Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/cH_3T0eGsv6z8_IDZ8g6hF4sa_0.roa
File: cH_3T0eGsv6z8_IDZ8g6hF4sa_0.roa (raw, json)
Hash identifier: ABzo+6Z37qMakXxTdgj1OdtvujX5vISpnjJ9UE+UFYE=
Subject key identifier: 70:7F:F7:4F:47:86:B2:FE:B3:F3:F2:03:67:C8:3A:84:5E:2C:6B:FD
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 088F0CBD
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/cH_3T0eGsv6z8_IDZ8g6hF4sa_0.roa
Signing time: Sat 26 Mar 2022 09:58:17 +0000
ROA not before: Sat 26 Mar 2022 09:58:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28964
IP address blocks: 188.255.206.0/23 maxlen: 23
188.255.200.0/24 maxlen: 24
188.255.205.0/24 maxlen: 24
188.255.217.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.230.0/23 maxlen: 23
109.121.48.0/24 maxlen: 24
109.121.49.0/24 maxlen: 24
109.121.53.0/24 maxlen: 24
109.121.55.0/24 maxlen: 24
188.255.253.0/24 maxlen: 24
188.255.179.0/24 maxlen: 24
188.255.192.0/23 maxlen: 23
188.255.190.0/24 maxlen: 24
188.255.196.0/22 maxlen: 22
188.255.195.0/24 maxlen: 24
212.69.21.0/24 maxlen: 24
212.69.19.0/24 maxlen: 24
212.69.30.0/24 maxlen: 24
178.253.193.0/24 maxlen: 24
178.253.212.0/24 maxlen: 24
178.253.218.0/24 maxlen: 24
178.253.215.0/24 maxlen: 24
178.253.216.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.220.0/23 maxlen: 23
93.186.65.0/24 maxlen: 24
93.186.77.0/24 maxlen: 24
212.69.3.0/24 maxlen: 24
212.69.4.0/24 maxlen: 24
212.69.0.0/23 maxlen: 24
212.69.5.0/24 maxlen: 24
178.253.238.0/24 maxlen: 24
178.253.235.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
109.233.190.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.244.0/24 maxlen: 24
178.253.245.0/24 maxlen: 24
81.18.51.0/24 maxlen: 24
81.18.58.0/24 maxlen: 24
81.18.56.0/24 maxlen: 24
81.18.57.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
79.175.120.0/24 maxlen: 24
178.219.2.0/24 maxlen: 24
178.219.4.0/22 maxlen: 22
178.219.15.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
185.47.91.0/24 maxlen: 24
77.105.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143592637 (0x88f0cbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 26 09:58:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=707ff74f4786b2feb3f3f20367c83a845e2c6bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:a2:b7:b0:d3:6c:35:11:3a:1f:c3:5e:6c:
9a:43:2e:f1:41:79:1d:9f:98:b5:d3:66:0a:78:76:
ff:64:c6:a3:ea:35:21:04:1c:38:14:70:85:10:a4:
64:af:ce:aa:da:3c:67:da:88:69:2f:9a:37:bb:36:
ee:4c:95:06:e6:d2:ca:62:57:29:c8:2e:0a:e2:28:
c4:85:1d:a4:bc:3b:1c:ef:6b:e3:03:ef:30:15:82:
f2:10:5c:58:44:65:77:a4:a8:20:e5:6f:8a:dd:e9:
07:28:a5:e4:44:ea:4a:5c:bb:f5:b9:a1:ab:73:df:
34:47:06:6f:6d:03:52:c3:be:34:cd:70:f7:0e:77:
11:85:c0:2d:8f:4e:f3:99:6a:4b:b2:ce:28:fa:ab:
4c:ae:1d:bd:28:f7:33:1a:f9:6b:53:1d:69:81:3c:
0a:47:b7:46:b4:d3:db:c2:38:78:3e:46:35:d3:c1:
23:ea:2e:de:80:77:15:ff:47:47:2d:41:c9:58:61:
ad:c4:2d:42:99:24:c4:f3:aa:6a:4a:d5:25:66:1a:
96:79:0e:03:17:22:cb:4a:7a:9e:c2:fe:53:e1:e1:
37:92:7a:24:b4:53:1b:e6:c3:7c:0a:3e:4d:45:f5:
0d:a0:c5:f1:29:4e:81:71:5c:ed:f5:e5:e1:f9:bf:
f3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7F:F7:4F:47:86:B2:FE:B3:F3:F2:03:67:C8:3A:84:5E:2C:6B:FD
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/cH_3T0eGsv6z8_IDZ8g6hF4sa_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.22.0/24
79.175.120.0/24
81.18.51.0/24
81.18.56.0-81.18.58.255
81.18.63.0/24
93.186.65.0/24
93.186.77.0/24
109.121.48.0/23
109.121.53.0/24
109.121.55.0/24
109.233.188.0/24
109.233.190.0/24
178.219.2.0/24
178.219.4.0/22
178.219.12.0/23
178.219.15.0/24
178.253.193.0/24
178.253.212.0/24
178.253.215.0-178.253.218.255
178.253.220.0/23
178.253.235.0/24
178.253.238.0/24
178.253.244.0-178.253.246.255
185.47.91.0/24
188.255.179.0/24
188.255.190.0/24
188.255.192.0/23
188.255.195.0-188.255.200.255
188.255.205.0-188.255.207.255
188.255.217.0/24
188.255.228.0/24
188.255.230.0/23
188.255.253.0/24
212.69.0.0/23
212.69.3.0-212.69.5.255
212.69.19.0/24
212.69.21.0/24
212.69.30.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e5:d4:8c:52:fa:62:ea:3c:3d:6e:a8:62:96:e2:4e:73:6a:
fe:43:be:d3:ea:b7:f5:ab:90:7f:2c:ad:e5:aa:5a:8c:93:34:
ef:f4:1a:57:7f:42:b5:22:27:4e:3e:ad:49:bf:4b:7f:13:15:
ca:93:8c:7f:2c:6b:b7:70:d8:9e:b6:c5:65:74:22:39:a5:b8:
d1:f4:e8:02:1a:36:b2:95:d7:cd:d1:0a:76:6e:d3:7f:cf:3a:
93:e8:1e:fb:08:71:eb:9e:d4:c1:87:a8:1c:5c:d4:d3:33:df:
5a:dd:0d:73:ce:e7:b8:e5:9f:05:73:c8:1e:e3:8c:ba:99:e8:
d5:79:fb:8a:8e:08:ba:45:32:a8:ff:1e:eb:a8:89:4c:3f:f4:
80:70:cc:2f:9e:72:2c:6d:7a:12:fd:b2:9d:2e:69:49:0d:0d:
6a:55:e2:1d:13:33:4c:84:4d:0c:96:67:32:21:54:c2:e2:ec:
6c:a2:fd:ea:b3:b1:17:92:83:a7:f0:70:14:8a:c1:3e:1c:15:
d0:4f:dd:7c:a8:93:fc:b1:24:28:54:e5:f8:ee:3d:9f:06:a2:
ba:31:13:a4:6f:c5:d1:56:dd:c3:f6:03:d8:2c:ce:64:0f:e1:
44:ef:01:ba:c5:03:8c:a9:b8:fc:3b:01:4d:b5:0f:c2:b1:27:
d2:8c:af:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org