Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/CcOhR3nShqdp32K_BkNBrYRO1js.roa
File: CcOhR3nShqdp32K_BkNBrYRO1js.roa (raw, json)
Hash identifier: OL89HHqtKZ4nLJF9tNY8g9vVl6LpFjkGs9UbelvUHuQ=
Subject key identifier: 09:C3:A1:47:79:D2:86:A7:69:DF:62:BF:06:43:41:AD:84:4E:D6:3B
Certificate issuer: /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial: 0AC25B70
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/CcOhR3nShqdp32K_BkNBrYRO1js.roa
Signing time: Tue 15 Feb 2022 05:45:08 +0000
ROA not before: Tue 15 Feb 2022 05:45:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42298
IP address blocks: 78.100.112.0/20 maxlen: 24
78.100.144.0/20 maxlen: 24
78.100.62.0/24 maxlen: 24
37.208.160.0/20 maxlen: 24
78.100.224.0/20 maxlen: 24
37.208.176.0/20 maxlen: 24
176.202.0.0/20 maxlen: 24
78.100.240.0/20 maxlen: 24
78.101.0.0/21 maxlen: 24
176.202.16.0/20 maxlen: 24
78.101.8.0/21 maxlen: 24
78.100.160.0/20 maxlen: 24
78.100.176.0/20 maxlen: 24
37.208.128.0/20 maxlen: 24
78.100.192.0/20 maxlen: 24
37.208.144.0/20 maxlen: 24
78.100.208.0/20 maxlen: 24
178.153.128.0/20 maxlen: 24
178.153.144.0/20 maxlen: 24
178.153.160.0/20 maxlen: 24
178.153.80.0/20 maxlen: 24
178.153.96.0/20 maxlen: 24
78.100.10.0/24 maxlen: 24
178.153.240.0/20 maxlen: 24
178.153.176.0/20 maxlen: 24
178.153.192.0/20 maxlen: 24
178.153.208.0/20 maxlen: 24
178.153.224.0/20 maxlen: 24
178.152.112.0/20 maxlen: 24
178.153.16.0/20 maxlen: 24
178.153.32.0/20 maxlen: 24
178.153.48.0/20 maxlen: 24
178.153.64.0/20 maxlen: 24
178.153.0.0/20 maxlen: 24
178.152.64.0/20 maxlen: 24
178.152.80.0/20 maxlen: 24
178.152.96.0/20 maxlen: 24
178.152.0.0/20 maxlen: 24
178.152.16.0/20 maxlen: 24
37.211.160.0/20 maxlen: 24
89.211.160.0/20 maxlen: 24
37.211.176.0/20 maxlen: 24
89.211.176.0/20 maxlen: 24
89.211.192.0/20 maxlen: 24
89.211.96.0/20 maxlen: 24
89.211.112.0/20 maxlen: 24
37.211.128.0/20 maxlen: 24
89.211.128.0/20 maxlen: 24
89.211.144.0/20 maxlen: 24
37.211.144.0/20 maxlen: 24
89.211.208.0/20 maxlen: 24
89.211.224.0/20 maxlen: 24
89.211.240.0/20 maxlen: 24
37.210.192.0/20 maxlen: 24
37.210.208.0/20 maxlen: 24
37.210.224.0/20 maxlen: 24
37.210.144.0/20 maxlen: 24
37.210.160.0/20 maxlen: 24
37.210.176.0/20 maxlen: 24
86.62.242.0/24 maxlen: 24
86.62.245.0/24 maxlen: 24
86.62.246.0/24 maxlen: 24
86.62.243.0/24 maxlen: 24
86.62.244.0/24 maxlen: 24
86.62.252.0/24 maxlen: 24
86.62.251.0/24 maxlen: 24
86.62.248.0/24 maxlen: 24
