Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/94kikIWhT1qkpva2Bbc-UXCXoUg.roa
File: 94kikIWhT1qkpva2Bbc-UXCXoUg.roa (raw, json)
Hash identifier: YVbmuogSJ+WUk90FtwhDwg6tuw/gdp8fbUdkltlFQC0=
Subject key identifier: F7:89:22:90:85:A1:4F:5A:A4:A6:F6:B6:05:B7:3E:51:70:97:A1:48
Certificate issuer: /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial: 01833AE3319CC3A8762A2BE62AD669020AAE
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/94kikIWhT1qkpva2Bbc-UXCXoUg.roa
Signing time: Wed 14 Sep 2022 07:25:11 +0000
ROA not before: Wed 14 Sep 2022 07:25:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199610
IP address blocks: 31.214.193.0/24 maxlen: 24
31.214.196.0/22 maxlen: 22
31.214.195.0/24 maxlen: 24
31.214.202.0/23 maxlen: 23
31.214.204.0/22 maxlen: 22
31.214.208.0/22 maxlen: 22
31.214.216.0/24 maxlen: 24
31.214.218.0/24 maxlen: 24
31.214.219.0/24 maxlen: 24
31.214.224.0/22 maxlen: 22
31.214.227.0/24 maxlen: 24
31.214.232.0/21 maxlen: 21
134.255.208.0/23 maxlen: 23
134.255.212.0/23 maxlen: 23
134.255.214.0/24 maxlen: 24
134.255.240.0/24 maxlen: 24
134.255.251.0/24 maxlen: 24
134.255.198.0/24 maxlen: 24
31.214.134.0/23 maxlen: 23
31.214.136.0/24 maxlen: 24
31.214.142.0/23 maxlen: 23
31.214.148.0/24 maxlen: 24
45.140.128.0/23 maxlen: 23
45.140.131.0/24 maxlen: 24
31.214.158.0/23 maxlen: 23
31.214.161.0/24 maxlen: 24
31.214.160.0/24 maxlen: 24
31.214.162.0/23 maxlen: 23
31.214.166.0/24 maxlen: 24
31.214.130.0/23 maxlen: 23
31.214.128.0/24 maxlen: 24
37.10.96.0/21 maxlen: 21
37.10.106.0/24 maxlen: 24
37.10.115.0/24 maxlen: 24
37.10.120.0/22 maxlen: 22
37.10.119.0/24 maxlen: 24
37.10.124.0/22 maxlen: 22
45.159.4.0/23 maxlen: 23
45.159.7.0/24 maxlen: 24
45.159.6.0/24 maxlen: 24
5.83.160.0/22 maxlen: 24
5.83.164.0/24 maxlen: 24
5.83.165.0/24 maxlen: 24
5.83.163.0/24 maxlen: 24
5.83.172.0/23 maxlen: 23
5.83.167.0/24 maxlen: 24
5.83.168.0/22 maxlen: 22
5.83.174.0/23 maxlen: 23
46.251.231.0/24 maxlen: 24
46.251.228.0/24 maxlen: 24
46.251.229.0/24 maxlen: 24
46.251.232.0/23 maxlen: 23
185.9.104.0/22 maxlen: 22
46.251.234.0/24 maxlen: 24
46.251.238.0/24 maxlen: 24
46.251.235.0/24 maxlen: 24
46.251.236.0/24 maxlen: 24
46.251.240.0/21 maxlen: 21
85.190.138.0/23 maxlen: 23
85.190.134.0/23 maxlen: 23
85.190.137.0/24 maxlen: 24
109.230.243.0/24 maxlen: 24
85.190.141.0/24 maxlen: 24
85.190.140.0/24 maxlen: 24
109.230.248.0/23 maxlen: 23
95.156.220.0/23 maxlen: 23
95.156.224.0/24 maxlen: 24
85.190.143.0/24 maxlen: 24
85.190.144.0/24 maxlen: 24
85.190.142.0/24 maxlen: 24
85.190.145.0/24 maxlen: 24
85.190.152.0/24 maxlen: 24
85.190.147.0/24 maxlen: 24
85.190.148.0/24 maxlen: 24
85.190.146.0/24 maxlen: 24
85.190.150.0/24 maxlen: 24
85.190.149.0/24 maxlen: 24
85.190.154.0/24 maxlen: 24
85.190.155.0/24 maxlen: 24
