Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/0mOwTMcWdVFTWm61dy4S6qVHrNw.roa
File: 0mOwTMcWdVFTWm61dy4S6qVHrNw.roa (raw, json)
Hash identifier: ngLDbTtWlXYrErcQBlGbd9UQ2NfH6Ydq1IDvNhCoBcI=
Subject key identifier: D2:63:B0:4C:C7:16:75:51:53:5A:6E:B5:77:2E:12:EA:A5:47:AC:DC
Certificate issuer: /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial: 0181D27B5B79F256196257E57D61648FB33E
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/0mOwTMcWdVFTWm61dy4S6qVHrNw.roa
Signing time: Wed 06 Jul 2022 07:48:28 +0000
ROA not before: Wed 06 Jul 2022 07:48:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199610
IP address blocks: 31.214.192.0/22 maxlen: 22
31.214.196.0/22 maxlen: 22
31.214.202.0/23 maxlen: 23
31.214.204.0/22 maxlen: 22
31.214.208.0/22 maxlen: 22
31.214.216.0/22 maxlen: 24
31.214.220.0/23 maxlen: 23
31.214.224.0/22 maxlen: 22
31.214.227.0/24 maxlen: 24
31.214.232.0/21 maxlen: 24
134.255.208.0/23 maxlen: 23
134.255.212.0/23 maxlen: 23
134.255.214.0/24 maxlen: 24
134.255.240.0/24 maxlen: 24
134.255.251.0/24 maxlen: 24
134.255.198.0/24 maxlen: 24
31.214.134.0/23 maxlen: 23
31.214.136.0/24 maxlen: 24
31.214.142.0/23 maxlen: 23
31.214.148.0/24 maxlen: 24
45.140.128.0/23 maxlen: 23
31.214.158.0/23 maxlen: 23
45.140.130.0/23 maxlen: 32
31.214.160.0/21 maxlen: 24
31.214.160.0/24 maxlen: 24
31.214.130.0/23 maxlen: 23
31.214.128.0/24 maxlen: 24
37.10.96.0/21 maxlen: 24
37.10.104.0/22 maxlen: 32
37.10.115.0/24 maxlen: 24
37.10.118.0/23 maxlen: 24
37.10.124.0/24 maxlen: 24
37.10.125.0/24 maxlen: 24
37.10.120.0/22 maxlen: 32
37.10.126.0/24 maxlen: 24
37.10.127.0/24 maxlen: 24
45.159.4.0/22 maxlen: 32
5.83.160.0/21 maxlen: 24
5.83.160.0/22 maxlen: 22
5.83.164.0/22 maxlen: 22
5.83.172.0/22 maxlen: 23
5.83.168.0/22 maxlen: 22
5.83.174.0/23 maxlen: 24
46.251.230.0/24 maxlen: 24
46.251.230.0/23 maxlen: 23
46.251.231.0/24 maxlen: 24
46.251.228.0/24 maxlen: 24
46.251.229.0/24 maxlen: 24
46.251.232.0/23 maxlen: 23
185.9.104.0/22 maxlen: 22
46.251.234.0/24 maxlen: 24
46.251.238.0/24 maxlen: 24
46.251.235.0/24 maxlen: 24
46.251.236.0/24 maxlen: 24
46.251.240.0/21 maxlen: 24
46.251.248.0/24 maxlen: 24
109.230.243.0/24 maxlen: 24
109.230.248.0/23 maxlen: 23
95.156.220.0/23 maxlen: 23
95.156.224.0/24 maxlen: 24
85.190.152.0/24 maxlen: 24
85.190.148.0/24 maxlen: 24
85.190.150.0/24 maxlen: 24
85.190.151.0/24 maxlen: 24
85.190.149.0/24 maxlen: 24
85.190.158.0/24 maxlen: 24
85.190.153.0/24 maxlen: 24
85.190.154.0/24 maxlen: 24
