Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/BXEF91W8SmuQP673wCp5sGnrDJY.roa
File: BXEF91W8SmuQP673wCp5sGnrDJY.roa (raw, json)
Hash identifier: HtnDJtKZEJe6OMHToPmjYHofrA9CNzAQNEZuR8IxfpU=
Subject key identifier: 05:71:05:F7:55:BC:4A:6B:90:3F:AE:F7:C0:2A:79:B0:69:EB:0C:96
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 01843CA1D60A4CA3736B8C3800EAABD26356
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/BXEF91W8SmuQP673wCp5sGnrDJY.roa
Signing time: Thu 03 Nov 2022 08:35:49 +0000
ROA not before: Thu 03 Nov 2022 08:35:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 43.255.108.0/22 maxlen: 22
103.215.4.0/22 maxlen: 22
188.161.40.0/21 maxlen: 21
188.161.48.0/21 maxlen: 21
188.161.56.0/21 maxlen: 21
213.6.64.0/18 maxlen: 18
182.161.60.0/22 maxlen: 22
213.6.0.0/18 maxlen: 18
213.6.0.0/16 maxlen: 24
188.161.0.0/16 maxlen: 24
188.161.134.0/23 maxlen: 23
46.60.64.0/18 maxlen: 24
185.19.220.0/22 maxlen: 22
185.19.220.0/24 maxlen: 24
185.19.221.0/24 maxlen: 24
185.19.222.0/24 maxlen: 24
185.19.223.0/24 maxlen: 24
45.127.176.0/22 maxlen: 22
45.127.176.0/24 maxlen: 24
45.127.177.0/24 maxlen: 24
45.127.178.0/24 maxlen: 24
45.127.179.0/24 maxlen: 24
188.161.104.0/24 maxlen: 24
188.161.105.0/24 maxlen: 24
188.161.104.0/21 maxlen: 21
188.161.112.0/22 maxlen: 22
188.161.106.0/24 maxlen: 24
188.161.107.0/24 maxlen: 24
188.161.108.0/24 maxlen: 24
188.161.109.0/24 maxlen: 24
188.161.110.0/24 maxlen: 24
188.161.111.0/24 maxlen: 24
188.161.116.0/22 maxlen: 22
213.6.128.0/18 maxlen: 18
158.140.16.0/20 maxlen: 20
158.140.108.0/22 maxlen: 22
158.140.112.0/22 maxlen: 22
158.140.116.0/22 maxlen: 22
158.140.120.0/22 maxlen: 22
158.140.124.0/22 maxlen: 22
43.241.158.0/24 maxlen: 24
43.241.159.0/24 maxlen: 24
43.241.156.0/22 maxlen: 22
43.241.156.0/24 maxlen: 24
43.241.157.0/24 maxlen: 24
103.53.4.0/24 maxlen: 24
103.53.4.0/22 maxlen: 24
158.140.64.0/22 maxlen: 22
158.140.64.0/18 maxlen: 24
158.140.68.0/23 maxlen: 23
158.140.80.0/22 maxlen: 22
158.140.84.0/22 maxlen: 22
103.248.36.0/24 maxlen: 24
103.248.37.0/24 maxlen: 24
103.248.38.0/24 maxlen: 24
158.140.88.0/22 maxlen: 22
103.248.36.0/22 maxlen: 22
193.227.236.0/23 maxlen: 23
103.248.39.0/24 maxlen: 24
45.113.108.0/24 maxlen: 24
45.113.109.0/24 maxlen: 24
45.113.110.0/24 maxlen: 24
45.113.111.0/24 maxlen: 24
158.140.92.0/22 maxlen: 22
45.113.108.0/22 maxlen: 22
158.140.96.0/22 maxlen: 22
158.140.100.0/22 maxlen: 22
158.140.104.0/22 maxlen: 22
5.11.40.0/21 maxlen: 21
5.11.46.0/24 maxlen: 24
5.11.47.0/24 maxlen: 24
103.206.108.0/22 maxlen: 22
176.65.0.0/21 maxlen: 24
176.65.8.0/22 maxlen: 22
103.193.132.0/22 maxlen: 22
103.239.96.0/22 maxlen: 22
103.37.84.0/22 maxlen: 22
103.37.84.0/24 maxlen: 24
103.37.85.0/24 maxlen: 24
