Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/gFuzxk5mrJD37fFE2HBvWanNTgU.roa
File: gFuzxk5mrJD37fFE2HBvWanNTgU.roa (raw, json)
Hash identifier: pjQfdoKtIOxcZUrxqzfJQXxX3tG/EcW+pC60PtQ3LpY=
Subject key identifier: 80:5B:B3:C6:4E:66:AC:90:F7:ED:F1:44:D8:70:6F:59:A9:CD:4E:05
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 08B9EA8E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/gFuzxk5mrJD37fFE2HBvWanNTgU.roa
Signing time: Sun 03 Apr 2022 14:23:36 +0000
ROA not before: Sun 03 Apr 2022 14:23:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52116
IP address blocks: 188.255.130.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.208.0/22 maxlen: 24
188.255.208.0/21 maxlen: 21
188.255.216.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.214.0/23 maxlen: 24
188.255.236.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
188.255.239.0/24 maxlen: 24
188.255.246.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.248.0/24 maxlen: 24
188.255.252.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
188.255.190.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
109.233.184.0/23 maxlen: 23
178.253.240.0/24 maxlen: 24
109.233.189.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.55.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.61.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
178.219.11.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
185.47.88.0/24 maxlen: 24
185.47.89.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
77.105.18.0/23 maxlen: 23
77.105.31.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146401934 (0x8b9ea8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 3 14:23:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=805bb3c64e66ac90f7edf144d8706f59a9cd4e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5b:6a:27:58:e1:12:0e:f4:da:78:94:aa:0a:
84:f2:0d:65:f4:69:7f:af:5b:41:e3:fc:b0:cf:23:
03:24:f6:1f:99:b5:c5:18:6b:5b:ee:25:35:f7:8a:
94:0a:d0:13:72:f6:f5:28:a0:24:56:ce:c5:1a:87:
57:5e:79:36:f8:1d:b8:b8:13:ae:01:82:1b:28:ee:
13:53:fb:d5:2c:bf:9e:71:5e:5c:b4:f9:c9:bd:9a:
2c:fd:ad:77:a4:8a:e6:8a:c5:3a:e8:d3:3a:45:07:
db:46:77:6c:58:e0:04:63:e4:1c:c6:8d:e1:6a:92:
13:ea:3d:c4:64:7e:18:47:85:85:8a:97:6b:76:e7:
f6:68:1b:98:ae:55:80:75:47:ba:fb:fc:f6:1c:e8:
a0:13:e9:4c:6b:9d:2f:ff:3c:15:24:e0:57:cf:aa:
37:61:00:7d:69:58:42:78:1d:b4:5d:d4:81:e7:5d:
c6:b1:79:60:12:2c:26:fe:31:1d:71:41:46:de:97:
4b:0e:0c:15:e1:a8:c8:56:62:f5:b1:00:72:70:14:
3d:4a:29:08:d2:3d:31:62:14:1e:f8:34:d5:e7:b9:
e7:3f:7c:7c:d4:13:03:0b:af:cb:a2:7f:2a:3e:90:
93:60:49:22:fe:b1:a3:5a:21:32:34:34:25:29:b1:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5B:B3:C6:4E:66:AC:90:F7:ED:F1:44:D8:70:6F:59:A9:CD:4E:05
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/gFuzxk5mrJD37fFE2HBvWanNTgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.18.0/23
77.105.31.0/24
79.175.103.0/24
79.175.115.0-79.175.116.255
79.175.118.0/24
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
109.233.184.0/23
109.233.189.0/24
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0-185.47.90.255
188.215.228.0/24
188.255.130.0/24
188.255.190.0/24
188.255.208.0-188.255.216.255
188.255.219.0/24
188.255.236.0/24
188.255.238.0/23
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:e6:e8:d1:64:8e:34:5f:ec:c9:22:60:4d:ef:5e:b9:9b:f7:
79:01:c5:73:f1:55:75:fc:ac:fc:3f:61:14:21:8e:09:4c:fa:
5b:66:86:6f:b8:5c:ba:8e:f1:af:82:f6:00:11:21:2c:88:f2:
f0:97:dc:d9:82:96:a4:eb:41:e2:e5:af:07:20:1a:96:4f:6c:
07:7e:5c:ce:77:fc:dc:ca:a2:aa:65:3d:76:6d:c8:fc:af:63:
9d:76:bf:95:32:33:df:19:3d:5c:dd:5d:6a:58:ab:7c:7d:ac:
8a:20:f5:d0:9c:c9:37:95:b1:2d:e0:46:48:4e:85:27:68:fc:
64:8b:33:a4:bb:ba:58:77:a3:b5:4f:06:79:29:a0:22:9c:e7:
ef:51:97:8f:e7:08:a6:48:d3:db:81:e5:57:4b:c7:a3:a8:56:
f2:a2:97:9d:da:0d:ca:b8:69:b7:b8:6a:0a:18:4f:a9:41:81:
6c:cf:c3:bd:7f:2c:44:da:6c:3a:8d:10:91:3d:2c:60:63:19:
45:a4:26:1d:be:22:35:2c:63:97:44:a5:82:2f:0b:0d:3a:73:
7c:01:52:9e:d0:55:c3:dc:56:8e:18:9a:01:1b:9b:19:5a:fd:
13:84:c3:67:1a:8f:e8:49:6f:0a:a6:21:cd:76:fd:7a:4d:b5:
27:83:74:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org