Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/xZM60k9-aDmDHlcs3xBAhDH2h1k.roa
File: xZM60k9-aDmDHlcs3xBAhDH2h1k.roa (raw, json)
Hash identifier: KgHmlc1eu0JWmLlXiU6RQ939TRIcgMIaZ2NOeFJMBaU=
Subject key identifier: C5:93:3A:D2:4F:7E:68:39:83:1E:57:2C:DF:10:40:84:31:F6:87:59
Certificate issuer: /CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Certificate serial: 13147CE3
Authority key identifier: 50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/xZM60k9-aDmDHlcs3xBAhDH2h1k.roa
Signing time: Sun 26 Jun 2022 09:17:08 +0000
ROA not before: Sun 26 Jun 2022 09:17:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6810
IP address blocks: 147.235.59.0/24 maxlen: 24
147.235.70.0/24 maxlen: 24
147.235.70.0/23 maxlen: 23
147.235.71.0/24 maxlen: 24
147.235.0.0/16 maxlen: 24
147.235.31.0/24 maxlen: 24
147.235.182.0/24 maxlen: 24
147.235.182.0/23 maxlen: 23
147.235.183.0/24 maxlen: 24
147.235.192.0/22 maxlen: 22
147.235.192.0/24 maxlen: 24
147.235.192.0/19 maxlen: 24
147.235.196.0/22 maxlen: 22
147.235.194.0/24 maxlen: 24
147.235.199.0/24 maxlen: 24
147.235.194.0/23 maxlen: 24
147.235.195.0/24 maxlen: 24
147.235.193.0/24 maxlen: 24
147.235.198.0/24 maxlen: 24
147.235.196.0/23 maxlen: 24
147.235.197.0/24 maxlen: 24
147.235.198.0/23 maxlen: 24
147.235.196.0/24 maxlen: 24
147.235.96.0/22 maxlen: 22
147.235.97.0/24 maxlen: 24
147.235.96.0/24 maxlen: 24
147.235.96.0/23 maxlen: 23
147.235.98.0/23 maxlen: 23
147.235.98.0/24 maxlen: 24
147.235.99.0/24 maxlen: 24
147.235.111.0/24 maxlen: 24
147.235.144.0/21 maxlen: 24
149.106.128.0/19 maxlen: 24
149.106.224.0/19 maxlen: 24
147.235.202.0/23 maxlen: 24
147.235.206.0/24 maxlen: 24
147.235.206.0/23 maxlen: 24
147.235.200.0/21 maxlen: 21
147.235.200.0/22 maxlen: 22
147.235.201.0/24 maxlen: 24
147.235.202.0/24 maxlen: 24
147.235.203.0/24 maxlen: 24
147.235.204.0/24 maxlen: 24
147.235.204.0/23 maxlen: 24
147.235.204.0/22 maxlen: 22
147.235.205.0/24 maxlen: 24
147.235.200.0/24 maxlen: 24
147.235.200.0/23 maxlen: 24
147.235.211.0/24 maxlen: 24
147.235.213.0/24 maxlen: 24
147.235.208.0/22 maxlen: 23
147.235.208.0/24 maxlen: 24
147.235.209.0/24 maxlen: 24
147.235.210.0/24 maxlen: 24
147.235.207.0/24 maxlen: 24
147.235.212.0/23 maxlen: 23
147.235.212.0/24 maxlen: 24
147.235.212.0/22 maxlen: 23
147.235.215.0/24 maxlen: 24
147.235.216.0/24 maxlen: 24
147.235.216.0/22 maxlen: 23
147.235.214.0/24 maxlen: 24
147.235.218.0/23 maxlen: 23
147.235.218.0/24 maxlen: 24
147.235.219.0/24 maxlen: 24
147.235.216.0/21 maxlen: 21
147.235.217.0/24 maxlen: 24
147.235.222.0/23 maxlen: 23
147.235.222.0/24 maxlen: 24
147.235.220.0/22 maxlen: 22
147.235.223.0/24 maxlen: 24
