Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/dnFE2opWCRtUbrW3eca0NS16ogU.roa
File: dnFE2opWCRtUbrW3eca0NS16ogU.roa (raw, json)
Hash identifier: N+xQG+nEASbZwlOJltwsABPP5Zgt0qIgZLA7Pr2cRDk=
Subject key identifier: 76:71:44:DA:8A:56:09:1B:54:6E:B5:B7:79:C6:B4:35:2D:7A:A2:05
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 385CF709
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/dnFE2opWCRtUbrW3eca0NS16ogU.roa
Signing time: Tue 10 May 2022 12:18:12 +0000
ROA not before: Tue 10 May 2022 12:18:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29580
IP address blocks: 213.222.36.0/24 maxlen: 24
213.222.41.0/24 maxlen: 24
213.222.42.0/23 maxlen: 23
213.222.49.0/24 maxlen: 24
176.12.4.0/22 maxlen: 22
176.12.0.0/22 maxlen: 22
176.12.9.0/24 maxlen: 24
176.12.10.0/24 maxlen: 24
176.12.11.0/24 maxlen: 24
176.12.8.0/24 maxlen: 24
176.12.13.0/24 maxlen: 24
176.12.14.0/24 maxlen: 24
176.12.16.0/20 maxlen: 20
176.12.12.0/24 maxlen: 24
176.12.34.0/23 maxlen: 23
176.12.36.0/22 maxlen: 22
176.12.32.0/23 maxlen: 23
176.12.40.0/21 maxlen: 21
176.12.48.0/21 maxlen: 21
217.79.44.0/22 maxlen: 22
213.240.239.0/24 maxlen: 24
176.12.56.0/22 maxlen: 22
176.12.60.0/22 maxlen: 22
217.18.251.0/24 maxlen: 24
217.10.241.0/24 maxlen: 24
195.24.56.0/24 maxlen: 24
195.24.57.0/24 maxlen: 24
212.91.160.0/24 maxlen: 24
212.91.165.0/24 maxlen: 24
212.91.183.0/24 maxlen: 24
212.91.182.0/24 maxlen: 24
212.91.191.0/24 maxlen: 24
130.204.217.0/24 maxlen: 24
130.204.218.0/23 maxlen: 23
78.83.152.0/22 maxlen: 22
77.70.34.0/24 maxlen: 24
78.83.163.0/24 maxlen: 24
78.83.162.0/24 maxlen: 24
78.83.166.0/24 maxlen: 24
78.83.161.0/24 maxlen: 24
78.83.165.0/24 maxlen: 24
78.83.171.0/24 maxlen: 24
78.83.167.0/24 maxlen: 24
78.83.170.0/24 maxlen: 24
78.83.169.0/24 maxlen: 24
78.83.176.0/24 maxlen: 24
78.83.179.0/24 maxlen: 24
78.83.178.0/24 maxlen: 24
78.83.177.0/24 maxlen: 24
78.83.184.0/24 maxlen: 24
130.204.252.0/24 maxlen: 24
78.83.183.0/24 maxlen: 24
78.83.182.0/24 maxlen: 24
78.83.186.0/24 maxlen: 24
130.204.253.0/24 maxlen: 24
78.83.188.0/24 maxlen: 24
78.83.187.0/24 maxlen: 24
78.83.190.0/24 maxlen: 24
78.83.189.0/24 maxlen: 24
130.204.254.0/24 maxlen: 24
78.83.196.0/24 maxlen: 24
212.50.18.0/24 maxlen: 24
78.83.195.0/24 maxlen: 24
78.83.198.0/24 maxlen: 24
78.83.197.0/24 maxlen: 24
78.83.112.0/20 maxlen: 20
78.83.136.0/24 maxlen: 24
78.83.138.0/24 maxlen: 24
78.83.137.0/24 maxlen: 24
78.83.141.0/24 maxlen: 24
78.83.204.0/22 maxlen: 22
78.83.200.0/22 maxlen: 22
78.83.216.0/22 maxlen: 22
