Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/MOYgDktVb5HEWZRS-xrs85Q8XQg.roa
File: MOYgDktVb5HEWZRS-xrs85Q8XQg.roa (raw, json)
Hash identifier: h+pDqDjh0d7RTGF4MfZfJA1jtCNBTCt3a/MBDGNtnog=
Subject key identifier: 30:E6:20:0E:4B:55:6F:91:C4:59:94:52:FB:1A:EC:F3:94:3C:5D:08
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 0182582F2DD7A41AA9D7BC551546DED683C7
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/MOYgDktVb5HEWZRS-xrs85Q8XQg.roa
Signing time: Mon 01 Aug 2022 06:54:23 +0000
ROA not before: Mon 01 Aug 2022 06:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204170
IP address blocks: 178.20.17.0/24 maxlen: 24
178.20.16.0/24 maxlen: 24
178.20.16.0/21 maxlen: 21
178.20.18.0/24 maxlen: 24
178.20.19.0/24 maxlen: 24
178.20.22.0/24 maxlen: 24
178.20.23.0/24 maxlen: 24
178.20.20.0/24 maxlen: 24
178.20.21.0/24 maxlen: 24
84.242.37.0/24 maxlen: 24
84.242.35.0/24 maxlen: 24
84.242.36.0/24 maxlen: 24
84.242.33.0/24 maxlen: 24
84.242.32.0/20 maxlen: 20
84.242.34.0/24 maxlen: 24
84.242.32.0/24 maxlen: 24
84.242.38.0/24 maxlen: 24
84.242.44.0/24 maxlen: 24
84.242.42.0/24 maxlen: 24
84.242.43.0/24 maxlen: 24
84.242.40.0/24 maxlen: 24
84.242.41.0/24 maxlen: 24
84.242.39.0/24 maxlen: 24
84.242.47.0/24 maxlen: 24
84.242.45.0/24 maxlen: 24
84.242.46.0/24 maxlen: 24
206.167.33.0/24 maxlen: 24
141.105.172.0/24 maxlen: 24
141.105.171.0/24 maxlen: 24
185.112.104.0/24 maxlen: 24
141.105.169.0/24 maxlen: 24
185.112.104.0/22 maxlen: 22
141.105.170.0/24 maxlen: 24
141.105.168.0/24 maxlen: 24
141.105.168.0/21 maxlen: 21
185.112.105.0/24 maxlen: 24
185.112.107.0/24 maxlen: 24
141.105.174.0/24 maxlen: 24
141.105.175.0/24 maxlen: 24
141.105.173.0/24 maxlen: 24
185.112.106.0/24 maxlen: 24
78.111.40.0/24 maxlen: 24
78.111.39.0/24 maxlen: 24
78.111.43.0/24 maxlen: 24
78.111.44.0/24 maxlen: 24
78.111.41.0/24 maxlen: 24
78.111.42.0/24 maxlen: 24
78.111.47.0/24 maxlen: 24
78.111.45.0/24 maxlen: 24
78.111.46.0/24 maxlen: 24
96.9.131.0/24 maxlen: 24
96.9.132.0/24 maxlen: 24
96.9.129.0/24 maxlen: 24
96.9.130.0/24 maxlen: 24
96.9.128.0/19 maxlen: 19
96.9.128.0/24 maxlen: 24
96.9.136.0/24 maxlen: 24
96.9.137.0/24 maxlen: 24
96.9.134.0/24 maxlen: 24
96.9.135.0/24 maxlen: 24
96.9.133.0/24 maxlen: 24
96.9.138.0/24 maxlen: 24
96.9.139.0/24 maxlen: 24
96.9.143.0/24 maxlen: 24
96.9.144.0/24 maxlen: 24
96.9.141.0/24 maxlen: 24
96.9.142.0/24 maxlen: 24
96.9.140.0/24 maxlen: 24
96.9.145.0/24 maxlen: 24
96.9.150.0/24 maxlen: 24
96.9.151.0/24 maxlen: 24
96.9.148.0/24 maxlen: 24
96.9.149.0/24 maxlen: 24
96.9.147.0/24 maxlen: 24
96.9.146.0/24 maxlen: 24
96.9.152.0/24 maxlen: 24
96.9.157.0/24 maxlen: 24
96.9.158.0/24 maxlen: 24
96.9.155.0/24 maxlen: 24
96.9.156.0/24 maxlen: 24
96.9.154.0/24 maxlen: 24
96.9.153.0/24 maxlen: 24
96.9.159.0/24 maxlen: 24
185.29.141.0/24 maxlen: 24
185.29.140.0/22 maxlen: 22
185.29.142.0/24 maxlen: 24
185.29.140.0/24 maxlen: 24
185.29.143.0/24 maxlen: 24
78.111.32.0/24 maxlen: 24
78.111.33.0/24 maxlen: 24
78.111.34.0/24 maxlen: 24
78.111.32.0/20 maxlen: 20
78.111.38.0/24 maxlen: 24
78.111.36.0/24 maxlen: 24
78.111.37.0/24 maxlen: 24
78.111.35.0/24 maxlen: 24
199.48.224.0/24 maxlen: 24
94.176.17.0/24 maxlen: 24
94.176.16.0/20 maxlen: 20
94.176.16.0/24 maxlen: 24