147.235.220.0/24 maxlen: 24
147.235.220.0/23 maxlen: 23
147.235.221.0/24 maxlen: 24
147.235.226.0/24 maxlen: 24
147.235.228.0/22 maxlen: 24
2a06:c701::/32 maxlen: 32
2a06:c701:1000::/36 maxlen: 36
2a06:c700:2000::/36 maxlen: 36
2a06:c700::/32 maxlen: 48
2a06:c700::/44 maxlen: 44
2a06:c700::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320109795 (0x13147ce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Validity
Not Before: Jun 26 09:17:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5933ad24f7e6839831e572cdf10408431f68759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:91:10:62:bd:0e:dd:89:4c:04:36:f9:73:
15:88:e0:cc:f6:b6:0a:b9:e9:ca:d6:76:b0:ad:8c:
1e:33:9e:c6:36:f1:2e:33:63:14:55:72:84:ca:5d:
b1:d7:15:ef:29:31:27:88:20:f3:5a:54:c2:d2:97:
31:f9:b8:5f:d2:6d:9c:4a:96:33:4f:53:9a:30:5b:
d0:f9:da:d3:8d:f5:24:76:92:7b:eb:3a:a6:58:0f:
31:71:cc:4d:42:42:91:1f:10:72:be:71:30:e8:7c:
0e:1e:40:40:34:7b:42:ad:f3:30:8e:d3:11:37:3b:
52:58:2e:ea:6f:eb:1d:38:1f:3b:f8:0f:72:73:48:
5e:3e:c1:34:6e:2a:64:5e:c4:6e:1d:e2:77:72:b0:
bd:f2:04:40:86:f7:6c:78:77:bb:80:c8:ac:e5:c8:
39:b9:a4:4a:cb:ef:78:d1:3d:5b:6c:94:e0:e9:fd:
67:85:a3:5a:dd:49:2c:4a:93:77:80:15:81:6e:24:
03:b1:d1:59:18:4a:07:22:76:7b:f7:0f:5e:f1:37:
21:de:27:e2:8d:f3:42:0f:51:91:4d:29:8a:f1:06:
bd:d7:a4:b6:8e:9b:71:c8:bc:b5:4f:59:b8:80:84:
68:57:69:43:47:b0:d0:49:dc:d7:28:2d:56:30:58:
1e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:93:3A:D2:4F:7E:68:39:83:1E:57:2C:DF:10:40:84:31:F6:87:59
X509v3 Authority Key Identifier:
keyid:50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/xZM60k9-aDmDHlcs3xBAhDH2h1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.235.0.0/16
149.106.128.0/19
149.106.224.0/19
IPv6:
2a06:c700::/29
Signature Algorithm: sha256WithRSAEncryption
99:2b:2c:22:1d:d3:ba:03:7c:4d:24:29:7a:2a:4b:23:c8:09:
e1:97:5a:78:56:cb:88:72:b7:e7:b3:07:40:4f:0a:6c:f8:d6:
9c:19:21:ef:2f:b5:cd:1e:77:d2:aa:82:8f:52:2b:7d:b9:37:
65:7a:b6:f0:c3:8b:a2:ef:0d:ca:af:d8:ba:6c:11:e4:86:76:
81:02:a0:0b:5e:13:dd:e7:40:1c:5b:6b:35:46:e4:53:1b:a5:
0a:fd:66:a9:56:76:25:a2:d3:6e:00:fa:85:d6:47:d6:20:ec:
12:ea:18:ca:4c:6d:1e:b3:78:01:fb:05:76:45:1d:2e:30:6a:
58:c2:7a:98:fb:c0:75:00:ab:30:06:49:09:4e:fb:01:bd:5c:
8d:d3:ba:3b:bd:8e:45:ce:32:92:60:bc:ea:e0:ae:d2:2e:d0:
1d:ba:cf:b8:d6:be:cf:fb:01:aa:83:3e:97:fd:4d:b3:5e:51:
a3:b5:ce:f4:9d:72:95:a1:ca:f7:81:9a:06:d5:4d:bf:f1:39:
d0:7e:12:66:16:d4:e8:45:8b:5c:cc:ce:22:9e:7b:72:19:30:
4a:c0:68:b6:09:2e:50:8f:75:6a:4f:f9:bf:b6:58:c8:98:f1:
9b:3e:48:2b:a2:4e:89:60:2a:9b:d9:05:14:ca:2a:6a:3d:9c:
eb:f1:bb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:41 2024 by rpki-client on console-ams.rpki-client.org