Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/X3il00qH9FE-X9Ab2fbydq8ht8w.roa
File: X3il00qH9FE-X9Ab2fbydq8ht8w.roa (raw, json)
Hash identifier: WAZOe7T/Ygh3T2XVpM4wad4Zn1dSY8UCbYq9/nMQdRM=
Subject key identifier: 5F:78:A5:D3:4A:87:F4:51:3E:5F:D0:1B:D9:F6:F2:76:AF:21:B7:CC
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 08E2A5BA
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/X3il00qH9FE-X9Ab2fbydq8ht8w.roa
Signing time: Mon 11 Apr 2022 16:30:23 +0000
ROA not before: Mon 11 Apr 2022 16:30:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52116
IP address blocks: 188.255.130.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.208.0/22 maxlen: 24
188.255.216.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.214.0/23 maxlen: 24
188.255.236.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
188.255.239.0/24 maxlen: 24
188.255.246.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.248.0/24 maxlen: 24
188.255.252.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
188.255.190.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
178.253.240.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.55.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.61.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
178.219.11.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
185.47.88.0/24 maxlen: 24
185.47.89.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
77.105.18.0/23 maxlen: 23
77.105.31.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149071290 (0x8e2a5ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 11 16:30:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f78a5d34a87f4513e5fd01bd9f6f276af21b7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:ca:fb:c9:27:32:80:17:94:9d:cf:e8:89:
4c:c8:0f:7d:4f:14:4a:36:ac:f9:5d:a7:c0:31:72:
3c:2c:29:f9:8a:56:16:d4:02:96:22:6a:5f:9b:bf:
d6:5d:51:66:a8:06:b3:c3:be:cd:d5:a9:1d:13:8e:
ba:ac:8c:8a:2a:92:2e:7d:09:9f:d7:74:a3:ce:d2:
18:01:09:74:75:99:48:da:7c:f6:c4:77:3c:95:e9:
58:54:7c:02:5a:67:44:96:41:34:60:6b:f1:e8:9f:
2d:57:42:9b:97:ac:5a:78:9a:92:5f:db:9e:b1:3d:
ce:15:49:9c:1a:83:f5:ab:bd:ca:a7:cb:26:aa:1b:
c2:c0:c6:51:c3:3d:d6:be:90:0a:e9:1e:ba:94:e4:
82:3f:f2:f2:28:16:3a:35:6a:7b:50:91:79:37:3d:
a3:8a:92:c6:51:94:1e:1e:80:4c:19:ca:a5:a0:4d:
09:76:36:09:05:5a:6c:f9:c3:b4:31:10:b4:d5:55:
41:99:f0:70:2b:5f:1d:48:c4:62:90:a1:0f:b3:74:
8e:3d:dc:02:7e:46:66:d1:fc:49:50:8a:bc:ca:d3:
18:a1:49:55:bd:49:b7:9f:52:f2:13:a5:2f:40:28:
25:9b:5a:e6:63:07:ef:d4:00:fc:7c:54:75:80:a0:
ef:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:78:A5:D3:4A:87:F4:51:3E:5F:D0:1B:D9:F6:F2:76:AF:21:B7:CC
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/X3il00qH9FE-X9Ab2fbydq8ht8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.18.0/23
77.105.31.0/24
79.175.103.0/24
79.175.115.0-79.175.116.255
79.175.118.0/24
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0-185.47.90.255
188.215.228.0/24
188.255.130.0/24
188.255.190.0/24
188.255.208.0/22
188.255.213.0-188.255.216.255
188.255.219.0/24
188.255.236.0/24
188.255.238.0/23
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:ba:8d:d8:29:80:37:59:f8:64:ce:bc:5e:74:44:36:14:71:
46:43:7b:30:49:c0:a1:1d:dc:d2:fd:be:06:8a:7e:70:c3:a0:
86:9f:28:43:6d:67:f9:01:f1:43:dd:39:22:fa:a9:85:88:80:
03:a5:31:fc:c9:01:5e:87:67:2e:5f:62:8f:39:ab:e3:62:90:
a0:9f:b4:16:b9:79:d2:51:75:fc:7a:d6:92:b1:ee:32:60:f5:
b5:f7:28:91:48:ef:dc:be:30:c7:03:29:98:39:00:a3:9f:52:
92:6f:a7:c7:4d:6f:02:da:98:7a:23:c1:3e:1b:23:a8:57:f7:
2e:e4:de:03:ff:e9:bf:ac:22:e4:c1:19:b0:c9:3b:9c:6f:84:
5a:23:4a:74:28:63:5f:7f:86:99:3e:cf:97:a0:2c:d2:39:c3:
60:e8:4d:de:5f:b2:74:17:2b:af:63:a6:57:8f:cd:b1:fb:fe:
2d:8b:31:1c:28:c1:3f:20:7f:df:dd:46:3b:4b:76:a3:c9:fc:
68:7f:b9:92:e5:73:93:c6:78:5c:04:99:5e:44:8b:2a:fd:cb:
23:ca:e2:5b:09:72:f4:98:7b:19:64:06:42:00:72:eb:f2:14:
69:22:78:48:3d:5e:ba:74:5e:84:28:18:95:de:64:4a:ba:bb:
b2:20:a9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org