85.190.153.0/24 maxlen: 24
95.156.238.0/24 maxlen: 24
85.190.158.0/24 maxlen: 24
95.156.239.0/24 maxlen: 24
85.190.156.0/23 maxlen: 23
85.190.159.0/24 maxlen: 24
85.190.160.0/22 maxlen: 22
85.190.164.0/22 maxlen: 22
85.190.168.0/22 maxlen: 22
95.156.250.0/24 maxlen: 24
109.230.197.0/24 maxlen: 24
5.62.96.0/20 maxlen: 20
109.230.208.0/24 maxlen: 24
109.230.211.0/24 maxlen: 24
195.82.158.0/23 maxlen: 23
109.230.214.0/24 maxlen: 24
95.156.193.0/24 maxlen: 24
95.156.194.0/24 maxlen: 24
5.62.112.0/21 maxlen: 21
95.156.198.0/24 maxlen: 24
5.62.120.0/22 maxlen: 22
5.62.124.0/23 maxlen: 23
5.62.127.0/24 maxlen: 24
5.62.126.0/24 maxlen: 24
95.156.210.0/24 maxlen: 24
95.156.211.0/24 maxlen: 24
85.190.130.0/23 maxlen: 23
85.190.128.0/23 maxlen: 23
95.156.209.0/24 maxlen: 24
95.156.213.0/24 maxlen: 24
109.230.240.0/23 maxlen: 23
5.62.64.0/21 maxlen: 21
194.169.211.0/24 maxlen: 24
217.114.192.0/21 maxlen: 21
128.0.112.0/23 maxlen: 23
128.0.114.0/23 maxlen: 23
5.101.160.0/21 maxlen: 21
5.101.166.0/24 maxlen: 24
2a03:4d45::/37 maxlen: 37
2a03:4d45:800::/37 maxlen: 37
2a03:4d44:2000::/37 maxlen: 37
2a03:4d40::/32 maxlen: 32
2a03:4d43::/32 maxlen: 32
2a03:4d43::/37 maxlen: 37
2a03:4d43:800::/37 maxlen: 37
2a03:4d43:2000::/37 maxlen: 37
2a03:4d41::/40 maxlen: 40
2a03:4d42::/37 maxlen: 37
2a03:4d42:800::/37 maxlen: 37
2a03:4d41:100::/40 maxlen: 40
2a03:4d41:200::/40 maxlen: 40
2a03:4d41:300::/40 maxlen: 40
2a03:4d41:900::/40 maxlen: 40
2a03:4d41:600::/40 maxlen: 40
2a03:4d41:400::/40 maxlen: 40
2a03:4d41:500::/40 maxlen: 40
2a03:4d42::/32 maxlen: 32
2a03:4d41::/44 maxlen: 44
2a03:4d41:100::/44 maxlen: 44
2a03:4d41:200::/44 maxlen: 44
2a03:4d41:300::/44 maxlen: 44
2a03:4d41:400::/44 maxlen: 44
2a03:4d41:500::/44 maxlen: 44
2a03:4d41:600::/44 maxlen: 44
2a03:4d41:10::/44 maxlen: 44
2a03:4d41:210::/44 maxlen: 44
2a03:4d41:510::/44 maxlen: 44
2a03:4d41:610::/44 maxlen: 44
2a03:4d47::/48 maxlen: 48
2a03:4d47:800::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3a:e3:31:9c:c3:a8:76:2a:2b:e6:2a:d6:69:02:0a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Validity
Not Before: Sep 14 07:25:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f789229085a14f5aa4a6f6b605b73e517097a148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:86:1d:b8:16:95:f5:8b:24:b5:ca:1b:56:df:
de:e9:18:ee:ab:bf:7d:2e:c9:4a:de:8b:02:99:b5:
3f:5f:ee:0a:ac:ba:76:ab:f5:97:04:4f:d8:96:65:
07:f3:e6:47:03:b2:6a:9e:2f:59:b4:10:13:28:8a:
06:66:2e:c2:13:d8:ee:6c:78:7c:2f:40:c5:7f:a3:
33:54:f2:b9:ed:52:6e:18:29:bc:a2:b9:56:f4:c2:
da:9a:9c:ae:bc:72:ab:6d:76:9e:fb:2d:85:43:26:
6c:a3:28:6c:f7:30:66:ef:48:8c:b7:61:ca:08:19:
d5:50:42:6a:7e:8b:1c:78:df:12:26:b4:cf:8e:34:
54:10:b1:f1:dd:eb:00:3a:da:a6:96:10:6f:3d:ae:
ca:fd:da:89:bb:7e:78:fb:64:d1:87:40:9a:f7:ab:
6f:3e:87:cd:2a:c3:ed:38:9d:20:b6:14:70:c3:18:
0b:e2:e4:e8:6a:28:fa:c4:72:c1:f3:7e:01:ef:19:
ad:6e:a8:b3:71:63:a7:82:8c:a0:15:e5:37:5c:55:
2c:a8:c1:3f:48:da:ad:1b:d8:ee:95:55:a7:56:e1:
2f:a9:f2:81:9a:7b:71:48:31:e2:d6:76:43:9d:d9:
2c:45:90:b5:42:e6:f9:35:27:35:f5:d1:b4:a4:50:
1e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:89:22:90:85:A1:4F:5A:A4:A6:F6:B6:05:B7:3E:51:70:97:A1:48
X509v3 Authority Key Identifier:
keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/94kikIWhT1qkpva2Bbc-UXCXoUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.64.0/21
5.62.96.0/19
5.83.160.0-5.83.165.255
5.83.167.0-5.83.175.255
5.101.160.0/21
31.214.128.0/24
31.214.130.0/23
31.214.134.0-31.214.136.255
31.214.142.0/23
31.214.148.0/24
31.214.158.0-31.214.163.255
31.214.166.0/24
31.214.193.0/24
31.214.195.0-31.214.199.255
31.214.202.0-31.214.211.255
31.214.216.0/24
31.214.218.0/23
31.214.224.0/22
31.214.232.0/21
37.10.96.0/21
37.10.106.0/24
37.10.115.0/24
37.10.119.0-37.10.127.255
45.140.128.0/23
45.140.131.0/24
45.159.4.0/22
46.251.228.0/23
46.251.231.0-46.251.236.255
46.251.238.0/24
46.251.240.0/21
85.190.128.0/22
85.190.134.0/23
85.190.137.0-85.190.150.255
85.190.152.0-85.190.171.255
95.156.193.0-95.156.194.255
95.156.198.0/24
95.156.209.0-95.156.211.255
95.156.213.0/24
95.156.220.0/23
95.156.224.0/24
95.156.238.0/23
95.156.250.0/24
109.230.197.0/24
109.230.208.0/24
109.230.211.0/24
109.230.214.0/24
109.230.240.0/23
109.230.243.0/24
109.230.248.0/23
128.0.112.0/22
134.255.198.0/24
134.255.208.0/23
134.255.212.0-134.255.214.255
134.255.240.0/24
134.255.251.0/24
185.9.104.0/22
194.169.211.0/24
195.82.158.0/23
217.114.192.0/21
IPv6:
2a03:4d40::-2a03:4d41:6ff:ffff:ffff:ffff:ffff:ffff
2a03:4d41:900::/40
2a03:4d42::/31
2a03:4d44:2000::/37
2a03:4d45::/36
2a03:4d47::/48
2a03:4d47:800::/48
Signature Algorithm: sha256WithRSAEncryption
89:68:fa:85:75:12:4e:f0:5e:93:78:69:a2:72:68:58:fd:0a:
a2:49:28:de:d7:74:b0:95:bd:b3:8d:ae:10:cc:3a:09:99:91:
f2:fa:cb:2b:70:76:66:b8:30:b3:25:89:8d:28:83:64:62:d7:
b5:07:a7:d5:7b:d8:f6:cf:aa:d0:53:1b:21:d2:98:c0:ea:2e:
74:3f:ee:fd:6d:57:21:ba:9b:a4:ed:8e:6f:b0:a2:52:af:fb:
e4:be:45:78:03:5f:a3:91:a4:2d:b6:f3:11:ed:1f:40:08:0d:
64:89:4a:26:78:24:59:d9:ea:ac:b6:82:f0:4a:3b:f9:e4:93:
8d:57:cd:09:be:d5:e6:94:d8:2a:72:39:34:c0:6d:f9:59:14:
0d:45:37:51:ac:e6:47:00:ee:50:d4:92:17:ab:1c:88:2d:3d:
eb:6f:b0:0c:03:cb:4a:bf:a1:41:59:5c:8b:35:74:4d:83:ef:
2c:12:96:5b:72:f5:e6:b6:67:8b:1c:64:de:18:e4:26:10:b0:
c5:4e:ac:62:ba:5b:13:f9:23:0f:76:ec:2b:b2:c6:72:8e:72:
e5:56:67:cb:8d:9c:86:19:32:08:50:77:c2:05:66:54:d4:f2:
d3:81:37:e2:94:3e:d9:66:b4:e9:1a:41:1a:45:e0:31:cf:21:
b8:1d:e5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:22 2024 by rpki-client on console-ams.rpki-client.org