Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/3yLGm6Hfs54QTNjHLk3PyxPvYgY.roa
File: 3yLGm6Hfs54QTNjHLk3PyxPvYgY.roa (raw, json)
Hash identifier: lCCQArMzUStwnAQfl6wlxRkhEStFhXhG3Yoqlz7atrY=
Subject key identifier: DF:22:C6:9B:A1:DF:B3:9E:10:4C:D8:C7:2E:4D:CF:CB:13:EF:62:06
Certificate issuer: /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial: 0181D1AA9DAD5C78D4275D87F5FD175BDAE6
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/3yLGm6Hfs54QTNjHLk3PyxPvYgY.roa
Signing time: Wed 06 Jul 2022 04:00:28 +0000
ROA not before: Wed 06 Jul 2022 04:00:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199610
IP address blocks: 31.214.192.0/22 maxlen: 22
31.214.196.0/22 maxlen: 22
31.214.202.0/23 maxlen: 23
31.214.204.0/22 maxlen: 22
31.214.208.0/22 maxlen: 22
31.214.216.0/22 maxlen: 24
31.214.220.0/23 maxlen: 23
31.214.224.0/22 maxlen: 22
31.214.227.0/24 maxlen: 24
31.214.232.0/21 maxlen: 24
134.255.208.0/23 maxlen: 23
134.255.212.0/23 maxlen: 23
134.255.214.0/24 maxlen: 24
134.255.240.0/24 maxlen: 24
134.255.251.0/24 maxlen: 24
134.255.198.0/24 maxlen: 24
31.214.134.0/23 maxlen: 23
31.214.136.0/24 maxlen: 24
31.214.142.0/23 maxlen: 23
31.214.148.0/24 maxlen: 24
45.140.128.0/23 maxlen: 23
31.214.158.0/23 maxlen: 23
45.140.130.0/23 maxlen: 32
31.214.160.0/21 maxlen: 24
31.214.160.0/24 maxlen: 24
31.214.130.0/23 maxlen: 23
31.214.128.0/24 maxlen: 24
37.10.96.0/21 maxlen: 24
37.10.104.0/22 maxlen: 32
37.10.115.0/24 maxlen: 24
37.10.118.0/23 maxlen: 24
37.10.124.0/24 maxlen: 24
37.10.125.0/24 maxlen: 24
37.10.120.0/22 maxlen: 32
37.10.126.0/24 maxlen: 24
37.10.127.0/24 maxlen: 24
45.159.4.0/22 maxlen: 32
5.83.160.0/21 maxlen: 24
5.83.160.0/22 maxlen: 22
5.83.164.0/22 maxlen: 22
5.83.172.0/22 maxlen: 23
5.83.168.0/22 maxlen: 22
5.83.174.0/23 maxlen: 24
46.251.230.0/23 maxlen: 23
46.251.230.0/24 maxlen: 24
46.251.231.0/24 maxlen: 24
46.251.228.0/24 maxlen: 24
46.251.229.0/24 maxlen: 24
46.251.232.0/23 maxlen: 23
185.9.104.0/22 maxlen: 22
46.251.234.0/24 maxlen: 24
46.251.238.0/24 maxlen: 24
46.251.235.0/24 maxlen: 24
46.251.236.0/24 maxlen: 24
46.251.240.0/21 maxlen: 24
46.251.248.0/24 maxlen: 24
109.230.243.0/24 maxlen: 24
109.230.248.0/23 maxlen: 23
95.156.220.0/23 maxlen: 23
95.156.224.0/24 maxlen: 24
85.190.152.0/24 maxlen: 24
85.190.148.0/24 maxlen: 24
85.190.150.0/24 maxlen: 24
85.190.151.0/24 maxlen: 24
85.190.149.0/24 maxlen: 24
85.190.158.0/24 maxlen: 24
85.190.153.0/24 maxlen: 24
85.190.154.0/24 maxlen: 24
