Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-RTnBgsfNE5yWLX0q4t8-pAzAGQ.roa
File: 1-RTnBgsfNE5yWLX0q4t8-pAzAGQ.roa (raw, json)
Hash identifier: Fe6J7AWm85GnbMr4HDfN/yo5wcELV/wDboSpwVcCRu4=
Subject key identifier: F9:14:E7:06:0B:1F:34:4E:72:58:B5:F4:AB:8B:7C:FA:90:33:00:64
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 089F4915
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-RTnBgsfNE5yWLX0q4t8-pAzAGQ.roa
Signing time: Wed 30 Mar 2022 08:26:00 +0000
ROA not before: Wed 30 Mar 2022 08:26:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52116
IP address blocks: 188.255.130.0/24 maxlen: 24
188.255.208.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.208.0/21 maxlen: 21
188.255.214.0/24 maxlen: 24
188.255.216.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.236.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
188.255.239.0/24 maxlen: 24
188.255.246.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.248.0/24 maxlen: 24
188.255.252.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
188.255.190.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
109.233.184.0/23 maxlen: 23
178.253.240.0/24 maxlen: 24
109.233.189.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.55.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.61.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.117.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
178.219.11.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
185.47.88.0/24 maxlen: 24
185.47.89.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
77.105.18.0/23 maxlen: 23
77.105.31.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144656661 (0x89f4915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 30 08:26:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f914e7060b1f344e7258b5f4ab8b7cfa90330064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:70:76:7e:46:99:5b:28:b1:dd:3f:3c:42:
b2:2e:8c:7c:67:6d:1e:5f:6a:f7:08:b8:86:7f:81:
ef:21:b1:72:78:a0:2b:ba:a2:50:8b:99:f3:1c:55:
98:e3:4e:13:92:4b:3c:39:cc:77:0c:d1:d1:aa:5e:
19:e7:ce:47:ed:3d:14:a6:5a:ff:4b:18:fd:d7:08:
6e:a8:db:56:4f:51:05:28:b6:5b:f4:cc:7b:d9:e1:
b0:de:a9:fa:4a:ca:b6:0a:8a:d3:9c:1d:0a:7a:9c:
a8:1e:90:49:82:05:2a:1a:0b:62:62:00:f2:5c:48:
7b:84:7e:f8:7c:df:9a:d2:5f:bf:46:cb:21:b2:17:
32:32:4d:4d:7d:7f:68:73:4b:a9:11:12:c5:98:83:
58:27:3f:53:20:5d:84:e3:96:4e:6f:b7:2a:2b:fc:
d9:51:2d:a6:de:02:aa:89:3a:0e:a2:77:f8:19:d7:
99:87:84:8b:7b:6a:30:a7:f3:56:90:39:25:82:1b:
13:b0:2a:81:d5:11:81:f3:bd:7e:81:a3:10:1d:20:
11:5a:46:f8:ac:3f:14:d0:f6:d8:74:dc:b9:ea:24:
b1:a5:a5:f7:80:ca:df:b0:4c:5c:3a:7b:ec:7f:b8:
6c:ba:16:96:41:9c:33:f3:27:a9:87:e8:e0:23:bb:
3a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:14:E7:06:0B:1F:34:4E:72:58:B5:F4:AB:8B:7C:FA:90:33:00:64
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-RTnBgsfNE5yWLX0q4t8-pAzAGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.18.0/23
77.105.31.0/24
79.175.103.0/24
79.175.115.0-79.175.118.255
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
109.233.184.0/23
109.233.189.0/24
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0-185.47.90.255
188.215.228.0/24
188.255.130.0/24
188.255.190.0/24
188.255.208.0-188.255.216.255
188.255.219.0/24
188.255.236.0/24
188.255.238.0/23
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/23
Signature Algorithm: sha256WithRSAEncryption
04:27:cd:a7:84:c2:97:4d:72:dc:5c:03:6a:ca:e9:d9:37:44:
90:8c:a0:35:34:d2:72:19:32:84:04:f1:fc:80:cb:2d:89:8c:
87:27:3f:26:14:2e:ac:bb:a0:ea:f1:1b:5e:73:7d:35:a4:e5:
61:cb:97:78:8c:b0:3e:ed:f2:67:07:cd:a4:a7:02:6c:d6:b3:
5c:31:8d:e9:ee:bb:7d:1d:5b:cb:c6:bb:17:5b:90:38:48:84:
ce:d1:27:1d:5f:5b:c6:61:da:8f:2f:cb:bf:73:38:0b:6b:41:
85:e7:52:0e:d6:19:12:19:3c:7a:bf:2d:2b:60:25:78:57:52:
f9:4e:b4:92:55:bd:fc:8c:7e:c7:ef:97:2d:ed:65:2f:4b:f6:
99:ef:69:f1:35:fa:7c:22:b5:7b:01:d0:9b:21:59:d0:20:62:
41:a7:e4:d9:e5:ba:cb:98:29:93:3b:b7:dc:e1:82:c0:40:49:
07:2d:29:fc:1e:14:45:24:0e:98:40:f4:2f:0b:1e:d3:b3:ef:
eb:82:a3:fc:c9:f7:5b:48:d7:10:01:b6:03:b6:f4:73:21:68:
ff:66:ae:49:6a:06:5d:6b:c1:6f:66:01:5d:d9:2e:6b:a9:fc:
21:90:66:b9:a5:c9:f1:ce:f3:a3:52:f4:ff:4a:73:ea:0b:18:
1f:d5:b8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-fra.rpki-client.org