Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/lt9QJbSk6B7APW7Af-ff82FyAmI.roa
File: lt9QJbSk6B7APW7Af-ff82FyAmI.roa (raw, json)
Hash identifier: 6Mgq2P+c1uv3MzG3G1ViSM2YZI0BoduDW6Inj535Mao=
Subject key identifier: 96:DF:50:25:B4:A4:E8:1E:C0:3D:6E:C0:7F:E7:DF:F3:61:72:02:62
Certificate issuer: /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial: 0AA3B47A
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/lt9QJbSk6B7APW7Af-ff82FyAmI.roa
Signing time: Mon 07 Feb 2022 12:38:32 +0000
ROA not before: Mon 07 Feb 2022 12:38:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42298
IP address blocks: 176.202.0.0/20 maxlen: 20
176.202.16.0/20 maxlen: 20
78.101.8.0/21 maxlen: 21
37.208.128.0/20 maxlen: 20
37.208.144.0/20 maxlen: 20
178.153.128.0/20 maxlen: 24
178.153.144.0/20 maxlen: 24
178.153.160.0/20 maxlen: 24
178.153.80.0/20 maxlen: 24
178.153.96.0/20 maxlen: 24
178.153.240.0/20 maxlen: 24
178.153.176.0/20 maxlen: 24
178.153.192.0/20 maxlen: 24
178.153.208.0/20 maxlen: 24
178.153.224.0/20 maxlen: 24
178.152.112.0/20 maxlen: 24
178.153.16.0/20 maxlen: 24
178.153.32.0/20 maxlen: 24
178.153.48.0/20 maxlen: 24
178.153.64.0/20 maxlen: 24
178.153.0.0/20 maxlen: 24
178.152.64.0/20 maxlen: 24
178.152.80.0/20 maxlen: 24
178.152.96.0/20 maxlen: 24
178.152.0.0/20 maxlen: 24
178.152.16.0/20 maxlen: 24
89.211.160.0/20 maxlen: 20
37.211.160.0/20 maxlen: 20
89.211.176.0/20 maxlen: 20
37.211.176.0/20 maxlen: 20
89.211.192.0/20 maxlen: 20
89.211.96.0/20 maxlen: 20
89.211.112.0/20 maxlen: 20
89.211.128.0/20 maxlen: 20
37.211.128.0/20 maxlen: 20
89.211.144.0/20 maxlen: 20
37.211.144.0/20 maxlen: 20
89.211.208.0/20 maxlen: 20
89.211.224.0/20 maxlen: 20
89.211.240.0/20 maxlen: 20
37.210.192.0/20 maxlen: 20
37.210.208.0/20 maxlen: 20
37.210.224.0/20 maxlen: 20
37.210.144.0/20 maxlen: 20
37.210.160.0/20 maxlen: 20
37.210.176.0/20 maxlen: 20
86.62.242.0/24 maxlen: 24
86.62.245.0/24 maxlen: 24
86.62.246.0/24 maxlen: 24
86.62.243.0/24 maxlen: 24
86.62.244.0/24 maxlen: 24
37.211.48.0/20 maxlen: 20
86.62.252.0/24 maxlen: 24
86.62.251.0/24 maxlen: 24
86.62.248.0/24 maxlen: 24
86.62.249.0/24 maxlen: 24
86.62.255.0/24 maxlen: 24
213.130.96.0/22 maxlen: 22
37.211.64.0/20 maxlen: 20
37.211.80.0/20 maxlen: 20
213.130.127.0/24 maxlen: 24
37.210.240.0/20 maxlen: 20
86.62.192.0/22 maxlen: 24
86.62.196.0/22 maxlen: 24
86.62.200.0/22 maxlen: 24
37.211.0.0/20 maxlen: 20
86.62.204.0/22 maxlen: 24
86.62.211.0/24 maxlen: 24
86.62.209.0/24 maxlen: 24
86.62.218.0/24 maxlen: 24
86.62.216.0/24 maxlen: 24
37.211.16.0/20 maxlen: 20
86.62.223.0/24 maxlen: 24
86.62.224.0/22 maxlen: 22
86.62.221.0/24 maxlen: 24
86.62.228.0/22 maxlen: 22
86.62.232.0/22 maxlen: 22
86.62.236.0/22 maxlen: 22
37.211.32.0/20 maxlen: 20
37.210.0.0/20 maxlen: 20
37.210.16.0/20 maxlen: 20
37.210.80.0/20 maxlen: 20
37.210.96.0/20 maxlen: 20
37.210.112.0/20 maxlen: 20
37.210.128.0/20 maxlen: 20
37.210.32.0/20 maxlen: 20
37.210.48.0/20 maxlen: 20
37.210.64.0/20 maxlen: 20
176.202.80.0/20 maxlen: 24
82.148.107.0/24 maxlen: 24
78.101.80.0/20 maxlen: 20
176.202.96.0/20 maxlen: 24
78.101.16.0/20 maxlen: 20
176.202.32.0/20 maxlen: 20
176.202.48.0/20 maxlen: 20
78.101.48.0/20 maxlen: 20
78.101.64.0/20 maxlen: 20
78.101.176.0/20 maxlen: 20
78.101.192.0/20 maxlen: 20
78.101.208.0/20 maxlen: 20
78.101.224.0/20 maxlen: 20
176.202.160.0/20 maxlen: 20
78.101.160.0/20 maxlen: 20
176.202.176.0/20 maxlen: 24
