Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/gCfDNBKlFs5xTvMC-q661QCKM0I.roa
File: gCfDNBKlFs5xTvMC-q661QCKM0I.roa (raw, json)
Hash identifier: DQ7u1I0Y8pkdfynZcA6s9oVsKXz7+tE7bt7MToEyVGw=
Subject key identifier: 80:27:C3:34:12:A5:16:CE:71:4E:F3:02:FA:AE:BA:D5:00:8A:33:42
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 087B0D0D
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/gCfDNBKlFs5xTvMC-q661QCKM0I.roa
Signing time: Wed 23 Mar 2022 17:56:29 +0000
ROA not before: Wed 23 Mar 2022 17:56:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28964
IP address blocks: 188.255.135.0/24 maxlen: 24
188.255.206.0/23 maxlen: 23
188.255.200.0/24 maxlen: 24
188.255.205.0/24 maxlen: 24
188.255.217.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.230.0/23 maxlen: 23
109.121.48.0/24 maxlen: 24
109.121.49.0/24 maxlen: 24
109.121.53.0/24 maxlen: 24
109.121.55.0/24 maxlen: 24
188.255.253.0/24 maxlen: 24
188.255.179.0/24 maxlen: 24
188.255.192.0/23 maxlen: 23
188.255.190.0/24 maxlen: 24
188.255.196.0/22 maxlen: 22
188.255.195.0/24 maxlen: 24
212.69.21.0/24 maxlen: 24
212.69.19.0/24 maxlen: 24
212.69.30.0/24 maxlen: 24
178.253.193.0/24 maxlen: 24
178.253.212.0/24 maxlen: 24
178.253.218.0/24 maxlen: 24
178.253.215.0/24 maxlen: 24
178.253.216.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.220.0/23 maxlen: 23
93.186.65.0/24 maxlen: 24
93.186.77.0/24 maxlen: 24
212.69.3.0/24 maxlen: 24
212.69.4.0/24 maxlen: 24
212.69.0.0/23 maxlen: 24
212.69.5.0/24 maxlen: 24
212.69.10.0/23 maxlen: 23
178.253.238.0/24 maxlen: 24
178.253.235.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
109.233.190.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.244.0/24 maxlen: 24
178.253.245.0/24 maxlen: 24
81.18.51.0/24 maxlen: 24
81.18.58.0/24 maxlen: 24
81.18.56.0/24 maxlen: 24
81.18.57.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
79.175.120.0/24 maxlen: 24
178.219.2.0/24 maxlen: 24
178.219.4.0/22 maxlen: 22
178.219.15.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
185.47.91.0/24 maxlen: 24
77.105.16.0/24 maxlen: 24
77.105.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142281997 (0x87b0d0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 23 17:56:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8027c33412a516ce714ef302faaebad5008a3342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:30:97:29:56:cc:ca:79:40:ac:1a:b8:8c:
a9:3b:eb:f9:59:67:a3:3b:a6:28:c5:7d:fd:97:01:
ac:e8:c9:d6:6d:d9:7d:16:a1:e1:2e:70:d1:e0:bf:
8f:74:56:3a:aa:fe:b9:c8:6e:ab:3e:95:15:1e:db:
65:a4:81:2f:75:02:b3:41:b2:ae:2f:f1:f3:f9:a0:
49:e9:44:28:68:0d:cf:b4:79:2b:1c:fa:91:71:ba:
a6:1a:ad:ee:e1:16:ba:d8:3f:46:ad:a6:8a:a4:25:
e4:20:00:71:45:2e:ce:34:8c:70:50:61:e4:46:1d:
ff:8b:4d:9b:1f:15:71:56:dc:13:eb:41:02:86:15:
97:67:cd:b7:b3:30:cb:0d:df:c2:86:05:3b:f8:5a:
7b:9e:ba:e7:84:37:63:70:61:bf:58:ed:68:4c:fe:
41:87:d6:84:42:e4:4a:4c:11:3b:da:34:54:d8:bc:
de:b5:3f:68:3a:60:2c:91:4f:e1:b6:d4:34:a5:b1:
b8:33:64:f9:a4:2e:c8:07:93:fd:01:6b:b6:09:30:
7c:20:63:7f:94:93:dc:39:1f:60:80:39:90:b4:e1:
f4:34:79:db:d6:4b:84:52:79:ae:d3:5d:1b:ca:24:
b5:9a:23:d3:12:8c:3e:3f:27:de:ca:13:b9:3b:9c:
ba:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:27:C3:34:12:A5:16:CE:71:4E:F3:02:FA:AE:BA:D5:00:8A:33:42
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/gCfDNBKlFs5xTvMC-q661QCKM0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.16.0/24
77.105.22.0/24
79.175.120.0/24
81.18.51.0/24
81.18.56.0-81.18.58.255
81.18.63.0/24
93.186.65.0/24
93.186.77.0/24
109.121.48.0/23
109.121.53.0/24
109.121.55.0/24
109.233.188.0/24
109.233.190.0/24
178.219.2.0/24
178.219.4.0/22
178.219.12.0/23
178.219.15.0/24
178.253.193.0/24
178.253.212.0/24
178.253.215.0-178.253.218.255
178.253.220.0/23
178.253.235.0/24
178.253.238.0/24
178.253.244.0-178.253.246.255
185.47.91.0/24
188.255.135.0/24
188.255.179.0/24
188.255.190.0/24
188.255.192.0/23
188.255.195.0-188.255.200.255
188.255.205.0-188.255.207.255
188.255.217.0/24
188.255.228.0/24
188.255.230.0/23
188.255.253.0/24
212.69.0.0/23
212.69.3.0-212.69.5.255
212.69.10.0/23
212.69.19.0/24
212.69.21.0/24
212.69.30.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:db:0c:96:88:ec:c0:54:f6:c7:94:39:a8:93:65:cc:a6:ec:
0c:7e:52:bb:42:be:86:45:30:0b:0c:58:c2:f3:03:f4:6f:69:
12:6b:67:d5:76:2f:56:ba:25:29:4a:7f:d6:76:4a:59:f2:74:
da:da:5d:a5:1e:45:4c:f4:8f:3f:dd:1c:49:92:79:a2:35:23:
6c:1b:df:6b:0b:49:d6:07:64:6b:bd:f7:33:f8:8e:5f:8a:10:
eb:bf:20:77:60:5b:1b:91:7f:90:e0:c1:b3:a0:42:e6:42:fc:
d2:a8:69:c4:71:6e:db:b3:2d:89:ad:c4:25:7f:73:d6:a4:a8:
bf:f6:f2:3d:80:bb:bb:50:7d:ae:87:c4:11:5d:ff:9f:15:ce:
11:6e:1a:f1:a7:e0:97:85:92:da:2e:38:d4:f0:22:fc:2f:a2:
23:3c:27:a3:f2:a0:32:da:54:b7:19:22:e2:f3:42:ab:f3:c6:
e8:8c:5d:81:49:29:03:80:fd:65:30:ed:0f:00:ac:51:29:3c:
b2:f3:b5:36:f8:4d:5e:40:91:53:27:de:fd:13:f2:35:c3:af:
64:3c:33:9a:ea:1e:0b:08:12:9f:0a:aa:fd:7c:38:02:e2:fb:
17:33:1a:ad:54:9d:7e:85:0b:6b:c3:ab:4c:f3:57:60:4c:5e:
d8:9e:8f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org