Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/kgehxniRpiyT_h5laq73DuJaNUY.roa
File: kgehxniRpiyT_h5laq73DuJaNUY.roa (raw, json)
Hash identifier: jh21jueiN1LZGx+F5NhqofzmstSOV6TesWndHvcsE/o=
Subject key identifier: 92:07:A1:C6:78:91:A6:2C:93:FE:1E:65:6A:AE:F7:0E:E2:5A:35:46
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 05C99DDF
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/kgehxniRpiyT_h5laq73DuJaNUY.roa
Signing time: Wed 20 Apr 2022 14:03:10 +0000
ROA not before: Wed 20 Apr 2022 14:03:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8308
IP address blocks: 194.181.65.0/24 maxlen: 24
194.181.66.0/24 maxlen: 24
194.181.68.0/24 maxlen: 24
194.181.69.0/24 maxlen: 24
194.181.70.0/24 maxlen: 24
194.181.71.0/24 maxlen: 24
194.181.72.0/24 maxlen: 24
194.181.73.0/24 maxlen: 24
194.181.74.0/24 maxlen: 24
194.181.75.0/24 maxlen: 24
194.181.76.0/24 maxlen: 24
194.181.77.0/24 maxlen: 24
194.181.78.0/24 maxlen: 24
194.181.79.0/24 maxlen: 24
194.181.80.0/24 maxlen: 24
194.181.81.0/24 maxlen: 24
194.181.82.0/24 maxlen: 24
194.181.83.0/24 maxlen: 24
194.181.84.0/24 maxlen: 24
194.181.85.0/24 maxlen: 24
194.181.89.0/24 maxlen: 24
194.181.90.0/24 maxlen: 24
194.181.91.0/24 maxlen: 24
194.181.86.0/24 maxlen: 24
194.181.87.0/24 maxlen: 24
194.181.88.0/24 maxlen: 24
194.181.92.0/24 maxlen: 24
194.181.93.0/24 maxlen: 24
194.181.94.0/24 maxlen: 24
194.181.95.0/24 maxlen: 24
194.181.96.0/24 maxlen: 24
194.181.97.0/24 maxlen: 24
194.181.98.0/24 maxlen: 24
194.181.99.0/24 maxlen: 24
194.181.100.0/24 maxlen: 24
194.181.101.0/24 maxlen: 24
194.181.102.0/24 maxlen: 24
194.181.103.0/24 maxlen: 24
194.181.104.0/24 maxlen: 24
194.181.105.0/24 maxlen: 24
194.181.106.0/24 maxlen: 24
194.181.107.0/24 maxlen: 24
194.181.108.0/24 maxlen: 24
194.181.109.0/24 maxlen: 24
194.181.110.0/24 maxlen: 24
194.181.19.0/24 maxlen: 24
194.181.20.0/24 maxlen: 24
194.181.21.0/24 maxlen: 24
194.181.22.0/24 maxlen: 24
194.181.23.0/24 maxlen: 24
194.181.24.0/24 maxlen: 24
194.181.25.0/24 maxlen: 24
194.181.26.0/24 maxlen: 24
194.181.27.0/24 maxlen: 24
194.181.28.0/24 maxlen: 24
194.181.29.0/24 maxlen: 24
194.181.30.0/24 maxlen: 24
194.181.32.0/24 maxlen: 24
194.181.33.0/24 maxlen: 24
194.181.34.0/24 maxlen: 24
194.181.35.0/24 maxlen: 24
194.181.36.0/24 maxlen: 24
194.181.37.0/24 maxlen: 24
194.181.39.0/24 maxlen: 24
194.181.42.0/24 maxlen: 24
194.181.46.0/24 maxlen: 24
