b:4b:2b:d9:cd:
6a:e2:37:3c:b8:26:25:d1:81:56:36:61:f9:e1:14:95:08:19:
6f:53:87:ec:70:f2:10:0b:09:a8:48:e6:3e:4c:d3:ba:61:65:
36:6f:9c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:06 2024 by rpki-client on console-ams.rpki-client.org