Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/LTEQeLJiyjjeZeyWATn3r_tA4jU.roa
File: LTEQeLJiyjjeZeyWATn3r_tA4jU.roa (raw, json)
Hash identifier: 9ShMklzHtRvG64U3YX+J8eF51nE/qasD2phZ3i0OyVU=
Subject key identifier: 2D:31:10:78:B2:62:CA:38:DE:65:EC:96:01:39:F7:AF:FB:40:E2:35
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0886AC8D
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/LTEQeLJiyjjeZeyWATn3r_tA4jU.roa
Signing time: Fri 25 Mar 2022 08:40:59 +0000
ROA not before: Fri 25 Mar 2022 08:40:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28964
IP address blocks: 188.255.206.0/23 maxlen: 23
188.255.200.0/24 maxlen: 24
188.255.205.0/24 maxlen: 24
188.255.217.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.230.0/23 maxlen: 23
109.121.48.0/24 maxlen: 24
109.121.49.0/24 maxlen: 24
109.121.53.0/24 maxlen: 24
109.121.55.0/24 maxlen: 24
188.255.253.0/24 maxlen: 24
188.255.179.0/24 maxlen: 24
188.255.192.0/23 maxlen: 23
188.255.190.0/24 maxlen: 24
188.255.196.0/22 maxlen: 22
188.255.195.0/24 maxlen: 24
212.69.21.0/24 maxlen: 24
212.69.19.0/24 maxlen: 24
212.69.30.0/24 maxlen: 24
178.253.193.0/24 maxlen: 24
178.253.212.0/24 maxlen: 24
178.253.218.0/24 maxlen: 24
178.253.215.0/24 maxlen: 24
178.253.216.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.220.0/23 maxlen: 23
93.186.65.0/24 maxlen: 24
93.186.77.0/24 maxlen: 24
212.69.3.0/24 maxlen: 24
212.69.4.0/24 maxlen: 24
212.69.0.0/23 maxlen: 24
212.69.5.0/24 maxlen: 24
178.253.238.0/24 maxlen: 24
178.253.235.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
109.233.190.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.244.0/24 maxlen: 24
178.253.245.0/24 maxlen: 24
81.18.51.0/24 maxlen: 24
81.18.58.0/24 maxlen: 24
81.18.56.0/24 maxlen: 24
81.18.57.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
79.175.120.0/24 maxlen: 24
178.219.2.0/24 maxlen: 24
178.219.4.0/22 maxlen: 22
178.219.15.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
185.47.91.0/24 maxlen: 24
77.105.16.0/24 maxlen: 24
77.105.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143043725 (0x886ac8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 25 08:40:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d311078b262ca38de65ec960139f7affb40e235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b4:82:b6:d3:3a:53:15:5d:8f:1e:96:24:10:
f7:b0:19:d8:25:b7:cd:95:c6:20:e3:8b:27:dc:17:
44:10:fa:bd:8c:27:d7:6b:5b:1d:2e:b8:14:de:be:
13:5a:55:13:a4:c2:a3:e3:28:37:36:12:d4:60:97:
04:04:5e:ef:dc:c3:8a:8c:f7:99:4e:44:26:27:d2:
b5:86:2c:5f:df:9b:a5:db:ee:02:0f:82:76:93:52:
7a:d0:0a:49:46:62:76:44:ec:32:87:12:e2:f9:b0:
c2:ef:83:c0:03:a1:36:1a:9f:a0:0a:24:1e:57:82:
0f:46:0f:4d:5f:98:d9:b9:41:02:df:d6:85:83:33:
83:04:24:7a:51:18:3b:64:27:42:a7:b0:9b:4c:9f:
67:71:0d:f8:87:24:e6:8f:0e:77:47:35:68:fd:8f:
02:18:84:4e:7b:4a:cb:8a:d5:86:5b:5a:67:19:dd:
42:79:f3:b5:99:c9:07:35:08:1e:cd:33:18:13:8f:
f4:e8:ed:72:65:96:c6:d4:c4:b3:38:5a:26:46:b1:
e2:56:72:85:ba:2b:d2:6e:ae:52:13:85:2e:dd:f7:
9b:1b:c4:71:2c:6a:37:2b:c7:7c:89:8b:99:57:c4:
c9:53:6e:01:4e:75:bd:98:ed:bf:c2:c1:13:ee:91:
87:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:31:10:78:B2:62:CA:38:DE:65:EC:96:01:39:F7:AF:FB:40:E2:35
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/LTEQeLJiyjjeZeyWATn3r_tA4jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.16.0/24
77.105.22.0/24
79.175.120.0/24
81.18.51.0/24
81.18.56.0-81.18.58.255
81.18.63.0/24
93.186.65.0/24
93.186.77.0/24
109.121.48.0/23
109.121.53.0/24
109.121.55.0/24
109.233.188.0/24
109.233.190.0/24
178.219.2.0/24
178.219.4.0/22
178.219.12.0/23
178.219.15.0/24
178.253.193.0/24
178.253.212.0/24
178.253.215.0-178.253.218.255
178.253.220.0/23
178.253.235.0/24
178.253.238.0/24
178.253.244.0-178.253.246.255
185.47.91.0/24
188.255.179.0/24
188.255.190.0/24
188.255.192.0/23
188.255.195.0-188.255.200.255
188.255.205.0-188.255.207.255
188.255.217.0/24
188.255.228.0/24
188.255.230.0/23
188.255.253.0/24
212.69.0.0/23
212.69.3.0-212.69.5.255
212.69.19.0/24
212.69.21.0/24
212.69.30.0/24
Signature Algorithm: sha256WithRSAEncryption
68:74:ca:83:d9:8a:cd:d1:0d:fc:90:87:3a:48:17:11:d3:1e:
1d:3c:6c:58:f5:09:52:36:5d:a3:e9:b2:86:36:4d:ff:15:31:
6a:40:98:d1:10:e2:b9:15:70:bd:2e:5d:9d:70:d8:b7:e2:7d:
71:46:58:67:01:4b:c4:99:16:2c:b2:85:f8:36:a6:18:b2:df:
76:17:6b:f1:89:73:b9:66:c5:ee:52:c5:01:54:99:f7:d0:29:
0e:bc:06:3b:9c:b9:8e:1f:05:fd:39:60:f4:f8:b7:99:9f:41:
4d:ac:3b:91:26:1e:fa:cf:d5:d8:1d:47:05:81:0d:f3:32:ef:
43:07:2c:13:53:27:a1:37:fc:68:32:9e:ef:7c:5f:01:78:c7:
1a:61:9f:f8:fe:45:eb:ca:11:0a:b1:64:bb:28:37:66:de:6c:
c3:55:5a:5d:df:aa:97:a8:c7:0a:ae:18:e3:dd:35:0e:34:51:
01:99:fd:85:76:33:15:a8:e0:ba:3a:40:c6:4c:49:92:25:33:
62:1d:5d:08:67:9f:72:3c:fa:06:b2:d3:eb:2a:1f:03:8c:09:
4c:39:be:20:76:0e:0b:45:42:49:42:e4:49:83:ec:40:41:8a:
6b:f2:dc:6b:17:67:67:1d:87:54:56:37:09:30:b0:c1:6b:f0:
a7:be:32:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org