Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/nVTY4p2y30O6V5Dlp896ai4Asnk.roa
File: nVTY4p2y30O6V5Dlp896ai4Asnk.roa (raw, json)
Hash identifier: c190ct5zrg5BWtXWC3CflRBnl/lEh2OcNm/GX8JrQNM=
Subject key identifier: 9D:54:D8:E2:9D:B2:DF:43:BA:57:90:E5:A7:CF:7A:6A:2E:00:B2:79
Certificate issuer: /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial: 0B42E37B
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/nVTY4p2y30O6V5Dlp896ai4Asnk.roa
Signing time: Mon 11 Apr 2022 19:30:13 +0000
ROA not before: Mon 11 Apr 2022 19:30:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8781
IP address blocks: 78.100.112.0/20 maxlen: 24
78.100.128.0/19 maxlen: 24
37.211.192.0/20 maxlen: 24
78.100.155.0/24 maxlen: 24
37.211.96.0/22 maxlen: 24
78.100.53.0/24 maxlen: 24
78.100.64.0/20 maxlen: 24
37.211.104.0/22 maxlen: 24
37.211.100.0/22 maxlen: 24
78.100.59.0/24 maxlen: 24
185.96.224.0/22 maxlen: 24
37.211.112.0/22 maxlen: 24
37.211.108.0/22 maxlen: 24
37.211.116.0/22 maxlen: 24
37.211.124.0/22 maxlen: 24
37.211.120.0/22 maxlen: 24
78.100.80.0/20 maxlen: 24
176.202.0.0/15 maxlen: 24
37.211.208.0/22 maxlen: 24
37.211.212.0/22 maxlen: 24
37.211.216.0/22 maxlen: 24
37.211.224.0/22 maxlen: 24
37.208.128.0/17 maxlen: 24
37.211.228.0/22 maxlen: 24
37.211.232.0/22 maxlen: 24
37.211.236.0/22 maxlen: 24
37.211.240.0/20 maxlen: 24
78.100.2.0/24 maxlen: 24
78.100.3.0/24 maxlen: 24
86.62.241.0/24 maxlen: 24
78.100.6.0/24 maxlen: 24
89.211.48.0/20 maxlen: 24
78.100.0.0/15 maxlen: 24
213.130.96.0/19 maxlen: 24
213.130.112.0/24 maxlen: 24
213.130.113.0/24 maxlen: 24
78.100.32.0/20 maxlen: 24
78.100.32.0/24 maxlen: 24
213.130.121.0/24 maxlen: 24
213.130.119.0/24 maxlen: 24
78.100.48.0/20 maxlen: 24
78.100.48.0/24 maxlen: 24
86.62.192.0/18 maxlen: 24
89.211.4.0/24 maxlen: 24
89.211.3.0/24 maxlen: 24
89.211.0.0/16 maxlen: 24
89.211.7.0/24 maxlen: 24
89.211.6.0/24 maxlen: 24
89.211.5.0/24 maxlen: 24
89.211.16.0/21 maxlen: 24
89.211.24.0/21 maxlen: 24
89.211.32.0/20 maxlen: 24
37.210.0.0/15 maxlen: 24
212.77.192.0/24 maxlen: 24
212.77.192.0/19 maxlen: 24
212.77.199.0/24 maxlen: 24
212.77.204.0/24 maxlen: 24
212.77.202.0/24 maxlen: 24
212.77.207.0/24 maxlen: 24
212.77.211.0/24 maxlen: 24
212.77.210.0/24 maxlen: 24
212.77.209.0/24 maxlen: 24
212.77.218.0/24 maxlen: 24
212.77.217.0/24 maxlen: 24
212.77.221.0/24 maxlen: 24
212.77.220.0/24 maxlen: 24
82.148.96.0/19 maxlen: 24
82.148.96.0/24 maxlen: 24
178.152.0.0/15 maxlen: 24
2001:1a10::/29 maxlen: 48
2001:1a10:c1::/48 maxlen: 48
2001:1a11::/32 maxlen: 48
2001:1a10:1::/48 maxlen: 48
2001:1a10:cd::/48 maxlen: 64