85.190.155.0/24 maxlen: 24
85.190.157.0/24 maxlen: 24
95.156.238.0/24 maxlen: 24
95.156.239.0/24 maxlen: 24
85.190.156.0/23 maxlen: 23
85.190.159.0/24 maxlen: 24
85.190.156.0/24 maxlen: 24
85.190.160.0/20 maxlen: 24
95.156.250.0/24 maxlen: 24
109.230.197.0/24 maxlen: 24
5.62.96.0/19 maxlen: 24
109.230.208.0/24 maxlen: 24
109.230.211.0/24 maxlen: 24
195.82.158.0/23 maxlen: 23
109.230.214.0/24 maxlen: 24
95.156.193.0/24 maxlen: 24
95.156.194.0/24 maxlen: 24
95.156.198.0/24 maxlen: 24
5.62.126.0/24 maxlen: 24
5.62.127.0/24 maxlen: 24
95.156.210.0/23 maxlen: 24
95.156.209.0/24 maxlen: 24
85.190.128.0/19 maxlen: 24
109.230.240.0/23 maxlen: 23
95.156.213.0/24 maxlen: 24
5.62.64.0/21 maxlen: 24
5.62.67.0/24 maxlen: 24
194.169.211.0/24 maxlen: 24
217.114.192.0/21 maxlen: 24
128.0.112.0/23 maxlen: 23
128.0.114.0/23 maxlen: 24
5.101.160.0/21 maxlen: 24
5.101.166.0/24 maxlen: 24
2a03:4d45::/32 maxlen: 128
2a03:4d44::/32 maxlen: 128
2a03:4d47::/32 maxlen: 128
2a03:4d40::/32 maxlen: 128
2a03:4d43::/32 maxlen: 128
2a03:4d41:300::/40 maxlen: 40
2a03:4d41::/32 maxlen: 128
2a03:4d42::/32 maxlen: 128
2a03:4d41:200::/40 maxlen: 40
2a03:4d41:900::/40 maxlen: 40
2a03:4d41::/40 maxlen: 40
2a03:4d41:100::/40 maxlen: 40
2a03:4d41:500::/40 maxlen: 40
2a03:4d41:700::/40 maxlen: 40
2a03:4d41:400::/40 maxlen: 40
2a03:4d41:600::/40 maxlen: 40
2a03:4d41:400::/44 maxlen: 44
2a03:4d41:500::/44 maxlen: 44
2a03:4d41::/44 maxlen: 44
2a03:4d41:200::/44 maxlen: 44
2a03:4d41:100::/44 maxlen: 44
2a03:4d41:600::/44 maxlen: 44
2a03:4d41:300::/44 maxlen: 44
2a03:4d41:10::/44 maxlen: 44
2a03:4d41:210::/44 maxlen: 44
2a03:4d41:510::/44 maxlen: 44
2a03:4d41:610::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d2:7b:5b:79:f2:56:19:62:57:e5:7d:61:64:8f:b3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Validity
Not Before: Jul 6 07:48:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d263b04cc7167551535a6eb5772e12eaa547acdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d0:a6:23:37:f3:cf:98:3e:fc:89:54:11:93:
15:a8:78:4b:0f:34:94:2d:8d:ec:ce:02:9c:9f:33:
e2:b5:e2:e5:42:80:ef:74:81:b8:de:e1:0b:8c:c6:
d3:03:e5:97:67:56:14:09:13:55:9f:85:ad:91:66:
38:98:36:52:51:0e:9d:82:af:d5:5f:3e:09:85:f2:
c1:b4:74:06:a7:d8:d1:d1:45:43:c9:b3:85:e6:84:
b2:a8:03:93:9b:e2:de:e9:dc:b5:10:09:76:2b:e6:
f6:1e:b7:8e:6b:66:f9:99:ff:66:b2:51:1e:47:9d:
3f:ee:ea:54:79:46:4a:db:ed:c3:cc:63:00:f3:6b:
ab:ed:cc:d9:ec:81:48:d7:95:3b:11:d0:fc:12:98:
db:6a:7c:c2:93:ad:b7:82:8a:5a:d8:cb:78:04:48:
