Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/6_EZwGoil4mE2YaWn9nvP_BvqYw.roa
File: 6_EZwGoil4mE2YaWn9nvP_BvqYw.roa (raw, json)
Hash identifier: ehUyFv9gH9YdluPvmqZccBG1PPrKdzMVVvGZQKrshZA=
Subject key identifier: EB:F1:19:C0:6A:22:97:89:84:D9:86:96:9F:D9:EF:3F:F0:6F:A9:8C
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 0183C58AE1FF724709672FCEBA026842B357
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/6_EZwGoil4mE2YaWn9nvP_BvqYw.roa
Signing time: Tue 11 Oct 2022 05:35:56 +0000
ROA not before: Tue 11 Oct 2022 05:35:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12975
IP address blocks: 103.215.4.0/22 maxlen: 22
43.255.108.0/22 maxlen: 22
182.161.60.0/22 maxlen: 22
45.127.179.0/24 maxlen: 24
45.127.178.0/24 maxlen: 24
45.127.177.0/24 maxlen: 24
45.127.176.0/22 maxlen: 22
45.127.176.0/24 maxlen: 24
213.244.121.0/24 maxlen: 24
139.190.176.0/20 maxlen: 20
213.244.71.0/24 maxlen: 24
213.244.70.0/23 maxlen: 24
213.244.70.0/24 maxlen: 24
83.244.78.0/24 maxlen: 24
213.244.76.0/24 maxlen: 24
144.48.236.0/22 maxlen: 22
83.244.75.0/24 maxlen: 24
83.244.74.0/24 maxlen: 24
213.244.73.0/24 maxlen: 24
83.244.73.0/24 maxlen: 24
213.244.72.0/21 maxlen: 24
213.244.72.0/24 maxlen: 24
83.244.79.0/24 maxlen: 24
24.42.64.0/18 maxlen: 18
103.231.105.0/24 maxlen: 24
103.231.104.0/24 maxlen: 24
103.231.107.0/24 maxlen: 24
103.231.106.0/24 maxlen: 24
103.53.4.0/24 maxlen: 24
103.53.4.0/22 maxlen: 24
103.248.38.0/24 maxlen: 24
103.248.37.0/24 maxlen: 24
103.248.36.0/24 maxlen: 24
193.227.236.0/23 maxlen: 23
103.248.39.0/24 maxlen: 24
103.196.120.0/22 maxlen: 22
103.206.108.0/22 maxlen: 22
103.193.132.0/22 maxlen: 22
193.223.252.0/23 maxlen: 23
203.189.236.0/22 maxlen: 22
103.239.96.0/22 maxlen: 22
103.37.85.0/24 maxlen: 24
103.37.84.0/24 maxlen: 24
103.37.84.0/22 maxlen: 22
103.37.87.0/24 maxlen: 24
103.37.86.0/24 maxlen: 24
113.212.64.0/22 maxlen: 22
45.121.105.0/24 maxlen: 24
45.121.104.0/22 maxlen: 22
45.121.106.0/23 maxlen: 23
103.206.36.0/22 maxlen: 22
43.243.24.0/22 maxlen: 22
103.27.144.0/22 maxlen: 22
43.243.35.0/24 maxlen: 24
43.243.34.0/24 maxlen: 24
43.243.32.0/24 maxlen: 24
43.243.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c5:8a:e1:ff:72:47:09:67:2f:ce:ba:02:68:42:b3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Oct 11 05:35:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebf119c06a22978984d986969fd9ef3ff06fa98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:76:df:a3:a9:64:78:f9:1f:b0:88:e4:64:ec:
