Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/hCvpLR1w_2Kq0SzQYsaXNzHrQsI.roa
File: hCvpLR1w_2Kq0SzQYsaXNzHrQsI.roa (raw, json)
Hash identifier: GpwFmTQm0Nk/xP0HOPKOYwnvo3phZSglrNE4QMZvd5U=
Subject key identifier: 84:2B:E9:2D:1D:70:FF:62:AA:D1:2C:D0:62:C6:97:37:31:EB:42:C2
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 07AD27AC
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/hCvpLR1w_2Kq0SzQYsaXNzHrQsI.roa
Signing time: Sat 01 Jan 2022 05:57:01 +0000
ROA not before: Sat 01 Jan 2022 05:57:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52116
IP address blocks: 188.255.130.0/24 maxlen: 24
188.255.208.0/21 maxlen: 21
188.255.216.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.236.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
188.255.239.0/24 maxlen: 24
188.255.246.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.248.0/24 maxlen: 24
188.255.252.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
188.255.190.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
212.69.18.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.68.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
178.253.237.0/24 maxlen: 24
109.233.184.0/23 maxlen: 23
178.253.240.0/24 maxlen: 24
109.233.189.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.55.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.61.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.117.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
178.219.11.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
185.47.88.0/24 maxlen: 24
185.47.89.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
77.105.18.0/23 maxlen: 23
77.105.31.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128788396 (0x7ad27ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 05:57:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=842be92d1d70ff62aad12cd062c6973731eb42c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:55:1f:b5:07:3b:58:fd:31:99:9f:63:3e:a6:
a0:f3:db:fe:4b:9d:ba:e0:df:e6:4c:63:76:67:42:
04:eb:4d:25:b8:94:ee:c1:dc:2c:6f:32:a3:3e:fd:
03:56:b1:b4:2c:dd:3d:5c:4a:ae:6b:e4:4b:27:f3:
5e:52:c6:ae:ae:b7:79:2b:21:e4:fb:fb:3d:76:05:
69:d0:5f:99:a6:36:f1:57:44:1d:b5:b2:a2:38:13:
36:17:7d:9f:67:25:95:ca:49:1a:86:bd:8a:a9:84:
0d:2d:3e:64:29:6b:28:89:10:d8:28:3d:ea:d9:ab:
e1:ad:67:ef:bc:fb:04:9d:d0:db:2f:fc:85:e0:9c:
51:f4:af:28:d5:17:a2:17:ea:b5:ff:a6:28:19:3c:
ac:a7:0d:ed:f7:53:de:12:81:15:cd:d5:7b:8f:4a:
83:57:f3:80:41:86:ad:59:eb:df:96:af:83:79:e4:
6c:dd:27:4f:82:21:56:a9:47:77:45:83:1d:94:7e:
7c:29:22:a8:36:75:b0:e2:9c:97:6e:e5:2e:e0:df:
d6:70:ea:51:e6:6c:b8:6c:3b:27:60:6d:4e:b7:43:
c2:e2:d1:42:e5:41:9c:73:00:7d:c6:0d:ac:b0:d0:
cc:c0:e1:4e:2d:56:3d:77:ea:15:cf:0f:24:4e:d8:
08:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2B:E9:2D:1D:70:FF:62:AA:D1:2C:D0:62:C6:97:37:31:EB:42:C2
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/hCvpLR1w_2Kq0SzQYsaXNzHrQsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.18.0/23
77.105.31.0/24
79.175.103.0/24
79.175.115.0-79.175.118.255
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0-93.186.68.255
93.186.71.0-93.186.72.255
109.233.184.0/23
109.233.189.0/24
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/23
178.253.240.0/24
185.47.88.0-185.47.90.255
188.215.228.0/24
188.255.130.0/24
188.255.190.0/24
188.255.208.0-188.255.216.255
188.255.219.0/24
188.255.236.0/24
188.255.238.0/23
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/23
212.69.18.0/24
Signature Algorithm: sha256WithRSAEncryption
86:08:9c:65:f7:00:90:bf:ca:9d:b3:17:01:44:c7:77:2e:12:
11:57:d5:43:b5:83:05:b4:49:26:b6:53:ef:63:ac:0e:b9:a9:
b3:a4:d5:4d:52:40:88:91:8f:7d:b2:2e:7c:a2:08:c3:3b:24:
15:73:7f:c4:f2:f1:fa:fa:2f:17:fe:82:f6:e1:6b:ed:0f:cb:
cc:34:90:3b:e1:b9:f7:d5:f7:8c:73:47:43:07:3b:30:fc:d1:
fc:b3:c1:5c:4e:f3:aa:5d:d1:5e:41:ff:3f:8e:1e:29:9a:97:
49:a5:e0:38:7f:41:8f:50:75:97:40:d6:b4:bc:b5:56:c7:a5:
8a:94:1c:64:97:e6:5c:93:a3:16:7b:d8:9a:b1:53:07:c3:74:
30:a6:1e:70:0d:2c:19:61:5c:b8:b6:b4:a6:60:9a:23:1e:27:
ce:52:34:be:0b:6c:31:3c:a6:a9:25:2f:cc:80:05:9a:9b:61:
da:3d:d9:1e:7c:5f:6b:72:6b:5f:76:f1:9f:3b:3f:bc:c0:11:
c4:f6:6a:e9:01:e4:2a:c6:ab:50:e4:7f:1b:08:49:c5:0c:a8:
e1:07:63:11:51:cc:6d:2b:22:a4:ea:5b:fa:a8:58:c7:15:65:
22:f3:62:b7:9d:ac:8a:f0:f8:8b:04:bd:33:08:6c:b5:5b:8a:
b7:03:22:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org