Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/88vaOv-ZioB9n6zOTVVqtNjUcQk.roa
File: 88vaOv-ZioB9n6zOTVVqtNjUcQk.roa (raw, json)
Hash identifier: sl6HP0Mx37P8M4jlEfzfH/JPoXCsB1f17esPH87Nrbs=
Subject key identifier: F3:CB:DA:3A:FF:99:8A:80:7D:9F:AC:CE:4D:55:6A:B4:D8:D4:71:09
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 0184FDB57CE20A08F88544D2B5A029F7F39C
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/88vaOv-ZioB9n6zOTVVqtNjUcQk.roa
Signing time: Sat 10 Dec 2022 20:24:00 +0000
ROA not before: Sat 10 Dec 2022 20:24:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/21 maxlen: 21
5.201.128.0/18 maxlen: 18
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
92.114.16.0/20 maxlen: 24
5.201.168.0/22 maxlen: 22
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
89.43.0.0/21 maxlen: 21
89.43.4.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.8.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
89.37.0.0/20 maxlen: 20
89.37.0.0/24 maxlen: 24
89.37.8.0/24 maxlen: 24
89.37.8.0/22 maxlen: 22
92.114.28.0/22 maxlen: 22
5.201.174.0/24 maxlen: 24
185.22.30.0/23 maxlen: 23
185.103.84.0/24 maxlen: 24
185.103.84.0/22 maxlen: 22
185.103.85.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.24.0/22 maxlen: 22
185.135.228.0/22 maxlen: 22
37.156.31.0/24 maxlen: 24
37.156.30.0/23 maxlen: 23
185.182.221.0/24 maxlen: 24
185.182.220.0/22 maxlen: 22
185.182.222.0/23 maxlen: 23
185.176.32.0/22 maxlen: 22
188.213.64.0/20 maxlen: 21
185.136.100.0/22 maxlen: 22
89.37.15.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
94.101.128.0/21 maxlen: 21
94.101.128.0/20 maxlen: 24
185.162.40.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
2a00:5ca0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fd:b5:7c:e2:0a:08:f8:85:44:d2:b5:a0:29:f7:f3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Dec 10 20:24:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3cbda3aff998a807d9facce4d556ab4d8d47109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:91:a4:91:47:6e:bd:f3:10:36:6d:2b:57:
e4:3d:f6:d0:55:d6:68:c0:a6:3b:e8:c6:8b:d4:5b:
92:21:51:03:64:3b:0f:d4:67:5a:93:a2:e6:75:5f:
32:16:89:24:5d:cf:c3:93:91:30:7f:46:01:a9:9a:
1a:c0:a2:19:ef:2c:31:89:ea:f6:46:ff:2f:6c:4f:
84:72:9c:d5:a5:b3:50:ba:59:fe:12:fc:49:a4:d8:
4f:59:a7:62:c8:27:81:7b:2d:84:29:e8:0f:9f:f7:
30:cb:20:7a:f0:4a:d5:2d:77:00:f1:9b:39:a2:3a:
43:54:ef:26:58:56:d5:55:48:33:d0:ba:e3:1f:9e:
45:01:eb:f0:60:7b:f4:34:11:37:8a:6d:a1:19:54:
be:89:02:9a:c3:ba:68:a6:6e:ce:13:c0:81:97:39:
5c:c8:c0:b3:5d:a5:70:fb:fa:67:67:c5:1b:c9:17:
9a:09:24:28:8f:03:98:f7:72:8e:5b:42:61:6d:8d:
36:44:71:d4:2b:e0:a2:4f:62:2f:b3:57:8f:36:83:
1f:d5:e3:a8:86:1d:b1:c3:a5:d1:d7:2a:58:92:cb:
57:37:e3:5f:04:70:3e:a4:78:a5:3a:2f:b2:ee:7c:
52:4d:e4:e1:48:83:c1:e1:21:6d:f1:4c:32:80:17:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CB:DA:3A:FF:99:8A:80:7D:9F:AC:CE:4D:55:6A:B4:D8:D4:71:09
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/88vaOv-ZioB9n6zOTVVqtNjUcQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0-37.156.27.255
37.156.30.0/23
89.37.0.0/20
89.43.0.0-89.43.13.255
92.114.16.0/20
94.101.128.0/20
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
IPv6:
2a00:5ca0::/32
Signature Algorithm: sha256WithRSAEncryption
47:be:f1:7b:f4:0e:56:de:42:ff:68:76:c1:82:7a:75:17:a0:
04:ef:c4:5d:8a:a0:d3:33:5f:c6:94:1e:fb:76:d7:cb:e1:7b:
ea:59:3c:ed:7d:46:61:ca:58:22:36:2b:3f:ba:58:c6:03:75:
4b:80:8b:a6:d2:0d:20:1e:e5:53:1b:f4:86:24:1f:75:09:f2:
95:d3:77:a0:32:08:01:3b:ae:3c:57:37:71:21:a5:89:4c:dd:
2e:a2:b1:ce:a7:5f:98:f1:6f:6f:f9:5e:a3:c0:59:27:14:21:
c0:92:70:5d:c4:83:31:68:fc:30:f2:ea:14:48:2f:08:e9:42:
44:d8:6c:29:78:23:05:b0:03:3f:2e:14:c1:7a:8e:c7:88:8d:
d7:14:b7:3b:97:57:e1:6f:32:94:63:0d:d2:3e:76:e5:dd:ca:
9a:3f:f5:ee:b7:89:67:27:5c:7e:80:c0:03:7d:af:ea:0d:ab:
9c:96:a8:8c:56:a5:92:aa:c7:81:5f:34:67:18:26:ed:ca:29:
fc:7f:fe:51:ae:79:37:12:13:b3:85:fa:4d:82:39:a4:3b:a8:
4a:8f:af:24:96:9d:e1:b9:a3:17:6b:70:45:c7:ce:1a:2e:ab:
91:eb:f6:46:ff:45:bb:12:1c:97:1c:13:d9:c6:9e:d0:fc:07:
0b:90:31:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:12 2024 by rpki-client on console-fra.rpki-client.org