43:70:81:00:35:e6:b9:10:5c:d7:e7:4d:cc:d1:0d:
ad:da:61:f3:56:67:aa:70:d0:f4:20:c7:43:f3:f5:
58:c8:5c:93:4a:86:88:2a:ee:bc:a7:51:69:14:7b:
a1:46:e6:f2:34:c9:7c:9b:b6:a6:ae:13:a8:c8:dd:
0d:3d:de:f4:d2:2b:5e:f9:20:d2:7f:ec:9f:c2:b1:
de:7c:ba:1b:4d:9e:82:63:2d:36:ce:d2:7e:9b:88:
f9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:63:B0:4C:C7:16:75:51:53:5A:6E:B5:77:2E:12:EA:A5:47:AC:DC
X509v3 Authority Key Identifier:
keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/0mOwTMcWdVFTWm61dy4S6qVHrNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.64.0/21
5.62.96.0/19
5.83.160.0/20
5.101.160.0/21
31.214.128.0/24
31.214.130.0/23
31.214.134.0-31.214.136.255
31.214.142.0/23
31.214.148.0/24
31.214.158.0-31.214.167.255
31.214.192.0/21
31.214.202.0-31.214.211.255
31.214.216.0-31.214.221.255
31.214.224.0/22
31.214.232.0/21
37.10.96.0-37.10.107.255
37.10.115.0/24
37.10.118.0-37.10.127.255
45.140.128.0/22
45.159.4.0/22
46.251.228.0-46.251.236.255
46.251.238.0/24
46.251.240.0-46.251.248.255
85.190.128.0-85.190.175.255
95.156.193.0-95.156.194.255
95.156.198.0/24
95.156.209.0-95.156.211.255
95.156.213.0/24
95.156.220.0/23
95.156.224.0/24
95.156.238.0/23
95.156.250.0/24
109.230.197.0/24
109.230.208.0/24
109.230.211.0/24
109.230.214.0/24
109.230.240.0/23
109.230.243.0/24
109.230.248.0/23
128.0.112.0/22
134.255.198.0/24
134.255.208.0/23
134.255.212.0-134.255.214.255
134.255.240.0/24
134.255.251.0/24
185.9.104.0/22
194.169.211.0/24
195.82.158.0/23
217.114.192.0/21
IPv6:
2a03:4d40::-2a03:4d45:ffff:ffff:ffff:ffff:ffff:ffff
2a03:4d47::/32
Signature Algorithm: sha256WithRSAEncryption
32:bc:dc:06:21:d5:09:b2:0d:4b:39:33:88:c1:3a:b2:f4:f4:
1b:aa:4a:df:ee:85:b0:99:4a:b8:7f:4a:3b:5c:e5:0e:78:f4:
65:4f:15:11:aa:ca:37:76:c2:16:5c:6c:f3:ed:f6:e1:dc:69:
ec:73:95:8e:a7:76:91:63:ca:52:39:5e:06:53:b2:a5:78:65:
76:35:d8:db:06:28:29:08:75:a4:21:8e:81:59:52:72:4a:1e:
1c:02:00:cf:95:a3:12:f9:05:81:5d:9c:71:9b:18:b8:b5:48:
05:88:43:8f:87:c0:9c:dc:94:14:d6:35:79:30:93:a7:fa:b0:
f7:68:c3:d8:a5:7f:21:b4:de:23:ce:19:ff:9e:7b:79:4d:22:
bf:db:01:6f:d3:68:b4:62:87:db:7e:64:e8:cb:08:2b:b7:52:
c7:bb:dd:af:eb:08:e3:12:a9:b2:22:40:69:d1:8f:32:50:2f:
b2:8d:14:4c:57:6d:12:c2:9d:53:5e:45:5a:b4:6a:65:2c:d4:
cb:f7:7c:19:bf:6a:d0:45:89:22:42:52:0b:87:dc:4f:6e:06:
67:f9:92:28:87:03:8e:47:90:1e:9b:76:9a:87:3a:80:74:11:
c6:d1:ab:71:29:0f:04:c2:02:50:ce:0e:b8:22:ce:eb:a4:9b:
24:f3:c7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:07 2023 by rpki-client on console-ams.rpki-client.org