Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/b_x8bHXuK9UmsasUViQ4r47uwro.roa
File: b_x8bHXuK9UmsasUViQ4r47uwro.roa (raw, json)
Hash identifier: BzfkkPCixWCyjRfGnX4ca6tNAhyxcRsjC5RLXzi4MYk=
Subject key identifier: 6F:FC:7C:6C:75:EE:2B:D5:26:B1:AB:14:56:24:38:AF:8E:EE:C2:BA
Certificate issuer: /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial: 01821A79C13D7F0BC0CF33032B5B26C65A05
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/b_x8bHXuK9UmsasUViQ4r47uwro.roa
Signing time: Wed 20 Jul 2022 07:19:23 +0000
ROA not before: Wed 20 Jul 2022 07:19:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199610
IP address blocks: 31.214.193.0/24 maxlen: 24
31.214.196.0/22 maxlen: 22
31.214.195.0/24 maxlen: 24
31.214.202.0/23 maxlen: 23
31.214.204.0/22 maxlen: 22
31.214.208.0/22 maxlen: 22
31.214.216.0/24 maxlen: 24
31.214.218.0/24 maxlen: 24
31.214.219.0/24 maxlen: 24
31.214.224.0/22 maxlen: 22
31.214.227.0/24 maxlen: 24
31.214.232.0/21 maxlen: 21
134.255.208.0/23 maxlen: 23
134.255.212.0/23 maxlen: 23
134.255.214.0/24 maxlen: 24
134.255.240.0/24 maxlen: 24
134.255.251.0/24 maxlen: 24
134.255.198.0/24 maxlen: 24
31.214.134.0/23 maxlen: 23
31.214.136.0/24 maxlen: 24
31.214.142.0/23 maxlen: 23
31.214.148.0/24 maxlen: 24
45.140.128.0/23 maxlen: 23
45.140.131.0/24 maxlen: 24
31.214.158.0/23 maxlen: 23
31.214.161.0/24 maxlen: 24
31.214.160.0/24 maxlen: 24
31.214.162.0/23 maxlen: 23
31.214.166.0/24 maxlen: 24
31.214.130.0/23 maxlen: 23
31.214.128.0/24 maxlen: 24
37.10.96.0/21 maxlen: 21
37.10.106.0/24 maxlen: 24
37.10.115.0/24 maxlen: 24
37.10.120.0/22 maxlen: 22
37.10.119.0/24 maxlen: 24
37.10.124.0/22 maxlen: 22
45.159.4.0/23 maxlen: 23
45.159.7.0/24 maxlen: 24
45.159.6.0/24 maxlen: 24
5.83.160.0/22 maxlen: 24
5.83.164.0/24 maxlen: 24
5.83.165.0/24 maxlen: 24
5.83.163.0/24 maxlen: 24
5.83.172.0/23 maxlen: 23
5.83.167.0/24 maxlen: 24
5.83.168.0/22 maxlen: 22
5.83.174.0/23 maxlen: 23
46.251.231.0/24 maxlen: 24
46.251.228.0/24 maxlen: 24
46.251.229.0/24 maxlen: 24
46.251.232.0/23 maxlen: 23
185.9.104.0/22 maxlen: 22
46.251.234.0/24 maxlen: 24
46.251.238.0/24 maxlen: 24
46.251.235.0/24 maxlen: 24
46.251.236.0/24 maxlen: 24
46.251.240.0/21 maxlen: 21
85.190.138.0/23 maxlen: 23
85.190.134.0/23 maxlen: 23
85.190.137.0/24 maxlen: 24
109.230.243.0/24 maxlen: 24
109.230.248.0/23 maxlen: 23
85.190.141.0/24 maxlen: 24
95.156.220.0/23 maxlen: 23
95.156.224.0/24 maxlen: 24
85.190.143.0/24 maxlen: 24
85.190.144.0/24 maxlen: 24
85.190.152.0/24 maxlen: 24
85.190.147.0/24 maxlen: 24
85.190.148.0/24 maxlen: 24
85.190.146.0/24 maxlen: 24
85.190.150.0/24 maxlen: 24
85.190.149.0/24 maxlen: 24
85.190.154.0/24 maxlen: 24
85.190.155.0/24 maxlen: 24
85.190.153.0/24 maxlen: 24
95.156.238.0/24 maxlen: 24
