Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7qrJEojMfZYQ1AWFvQKazJoXbqg.roa
File: 7qrJEojMfZYQ1AWFvQKazJoXbqg.roa (raw, json)
Hash identifier: a8gsgeycsDRf0VaCd4OnYgFHloELTtxLCxOF0Jb4qkU=
Subject key identifier: EE:AA:C9:12:88:CC:7D:96:10:D4:05:85:BD:02:9A:CC:9A:17:6E:A8
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018258E392D3276ABAD310E371F81D928A54
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7qrJEojMfZYQ1AWFvQKazJoXbqg.roa
Signing time: Mon 01 Aug 2022 10:11:25 +0000
ROA not before: Mon 01 Aug 2022 10:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52116
IP address blocks: 188.255.130.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.208.0/22 maxlen: 24
188.255.214.0/24 maxlen: 24
188.255.216.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.236.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
188.255.239.0/24 maxlen: 24
188.255.246.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.248.0/24 maxlen: 24
188.255.252.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
188.255.190.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
178.253.240.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.55.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.61.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
178.219.11.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
185.47.88.0/24 maxlen: 24
185.47.89.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
77.105.18.0/23 maxlen: 23
77.105.31.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:e3:92:d3:27:6a:ba:d3:10:e3:71:f8:1d:92:8a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 1 10:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eeaac91288cc7d9610d40585bd029acc9a176ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4e:95:93:d8:26:3c:70:c3:8c:bb:62:d8:7b:
c4:3e:c3:e8:c8:3e:6a:45:68:96:83:df:f8:23:91:
f8:e4:5b:de:d4:3e:d5:c8:a7:72:cf:4c:bf:a9:cb:
de:11:19:90:9a:cb:ce:73:1e:0c:8f:62:3e:56:4a:
c5:31:c8:a1:58:91:63:4c:f4:f4:44:7a:c3:7a:0f:
74:f5:b6:91:53:cf:3a:8e:53:e8:7a:93:76:d6:8f:
b7:5b:d6:02:f3:56:e7:94:bf:fc:b0:08:b2:f3:04:
ad:0d:f8:ba:89:8a:a4:f4:30:1e:5a:0a:37:e8:05:
ca:88:bb:2f:aa:e8:3c:df:50:f3:fd:fa:95:9c:ef:
e0:58:41:30:ac:67:6f:25:e9:c4:ba:10:d0:f0:79:
6a:c1:e4:83:9b:df:c6:80:5c:1c:72:e9:7a:02:7e:
c6:ed:4c:9a:14:aa:47:75:0c:87:17:b3:8a:2a:c2:
77:39:16:14:87:f4:82:b7:44:02:e2:f5:b1:25:aa:
a5:8e:43:ba:05:d4:ed:ec:c5:6a:a6:0b:a8:0a:38:
10:30:54:37:b0:b0:19:21:35:58:9f:2f:2c:3f:81:
a7:55:2a:55:b7:85:37:ab:6f:a3:bf:90:9a:b0:d5:
14:8c:ee:8e:9f:8a:d9:47:79:aa:0e:56:d6:3d:21:
f6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AA:C9:12:88:CC:7D:96:10:D4:05:85:BD:02:9A:CC:9A:17:6E:A8
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7qrJEojMfZYQ1AWFvQKazJoXbqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.18.0/23
77.105.31.0/24
79.175.103.0/24
79.175.115.0-79.175.116.255
79.175.118.0/24
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0-185.47.90.255
188.255.130.0/24
188.255.190.0/24
188.255.208.0/22
188.255.213.0-188.255.214.255
188.255.216.0/24
188.255.219.0/24
188.255.236.0/24
188.255.238.0/23
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:98:22:c7:37:d4:41:cd:e4:1b:11:b1:6f:be:54:0d:41:39:
9b:60:73:a7:8e:05:9c:31:0e:d5:ec:32:f2:00:2a:e2:f2:21:
4a:04:be:07:86:f9:29:4e:45:c5:74:4b:b2:4b:14:48:ea:7b:
61:12:8d:f0:ca:85:3b:b4:7d:6f:17:67:93:06:05:67:bd:39:
4c:fa:eb:7f:62:00:99:48:9b:25:dc:f6:b7:e8:36:1f:5f:91:
37:30:6c:80:e8:d9:67:b1:06:b0:f4:69:e2:3b:2a:25:69:cf:
9e:04:88:b2:30:3c:05:7e:d7:3f:d3:7f:b6:c9:10:72:ba:d4:
32:bc:66:af:b1:80:d0:c3:9f:97:80:c2:8d:9f:7b:af:a1:14:
53:50:13:a8:d3:28:c9:ad:1e:58:41:60:c6:2e:36:49:39:7d:
10:f5:38:39:b8:6e:d6:5f:ed:dd:a6:07:fe:57:5e:2e:f6:f6:
c8:c0:4e:5f:b7:ea:2c:7b:67:20:1e:2e:a2:da:b6:8c:70:d7:
73:18:b4:23:e2:fc:c9:a7:b3:f4:fb:6b:5f:07:df:45:04:18:
26:21:56:a6:b2:3e:42:f3:9a:1d:b0:ce:a1:17:c3:7d:96:c2:
46:48:83:ea:d3:98:81:8a:ab:ae:33:f1:3d:7b:8e:ca:b8:86:
c3:fb:7f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-fra.rpki-client.org