Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/M4QmGJXFiFrR69kRiqq80dk1jsE.roa
File: M4QmGJXFiFrR69kRiqq80dk1jsE.roa (raw, json)
Hash identifier: ytECHj6Fz4bH/xjWvJnbWDkaXf22SkPaNVg3a/dGwuI=
Subject key identifier: 33:84:26:18:95:C5:88:5A:D1:EB:D9:11:8A:AA:BC:D1:D9:35:8E:C1
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 08BF0C80
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/M4QmGJXFiFrR69kRiqq80dk1jsE.roa
Signing time: Mon 04 Apr 2022 12:47:19 +0000
ROA not before: Mon 04 Apr 2022 12:47:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52116
IP address blocks: 188.255.130.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.208.0/22 maxlen: 24
188.255.216.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.214.0/23 maxlen: 24
188.255.236.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
188.255.239.0/24 maxlen: 24
188.255.246.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.248.0/24 maxlen: 24
188.255.252.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
188.255.190.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
109.233.184.0/23 maxlen: 23
178.253.240.0/24 maxlen: 24
109.233.189.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.55.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.61.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
178.219.11.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
185.47.88.0/24 maxlen: 24
185.47.89.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
77.105.18.0/23 maxlen: 23
77.105.31.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146738304 (0x8bf0c80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 4 12:47:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3384261895c5885ad1ebd9118aaabcd1d9358ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:77:35:b7:7c:61:4e:ce:ab:2c:8b:be:79:eb:
01:5b:54:cd:fe:f5:cf:6e:8a:7a:03:7f:93:3d:2e:
39:6a:b9:10:06:24:6d:1a:ef:f8:ae:7e:ef:bf:e5:
ca:6f:d4:03:11:70:df:44:ee:a8:44:d3:de:47:f0:
5b:29:79:c2:82:4e:f8:1a:36:ef:d6:48:ed:1c:ff:
42:f6:98:dc:99:00:5d:7f:6a:8e:49:b5:1a:be:e9:
94:d9:33:69:ee:a6:4f:49:11:ee:fb:69:cb:a6:39:
22:61:f5:e3:92:9b:5e:d7:fa:eb:37:c2:e9:c5:07:
29:ea:46:d8:f9:86:5b:8c:a2:f9:ae:63:90:f5:f5:
31:c4:e9:ba:2d:d4:19:70:b0:24:66:e6:02:11:e8:
fd:be:29:a2:d1:b1:2b:a9:ae:0a:ec:46:97:74:e8:
84:5c:27:c1:d2:73:50:60:aa:b0:0a:ca:f9:94:ab:
72:fd:db:27:f6:e8:76:22:d7:e8:cb:17:f4:40:c0:
b1:76:b0:75:0c:09:34:d1:28:07:86:c7:51:61:53:
f2:db:08:9b:25:bf:ad:cb:96:5a:2d:fb:6d:81:3f:
02:c0:b9:70:91:c7:ae:3b:8d:3e:09:63:70:49:72:
bf:b0:9d:a5:63:7a:ab:8f:2b:85:41:a1:ac:c5:df:
50:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:84:26:18:95:C5:88:5A:D1:EB:D9:11:8A:AA:BC:D1:D9:35:8E:C1
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/M4QmGJXFiFrR69kRiqq80dk1jsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.18.0/23
77.105.31.0/24
79.175.103.0/24
79.175.115.0-79.175.116.255
79.175.118.0/24
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
109.233.184.0/23
109.233.189.0/24
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0-185.47.90.255
188.215.228.0/24
188.255.130.0/24
188.255.190.0/24
188.255.208.0/22
188.255.213.0-188.255.216.255
188.255.219.0/24
188.255.236.0/24
188.255.238.0/23
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:f9:37:ae:fb:33:88:73:83:cf:a5:5e:96:f9:38:93:fa:e9:
fc:68:04:67:74:98:81:5a:a2:f9:66:19:e6:1b:13:0a:89:69:
9f:1d:c4:03:c4:82:04:e4:de:d5:0f:c5:9e:5c:a0:44:d1:f4:
f1:3b:1a:2a:e7:4e:bc:ee:30:c3:50:ff:79:01:61:11:62:d8:
79:ea:ba:70:19:34:6c:17:2c:bb:9b:85:01:60:b5:27:60:a3:
af:db:5d:6c:56:c0:d0:e6:a8:5a:00:44:f6:61:bd:9b:43:42:
02:3c:4f:a1:70:1e:b4:a3:f6:da:06:60:17:97:19:da:01:83:
53:bc:b5:ec:a0:f1:50:ac:9d:23:27:0e:47:a7:1b:ac:c6:3f:
59:5a:29:3d:7d:33:71:4f:56:26:d2:65:88:12:a9:ab:ba:83:
f4:1f:e2:5d:fa:72:54:ec:a6:14:b0:2b:58:32:0b:29:56:b3:
30:6e:5a:17:24:22:8f:cb:54:79:84:69:38:17:c4:da:db:67:
14:ff:b0:23:1d:ff:6d:e3:b4:b1:5c:b4:8d:fd:55:72:20:36:
cf:7e:f8:29:ee:c2:ff:db:c3:c6:c4:50:ba:24:8d:f8:67:1b:
5c:69:37:d0:a5:09:48:e9:c5:f6:27:e0:75:98:df:e8:87:c5:
8b:23:35:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-fra.rpki-client.org