Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/2_aNLSxSj5LKti8pSIVStgCA9lw.roa
File: 2_aNLSxSj5LKti8pSIVStgCA9lw.roa (raw, json)
Hash identifier: ULME1nmDdUSk+gQrbQwjJGdOtAH0ujwxNq2fETxAeJI=
Subject key identifier: DB:F6:8D:2D:2C:52:8F:92:CA:B6:2F:29:48:85:52:B6:00:80:F6:5C
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018267DFBD3C045CE44D3E92C8096233BD3E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/2_aNLSxSj5LKti8pSIVStgCA9lw.roa
Signing time: Thu 04 Aug 2022 08:01:32 +0000
ROA not before: Thu 04 Aug 2022 08:01:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52116
IP address blocks: 188.255.130.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.208.0/22 maxlen: 24
188.255.216.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.236.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
188.255.239.0/24 maxlen: 24
188.255.246.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.248.0/24 maxlen: 24
188.255.252.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
188.255.190.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
178.253.240.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.55.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.61.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
178.219.11.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
185.47.88.0/24 maxlen: 24
185.47.89.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
77.105.18.0/23 maxlen: 23
77.105.31.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:67:df:bd:3c:04:5c:e4:4d:3e:92:c8:09:62:33:bd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 4 08:01:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbf68d2d2c528f92cab62f29488552b60080f65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:a4:9f:e0:e2:3d:39:46:a9:4b:22:b3:af:
9a:2f:5f:63:75:34:75:b8:7e:8a:88:13:28:a4:f5:
d2:de:ae:44:9b:fa:8d:0b:0f:5e:5c:b3:24:cb:6a:
53:90:c9:ac:50:fe:85:3c:9a:bb:13:fd:5b:91:78:
e6:30:15:2b:9c:7d:b7:87:4d:d4:ba:a3:ca:79:06:
49:45:ea:ea:d8:92:a7:37:2e:12:58:26:15:f2:dd:
1d:dc:1e:05:e6:80:3e:03:40:80:c5:c8:fd:18:88:
9a:c0:ee:7e:64:11:83:be:ad:0a:2c:78:96:f7:a5:
d4:b3:93:8a:2a:a6:cd:3a:23:3a:d5:31:ee:5a:3b:
b3:be:e7:71:3c:fb:d6:de:38:04:1b:2b:ce:cc:34:
78:6f:d6:4b:51:e2:4b:ea:8e:0a:64:a6:b2:dc:77:
94:02:44:3a:c0:d6:b6:5e:fd:c1:b8:ab:68:c3:6a:
b7:df:0b:60:2d:d1:94:c7:00:92:c4:7b:c0:6c:1a:
76:1a:4b:2d:7a:e9:3b:3c:c7:c9:9d:6a:41:04:ce:
ec:11:9e:4c:2a:51:68:ec:c7:22:4c:42:2b:9a:26:
e6:96:85:98:57:c1:7e:2e:eb:aa:d7:cc:a3:fc:4e:
e6:30:db:17:80:a3:4c:3d:a1:db:a7:dd:98:5c:ab:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F6:8D:2D:2C:52:8F:92:CA:B6:2F:29:48:85:52:B6:00:80:F6:5C
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/2_aNLSxSj5LKti8pSIVStgCA9lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.18.0/23
77.105.31.0/24
79.175.103.0/24
79.175.115.0-79.175.116.255
79.175.118.0/24
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0-185.47.90.255
188.255.130.0/24
188.255.190.0/24
188.255.208.0/22
188.255.213.0/24
188.255.216.0/24
188.255.219.0/24
188.255.236.0/24
188.255.238.0/23
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/24
Signature Algorithm: sha256WithRSAEncryption
75:f4:b6:d4:b2:72:6d:5a:db:8f:aa:e8:78:45:69:a8:53:c6:
68:4d:81:29:70:5e:70:64:56:60:94:34:75:7f:c3:53:fa:57:
48:d7:cd:84:5e:0c:0a:89:15:f6:75:f4:e8:6d:56:98:97:e0:
86:05:8a:33:d1:72:e9:56:13:a0:2f:e9:a5:49:37:55:07:55:
5a:70:f7:1b:a6:f3:2e:a2:82:e8:8c:97:27:8a:ff:f2:fd:59:
27:2b:be:64:d5:2e:7b:8d:ca:47:15:35:65:4d:3d:36:c3:84:
a6:5c:ba:e9:99:f1:1f:7c:96:a4:64:27:2c:a7:ea:96:2d:1b:
61:66:67:53:5e:1b:eb:ad:c9:24:95:bb:79:ed:7f:85:ea:e2:
98:8e:65:13:78:47:d0:77:48:e4:8e:7b:7b:8e:ab:50:7f:4a:
ce:d0:66:d7:ac:fb:16:9c:b2:3a:fc:bf:8e:4f:83:a6:84:a1:
ee:70:20:b4:4a:37:3b:04:68:fe:0c:32:82:6b:45:8f:bf:db:
b9:58:dd:79:e1:90:fc:2a:6c:80:94:a1:c5:8c:fc:26:a4:a1:
77:8c:57:5e:74:ec:48:75:ff:5a:1f:36:f3:4e:1b:08:c8:eb:
15:b8:ad:be:4f:c8:8a:42:ce:62:f5:7d:87:93:b7:14:39:90:
2c:8e:6a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-fra.rpki-client.org