Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/lR9adpPWM5ARj2HaVeNVVPI5Y18.roa
File: lR9adpPWM5ARj2HaVeNVVPI5Y18.roa (raw, json)
Hash identifier: oHMPGQxgiWlqD8aV0B/FRx7mHNRLEtGUGecWRRUZWoE=
Subject key identifier: 95:1F:5A:76:93:D6:33:90:11:8F:61:DA:55:E3:55:54:F2:39:63:5F
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 08888926
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/lR9adpPWM5ARj2HaVeNVVPI5Y18.roa
Signing time: Fri 25 Mar 2022 08:41:37 +0000
ROA not before: Fri 25 Mar 2022 08:41:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52116
IP address blocks: 188.255.130.0/24 maxlen: 24
188.255.208.0/21 maxlen: 21
188.255.216.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.236.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
188.255.239.0/24 maxlen: 24
188.255.246.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.248.0/24 maxlen: 24
188.255.252.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
188.255.190.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
212.69.18.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
109.233.184.0/23 maxlen: 23
178.253.240.0/24 maxlen: 24
109.233.189.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.55.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.61.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.117.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
178.219.11.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
185.47.88.0/24 maxlen: 24
185.47.89.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
77.105.18.0/23 maxlen: 23
77.105.31.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143165734 (0x8888926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 25 08:41:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=951f5a7693d63390118f61da55e35554f239635f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:87:be:98:1b:b7:13:04:22:f7:53:b0:5c:65:
2b:4c:e0:4e:61:4d:79:e4:8e:7a:3d:34:7a:19:41:
d7:ef:c5:69:c8:22:5c:2c:91:e8:3f:d7:4a:79:2b:
32:15:a3:d1:35:14:c0:d1:eb:34:9e:eb:80:d5:ce:
1c:5b:00:f3:b2:58:40:ac:49:88:38:b7:0c:a9:ea:
68:3d:d7:9e:b0:33:38:49:ed:3f:16:da:6f:cf:b4:
94:54:c8:47:a6:e7:93:28:02:c2:4b:43:75:1b:f7:
30:97:f4:de:f9:2a:be:f1:1b:98:79:f1:b9:ce:c9:
1f:b2:98:4a:3a:1b:42:e4:12:f7:f3:a6:2e:71:fc:
91:1f:de:47:15:5f:c1:b9:0f:42:c8:e2:24:d1:02:
d0:d5:7e:3b:db:68:f5:06:9d:a6:df:e8:56:95:01:
0c:80:bb:02:d9:a2:00:76:e6:a2:5c:d5:1b:a1:95:
e2:28:8e:e5:e4:c3:76:62:ae:09:41:69:2c:a7:8b:
8b:56:6e:a4:a4:49:28:5b:75:88:e1:cb:6e:a4:19:
39:bf:33:af:96:d9:06:2d:eb:c0:6a:be:6c:e3:f7:
58:ab:e0:71:df:ee:3e:36:17:64:5a:cb:9f:c1:85:
24:87:77:c9:70:8c:14:01:b2:21:65:1e:1d:23:4d:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1F:5A:76:93:D6:33:90:11:8F:61:DA:55:E3:55:54:F2:39:63:5F
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/lR9adpPWM5ARj2HaVeNVVPI5Y18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.18.0/23
77.105.31.0/24
79.175.103.0/24
79.175.115.0-79.175.118.255
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
109.233.184.0/23
109.233.189.0/24
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0-185.47.90.255
188.215.228.0/24
188.255.130.0/24
188.255.190.0/24
188.255.208.0-188.255.216.255
188.255.219.0/24
188.255.236.0/24
188.255.238.0/23
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/23
212.69.18.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ff:f3:12:b0:4b:ac:56:ed:6c:6c:63:be:c6:13:7b:01:43:
db:c2:04:87:42:c6:11:38:23:0b:d2:22:27:06:27:ed:a8:4f:
26:49:17:7f:59:1f:c6:21:75:5f:7e:8f:58:b3:d0:07:0b:20:
9a:2d:92:b5:8d:56:f3:d4:33:fe:aa:da:fd:f8:0a:b1:e9:19:
d1:ec:09:53:3e:8c:f9:41:1d:a9:bd:61:91:b2:73:a8:3b:96:
13:12:70:76:45:06:4f:1a:28:ec:31:ae:94:ec:cb:38:49:9d:
82:95:07:29:fd:c3:6a:a8:d7:5d:25:e9:da:1c:e3:be:39:41:
5b:db:da:6a:71:0b:ad:47:e9:c6:71:ea:37:30:32:ee:31:e8:
a2:6c:de:39:5f:e3:3a:d3:5d:6e:c4:d6:d5:7c:f1:78:b9:a2:
ff:0d:f2:52:21:e2:68:51:f5:97:9f:e8:2c:38:79:af:8a:d9:
88:39:29:85:7a:9c:9b:46:d7:87:7b:ef:68:47:3a:d7:ef:85:
01:37:49:f9:01:76:a7:94:f9:18:d9:dc:0e:a7:fe:31:b7:14:
3b:81:9e:20:d4:cb:5a:9c:2d:4f:94:fd:13:df:dd:c6:cb:3f:
5e:ba:17:10:c2:07:be:93:cd:1a:4d:31:ec:36:4f:93:73:df:
77:65:b8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org