85.190.155.0/24 maxlen: 24
95.156.238.0/24 maxlen: 24
85.190.157.0/24 maxlen: 24
95.156.239.0/24 maxlen: 24
85.190.156.0/23 maxlen: 23
85.190.159.0/24 maxlen: 24
85.190.156.0/24 maxlen: 24
85.190.160.0/20 maxlen: 24
95.156.250.0/24 maxlen: 24
109.230.197.0/24 maxlen: 24
5.62.96.0/19 maxlen: 24
109.230.208.0/24 maxlen: 24
109.230.211.0/24 maxlen: 24
195.82.158.0/23 maxlen: 23
109.230.214.0/24 maxlen: 24
95.156.193.0/24 maxlen: 24
95.156.194.0/24 maxlen: 24
95.156.198.0/24 maxlen: 24
5.62.126.0/24 maxlen: 24
5.62.127.0/24 maxlen: 24
95.156.210.0/23 maxlen: 23
95.156.209.0/24 maxlen: 24
85.190.128.0/19 maxlen: 24
95.156.213.0/24 maxlen: 24
109.230.240.0/23 maxlen: 23
5.62.64.0/21 maxlen: 24
5.62.67.0/24 maxlen: 24
194.169.211.0/24 maxlen: 24
217.114.192.0/21 maxlen: 24
128.0.112.0/23 maxlen: 23
128.0.114.0/23 maxlen: 24
5.101.160.0/21 maxlen: 24
5.101.166.0/24 maxlen: 24
2a03:4d45::/32 maxlen: 128
2a03:4d44::/32 maxlen: 128
2a03:4d47::/32 maxlen: 128
2a03:4d40::/32 maxlen: 128
2a03:4d43::/32 maxlen: 128
2a03:4d41:600::/40 maxlen: 40
2a03:4d41::/32 maxlen: 128
2a03:4d42::/32 maxlen: 128
2a03:4d41:200::/40 maxlen: 40
2a03:4d41:400::/40 maxlen: 40
2a03:4d41:700::/40 maxlen: 40
2a03:4d41:500::/40 maxlen: 40
2a03:4d41:100::/40 maxlen: 40
2a03:4d41::/40 maxlen: 40
2a03:4d41:300::/40 maxlen: 40
2a03:4d41:900::/40 maxlen: 40
2a03:4d41:300::/44 maxlen: 44
2a03:4d41:600::/44 maxlen: 44
2a03:4d41:100::/44 maxlen: 44
2a03:4d41:200::/44 maxlen: 44
2a03:4d41::/44 maxlen: 44
2a03:4d41:400::/44 maxlen: 44
2a03:4d41:500::/44 maxlen: 44
2a03:4d41:610::/44 maxlen: 44
2a03:4d41:510::/44 maxlen: 44
2a03:4d41:210::/44 maxlen: 44
2a03:4d41:10::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d1:aa:9d:ad:5c:78:d4:27:5d:87:f5:fd:17:5b:da:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Validity
Not Before: Jul 6 04:00:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df22c69ba1dfb39e104cd8c72e4dcfcb13ef6206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ef:32:00:bd:e9:e8:91:72:97:43:13:be:2f:
4d:eb:ca:4e:20:e2:39:21:67:5a:99:ec:03:ea:a8:
9a:c0:f4:d8:ba:3e:ef:dd:15:2f:0a:9d:a8:83:a9:
e0:88:a5:c3:b9:d7:54:f4:88:48:16:61:1a:fc:c3:
69:54:e0:f5:71:c5:08:f8:e8:65:72:93:e6:20:9b:
70:42:21:36:e5:b1:37:d0:3a:ae:e2:4c:0c:81:c0:
07:53:6e:d5:99:67:58:b7:f2:e7:72:d8:4d:1e:c9:
22:4a:67:ad:6a:d8:41:77:05:09:da:5f:04:89:f9:
4c:09:d7:c2:1e:83:9d:7b:2f:05:32:d5:dd:4c:80:
b4:06:af:8c:5f:43:9f:df:d9:83:b8:2e:bd:11:e9:
79:4a:2b:65:bd:ae:3d:b7:20:df:fb:cd:01:96:fe:
ca:30:0b:57:ac:3e:ae:fd:4e:ad:fc:56:63:bb:38:
36:e0:10:62:fa:5a:24:e1:61:ca:31:e9:44:95:82:
58:35:0e:da:23:a2:72:83:7c:48:ac:e5:34:3d:3d:
13:35:5d:c1:ad:46:24:60:b0:82:3d:c2:3e:3e:8f:
b3:97:00:4f:c8:81:ff:76:96:f5:dd:e4:42:12:59:
50:1d:2f:fc:8b:d8:6a:0b:77:a8:8e:29:d0:10:24:
44:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:22:C6:9B:A1:DF:B3:9E:10:4C:D8:C7:2E:4D:CF:CB:13:EF:62:06
X509v3 Authority Key Identifier:
keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/3yLGm6Hfs54QTNjHLk3PyxPvYgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.64.0/21
5.62.96.0/19
5.83.160.0/20
5.101.160.0/21
31.214.128.0/24
31.214.130.0/23
31.214.134.0-31.214.136.255
31.214.142.0/23
31.214.148.0/24
31.214.158.0-31.214.167.255
31.214.192.0/21
31.214.202.0-31.214.211.255
31.214.216.0-31.214.221.255
31.214.224.0/22
31.214.232.0/21
37.10.96.0-37.10.107.255
37.10.115.0/24
37.10.118.0-37.10.127.255
45.140.128.0/22
45.159.4.0/22
46.251.228.0-46.251.236.255
46.251.238.0/24
46.251.240.0-46.251.248.255
85.190.128.0-85.190.175.255
95.156.193.0-95.156.194.255
95.156.198.0/24
95.156.209.0-95.156.211.255
95.156.213.0/24
95.156.220.0/23
95.156.224.0/24
95.156.238.0/23
95.156.250.0/24
109.230.197.0/24
109.230.208.0/24
109.230.211.0/24
109.230.214.0/24
109.230.240.0/23
109.230.243.0/24
109.230.248.0/23
128.0.112.0/22
134.255.198.0/24
134.255.208.0/23
134.255.212.0-134.255.214.255
134.255.240.0/24
134.255.251.0/24
185.9.104.0/22
194.169.211.0/24
195.82.158.0/23
217.114.192.0/21
IPv6:
2a03:4d40::-2a03:4d45:ffff:ffff:ffff:ffff:ffff:ffff
2a03:4d47::/32
Signature Algorithm: sha256WithRSAEncryption
9e:c2:e9:d1:db:84:a7:a6:99:d4:62:e9:71:ef:1a:0b:42:af:
92:cc:91:81:30:33:af:fd:23:25:88:a3:d4:15:5e:53:9b:eb:
a7:ec:cb:dc:4d:9d:ae:6c:3d:d0:d7:24:a1:b7:84:ed:65:78:
bc:54:e0:da:8d:b6:8b:76:77:31:de:29:91:22:5d:ea:b9:17:
c1:78:b0:cd:16:9e:47:8a:49:fd:79:b2:fa:44:ac:26:05:1a:
23:87:af:86:1f:0e:4b:09:40:a6:4b:8a:15:65:86:e5:a8:4e:
c9:7c:9f:13:dd:f3:b3:5d:8f:c0:c9:bd:18:a9:e1:ef:df:32:
7f:ab:d9:af:59:da:08:c2:6c:a0:88:e9:ed:38:f0:f8:35:30:
1e:10:4b:3e:67:49:c2:93:fe:e1:a8:00:03:62:a1:87:66:b8:
c6:74:b0:11:91:e7:63:3e:37:63:d8:46:7f:97:af:0c:f4:9c:
7c:f3:a9:f3:b3:64:a9:58:b3:05:52:0f:07:6b:c3:f7:e8:ad:
21:5e:68:47:8d:33:e9:37:e1:a5:2c:e1:5e:e2:55:25:b3:06:
3b:0b:95:9d:ad:ec:96:6c:3d:09:6f:9b:a3:74:8a:b2:92:f3:
71:ea:3f:0a:bd:ee:4e:96:aa:85:03:9a:d0:45:5d:30:ab:04:
d7:6a:cd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:21 2023 by rpki-client on console-fra.rpki-client.org