03:c7:2e:88:60:88:46:e3:3a:d7:80:0d:9e:bb:ab:
ee:88:69:b5:ed:bf:8a:64:a0:91:96:3e:9c:7c:94:
20:97:e2:35:65:53:f3:67:ad:44:6a:15:88:fa:86:
cc:ed:2a:9b:97:d3:47:27:8f:a5:39:13:f9:e5:28:
3a:fd:af:d5:c2:0a:2d:a8:5f:6b:c8:bd:f6:10:07:
d7:2d:d1:b3:a7:4f:d6:f1:bc:20:ed:e2:94:7e:28:
3c:7b:2c:a8:92:7c:26:d8:a0:b2:39:6f:f3:7c:58:
ce:0a:27:64:8e:80:5a:a9:f0:04:1e:85:da:e7:ac:
db:c7:ba:81:d0:16:e6:18:e9:37:7f:7c:4d:52:94:
a4:99:4b:2a:d6:88:d7:46:62:c2:8e:b4:74:a2:6b:
6f:20:15:5a:0b:28:3a:e5:c2:5f:77:fd:d9:5e:e0:
a0:69:4d:39:bb:31:6d:a3:d3:75:32:f7:db:90:66:
4a:7a:59:d8:a9:7e:4f:94:17:07:19:93:c9:25:ce:
27:5b:17:d6:91:00:22:36:5c:bf:00:ac:47:96:0b:
92:19:6c:d9:59:75:e4:fc:e3:f8:11:e1:c0:61:4c:
d0:57:17:51:f4:c1:73:24:46:52:bf:25:81:37:57:
68:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F1:19:C0:6A:22:97:89:84:D9:86:96:9F:D9:EF:3F:F0:6F:A9:8C
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/6_EZwGoil4mE2YaWn9nvP_BvqYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.42.64.0/18
43.243.24.0/22
43.243.32.0/22
43.255.108.0/22
45.121.104.0/22
45.127.176.0/22
83.244.73.0-83.244.75.255
83.244.78.0/23
103.27.144.0/22
103.37.84.0/22
103.53.4.0/22
103.193.132.0/22
103.196.120.0/22
103.206.36.0/22
103.206.108.0/22
103.215.4.0/22
103.231.104.0/22
103.239.96.0/22
103.248.36.0/22
113.212.64.0/22
139.190.176.0/20
144.48.236.0/22
182.161.60.0/22
193.223.252.0/23
193.227.236.0/23
203.189.236.0/22
213.244.70.0-213.244.79.255
213.244.121.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:e2:8a:c7:cc:6e:09:ea:b3:4f:35:d3:2e:10:da:ad:cf:f2:
dd:c8:99:b5:c2:97:fc:d0:75:20:5c:76:98:a9:7c:8f:a9:d2:
02:91:f4:5d:f7:4a:a4:07:8f:1d:3a:26:ac:dc:85:26:00:f3:
e2:92:db:b4:89:73:a3:a1:b5:b4:01:07:9a:af:df:a8:e7:92:
22:d7:7f:8b:8e:01:c1:8c:bf:7f:9a:e4:b5:38:72:76:7e:23:
b6:e1:cb:72:c3:31:03:11:14:c9:8d:3f:9a:b8:5f:e8:aa:0f:
ac:5c:ee:25:7d:ce:fa:6c:34:ec:b2:f3:b2:c3:04:c4:4c:29:
3b:a6:cb:37:68:c4:b4:40:15:b3:df:01:a9:33:64:f5:10:8c:
15:37:de:fc:69:1d:96:d0:af:bb:ce:5d:e0:23:0d:53:4f:78:
44:81:f3:b7:a7:e0:a0:9a:54:0a:a4:66:9a:c8:4f:d8:c5:f2:
ac:f9:c6:e7:0a:1d:7e:37:06:b6:9a:14:28:95:80:51:7f:f3:
27:c7:2a:c4:93:6d:14:cf:1c:94:f8:e6:60:c9:9a:f5:ee:c5:
a9:97:2c:08:cd:4d:07:d0:a4:ae:06:57:42:70:25:5c:88:36:
71:ee:92:70:bf:60:bc:fc:5d:88:a8:4b:39:62:5a:a1:c4:af:
59:fd:6a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:09 2024 by rpki-client on console-ams.rpki-client.org