Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/aTdjulhIFhg9cFS08RYvRm3YsTs.roa
File: aTdjulhIFhg9cFS08RYvRm3YsTs.roa (raw, json)
Hash identifier: VfzGTt8CqItmASG+y2lf7uDt0PP+VLMB65qVe+m3aKE=
Subject key identifier: 69:37:63:BA:58:48:16:18:3D:70:54:B4:F1:16:2F:46:6D:D8:B1:3B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01849C512E8D098169C26A3938AD68D6DF75
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/aTdjulhIFhg9cFS08RYvRm3YsTs.roa
Signing time: Mon 21 Nov 2022 22:31:16 +0000
ROA not before: Mon 21 Nov 2022 22:31:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52116
IP address blocks: 178.253.207.0/24 maxlen: 24
188.255.130.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
188.255.208.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
188.255.246.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
188.255.248.0/24 maxlen: 24
188.255.252.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
178.253.236.0/24 maxlen: 24
178.253.240.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.55.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.61.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
178.219.11.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
185.47.88.0/24 maxlen: 24
185.47.89.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
77.105.31.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
77.105.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9c:51:2e:8d:09:81:69:c2:6a:39:38:ad:68:d6:df:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Nov 21 22:31:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=693763ba584816183d7054b4f1162f466dd8b13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ed:fb:7a:3f:3e:50:ce:07:38:12:06:58:53:
d7:25:69:1e:8f:01:a6:25:8f:6f:84:4f:5f:bd:65:
7d:93:6d:24:ab:d9:d6:7b:30:16:00:10:55:1c:91:
7f:08:91:85:53:93:58:03:c4:40:a1:33:00:28:07:
51:a1:dc:56:87:56:05:49:5d:0f:1e:f8:4b:8f:e7:
4b:2e:a9:1b:05:8e:65:18:06:f0:7b:6a:89:96:6d:
14:a8:d6:fb:9c:bc:d7:8f:af:1f:04:f4:d8:e6:92:
4e:3c:57:6a:cf:1a:16:58:7b:fa:82:8b:ae:ea:aa:
cf:72:10:00:e1:1d:81:50:a9:b8:6a:12:d8:a2:33:
4a:db:f8:5b:80:b7:09:54:a6:53:cd:7d:bc:38:c1:
c9:a6:3f:8b:27:cf:65:de:73:fa:31:eb:4a:d8:22:
11:ae:e1:cb:a7:6b:0a:93:67:64:1e:d5:e0:77:72:
90:c3:f9:a5:8b:e9:87:de:d7:cc:32:86:ef:d6:b6:
51:17:4f:f5:bc:d0:8a:42:4f:e2:70:08:c3:55:70:
9e:94:cc:cc:82:a5:cc:29:c2:14:ff:5c:b6:68:0a:
b8:0f:c0:cf:04:3a:2d:71:3a:a8:d0:d1:79:f2:9b:
9e:e5:8e:2c:8a:1c:9a:53:90:11:f9:ae:79:aa:7c:
fa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:37:63:BA:58:48:16:18:3D:70:54:B4:F1:16:2F:46:6D:D8:B1:3B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/aTdjulhIFhg9cFS08RYvRm3YsTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.11.0/24
77.105.31.0/24
79.175.103.0/24
79.175.115.0-79.175.116.255
79.175.118.0/24
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0-185.47.90.255
188.255.130.0/24
188.255.190.0/24
188.255.208.0/24
188.255.213.0/24
188.255.219.0/24
188.255.238.0/24
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:84:0d:d7:b2:39:06:b6:6c:65:4c:4f:c3:67:6e:7f:ed:18:
ad:1b:a9:4f:3f:93:73:f9:c0:88:d3:78:57:9e:7f:24:4b:e7:
8c:65:01:e8:cd:58:20:52:ed:d5:66:6e:87:44:3b:8b:e9:13:
77:dd:e9:22:6e:a3:45:14:12:03:35:95:f2:45:f1:ff:dd:ed:
88:6f:86:1f:cc:d7:5e:91:b5:95:2b:03:2a:98:92:90:ac:16:
81:f5:85:52:44:78:3f:d9:2f:2c:1e:66:cb:64:b8:70:69:12:
27:5d:8e:74:6e:fb:85:20:e5:9c:bd:09:87:37:ee:da:a5:96:
8e:56:35:ec:4f:bc:02:87:d9:f5:e6:2c:b0:5d:a5:57:9f:df:
b2:22:f8:69:69:c7:f5:c5:3d:a9:f3:0d:52:65:03:e5:e2:39:
a3:f7:b0:bf:72:bd:ad:13:55:d3:d6:a5:08:7e:8d:09:0e:b4:
4b:e1:48:21:5d:90:61:85:16:ab:e6:fb:07:50:bd:7e:df:fc:
76:bd:24:c7:c7:72:64:db:8d:95:f8:32:95:5e:ad:1e:4c:a5:
27:3e:82:48:47:0f:44:be:ea:98:44:bf:2a:04:9b:1a:cd:77:
5f:c5:48:85:6e:0d:ba:df:ef:2d:52:c8:db:e5:e2:ea:bd:fe:
f6:d9:45:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org