85.190.158.0/24 maxlen: 24
95.156.239.0/24 maxlen: 24
85.190.156.0/23 maxlen: 23
85.190.159.0/24 maxlen: 24
85.190.160.0/22 maxlen: 22
85.190.168.0/22 maxlen: 22
95.156.250.0/24 maxlen: 24
109.230.197.0/24 maxlen: 24
5.62.96.0/20 maxlen: 20
109.230.208.0/24 maxlen: 24
109.230.211.0/24 maxlen: 24
195.82.158.0/23 maxlen: 23
109.230.214.0/24 maxlen: 24
95.156.193.0/24 maxlen: 24
95.156.194.0/24 maxlen: 24
5.62.112.0/21 maxlen: 21
95.156.198.0/24 maxlen: 24
5.62.120.0/22 maxlen: 22
5.62.124.0/23 maxlen: 23
5.62.126.0/24 maxlen: 24
5.62.127.0/24 maxlen: 24
95.156.210.0/24 maxlen: 24
95.156.211.0/24 maxlen: 24
85.190.128.0/23 maxlen: 23
95.156.209.0/24 maxlen: 24
109.230.240.0/23 maxlen: 23
95.156.213.0/24 maxlen: 24
5.62.64.0/21 maxlen: 21
194.169.211.0/24 maxlen: 24
217.114.192.0/21 maxlen: 21
128.0.112.0/23 maxlen: 23
128.0.114.0/23 maxlen: 23
5.101.160.0/21 maxlen: 21
5.101.166.0/24 maxlen: 24
2a03:4d45:800::/37 maxlen: 37
2a03:4d45::/37 maxlen: 37
2a03:4d44:2000::/37 maxlen: 37
2a03:4d40::/32 maxlen: 32
2a03:4d43::/32 maxlen: 32
2a03:4d43:2000::/37 maxlen: 37
2a03:4d43:800::/37 maxlen: 37
2a03:4d43::/37 maxlen: 37
2a03:4d41:300::/40 maxlen: 40
2a03:4d42::/37 maxlen: 37
2a03:4d42:800::/37 maxlen: 37
2a03:4d41:600::/40 maxlen: 40
2a03:4d41:900::/40 maxlen: 40
2a03:4d41:500::/40 maxlen: 40
2a03:4d42::/32 maxlen: 32
2a03:4d41::/40 maxlen: 40
2a03:4d41:400::/40 maxlen: 40
2a03:4d41:100::/40 maxlen: 40
2a03:4d41:200::/40 maxlen: 40
2a03:4d41:600::/44 maxlen: 44
2a03:4d41:500::/44 maxlen: 44
2a03:4d41:400::/44 maxlen: 44
2a03:4d41:300::/44 maxlen: 44
2a03:4d41:200::/44 maxlen: 44
2a03:4d41:100::/44 maxlen: 44
2a03:4d41::/44 maxlen: 44
2a03:4d41:610::/44 maxlen: 44
2a03:4d41:510::/44 maxlen: 44
2a03:4d41:210::/44 maxlen: 44
2a03:4d41:10::/44 maxlen: 44
2a03:4d47:800::/48 maxlen: 48
2a03:4d47::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:79:c1:3d:7f:0b:c0:cf:33:03:2b:5b:26:c6:5a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Validity
Not Before: Jul 20 07:19:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ffc7c6c75ee2bd526b1ab14562438af8eeec2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:af:fb:88:54:0e:ca:8a:09:b4:25:4c:0d:5d:
43:9b:b7:eb:ac:b3:98:51:5b:5f:3e:44:83:c9:04:
2e:c2:0c:17:89:cc:63:e0:eb:77:95:6a:ea:95:c0:
ee:e3:a4:b5:80:a7:79:9e:4e:f5:9b:42:71:8d:28:
08:4e:34:44:a9:fa:4b:dc:73:77:ac:cd:4b:dd:d6:
22:87:6c:66:39:1a:cb:5d:65:c4:af:49:f7:70:02:
9c:5c:8a:c6:3b:0e:47:b6:b2:6a:5a:ef:c1:f9:30:
f7:37:63:67:9b:a5:57:d9:4b:97:7e:fa:a9:7b:3b:
39:8c:2d:b5:f3:20:a3:cc:77:26:aa:f2:b2:63:88:
d9:01:e5:54:15:ab:62:dd:28:d2:a4:14:29:38:5b:
26:7a:fe:cd:dc:62:d4:41:e7:5e:4b:cc:b5:2e:fc:
81:4f:0b:ca:74:15:27:b8:ed:b6:17:75:c0:5a:0f:
af:77:40:5b:1d:0a:29:eb:db:2d:4e:e5:46:8f:8b:
18:07:bc:8d:12:d1:a0:cf:4a:74:ee:4f:70:f2:80:
65:22:ff:d3:c2:30:0f:d7:a5:ce:2c:e1:ab:63:92:
0d:59:18:5c:90:2a:cd:52:0b:73:f8:13:0f:6d:9c:
7e:44:8f:13:51:4b:95:b4:6c:14:6b:eb:fe:dd:74:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FC:7C:6C:75:EE:2B:D5:26:B1:AB:14:56:24:38:AF:8E:EE:C2:BA
X509v3 Authority Key Identifier:
keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/b_x8bHXuK9UmsasUViQ4r47uwro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.64.0/21
5.62.96.0/19
5.83.160.0-5.83.165.255
5.83.167.0-5.83.175.255
5.101.160.0/21
31.214.128.0/24
31.214.130.0/23
31.214.134.0-31.214.136.255
31.214.142.0/23
31.214.148.0/24
31.214.158.0-31.214.163.255
31.214.166.0/24
31.214.193.0/24
31.214.195.0-31.214.199.255
31.214.202.0-31.214.211.255
31.214.216.0/24
31.214.218.0/23
31.214.224.0/22
31.214.232.0/21
37.10.96.0/21
37.10.106.0/24
37.10.115.0/24
37.10.119.0-37.10.127.255
45.140.128.0/23
45.140.131.0/24
45.159.4.0/22
46.251.228.0/23
46.251.231.0-46.251.236.255
46.251.238.0/24
46.251.240.0/21
85.190.128.0/23
85.190.134.0/23
85.190.137.0-85.190.139.255
85.190.141.0/24
85.190.143.0-85.190.144.255
85.190.146.0-85.190.150.255
85.190.152.0-85.190.163.255
85.190.168.0/22
95.156.193.0-95.156.194.255
95.156.198.0/24
95.156.209.0-95.156.211.255
95.156.213.0/24
95.156.220.0/23
95.156.224.0/24
95.156.238.0/23
95.156.250.0/24
109.230.197.0/24
109.230.208.0/24
109.230.211.0/24
109.230.214.0/24
109.230.240.0/23
109.230.243.0/24
109.230.248.0/23
128.0.112.0/22
134.255.198.0/24
134.255.208.0/23
134.255.212.0-134.255.214.255
134.255.240.0/24
134.255.251.0/24
185.9.104.0/22
194.169.211.0/24
195.82.158.0/23
217.114.192.0/21
IPv6:
2a03:4d40::-2a03:4d41:6ff:ffff:ffff:ffff:ffff:ffff
2a03:4d41:900::/40
2a03:4d42::/31
2a03:4d44:2000::/37
2a03:4d45::/36
2a03:4d47::/48
2a03:4d47:800::/48
Signature Algorithm: sha256WithRSAEncryption
5c:37:65:0f:d6:63:73:2f:1f:52:b2:48:67:43:d7:0a:8d:56:
0c:74:0a:5f:11:5e:bf:a3:a8:6a:a4:c4:45:bf:36:1e:86:87:
f9:7d:25:4d:9a:45:85:7c:00:6b:ea:bd:ab:5d:d0:7b:6f:d3:
46:ab:07:49:7a:92:3e:1c:e5:56:58:54:09:73:09:25:67:e3:
89:3e:bb:a0:43:7a:a8:c6:eb:72:c5:00:14:dd:85:92:5a:cf:
05:6f:28:46:f3:4e:51:f0:23:be:ae:b6:26:d8:a5:af:e3:dd:
f9:90:c9:2e:47:7a:e1:be:9e:a1:be:53:56:03:e5:cc:4a:b9:
bf:77:6c:62:b7:78:b9:dc:45:84:74:f0:be:ce:c1:31:65:97:
d7:3e:6f:9a:68:22:23:5a:89:b7:c3:6b:d5:bb:a1:dd:94:05:
2b:4d:77:cd:91:6d:1f:b6:03:f2:da:22:a2:6b:03:69:67:9a:
51:f2:b5:af:e0:d0:3e:20:05:9a:5e:ec:a0:d8:fe:55:a7:e1:
ee:31:2a:58:f5:36:4b:6a:7f:bb:cc:db:f7:71:bc:b5:2c:92:
b3:0e:30:67:71:47:9a:99:cf:77:43:e4:7e:e9:3e:80:77:df:
18:0e:46:ee:08:e0:a7:7c:87:47:ae:66:ef:8c:ec:f5:81:50:
59:67:3b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:01 2024 by rpki-client on console-fra.rpki-client.org