Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/JPfwN6qvGuDIbUx7SbVaV7BXpgQ.roa
File: JPfwN6qvGuDIbUx7SbVaV7BXpgQ.roa (raw, json)
Hash identifier: Wexs9ai8FJqjKxw9N06bZgAOjUX1fpnzh2anZcEFukM=
Subject key identifier: 24:F7:F0:37:AA:AF:1A:E0:C8:6D:4C:7B:49:B5:5A:57:B0:57:A6:04
Certificate issuer: /CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Certificate serial: 376EB52D
Authority key identifier: E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/JPfwN6qvGuDIbUx7SbVaV7BXpgQ.roa
Signing time: Mon 23 May 2022 10:11:29 +0000
ROA not before: Mon 23 May 2022 10:11:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9146
IP address blocks: 195.222.32.0/19 maxlen: 21
195.222.32.0/20 maxlen: 20
195.222.32.0/21 maxlen: 21
195.222.40.0/21 maxlen: 21
109.175.0.0/17 maxlen: 21
109.175.4.0/23 maxlen: 23
109.175.8.0/24 maxlen: 24
195.222.49.0/24 maxlen: 24
195.222.48.0/20 maxlen: 20
109.175.6.0/23 maxlen: 23
195.222.48.0/21 maxlen: 21
109.175.12.0/23 maxlen: 23
195.222.56.0/21 maxlen: 21
109.175.16.0/22 maxlen: 22
109.175.24.0/24 maxlen: 24
109.175.22.0/23 maxlen: 23
109.175.20.0/23 maxlen: 23
109.175.26.0/24 maxlen: 24
109.175.28.0/23 maxlen: 23
109.175.30.0/24 maxlen: 24
85.92.226.0/24 maxlen: 24
85.92.224.0/19 maxlen: 21
85.92.227.0/24 maxlen: 24
85.92.230.0/24 maxlen: 24
85.92.228.0/23 maxlen: 23
185.12.76.0/24 maxlen: 24
185.12.78.0/23 maxlen: 23
80.65.64.0/19 maxlen: 21
80.65.64.0/21 maxlen: 21
80.65.64.0/22 maxlen: 22
89.146.128.0/18 maxlen: 21
80.65.68.0/22 maxlen: 22
80.65.72.0/22 maxlen: 22
80.65.72.0/21 maxlen: 21
80.65.76.0/22 maxlen: 22
80.65.80.0/21 maxlen: 21
80.65.80.0/22 maxlen: 22
80.65.84.0/22 maxlen: 22
80.65.88.0/21 maxlen: 21
80.65.88.0/22 maxlen: 22
80.65.92.0/22 maxlen: 22
92.36.128.0/17 maxlen: 21
92.36.232.0/22 maxlen: 22
92.36.236.0/22 maxlen: 22
92.36.192.0/21 maxlen: 21
109.163.147.0/24 maxlen: 24
109.163.148.0/22 maxlen: 22
109.163.152.0/21 maxlen: 21
109.163.146.0/24 maxlen: 24
109.163.160.0/20 maxlen: 20
109.163.160.0/21 maxlen: 21
109.163.170.0/24 maxlen: 24
109.163.168.0/23 maxlen: 23
109.163.168.0/21 maxlen: 23
109.163.172.0/22 maxlen: 22
109.163.171.0/24 maxlen: 24
109.163.176.0/21 maxlen: 21
109.163.176.0/20 maxlen: 21
109.163.184.0/21 maxlen: 21
109.163.184.0/22 maxlen: 22
109.163.190.0/23 maxlen: 23
109.163.188.0/23 maxlen: 23
31.176.216.0/22 maxlen: 22
31.176.220.0/22 maxlen: 22
109.163.128.0/22 maxlen: 22
109.163.128.0/19 maxlen: 19
109.163.128.0/18 maxlen: 18
109.163.132.0/22 maxlen: 22
109.163.136.0/21 maxlen: 21
109.163.144.0/23 maxlen: 23
37.203.64.0/18 maxlen: 21
31.176.160.0/20 maxlen: 20
31.176.176.0/20 maxlen: 20
37.203.112.0/22 maxlen: 22
31.176.128.0/20 maxlen: 20
31.176.128.0/17 maxlen: 21
37.203.120.0/22 maxlen: 22
37.203.124.0/22 maxlen: 22
31.176.144.0/20 maxlen: 20
109.175.98.0/23 maxlen: 23
109.175.96.0/22 maxlen: 22
109.175.96.0/23 maxlen: 23
109.175.100.0/22 maxlen: 22
109.175.102.0/23 maxlen: 23
109.175.100.0/23 maxlen: 23
109.175.104.0/22 maxlen: 22
109.175.104.0/23 maxlen: 23
109.175.108.0/22 maxlen: 22