103.37.87.0/24 maxlen: 24
103.37.86.0/24 maxlen: 24
86.104.188.0/22 maxlen: 22
113.212.64.0/22 maxlen: 22
203.30.104.0/22 maxlen: 22
103.57.110.0/24 maxlen: 24
103.57.111.0/24 maxlen: 24
103.57.108.0/24 maxlen: 24
103.57.109.0/24 maxlen: 24
103.57.108.0/22 maxlen: 22
77.91.148.0/22 maxlen: 24
1.179.40.0/21 maxlen: 21
103.206.36.0/22 maxlen: 22
1.179.72.0/21 maxlen: 21
82.213.0.0/18 maxlen: 24
1.179.88.0/21 maxlen: 21
77.91.128.0/21 maxlen: 21
77.91.128.0/18 maxlen: 24
77.91.136.0/21 maxlen: 21
45.117.40.0/22 maxlen: 22
45.117.42.0/24 maxlen: 24
45.117.43.0/24 maxlen: 24
45.117.40.0/24 maxlen: 24
45.117.41.0/24 maxlen: 24
1.178.112.0/20 maxlen: 20
1.178.128.0/20 maxlen: 20
213.244.117.0/24 maxlen: 24
213.244.115.0/24 maxlen: 24
213.244.116.0/24 maxlen: 24
213.244.124.0/22 maxlen: 22
213.244.121.0/24 maxlen: 24
213.244.122.0/24 maxlen: 24
139.190.176.0/20 maxlen: 20
37.75.208.0/21 maxlen: 21
37.75.211.0/24 maxlen: 24
213.244.70.0/24 maxlen: 24
213.244.71.0/24 maxlen: 24
213.244.70.0/23 maxlen: 24
213.244.64.0/18 maxlen: 24
144.48.236.0/22 maxlen: 22
83.244.75.0/24 maxlen: 24
213.244.76.0/24 maxlen: 24
83.244.78.0/24 maxlen: 24
213.244.72.0/24 maxlen: 24
213.244.73.0/24 maxlen: 24
83.244.73.0/24 maxlen: 24
83.244.74.0/24 maxlen: 24
213.244.72.0/21 maxlen: 24
83.244.79.0/24 maxlen: 24
24.42.64.0/18 maxlen: 18
139.190.128.0/18 maxlen: 24
103.231.104.0/22 maxlen: 22
103.231.104.0/24 maxlen: 24
103.231.105.0/24 maxlen: 24
195.123.162.0/24 maxlen: 24
195.123.160.0/23 maxlen: 23
195.123.160.0/21 maxlen: 21
103.231.107.0/24 maxlen: 24
195.123.161.0/24 maxlen: 24
195.123.163.0/24 maxlen: 24
195.123.160.0/24 maxlen: 24
103.231.106.0/24 maxlen: 24
195.123.164.0/24 maxlen: 24
195.123.165.0/24 maxlen: 24
195.123.166.0/24 maxlen: 24
195.123.167.0/24 maxlen: 24
195.123.112.0/24 maxlen: 24
195.123.113.0/24 maxlen: 24
195.123.114.0/24 maxlen: 24
195.123.115.0/24 maxlen: 24
195.123.116.0/24 maxlen: 24
195.123.117.0/24 maxlen: 24
195.123.118.0/24 maxlen: 24
195.123.112.0/21 maxlen: 21
195.123.119.0/24 maxlen: 24
103.196.120.0/22 maxlen: 22
203.28.19.0/24 maxlen: 24
194.176.98.0/23 maxlen: 24
43.243.95.0/24 maxlen: 24
43.243.92.0/24 maxlen: 24
43.243.93.0/24 maxlen: 24
43.243.94.0/24 maxlen: 24
43.243.92.0/22 maxlen: 22
83.244.0.0/17 maxlen: 24
193.223.252.0/23 maxlen: 23
203.189.236.0/22 maxlen: 22
194.169.188.0/23 maxlen: 23
212.14.224.0/19 maxlen: 24
213.6.192.0/18 maxlen: 18
45.134.203.0/24 maxlen: 24
45.134.202.0/24 maxlen: 24
45.134.202.0/23 maxlen: 23
45.121.104.0/24 maxlen: 24
45.121.105.0/24 maxlen: 24
45.121.104.0/22 maxlen: 22
45.121.106.0/24 maxlen: 24
45.121.107.0/24 maxlen: 24
45.121.106.0/23 maxlen: 23
43.243.24.0/22 maxlen: 22
103.27.144.0/22 maxlen: 22