2001:1a10:4000::/36 maxlen: 36
2001:1a10::/40 maxlen: 48
2001:1a10:100::/40 maxlen: 40
2001:1a10::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188932987 (0xb42e37b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Validity
Not Before: Apr 11 19:30:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d54d8e29db2df43ba5790e5a7cf7a6a2e00b279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:39:77:a0:45:58:cb:5f:8b:b8:97:73:b1:d3:
e3:34:fd:31:c8:0a:f7:1a:0f:3b:1f:70:0c:39:38:
9a:4e:8a:2b:4b:a1:05:44:7e:d9:93:2f:58:55:ed:
d9:fb:92:0c:33:26:f4:17:9b:af:e7:db:4b:08:8e:
1d:4a:aa:62:54:86:5d:fb:37:60:02:a7:b9:f4:9a:
0d:e6:a7:f9:08:69:c9:81:8d:95:b7:cf:dc:3e:eb:
e0:08:08:04:b7:59:f4:e1:0a:c0:c9:dd:a7:1f:1a:
e5:76:a3:91:d8:e3:d4:0e:98:c6:5a:9e:25:44:5d:
0d:3e:f8:79:ed:2b:dc:e8:8f:5f:bf:2f:75:00:7e:
ec:4f:68:28:1b:ca:65:f1:90:80:43:8e:18:c6:d5:
b5:22:08:20:77:91:0e:6e:a4:30:81:f1:f2:c3:72:
76:45:32:18:f1:6d:b4:2f:de:90:9a:ca:cc:db:72:
2c:b4:b5:e4:1a:d1:5d:2a:a5:e8:88:d9:49:fe:c5:
3b:1b:23:f2:0e:ac:87:49:71:f7:e3:1b:81:a4:81:
c6:e0:9b:02:e8:c8:04:3e:b1:4d:dd:3a:e5:85:78:
0b:41:a4:b2:72:6b:52:8e:d0:dd:58:c8:37:71:bd:
26:19:38:c0:69:98:0e:70:4e:7e:9a:97:6c:8b:c0:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:54:D8:E2:9D:B2:DF:43:BA:57:90:E5:A7:CF:7A:6A:2E:00:B2:79
X509v3 Authority Key Identifier:
keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/nVTY4p2y30O6V5Dlp896ai4Asnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.128.0/17
37.210.0.0/15
78.100.0.0/15
82.148.96.0/19
86.62.192.0/18
89.211.0.0/16
176.202.0.0/15
178.152.0.0/15
185.96.224.0/22
212.77.192.0/19
213.130.96.0/19
IPv6:
2001:1a10::/29
Signature Algorithm: sha256WithRSAEncryption
39:a6:30:af:89:45:9f:bc:a6:31:dc:80:96:cc:6f:a7:e2:47:
57:7c:81:4d:db:de:a2:ab:1d:ff:f6:d9:53:61:a5:da:33:60:
e8:c4:d0:f7:df:b2:c0:9e:e8:4c:b4:2f:2a:81:84:b1:e6:42:
26:43:a9:e7:c4:dd:e9:e8:64:c4:eb:35:66:2a:e5:4a:47:31:
e4:5f:cd:ac:95:a8:2f:66:9f:5b:ee:a8:22:dd:d4:df:0c:ad:
18:52:73:93:ef:e2:6f:64:ce:7e:56:4d:eb:30:30:18:60:7e:
c6:1a:73:19:b8:cf:9d:e2:63:1b:b7:07:04:7e:8a:fa:81:26:
7d:5d:cb:7d:04:23:3f:af:8f:7d:ac:23:e7:bd:41:93:99:00:
2e:d1:7c:d3:9b:5a:a8:a6:c7:2b:4e:01:c0:c5:90:c8:f1:ce:
d4:c8:6b:97:38:38:ed:03:87:61:bc:25:e6:e5:3c:8e:f5:5b:
53:58:03:5e:aa:74:f3:67:60:84:3d:6d:34:81:e3:98:85:63:
d7:26:e2:55:61:24:d8:46:e0:47:07:24:3d:b7:9d:3f:ad:8d:
d6:85:ae:3a:d1:05:1f:cc:93:8b:02:c1:68:4e:02:98:32:e4:
9d:f3:f2:81:72:46:4f:a4:7c:4b:d7:a2:ea:14:26:59:4a:65:
6b:ff:a5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:11 2024 by rpki-client on console-ams.rpki-client.org