Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/LntyZYpL2hP-mgrGK0ThPwazJ1g.roa
File: LntyZYpL2hP-mgrGK0ThPwazJ1g.roa (raw, json)
Hash identifier: ae5YFZ+A5iMPbRRWOKtx0tjn4L0wvCE7r164yWvWr28=
Subject key identifier: 2E:7B:72:65:8A:4B:DA:13:FE:9A:0A:C6:2B:44:E1:3F:06:B3:27:58
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 06B242
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/LntyZYpL2hP-mgrGK0ThPwazJ1g.roa
Signing time: Sat 01 Jan 2022 01:57:38 +0000
ROA not before: Sat 01 Jan 2022 01:57:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42003
IP address blocks: 77.42.240.0/21 maxlen: 21
94.187.40.0/21 maxlen: 21
94.187.48.0/21 maxlen: 21
94.187.56.0/21 maxlen: 21
94.187.64.0/21 maxlen: 21
94.187.72.0/21 maxlen: 21
94.187.80.0/21 maxlen: 21
77.42.128.0/19 maxlen: 19
94.187.88.0/21 maxlen: 21
94.187.0.0/24 maxlen: 24
94.187.1.0/24 maxlen: 24
94.187.2.0/24 maxlen: 24
94.187.3.0/24 maxlen: 24
94.187.0.0/21 maxlen: 21
94.187.4.0/24 maxlen: 24
94.187.11.0/24 maxlen: 24
94.187.6.0/24 maxlen: 24
94.187.7.0/24 maxlen: 24
94.187.8.0/24 maxlen: 24
94.187.9.0/24 maxlen: 24
94.187.10.0/24 maxlen: 24
94.187.16.0/21 maxlen: 21
94.187.24.0/21 maxlen: 21
94.187.32.0/21 maxlen: 21
77.42.192.0/19 maxlen: 19
77.42.224.0/21 maxlen: 21
77.42.232.0/21 maxlen: 21
94.187.95.0/24 maxlen: 24
94.187.96.0/21 maxlen: 21
94.187.104.0/21 maxlen: 21
94.187.112.0/21 maxlen: 21
94.187.120.0/21 maxlen: 21
77.42.160.0/19 maxlen: 19
178.135.200.0/21 maxlen: 21
178.135.208.0/21 maxlen: 21
178.135.216.0/21 maxlen: 21
178.135.224.0/21 maxlen: 21
178.135.232.0/21 maxlen: 21
178.135.240.0/21 maxlen: 21
178.135.248.0/21 maxlen: 21
178.135.152.0/21 maxlen: 21
178.135.160.0/21 maxlen: 21
178.135.168.0/21 maxlen: 21
178.135.176.0/21 maxlen: 21
178.135.184.0/21 maxlen: 21
178.135.192.0/21 maxlen: 21
178.135.0.0/24 maxlen: 24
178.135.1.0/24 maxlen: 24
178.135.2.0/24 maxlen: 24
178.135.3.0/24 maxlen: 24
178.135.6.0/24 maxlen: 24
178.135.7.0/24 maxlen: 24
178.135.8.0/24 maxlen: 24
178.135.9.0/24 maxlen: 24
178.135.10.0/24 maxlen: 24
178.135.11.0/24 maxlen: 24
178.135.16.0/21 maxlen: 21
178.135.24.0/21 maxlen: 21
178.135.32.0/21 maxlen: 21
178.135.96.0/21 maxlen: 21
178.135.95.0/24 maxlen: 24
178.135.104.0/21 maxlen: 21
178.135.112.0/21 maxlen: 21
178.135.120.0/21 maxlen: 21
178.135.128.0/21 maxlen: 21
178.135.136.0/21 maxlen: 21
178.135.144.0/21 maxlen: 21
178.135.40.0/21 maxlen: 21
178.135.48.0/21 maxlen: 21
178.135.56.0/21 maxlen: 21
178.135.64.0/21 maxlen: 21
178.135.72.0/21 maxlen: 21
178.135.80.0/21 maxlen: 21
178.135.88.0/21 maxlen: 21
2a00:6920:f000::/40 maxlen: 40
2a00:6920:e100::/40 maxlen: 40