109.175.112.0/22 maxlen: 22
109.175.106.0/23 maxlen: 23
109.175.116.0/22 maxlen: 22
109.175.120.0/22 maxlen: 22
109.175.124.0/22 maxlen: 22
109.175.40.0/22 maxlen: 22
109.175.44.0/23 maxlen: 23
109.175.46.0/23 maxlen: 23
2a02:27b0:5300::/40 maxlen: 40
2a02:27b0:4a00::/40 maxlen: 40
2a02:27b0::/32 maxlen: 32
2a02:27b0:4100::/40 maxlen: 40
2a02:27b0:4d00::/40 maxlen: 40
2a02:27b0:4500::/40 maxlen: 40
2a02:27b0:4c00::/40 maxlen: 40
2a02:27b0:4b00::/40 maxlen: 40
2a02:27b0:4400::/40 maxlen: 40
2a02:27b0:5500::/40 maxlen: 40
2a02:27b0:4200::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 930002221 (0x376eb52d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Validity
Not Before: May 23 10:11:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24f7f037aaaf1ae0c86d4c7b49b55a57b057a604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:87:30:fb:7d:a9:9a:3f:7f:76:6b:22:7a:a8:
90:9c:0b:58:02:88:12:a3:5d:ae:1b:45:22:9e:57:
ce:48:71:98:ba:73:72:b8:ce:57:90:f7:a4:69:22:
a4:d8:ae:fd:d4:2d:d9:c2:5d:d0:86:09:2e:a4:58:
75:87:0a:48:11:c1:1b:79:34:5a:cd:8c:b7:10:be:
62:ae:4a:11:9f:c1:ba:7b:bd:dd:90:b4:9a:13:de:
ed:c8:0c:c1:27:bd:84:82:0e:a8:3f:5a:d4:2c:b2:
e4:97:36:25:5f:db:5c:d1:a7:cb:27:ae:9c:d8:6c:
05:c6:59:ee:5e:77:8c:fe:05:c9:19:bb:14:f0:75:
c3:58:99:af:8b:11:14:7a:f5:de:10:dd:1c:e7:45:
b7:27:77:79:1e:20:1e:59:04:76:e6:94:af:9a:76:
22:2d:fd:c6:14:5a:8a:41:0b:09:a8:6d:d5:a9:51:
f4:16:fa:9e:db:d9:1f:12:cc:ed:ab:ac:31:83:2a:
bf:fa:21:67:48:a2:61:73:ba:53:62:2f:31:a8:8b:
04:2b:d8:49:34:f3:7a:fa:58:bc:b4:cf:23:98:ea:
2e:a5:68:7a:31:93:c0:2d:02:b9:2e:0f:d6:6b:1a:
bb:94:3d:d0:cc:8f:38:f1:b1:07:2f:d4:4b:b2:2a:
4b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F7:F0:37:AA:AF:1A:E0:C8:6D:4C:7B:49:B5:5A:57:B0:57:A6:04
X509v3 Authority Key Identifier:
keyid:E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/JPfwN6qvGuDIbUx7SbVaV7BXpgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.176.128.0/17
37.203.64.0/18
80.65.64.0/19
85.92.224.0/19
89.146.128.0/18
92.36.128.0/17
109.163.128.0/18
109.175.0.0/17
185.12.76.0/24
185.12.78.0/23
195.222.32.0/19
IPv6:
2a02:27b0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:18:fc:ac:8c:da:22:a7:51:2a:89:26:c4:30:53:d7:64:20:
5d:89:72:ab:ae:08:56:1f:43:ec:6d:7f:87:05:2b:9f:33:5a:
1c:c4:ac:d6:ae:c9:a1:01:f0:30:7a:75:71:1a:c5:83:69:dd:
67:97:b5:53:a2:35:0b:de:4e:6d:4e:b9:d9:5f:d9:ec:f9:9f:
d2:48:fa:b0:c9:e8:ae:9e:b4:c0:11:5c:18:ed:03:36:9f:46:
94:dd:be:e0:f2:77:b7:b0:3b:e3:8c:80:71:19:3c:8f:24:fe:
4d:f0:80:f9:32:14:17:28:31:13:ea:32:0e:f9:65:ec:f4:3c:
b9:af:d0:73:6c:19:3a:ca:3b:52:23:aa:93:9d:9b:c1:ad:c4:
9e:7f:f6:ae:8f:e1:13:4c:d0:3d:eb:24:56:18:c9:43:98:81:
2c:f0:dd:0c:ae:a8:ea:7a:65:3c:f0:79:eb:2d:36:7e:27:66:
ca:eb:cc:5d:84:01:50:dc:5c:15:89:1b:39:7d:d7:74:1a:7a:
c6:18:da:53:76:1a:69:06:d2:58:79:a5:e1:ca:57:08:9d:a1:
a6:7a:fe:fe:b7:39:b0:ca:48:08:2f:bc:eb:55:c8:0a:8f:f8:
16:59:89:6f:3c:4e:38:9e:db:88:20:24:9d:bc:1a:ec:d8:21:
05:b0:be:88
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:58 2025 by rpki-client