194.181.50.0/24 maxlen: 24
194.181.51.0/24 maxlen: 24
194.181.52.0/24 maxlen: 24
194.181.53.0/24 maxlen: 24
194.181.54.0/24 maxlen: 24
194.181.55.0/24 maxlen: 24
194.181.58.0/24 maxlen: 24
194.181.59.0/24 maxlen: 24
194.181.60.0/24 maxlen: 24
194.181.61.0/24 maxlen: 24
194.181.62.0/24 maxlen: 24
194.181.63.0/24 maxlen: 24
194.181.64.0/24 maxlen: 24
193.59.39.0/24 maxlen: 24
193.59.40.0/24 maxlen: 24
193.59.41.0/24 maxlen: 24
193.59.42.0/24 maxlen: 24
193.59.43.0/24 maxlen: 24
193.59.48.0/24 maxlen: 24
193.59.49.0/24 maxlen: 24
193.59.51.0/24 maxlen: 24
193.59.55.0/24 maxlen: 24
193.59.56.0/24 maxlen: 24
193.59.57.0/24 maxlen: 24
193.59.58.0/24 maxlen: 24
193.59.54.0/24 maxlen: 24
193.59.59.0/24 maxlen: 24
193.59.68.0/24 maxlen: 24
193.59.69.0/24 maxlen: 24
193.59.70.0/24 maxlen: 24
193.59.71.0/24 maxlen: 24
193.59.72.0/24 maxlen: 24
193.59.73.0/24 maxlen: 24
193.59.74.0/24 maxlen: 24
193.59.75.0/24 maxlen: 24
193.59.77.0/24 maxlen: 24
193.59.81.0/24 maxlen: 24
193.59.82.0/24 maxlen: 24
193.59.83.0/24 maxlen: 24
193.59.84.0/24 maxlen: 24
193.59.85.0/24 maxlen: 24
193.59.86.0/24 maxlen: 24
193.59.87.0/24 maxlen: 24
195.187.0.0/18 maxlen: 18
193.59.1.0/24 maxlen: 24
193.59.2.0/24 maxlen: 24
193.59.3.0/24 maxlen: 24
193.59.4.0/24 maxlen: 24
193.59.5.0/24 maxlen: 24
193.59.6.0/24 maxlen: 24
193.59.7.0/24 maxlen: 24
193.59.10.0/24 maxlen: 24
193.59.11.0/24 maxlen: 24
193.59.0.0/16 maxlen: 16
193.59.20.0/24 maxlen: 24
193.59.21.0/24 maxlen: 24
193.59.22.0/24 maxlen: 24
193.59.23.0/24 maxlen: 24
193.59.28.0/24 maxlen: 24
193.59.29.0/24 maxlen: 24
193.59.30.0/24 maxlen: 24
193.59.31.0/24 maxlen: 24
193.59.32.0/24 maxlen: 24
193.59.33.0/24 maxlen: 24
193.59.34.0/24 maxlen: 24
193.59.35.0/24 maxlen: 24
193.59.36.0/24 maxlen: 24
193.59.37.0/24 maxlen: 24
193.59.38.0/24 maxlen: 24
193.59.155.0/24 maxlen: 24
193.59.156.0/24 maxlen: 24
193.59.157.0/24 maxlen: 24
193.59.158.0/24 maxlen: 24
193.59.159.0/24 maxlen: 24
193.59.160.0/24 maxlen: 24
193.59.161.0/24 maxlen: 24
193.59.162.0/24 maxlen: 24
193.59.163.0/24 maxlen: 24
193.59.170.0/24 maxlen: 24
193.59.171.0/24 maxlen: 24
193.59.172.0/24 maxlen: 24
194.181.1.0/24 maxlen: 24
194.181.4.0/24 maxlen: 24
194.181.0.0/16 maxlen: 16
194.181.5.0/24 maxlen: 24
195.187.101.0/24 maxlen: 24
195.187.128.0/17 maxlen: 17
217.9.160.0/20 maxlen: 20
217.9.160.0/24 maxlen: 24
217.9.165.0/24 maxlen: 24
195.164.0.0/16 maxlen: 16