86.62.249.0/24 maxlen: 24
37.211.48.0/20 maxlen: 24
86.62.255.0/24 maxlen: 24
213.130.96.0/22 maxlen: 24
37.211.64.0/20 maxlen: 24
37.211.80.0/20 maxlen: 24
213.130.127.0/24 maxlen: 24
37.210.240.0/20 maxlen: 24
86.62.192.0/22 maxlen: 24
86.62.196.0/22 maxlen: 24
86.62.200.0/22 maxlen: 24
86.62.204.0/22 maxlen: 24
37.211.0.0/20 maxlen: 24
86.62.211.0/24 maxlen: 24
86.62.209.0/24 maxlen: 24
37.211.16.0/20 maxlen: 24
86.62.218.0/24 maxlen: 24
86.62.216.0/24 maxlen: 24
86.62.224.0/22 maxlen: 24
86.62.223.0/24 maxlen: 24
86.62.221.0/24 maxlen: 24
86.62.228.0/22 maxlen: 24
86.62.232.0/22 maxlen: 24
37.211.32.0/20 maxlen: 24
86.62.236.0/22 maxlen: 24
37.210.0.0/20 maxlen: 24
37.210.16.0/20 maxlen: 24
37.210.80.0/20 maxlen: 24
37.210.96.0/20 maxlen: 24
37.210.112.0/20 maxlen: 24
37.210.128.0/20 maxlen: 24
37.210.32.0/20 maxlen: 24
37.210.48.0/20 maxlen: 24
37.210.64.0/20 maxlen: 24
176.202.80.0/20 maxlen: 24
82.148.107.0/24 maxlen: 24
176.202.96.0/20 maxlen: 24
78.101.80.0/20 maxlen: 24
78.101.16.0/20 maxlen: 24
176.202.32.0/20 maxlen: 24
176.202.48.0/20 maxlen: 24
78.101.48.0/20 maxlen: 24
78.101.64.0/20 maxlen: 24
78.101.176.0/20 maxlen: 24
78.101.192.0/20 maxlen: 24
78.101.208.0/20 maxlen: 24
78.101.224.0/20 maxlen: 24
78.101.128.0/20 maxlen: 24
78.101.144.0/20 maxlen: 24
176.202.160.0/20 maxlen: 24
176.202.176.0/20 maxlen: 24
78.101.160.0/20 maxlen: 24
2001:1a10:1004::/48 maxlen: 48
2001:1a10:1001::/48 maxlen: 48
2001:1a10:100a::/48 maxlen: 48
2001:1a10:1007::/48 maxlen: 48
2001:1a10:1009::/48 maxlen: 48
2001:1a10:1006::/48 maxlen: 48
2001:1a10:100f::/48 maxlen: 48
2001:1a10:100c::/48 maxlen: 48
2001:1a10:100e::/48 maxlen: 48
2001:1a10:1008::/48 maxlen: 48
2001:1a10:100b::/48 maxlen: 48
2001:1a11::/32 maxlen: 53
2001:1a10:1000::/48 maxlen: 48
2001:1a10:1003::/48 maxlen: 48
2001:1a10:100d::/48 maxlen: 48
2001:1a10:1005::/48 maxlen: 48
2001:1a10:1002::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180509552 (0xac25b70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Validity
Not Before: Feb 15 05:45:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09c3a14779d286a769df62bf064341ad844ed63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:55:d7:d8:71:a6:ea:4b:52:e4:26:ad:d4:
e3:18:b3:bb:ce:eb:60:d3:b5:ca:5a:a2:94:cd:79:
d8:15:c2:f5:60:68:a0:1d:f3:a3:ed:e8:95:d4:e6:
5d:54:5e:6b:aa:78:46:52:91:f6:55:a3:9e:29:0b:
19:e5:fd:10:59:12:1d:9a:76:a5:c7:81:9e:d1:01:
1c:8f:6a:fc:dc:0a:f7:4b:48:8b:3f:96:c7:b9:e1:
ad:ab:65:dc:0c:21:9b:cb:30:5c:ef:3b:db:9e:ac:
1b:a5:1a:31:f1:50:ac:4f:49:2b:b0:f8:1c:59:69:
98:39:9f:3c:ed:4f:9f:d3:85:c2:ef:5e:ae:16:3a:
f2:87:08:aa:34:9c:5b:d1:7a:59:d7:f5:e3:73:76:
fb:a9:12:87:86:8f:b7:70:66:06:f5:e6:9a:81:80:
c5:fb:3b:75:86:64:e6:97:6a:be:b3:93:94:65:63:
87:c6:69:e3:b6:b0:27:10:51:2b:f0:72:e0:45:3b:
95:ef:f2:6c:30:c6:d0:dd:0e:da:b3:6d:ed:59:9b:
e6:9a:31:c1:2b:4c:11:8f:54:73:a9:cd:45:88:83:
6e:a2:ab:27:20:7f:b1:e4:29:f8:15:5f:a0:63:ee:
09:83:56:ee:e8:3b:9c:ea:3f:18:3b:cd:56:79:98:
a2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C3:A1:47:79:D2:86:A7:69:DF:62:BF:06:43:41:AD:84:4E:D6:3B
X509v3 Authority Key Identifier:
keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/CcOhR3nShqdp32K_BkNBrYRO1js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.128.0/18
37.210.0.0-37.211.95.255
37.211.128.0/18
78.100.10.0/24
78.100.62.0/24
78.100.112.0/20
78.100.144.0-78.101.31.255
78.101.48.0-78.101.95.255
78.101.128.0-78.101.239.255
82.148.107.0/24
86.62.192.0/20
86.62.209.0/24
86.62.211.0/24
86.62.216.0/24
86.62.218.0/24
86.62.221.0/24
86.62.223.0-86.62.239.255
86.62.242.0-86.62.246.255
86.62.248.0/23
86.62.251.0-86.62.252.255
86.62.255.0/24
89.211.96.0-89.211.255.255
176.202.0.0/18
176.202.80.0-176.202.111.255
176.202.160.0/19
178.152.0.0/19
178.152.64.0/18
178.153.0.0-178.153.111.255
178.153.128.0/17
213.130.96.0/22
213.130.127.0/24
IPv6:
2001:1a10:1000::/44
2001:1a11::/32
Signature Algorithm: sha256WithRSAEncryption
2b:06:6b:1b:d5:dd:8d:54:8b:39:6a:55:c9:99:ca:5f:93:82:
b4:09:be:b0:c0:2d:06:8b:c6:ac:30:0a:29:c5:4c:c4:d1:f3:
b1:2a:86:47:0c:49:ad:82:aa:ac:8b:57:3e:f9:8f:57:c5:79:
14:2f:69:35:38:a4:12:45:2f:f5:1c:a9:12:97:43:dc:b6:d8:
e3:f2:96:78:a3:fa:df:93:f7:e0:ce:2f:30:d8:59:a4:91:50:
cb:c8:28:94:7d:5b:f7:0e:85:6a:20:d0:5e:6c:c5:8e:dc:78:
85:09:9b:9c:97:15:90:8d:11:7d:28:e9:5c:2d:e4:76:38:7d:
b2:1f:58:f5:49:f0:f8:24:88:7a:f4:9a:94:5a:9b:45:c5:6f:
33:63:76:a9:a3:fd:34:b0:88:18:34:a3:e2:96:b6:8b:1a:eb:
41:78:1a:86:22:a6:35:b5:ee:d5:59:25:0c:05:7f:f7:bb:ef:
94:b5:c5:a3:2c:fa:40:9c:08:f6:77:a8:b0:26:26:a2:de:44:
3d:a0:0a:93:f6:34:d7:b1:4c:6d:f8:f2:e3:50:75:25:01:6a:
37:99:d7:fc:51:29:06:0a:c9:c1:25:f3:d1:1b:ed:49:a0:af:
c4:97:85:e6:f3:78:5c:fd:aa:0f:ac:c2:9c:b7:e5:d6:22:ce:
9c:ba:c7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:11 2024 by rpki-client on console-ams.rpki-client.org