Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jwEpODFk7PCJdy2pxWJPXd3k-qU.roa
File: jwEpODFk7PCJdy2pxWJPXd3k-qU.roa (raw, json)
Hash identifier: J6r93ugwVto8gxxFaqOHgGbAO4+DJCRdoWbJLNXkYYk=
Subject key identifier: 8F:01:29:38:31:64:EC:F0:89:77:2D:A9:C5:62:4F:5D:DD:E4:FA:A5
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018410D90B31537123533E3CCDFDDA9E06F6
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jwEpODFk7PCJdy2pxWJPXd3k-qU.roa
Signing time: Tue 25 Oct 2022 20:32:50 +0000
ROA not before: Tue 25 Oct 2022 20:32:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52116
IP address blocks: 178.253.207.0/24 maxlen: 24
188.255.130.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
188.255.208.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
109.121.56.0/24 maxlen: 24
188.255.246.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
188.255.248.0/24 maxlen: 24
188.255.252.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
178.253.236.0/24 maxlen: 24
178.253.240.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.55.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.61.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
178.219.11.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
185.47.88.0/24 maxlen: 24
185.47.89.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
77.105.31.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
77.105.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:10:d9:0b:31:53:71:23:53:3e:3c:cd:fd:da:9e:06:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 25 20:32:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f0129383164ecf089772da9c5624f5ddde4faa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:63:b7:19:02:9b:cf:90:be:4a:93:76:df:cf:
35:86:12:95:cf:47:b7:80:36:dc:ed:07:84:b5:28:
1d:d9:d7:8c:5c:9c:6e:e0:41:44:6a:c9:29:c3:f4:
05:62:74:d6:ba:15:de:f5:d6:89:64:1c:3a:40:3e:
d5:1a:89:b2:a6:e8:bf:2d:5b:c4:12:f1:f5:37:13:
30:f4:de:c3:f6:00:56:4e:c4:93:2d:40:05:e0:70:
b0:32:b9:36:76:27:b2:8d:b5:a7:67:97:33:e0:a1:
13:32:cf:b1:81:c5:6f:18:86:cf:4c:58:1b:b7:77:
cb:07:c6:5b:54:5d:9a:0c:d7:85:42:f9:8d:77:79:
ed:86:60:73:bf:6a:e2:ad:f1:ab:6e:db:b5:c4:96:
f5:f3:75:c1:32:4c:94:34:a8:35:7b:57:b8:b6:2b:
be:4c:b3:6c:fe:9f:3d:1f:72:23:61:d9:46:70:f0:
22:18:e8:06:df:9a:85:e7:87:82:89:2a:9e:dd:ed:
e8:ea:ec:a0:11:2f:62:2d:c1:be:8f:43:db:e0:1b:
e4:34:44:40:c6:09:e3:0f:47:43:6c:2d:9a:f0:b9:
39:23:8a:bd:26:a4:96:aa:d2:30:a1:42:78:39:07:
75:43:30:88:db:40:c8:25:f0:0e:63:56:64:88:c4:
d0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:01:29:38:31:64:EC:F0:89:77:2D:A9:C5:62:4F:5D:DD:E4:FA:A5
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jwEpODFk7PCJdy2pxWJPXd3k-qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.11.0/24
77.105.31.0/24
79.175.103.0/24
79.175.115.0-79.175.116.255
79.175.118.0/24
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
109.121.56.0/24
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0-185.47.90.255
188.255.130.0/24
188.255.190.0/24
188.255.208.0/24
188.255.213.0/24
188.255.219.0/24
188.255.238.0/24
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/24
Signature Algorithm: sha256WithRSAEncryption
06:21:20:28:e6:f0:b7:ea:d3:ed:1b:10:ab:f0:b8:85:7a:a9:
6c:4b:2d:ca:62:66:3b:2f:a0:2d:3e:ac:12:81:0c:70:7e:57:
36:bf:c4:1d:6d:8b:65:90:a2:82:02:38:e2:9c:6d:ec:66:3c:
4c:81:63:37:23:28:6f:89:f8:9c:b3:ee:2d:f3:c3:8c:9b:9c:
05:bb:d7:fd:00:bf:3e:95:34:2a:b3:a7:5d:a8:76:24:3b:03:
00:29:5f:d2:bf:d6:71:d0:0e:a0:b6:11:aa:78:79:87:72:f7:
24:d8:b6:91:93:3e:a1:c5:eb:15:f6:2b:26:38:ac:d0:17:42:
9d:43:35:b6:8a:9e:36:42:14:44:a7:11:16:a4:10:73:52:ad:
09:f9:15:d9:76:47:8c:5e:80:db:7c:82:04:b4:3c:0a:e6:6e:
71:ef:e4:76:99:1d:01:9b:65:da:fa:3b:02:b6:c6:c5:7c:c4:
ec:f7:08:4a:13:84:4e:dc:a6:68:64:58:ca:63:1b:96:b5:22:
ec:08:c2:9c:5b:4f:1b:c8:81:98:77:de:f6:68:00:9d:18:39:
df:15:35:5e:69:0e:f3:44:6e:dc:56:61:78:2f:d1:d3:55:e3:
28:94:29:c2:6e:58:9d:29:93:64:9f:82:61:b2:6e:a9:8e:46:
05:6d:6d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org