Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/a2NpxZviGepYPrWCs83wSWdbc30.roa
File: a2NpxZviGepYPrWCs83wSWdbc30.roa (raw, json)
Hash identifier: 4bGNa3lnkN8RtvLMITL991Gb3F5NkTGyfs9sFTSOIXY=
Subject key identifier: 6B:63:69:C5:9B:E2:19:EA:58:3E:B5:82:B3:CD:F0:49:67:5B:73:7D
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 057D968D
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/a2NpxZviGepYPrWCs83wSWdbc30.roa
Signing time: Tue 31 May 2022 10:40:15 +0000
ROA not before: Tue 31 May 2022 10:40:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/21 maxlen: 21
5.201.128.0/18 maxlen: 18
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
92.114.16.0/20 maxlen: 24
5.201.168.0/22 maxlen: 22
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
89.43.0.0/21 maxlen: 21
89.43.4.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.8.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
89.37.0.0/20 maxlen: 20
89.37.0.0/24 maxlen: 24
89.37.8.0/22 maxlen: 22
92.114.28.0/22 maxlen: 22
185.22.30.0/23 maxlen: 23
185.103.84.0/22 maxlen: 22
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.24.0/22 maxlen: 22
185.135.228.0/22 maxlen: 22
37.156.31.0/24 maxlen: 24
37.156.30.0/23 maxlen: 23
185.182.221.0/24 maxlen: 24
185.182.220.0/22 maxlen: 22
185.182.222.0/23 maxlen: 23
185.176.32.0/22 maxlen: 22
188.213.64.0/20 maxlen: 21
185.136.100.0/22 maxlen: 22
89.37.15.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
94.101.128.0/21 maxlen: 21
94.101.128.0/20 maxlen: 24
185.162.40.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
2a00:5ca0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92116621 (0x57d968d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: May 31 10:40:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b6369c59be219ea583eb582b3cdf049675b737d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:64:d2:25:a9:67:f1:47:e5:ba:8d:2b:39:
cc:94:5e:b2:e8:0c:0e:e6:ca:cd:b0:17:e6:9c:c9:
5c:68:83:1a:04:16:52:d0:88:e0:f8:a1:06:0b:f1:
53:ec:4b:06:4b:3a:f7:50:51:80:d7:23:4c:ce:09:
91:7d:2d:6b:69:b5:cd:57:cc:a8:89:a8:7f:a9:98:
9a:5b:80:54:b2:6f:73:8c:e3:1d:23:c7:3a:07:33:
98:77:c9:09:42:1d:9c:61:89:16:cf:45:95:50:32:
76:1f:43:08:28:45:c5:0d:a8:eb:21:9e:2a:ce:df:
b0:02:36:d4:56:91:2f:dc:27:fd:7f:8e:4a:63:02:
01:7b:03:f3:cf:23:4e:17:d4:c2:33:4a:c6:1f:68:
39:e9:14:c7:ff:9b:12:5f:25:b1:c5:95:cb:b7:b9:
40:35:46:7b:9e:fd:e6:0a:00:4e:96:dc:8d:48:d9:
b1:78:cb:7f:33:32:8c:5f:36:d9:f7:f3:22:29:0d:
07:dc:d9:6d:e1:12:2b:ac:49:5f:f3:f1:7c:fc:2a:
c2:ca:c3:64:b5:0b:49:c4:b9:9c:a7:0a:b5:56:d4:
70:7d:d4:48:e6:fd:15:ee:9c:af:3b:de:e4:69:11:
3d:bd:dc:1a:14:d5:46:d0:7b:c6:71:b3:5d:da:9c:
bf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:63:69:C5:9B:E2:19:EA:58:3E:B5:82:B3:CD:F0:49:67:5B:73:7D
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/a2NpxZviGepYPrWCs83wSWdbc30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0-37.156.27.255
37.156.30.0/23
89.37.0.0/20
89.43.0.0-89.43.13.255
92.114.16.0/20
94.101.128.0/20
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
IPv6:
2a00:5ca0::/32
Signature Algorithm: sha256WithRSAEncryption
6d:1a:0a:de:bb:d4:9f:c3:0a:90:03:77:53:ae:1f:95:4e:81:
be:e0:14:96:12:06:bb:71:e7:51:6e:2e:aa:a4:3b:31:06:f2:
2a:62:05:6d:ec:cc:1d:ee:53:85:98:94:ef:da:2b:55:b3:b4:
e3:58:a1:c0:bc:ef:e2:02:b7:58:90:a6:df:c2:c8:9f:0d:2f:
a6:7e:58:8e:61:bb:28:7d:06:48:40:d2:7c:d8:2c:f9:71:a7:
63:66:f3:fa:35:4a:2b:d3:0f:11:bb:19:55:84:02:a7:4f:77:
38:82:4a:f4:b5:7f:f7:08:a5:96:8c:98:c6:82:29:47:d8:50:
75:c6:73:2e:b1:be:29:ce:0e:64:dd:b8:93:65:b4:da:04:58:
93:20:3f:94:57:60:fd:cd:b7:cc:e2:70:27:8b:88:95:2b:1a:
6a:d6:d8:ff:2f:eb:da:57:18:75:e6:ed:78:07:d8:2f:fa:0b:
56:03:13:cb:e4:ae:d7:82:7c:bd:4e:76:d1:dd:68:fa:0f:04:
ea:23:23:fc:a3:40:be:d1:f3:ea:b9:6b:8e:9c:e1:c3:60:27:
6e:6e:08:d7:75:fb:54:f8:b4:fd:ac:fb:61:f4:2d:4b:81:4e:
52:c1:c5:7a:76:b5:88:db:4f:eb:5d:72:ba:43:12:c5:36:e2:
ae:a3:3a:c6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:12 2024 by rpki-client on console-fra.rpki-client.org