2a00:6920:e000::/40 maxlen: 40
2a00:6920:d000::/40 maxlen: 40
2a00:6920:e1c0::/42 maxlen: 42
2a00:6920:e180::/42 maxlen: 42
2a00:6920:e140::/42 maxlen: 42
2a00:6920:e100::/42 maxlen: 42
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438850 (0x6b242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: Jan 1 01:57:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e7b72658a4bda13fe9a0ac62b44e13f06b32758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:0b:26:d3:ec:a5:33:9f:b8:ea:2b:88:4c:
55:29:d3:33:62:7e:af:a8:3b:65:03:2a:63:fb:d7:
f9:e5:23:a0:b8:a4:bb:d3:02:ad:11:fb:cb:18:52:
37:c3:38:29:0c:53:c2:58:dd:d0:45:54:05:bf:a7:
d2:bc:fe:31:39:29:8c:c7:57:46:8e:4f:c9:74:a6:
90:51:16:03:31:52:c2:69:5c:04:1a:58:5e:2b:d6:
3f:d3:b3:97:1a:9d:57:21:53:ae:9e:4b:45:1a:70:
94:ad:cb:db:28:20:80:1a:a8:34:3c:06:8f:a0:ce:
b6:28:03:57:af:c5:d3:de:cd:ef:4a:2d:e6:11:f3:
df:b8:f7:d2:4e:28:f9:86:de:78:b4:73:c7:d2:ee:
51:54:e3:c7:63:da:13:a5:81:aa:06:b1:e9:40:d5:
fb:f0:a1:e3:03:72:f0:e3:61:e6:15:78:39:62:15:
f6:0e:76:1a:cd:4c:1d:9d:4b:0e:82:12:91:b4:23:
30:de:e8:cc:68:4d:66:df:d8:e8:21:6f:09:38:e7:
3f:84:05:20:a1:48:d8:ea:30:45:0f:f8:f6:29:af:
aa:73:25:1e:86:e9:58:09:e2:fd:ad:fa:4a:14:b2:
9b:00:47:9b:3f:e6:6b:0c:b2:b5:c1:c2:51:2f:1c:
b2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7B:72:65:8A:4B:DA:13:FE:9A:0A:C6:2B:44:E1:3F:06:B3:27:58
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/LntyZYpL2hP-mgrGK0ThPwazJ1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.42.128.0-77.42.247.255
94.187.0.0-94.187.11.255
94.187.16.0-94.187.127.255
178.135.0.0/22
178.135.6.0-178.135.11.255
178.135.16.0-178.135.255.255
IPv6:
2a00:6920:d000::/40
2a00:6920:e000::/39
2a00:6920:f000::/40
Signature Algorithm: sha256WithRSAEncryption
71:aa:a7:97:b9:73:cb:e1:63:39:ed:12:d8:c1:36:32:89:26:
d4:80:8e:82:81:1f:23:52:3e:f4:8a:ff:4e:16:e2:70:fe:57:
eb:c6:25:e8:be:4e:eb:62:92:06:ce:50:96:9b:64:35:10:bf:
b9:c2:87:63:2a:9f:93:ec:62:f5:87:18:9f:4d:57:64:6d:96:
32:e0:fe:05:2b:be:5b:ec:6c:ad:06:f5:94:7d:26:86:93:0f:
54:75:a0:7d:8a:e9:3f:ac:cf:b0:32:a6:37:67:d5:7c:42:25:
a0:f0:c5:7b:93:a7:a3:31:38:44:25:be:3a:74:b0:0c:db:be:
a6:f2:2f:41:1b:19:21:fa:1b:aa:e6:cf:7a:ae:4d:bc:24:4d:
53:cc:44:be:c0:51:ab:cb:05:03:de:2a:fd:17:bc:82:58:3d:
7b:5a:c2:5e:da:9a:ac:c2:9a:e9:27:20:1e:74:d4:da:4a:86:
10:30:e8:5f:38:9e:a8:63:72:a5:32:04:7b:11:25:39:f1:8b:
a6:1b:41:47:c0:b5:c5:a3:d1:53:3c:b9:87:55:bf:d2:e6:ba:
ec:3a:14:6b:7c:ca:4d:be:29:13:d6:bc:65:6a:02:c0:9e:e8:
2d:78:98:f2:f8:46:80:b9:95:3d:d7:3c:62:99:6e:67:23:e3:
9c:a2:71:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:54 2023 by rpki-client on console-fra.rpki-client.org