194.181.255.0/24 maxlen: 24
2001:a10::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97099231 (0x5c99ddf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Apr 20 14:03:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9207a1c67891a62c93fe1e656aaef70ee25a3546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:a2:a7:f3:83:65:af:f3:56:49:70:8e:21:
bd:6f:4a:bb:dc:10:22:f0:71:19:e7:86:e1:ab:64:
c9:58:fa:05:c7:79:28:1c:5e:0d:b7:31:29:9a:f1:
50:08:e6:96:48:09:21:0b:ba:78:45:1b:41:27:a3:
27:4a:68:f5:54:fa:3c:6c:5a:09:df:4a:92:b0:e5:
ef:08:89:c5:66:57:fc:20:ea:4a:b2:13:22:b0:bf:
b2:0c:87:a0:72:ff:0a:9b:92:67:74:50:19:83:26:
e5:2e:13:18:8d:ba:f0:f2:9d:4e:f2:ac:6e:ef:a3:
5e:ca:20:16:0f:5e:55:9e:75:c0:63:51:0b:be:a5:
be:83:7d:b3:f6:54:70:9f:61:5e:80:c8:48:fe:95:
0c:f3:d8:8b:0f:d1:f2:20:29:52:b0:c7:4c:b3:22:
2e:b2:03:58:fd:92:22:24:3b:07:59:fe:23:6b:75:
af:05:08:b4:12:fd:56:61:81:32:ad:04:f6:a1:d1:
5c:0a:31:23:59:c2:f2:9e:37:ed:b1:43:d4:61:10:
32:92:3c:d2:79:09:56:a0:de:7f:a8:9b:d5:66:81:
98:ef:95:31:11:fb:3e:dd:05:3a:a6:fb:01:73:d4:
eb:1a:9c:6d:2e:39:0c:fd:a6:96:e5:ab:e1:85:86:
2a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:07:A1:C6:78:91:A6:2C:93:FE:1E:65:6A:AE:F7:0E:E2:5A:35:46
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/kgehxniRpiyT_h5laq73DuJaNUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.0.0/16
194.181.0.0/16
195.164.0.0/16
195.187.0.0/18
195.187.101.0/24
195.187.128.0/17
217.9.160.0/20
IPv6:
2001:a10::/32
Signature Algorithm: sha256WithRSAEncryption
12:37:53:7c:39:52:89:a0:0a:bc:4f:8a:d2:08:22:3a:80:b6:
63:10:7e:9e:05:5c:d8:f7:3d:68:14:ae:56:47:4e:17:08:53:
53:c9:47:3e:33:40:31:47:fa:2c:13:6d:f0:4d:92:06:cf:92:
83:c8:f7:7e:df:5e:e7:82:c4:1e:d0:f5:5f:ae:bd:be:bc:92:
35:bd:8f:3c:95:79:57:23:6b:ce:44:f7:39:1f:4b:f7:fc:e6:
d6:c1:4c:73:65:39:97:c5:50:15:3e:91:54:61:04:d4:50:ce:
a0:5c:65:fb:bf:86:c0:4c:ad:3c:f1:54:22:37:da:ff:00:c0:
f6:55:af:8f:ff:83:cd:b4:e3:5b:5f:b4:60:c2:e9:03:54:0c:
65:93:b4:a9:a4:3a:45:43:f6:6d:59:ff:b5:8a:a2:cd:51:b7:
e5:29:3c:d2:7b:68:e2:7d:a2:7c:71:c1:a7:08:47:5e:63:55:
cb:0f:4b:ec:c9:8b:75:0c:00:30:40:63:7d:9a:22:84:da:52:
4a:1e:7a:db:9a:45:1f:4e:53:77:21:e3:5a:aa:5f:92:3e:d9:
df:eb:22:43:c2:fa:c9:a8:55:7a:b1:86:42:24:d6:1e:d9:b6:
ce:64:3f:79:6c:31:ea:39:5f:3e:f1:a1:19:c2:b3:e3:5c:26:
4f:dc:8f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:05 2024 by rpki-client on console-ams.rpki-client.org