78.83.220.0/22 maxlen: 22
78.83.231.0/24 maxlen: 24
78.83.229.0/24 maxlen: 24
212.36.8.0/23 maxlen: 23
130.204.130.0/24 maxlen: 24
130.204.129.0/24 maxlen: 24
130.204.132.0/24 maxlen: 24
130.204.128.0/24 maxlen: 24
130.204.131.0/24 maxlen: 24
130.204.133.0/24 maxlen: 24
130.204.134.0/24 maxlen: 24
130.204.138.0/24 maxlen: 24
130.204.137.0/24 maxlen: 24
62.204.138.0/23 maxlen: 23
62.204.135.0/24 maxlen: 24
46.238.54.0/24 maxlen: 24
212.36.27.0/24 maxlen: 24
130.204.136.0/24 maxlen: 24
130.204.139.0/24 maxlen: 24
130.204.135.0/24 maxlen: 24
130.204.140.0/24 maxlen: 24
130.204.143.0/24 maxlen: 24
62.204.147.0/24 maxlen: 24
62.204.153.0/24 maxlen: 24
62.204.159.0/24 maxlen: 24
130.204.64.0/24 maxlen: 24
130.204.69.0/24 maxlen: 24
130.204.65.0/24 maxlen: 24
130.204.66.0/24 maxlen: 24
130.204.71.0/24 maxlen: 24
130.204.67.0/24 maxlen: 24
130.204.68.0/24 maxlen: 24
130.204.73.0/24 maxlen: 24
130.204.74.0/24 maxlen: 24
130.204.75.0/24 maxlen: 24
130.204.76.0/24 maxlen: 24
130.204.72.0/24 maxlen: 24
46.238.3.0/24 maxlen: 24
78.83.14.0/24 maxlen: 24
46.238.4.0/24 maxlen: 24
46.238.0.0/24 maxlen: 24
78.83.16.0/21 maxlen: 21
46.238.1.0/24 maxlen: 24
46.238.2.0/24 maxlen: 24
78.83.15.0/24 maxlen: 24
78.83.24.0/21 maxlen: 21
46.238.5.0/24 maxlen: 24
46.238.6.0/24 maxlen: 24
77.236.182.0/24 maxlen: 24
212.95.169.0/24 maxlen: 24
212.95.170.0/24 maxlen: 24
212.95.171.0/24 maxlen: 24
212.95.186.0/24 maxlen: 24
212.95.187.0/24 maxlen: 24
213.169.32.0/24 maxlen: 24
213.169.42.0/24 maxlen: 24
195.34.116.0/24 maxlen: 24
213.169.46.0/24 maxlen: 24
195.34.118.0/24 maxlen: 24
195.34.117.0/24 maxlen: 24
195.34.119.0/24 maxlen: 24
195.34.124.0/23 maxlen: 23
213.169.62.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 945616649 (0x385cf709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 10 12:18:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=767144da8a56091b546eb5b779c6b4352d7aa205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:81:70:3f:97:73:85:81:06:04:78:e0:7f:0e:
97:53:18:63:ac:36:d5:d9:79:6c:ab:04:3f:18:d6:
ca:9c:d9:ca:4a:8a:b4:9b:12:c1:b2:83:7f:6a:d9:
dd:2f:72:dd:74:a3:99:72:fb:22:0f:e3:14:1c:39:
62:50:67:dc:38:9c:0b:c2:61:58:f4:f3:17:fc:cb:
15:bf:79:cf:bf:d9:f9:16:ae:5e:58:0c:64:0c:80:
5e:07:16:ef:b1:17:dc:a4:d1:a0:1e:ca:74:9e:f6:
d0:3b:2c:31:41:ad:e3:9c:70:d8:a4:d8:bb:0d:7e:
57:87:a7:29:74:5c:c4:c5:35:28:2b:3a:55:3c:68:
0f:d9:d7:07:20:b3:aa:57:3a:26:d0:bf:79:0c:d8:
d9:81:d5:8e:53:6b:f0:a5:40:3f:21:f8:01:e1:1c:
2e:64:11:ed:e4:26:bc:de:e4:96:ad:c3:10:15:e1:
96:9b:dc:c3:05:ae:bd:e8:39:5e:75:72:9b:78:a7:
58:15:27:af:1a:3f:d6:d8:82:13:41:50:98:5e:57:
51:e3:d4:a6:fb:e8:20:35:2e:d4:6e:4f:06:5c:62:
ba:27:7e:3e:54:34:a6:b6:8d:57:af:52:27:18:91:
7d:14:ca:88:db:48:93:2d:f6:29:75:59:0f:63:66:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:71:44:DA:8A:56:09:1B:54:6E:B5:B7:79:C6:B4:35:2D:7A:A2:05
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/dnFE2opWCRtUbrW3eca0NS16ogU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.238.0.0-46.238.6.255
46.238.54.0/24
62.204.135.0/24
62.204.138.0/23
62.204.147.0/24
62.204.153.0/24
62.204.159.0/24
77.70.34.0/24
77.236.182.0/24
78.83.14.0-78.83.31.255
78.83.112.0/20
78.83.136.0-78.83.138.255
78.83.141.0/24
78.83.152.0/22
78.83.161.0-78.83.163.255
78.83.165.0-78.83.167.255
78.83.169.0-78.83.171.255
78.83.176.0/22
78.83.182.0-78.83.184.255
78.83.186.0-78.83.190.255
78.83.195.0-78.83.198.255
78.83.200.0/21
78.83.216.0/21
78.83.229.0/24
78.83.231.0/24
130.204.64.0-130.204.69.255
130.204.71.0-130.204.76.255
130.204.128.0-130.204.140.255
130.204.143.0/24
130.204.217.0-130.204.219.255
130.204.252.0-130.204.254.255
176.12.0.0-176.12.14.255
176.12.16.0-176.12.63.255
195.24.56.0/23
195.34.116.0/22
195.34.124.0/23
212.36.8.0/23
212.36.27.0/24
212.50.18.0/24
212.91.160.0/24
212.91.165.0/24
212.91.182.0/23
212.91.191.0/24
212.95.169.0-212.95.171.255
212.95.186.0/23
213.169.32.0/24
213.169.42.0/24
213.169.46.0/24
213.169.62.0/23
213.222.36.0/24
213.222.41.0-213.222.43.255
213.222.49.0/24
213.240.239.0/24
217.10.241.0/24
217.18.251.0/24
217.79.44.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:d0:14:77:b6:fa:1a:dc:37:ff:bc:7f:0e:69:fd:46:55:7f:
28:91:f9:9f:a7:94:f9:73:a1:9d:85:e3:5f:dd:33:e1:f1:92:
86:ae:55:18:2d:d2:fc:a3:0a:af:85:fd:a7:d5:50:e3:7b:74:
ba:cb:08:2d:0a:51:c1:ed:b5:34:fc:90:08:d3:65:3e:3d:e5:
ee:66:5d:2d:65:49:8f:4a:75:68:b2:82:fd:ef:44:c6:a4:c2:
bd:0f:91:9b:b4:3c:ee:8d:d3:a5:f4:67:5f:bb:8f:20:3b:23:
d8:8a:90:fd:d6:03:e5:42:69:35:3c:cf:a0:d2:97:2e:7e:eb:
0d:74:ac:cf:6b:57:22:c9:6c:32:fd:b6:71:fb:2a:6b:67:cb:
48:c3:e1:fb:06:ab:81:95:b8:76:74:db:eb:41:bb:92:34:d8:
8f:f6:f9:b7:ac:44:7c:8f:df:cd:46:ad:24:0c:ba:67:ce:37:
bb:b3:71:06:e0:80:4d:65:da:5b:9d:42:74:82:61:2f:e9:3f:
eb:c6:e0:93:d3:1b:15:37:7a:71:ec:13:d3:91:d6:4c:3f:9a:
c8:d4:dc:80:9b:3b:dd:8b:10:ec:16:30:ea:5b:f7:83:a4:d5:
ae:bd:18:77:43:1a:77:10:15:05:b9:e0:79:cc:5c:2a:00:bb:
63:a1:c1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:20 2023 by rpki-client on console-fra.rpki-client.org