Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uA3jIX6m2xhKYW4CGd8Y0xpi1Vo.roa
File: uA3jIX6m2xhKYW4CGd8Y0xpi1Vo.roa (raw, json)
Hash identifier: AEkN0vInPxix3koWKBoKyNO4Mp44g9QTXeesvBhEpdI=
Subject key identifier: B8:0D:E3:21:7E:A6:DB:18:4A:61:6E:02:19:DF:18:D3:1A:62:D5:5A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 08A346F5
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uA3jIX6m2xhKYW4CGd8Y0xpi1Vo.roa
Signing time: Wed 30 Mar 2022 11:24:40 +0000
ROA not before: Wed 30 Mar 2022 11:24:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52116
IP address blocks: 188.255.130.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.208.0/22 maxlen: 24
188.255.208.0/21 maxlen: 21
188.255.216.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.214.0/23 maxlen: 24
188.255.236.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
188.255.239.0/24 maxlen: 24
188.255.246.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.248.0/24 maxlen: 24
188.255.252.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
188.255.190.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
109.233.184.0/23 maxlen: 23
178.253.240.0/24 maxlen: 24
109.233.189.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.55.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.61.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.117.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
178.219.11.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
185.47.88.0/24 maxlen: 24
185.47.89.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
77.105.18.0/23 maxlen: 23
77.105.31.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144918261 (0x8a346f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 30 11:24:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b80de3217ea6db184a616e0219df18d31a62d55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:30:a1:a1:b5:a6:ff:ec:fc:6a:7a:8e:12:
6b:35:1b:e8:61:c5:83:78:b5:84:27:8d:f5:f0:44:
9c:9d:7d:17:5d:ea:e5:0a:86:31:f5:c2:18:1a:7d:
9d:86:1a:04:09:1e:4e:aa:de:1d:28:08:a0:45:46:
e8:83:a0:84:43:1f:8b:7d:78:ad:c6:fc:02:a3:ed:
dc:11:e0:d1:c5:73:fe:53:b2:ea:c8:5f:9b:20:53:
66:e7:1b:5d:6f:39:bc:35:f6:51:5d:1b:94:87:61:
ff:76:56:0e:de:09:af:33:61:30:00:4d:71:48:58:
92:ce:6e:33:3d:3b:c5:82:79:4a:6e:65:88:32:ce:
ac:06:92:c4:9e:bc:b2:06:8a:17:fd:2b:d2:18:05:
28:7e:51:5e:ce:23:a3:6b:5f:8a:79:fd:82:20:2f:
14:59:9e:f3:06:ec:a0:72:29:ad:27:9f:be:34:ae:
5c:2d:1f:58:c3:9a:70:5e:bf:52:3d:07:3d:fc:24:
65:0b:92:bb:f6:77:bf:6c:e6:74:ac:94:94:74:4a:
87:f5:93:c6:07:d7:72:de:57:49:d1:5d:f1:b0:9a:
2c:ac:db:4c:6b:ad:6e:e7:e2:05:4d:bb:6c:a7:33:
15:fc:f1:4d:2b:46:58:df:7a:1a:93:36:d8:0d:f0:
74:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0D:E3:21:7E:A6:DB:18:4A:61:6E:02:19:DF:18:D3:1A:62:D5:5A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uA3jIX6m2xhKYW4CGd8Y0xpi1Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.18.0/23
77.105.31.0/24
79.175.103.0/24
79.175.115.0-79.175.118.255
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
109.233.184.0/23
109.233.189.0/24
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0-185.47.90.255
188.215.228.0/24
188.255.130.0/24
188.255.190.0/24
188.255.208.0-188.255.216.255
188.255.219.0/24
188.255.236.0/24
188.255.238.0/23
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:d8:df:ba:37:20:d6:88:20:80:aa:35:cb:78:ca:71:6f:dc:
de:44:a6:e1:07:49:36:f2:9d:55:c2:54:ee:fb:79:30:45:ed:
e8:4a:ec:1d:25:e8:1c:d6:15:83:d9:56:3a:d7:41:7b:79:d8:
00:de:11:99:6d:11:83:c6:dc:1f:8b:80:3b:6e:20:83:65:68:
e3:ba:98:57:c2:05:6d:5a:54:29:77:94:9c:85:78:38:ce:a8:
61:25:ee:9e:e2:0e:f0:16:fb:80:55:50:98:3d:8e:fb:be:ce:
7b:90:80:ac:b2:b7:e3:82:54:f0:c7:75:b8:4b:d4:4b:86:04:
7e:39:28:03:f4:36:d1:58:71:5f:c5:b9:ce:c8:9e:6f:0f:e6:
45:15:be:06:74:8e:89:28:65:ba:fe:46:dc:53:cd:fc:20:72:
be:1a:0c:41:91:8e:66:4c:61:25:56:12:67:45:92:ec:47:3d:
07:5a:43:fa:c1:46:41:bf:f9:52:d7:4f:73:99:9f:03:40:d2:
ed:98:dc:2c:99:ef:ef:d7:11:0f:0f:e8:06:af:11:9c:a5:63:
70:96:a9:c9:0c:07:b7:30:5d:2f:ef:c2:71:de:aa:73:cb:7d:
e5:c7:15:cf:f6:36:84:41:11:77:c4:0a:b3:ce:95:92:99:c3:
18:39:fc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-fra.rpki-client.org