94.176.20.0/24 maxlen: 24
94.176.21.0/24 maxlen: 24
94.176.18.0/24 maxlen: 24
94.176.19.0/24 maxlen: 24
94.176.24.0/24 maxlen: 24
94.176.22.0/24 maxlen: 24
94.176.23.0/24 maxlen: 24
94.176.27.0/24 maxlen: 24
94.176.28.0/24 maxlen: 24
94.176.25.0/24 maxlen: 24
94.176.26.0/24 maxlen: 24
94.176.31.0/24 maxlen: 24
94.176.29.0/24 maxlen: 24
94.176.30.0/24 maxlen: 24
5.102.179.0/24 maxlen: 24
5.102.176.0/21 maxlen: 21
5.102.178.0/24 maxlen: 24
5.102.176.0/24 maxlen: 24
5.102.177.0/24 maxlen: 24
5.102.181.0/24 maxlen: 24
5.102.182.0/24 maxlen: 24
5.102.180.0/24 maxlen: 24
5.102.183.0/24 maxlen: 24
2a0a:c740:8::/48 maxlen: 48
2a0a:c740:5::/48 maxlen: 48
2a0a:c740:2::/48 maxlen: 48
2a0a:c740:7::/48 maxlen: 48
2a0a:c740:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:2f:2d:d7:a4:1a:a9:d7:bc:55:15:46:de:d6:83:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Aug 1 06:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30e6200e4b556f91c4599452fb1aecf3943c5d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:ab:68:1c:d5:10:5f:3c:99:30:40:36:fc:
88:de:8e:29:50:88:e7:af:b1:a2:ac:af:3f:16:f8:
3f:7c:28:c5:27:2f:c5:9b:8b:b0:14:d5:42:a5:20:
49:43:84:7f:f1:04:9e:dc:f2:6b:93:a0:e5:03:f9:
e2:4e:24:dc:a6:a3:80:54:01:0c:56:ed:16:2b:65:
68:3a:5c:aa:20:5a:48:e8:9d:78:19:48:a1:80:97:
13:fa:b0:57:67:c2:b7:d9:19:00:38:6f:25:14:be:
59:1e:db:e4:ba:18:ba:91:c2:bb:2e:42:ce:31:31:
fe:52:39:f2:28:ff:31:16:b1:18:dc:89:b3:e8:21:
f4:a0:65:a2:9d:69:94:28:44:53:be:88:ec:62:18:
97:08:78:cd:0a:de:24:69:e6:21:d2:a0:37:90:3f:
d3:d1:08:e9:1a:2f:07:67:47:2c:f6:4b:ed:df:e8:
07:79:9d:fe:23:ff:e6:51:b6:94:b2:9d:d5:9f:5a:
bf:9c:99:ae:4d:6d:e5:00:dc:a9:ba:37:66:3c:b3:
73:ce:f8:bc:ef:f8:28:8f:10:ab:b8:17:43:6d:7b:
e7:81:c5:9c:ec:da:22:21:f8:a9:89:73:23:64:1c:
f5:75:11:86:9f:72:e9:e7:57:9a:70:6d:19:15:44:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E6:20:0E:4B:55:6F:91:C4:59:94:52:FB:1A:EC:F3:94:3C:5D:08
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/MOYgDktVb5HEWZRS-xrs85Q8XQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.176.0/21
78.111.32.0/20
84.242.32.0/20
94.176.16.0/20
96.9.128.0/19
141.105.168.0/21
178.20.16.0/21
185.29.140.0/22
185.112.104.0/22
199.48.224.0/24
206.167.33.0/24
IPv6:
2a0a:c740:2::/48
2a0a:c740:4::/47
2a0a:c740:7::-2a0a:c740:8:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
11:0b:7f:12:5e:79:97:88:bb:59:d6:dd:3e:52:8e:56:f6:f0:
aa:c0:48:84:7a:d5:70:cd:23:63:1b:da:e1:f4:c0:32:e5:b9:
65:b8:3a:89:5c:e4:8a:b3:6b:d5:b5:0b:4c:16:3b:d2:cb:25:
d9:58:ed:3d:3e:af:4c:51:d5:62:b8:3b:53:1b:d9:22:9a:38:
68:b5:cf:1e:65:69:87:a4:d8:37:a1:cb:62:93:56:1f:62:8f:
cc:21:42:22:48:e2:1a:ef:ca:09:4f:dc:cc:27:70:72:f6:d7:
b1:35:b4:af:1c:3b:1e:60:05:25:b1:ae:36:b7:30:8c:eb:e6:
8d:1a:81:62:fa:c3:97:c4:49:4d:fc:4a:a8:c6:1c:1c:b4:6e:
e0:91:97:7d:83:60:91:e5:93:ef:8c:7c:4a:fd:81:5d:2d:dd:
87:c6:b2:1a:a8:96:26:98:3e:e4:22:ca:be:3e:c7:93:eb:46:
f6:f1:1f:fc:3e:5a:c1:78:33:3d:35:56:6b:c8:6e:59:9e:07:
3e:5b:42:82:f7:5d:c9:27:1d:a3:dc:a8:c6:aa:54:e5:fb:3e:
3d:0c:0c:f2:34:71:d2:ed:26:57:e0:13:75:99:94:66:dd:5d:
8d:76:63:6c:c6:f4:d4:8a:32:76:ac:15:6b:a5:bf:35:e7:3a:
cd:2f:d7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:53 2024 by rpki-client on console-ams.rpki-client.org