2001:1a10:1004::/48 maxlen: 48
2001:1a10:1001::/48 maxlen: 48
2001:1a10:100a::/48 maxlen: 48
2001:1a10:1007::/48 maxlen: 48
2001:1a10:1009::/48 maxlen: 48
2001:1a10:1006::/48 maxlen: 48
2001:1a10:100f::/48 maxlen: 48
2001:1a10:100c::/48 maxlen: 48
2001:1a10:100e::/48 maxlen: 48
2001:1a10:1008::/48 maxlen: 48
2001:1a10:100b::/48 maxlen: 48
2001:1a11::/32 maxlen: 53
2001:1a10:1000::/48 maxlen: 48
2001:1a10:1003::/48 maxlen: 48
2001:1a10:100d::/48 maxlen: 48
2001:1a10:1005::/48 maxlen: 48
2001:1a10:1002::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178500730 (0xaa3b47a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Validity
Not Before: Feb 7 12:38:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96df5025b4a4e81ec03d6ec07fe7dff361720262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:5f:84:5e:7b:98:e6:f2:06:89:9e:c0:cf:
cd:ba:14:58:c0:a0:70:9e:48:0e:30:70:5a:f0:9e:
06:52:07:28:69:4c:05:08:52:13:4a:be:76:de:2e:
d9:f8:d5:95:3b:c6:9f:63:cf:5e:fd:33:dc:e9:c7:
0c:61:5e:83:c9:a3:93:9d:43:02:54:0c:eb:d7:ed:
ed:14:0f:e3:61:b1:7f:9c:0d:24:d3:58:57:4a:73:
83:d1:25:1b:e2:6b:e4:a0:ca:19:ce:3e:00:2b:fb:
d1:5b:52:8a:0f:3b:db:16:0e:4f:02:71:a8:0e:d2:
ff:b6:63:1d:76:14:db:a8:08:c5:dc:fc:e6:d4:11:
99:d9:22:7a:84:03:f7:cf:bc:f0:61:45:44:73:c0:
28:71:96:a3:94:dc:09:05:8e:09:32:b8:09:de:cd:
df:a2:dd:a4:ed:09:b9:1c:b5:25:c8:94:1b:b3:24:
44:14:b5:40:e4:a5:58:b0:44:92:02:4a:d8:2f:9e:
1e:db:b0:2e:18:ff:ba:c5:a4:5d:aa:24:df:e5:da:
8d:ee:42:c2:b8:2c:70:61:04:e6:97:20:dc:59:a3:
ca:fd:31:55:b7:85:65:ce:c6:bf:fb:32:f5:10:e4:
94:b0:68:20:0d:3f:09:52:0a:33:8f:d7:ee:b2:08:
34:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DF:50:25:B4:A4:E8:1E:C0:3D:6E:C0:7F:E7:DF:F3:61:72:02:62
X509v3 Authority Key Identifier:
keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/lt9QJbSk6B7APW7Af-ff82FyAmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.128.0/19
37.210.0.0-37.211.95.255
37.211.128.0/18
78.101.8.0-78.101.31.255
78.101.48.0-78.101.95.255
78.101.160.0-78.101.239.255
82.148.107.0/24
86.62.192.0/20
86.62.209.0/24
86.62.211.0/24
86.62.216.0/24
86.62.218.0/24
86.62.221.0/24
86.62.223.0-86.62.239.255
86.62.242.0-86.62.246.255
86.62.248.0/23
86.62.251.0-86.62.252.255
86.62.255.0/24
89.211.96.0-89.211.255.255
176.202.0.0/18
176.202.80.0-176.202.111.255
176.202.160.0/19
178.152.0.0/19
178.152.64.0/18
178.153.0.0-178.153.111.255
178.153.128.0/17
213.130.96.0/22
213.130.127.0/24
IPv6:
2001:1a10:1000::/44
2001:1a11::/32
Signature Algorithm: sha256WithRSAEncryption
90:01:63:3d:43:79:24:c0:f6:a7:72:51:6d:f1:f2:2d:77:bc:
73:2a:1d:55:01:c1:5f:d7:6b:b9:80:83:a0:3c:c2:70:14:6b:
a3:24:34:99:06:bb:c9:4c:06:d8:37:33:ba:99:b9:25:91:e4:
07:f9:8f:ad:a2:76:91:15:f2:ab:b2:9d:e0:ed:39:ea:94:8f:
91:a4:1f:f1:31:e2:54:df:63:dd:40:fd:13:13:7c:f2:f4:5f:
a3:45:c2:7c:be:de:8a:89:af:a5:64:a2:96:79:db:0f:24:7f:
0f:e4:07:a9:f0:f5:ad:d6:96:b1:59:a1:d1:f4:36:e1:db:5b:
ab:62:c4:62:44:46:b9:6d:7b:0b:0c:1b:77:c5:e7:b5:8e:d2:
70:e8:4d:3a:4b:2e:96:6f:f4:58:28:f4:de:e0:19:48:fd:df:
e7:37:40:85:7d:3e:50:99:6e:e5:45:4b:9d:7c:76:b8:66:41:
f6:04:1d:de:15:27:6d:f6:50:e5:fc:7c:a0:36:5c:06:8a:d5:
40:5d:c8:2f:f1:47:cf:33:f4:b8:f6:4e:e8:72:d6:26:6b:22:
4e:b6:28:0b:77:30:e5:d5:15:53:17:c1:86:f0:a7:c1:7b:a5:
cf:f5:0b:e3:27:4d:e0:6c:7c:85:7d:f6:27:f2:97:35:bc:cf:
45:93:e5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:31 2024 by rpki-client on console-fra.rpki-client.org