43.243.32.0/24 maxlen: 24
43.243.34.0/24 maxlen: 24
43.243.35.0/24 maxlen: 24
43.243.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3c:a1:d6:0a:4c:a3:73:6b:8c:38:00:ea:ab:d2:63:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Nov 3 08:35:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=057105f755bc4a6b903faef7c02a79b069eb0c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:5f:cf:ac:36:b4:8b:83:b9:b1:b2:ba:ed:
1b:99:3c:61:3c:ee:c9:33:3f:b1:12:50:8e:9d:42:
3c:7c:29:04:81:c8:a0:3a:83:fe:e3:ab:9f:83:d3:
6a:70:ce:49:e0:1e:1d:7d:9f:c7:ac:c3:1e:15:2d:
fc:e9:81:e8:a7:c5:d5:7e:db:05:34:c1:8c:67:5f:
a5:cf:a4:00:28:2a:71:c5:62:70:34:9c:cb:3e:1c:
66:81:df:00:10:cb:c9:77:e7:60:12:7e:ef:09:45:
86:66:c9:f1:f2:7a:04:0a:4c:a5:a8:a3:16:47:02:
1c:b4:eb:09:5f:b2:60:a1:3c:24:ce:cc:83:6c:3c:
4c:7a:9b:18:05:0e:2a:43:45:08:e4:42:37:cf:3c:
4b:01:5e:a4:81:92:86:34:89:5a:f1:de:58:c9:db:
50:25:6f:62:46:4a:ee:cf:9e:a1:1c:76:d0:df:ba:
34:be:39:3f:2e:ef:1b:d0:d0:f8:08:f4:35:be:e0:
49:f7:90:d1:01:34:d2:03:c5:f6:69:50:f8:9f:7a:
bc:b3:00:fd:62:e9:5d:25:fc:74:bf:7e:12:b4:4d:
c7:3b:fb:c5:92:6c:e6:4c:55:94:80:3c:8b:1f:07:
fa:62:9c:b0:f6:9d:f3:8f:71:e1:a6:0e:a5:03:84:
06:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:71:05:F7:55:BC:4A:6B:90:3F:AE:F7:C0:2A:79:B0:69:EB:0C:96
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/BXEF91W8SmuQP673wCp5sGnrDJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.112.0-1.178.143.255
1.179.40.0/21
1.179.72.0/21
1.179.88.0/21
5.11.40.0/21
24.42.64.0/18
37.75.208.0/21
43.241.156.0/22
43.243.24.0/22
43.243.32.0/22
43.243.92.0/22
43.255.108.0/22
45.113.108.0/22
45.117.40.0/22
45.121.104.0/22
45.127.176.0/22
45.134.202.0/23
46.60.64.0/18
77.91.128.0/18
82.213.0.0/18
83.244.0.0/17
86.104.188.0/22
103.27.144.0/22
103.37.84.0/22
103.53.4.0/22
103.57.108.0/22
103.193.132.0/22
103.196.120.0/22
103.206.36.0/22
103.206.108.0/22
103.215.4.0/22
103.231.104.0/22
103.239.96.0/22
103.248.36.0/22
113.212.64.0/22
139.190.128.0/18
144.48.236.0/22
158.140.16.0/20
158.140.64.0/18
176.65.0.0-176.65.11.255
182.161.60.0/22
185.19.220.0/22
188.161.0.0/16
193.223.252.0/23
193.227.236.0/23
194.169.188.0/23
194.176.98.0/23
195.123.112.0/21
195.123.160.0/21
203.28.19.0/24
203.30.104.0/22
203.189.236.0/22
212.14.224.0/19
213.6.0.0/16
213.244.64.0/18
Signature Algorithm: sha256WithRSAEncryption
90:60:9d:8f:82:9e:07:56:c3:4d:d6:0d:e9:1b:f5:8e:23:0b:
1e:18:cc:92:cf:df:44:10:4a:fc:1d:ee:6a:e1:ab:6b:9b:06:
b4:4e:e1:07:d8:12:77:18:e7:06:73:a4:66:52:a6:22:03:2f:
05:17:db:0a:8c:b7:4b:5a:c1:61:36:4d:e6:a4:66:00:8b:39:
55:cf:b0:7a:4a:9f:62:e1:78:c2:0a:c8:bb:bb:b3:f5:f9:60:
0a:d7:55:8d:43:95:f5:9a:fa:c0:8f:51:f6:ad:9b:19:ba:bb:
3d:44:de:c3:2a:eb:df:81:74:3d:03:23:5c:43:c4:80:60:25:
6f:54:62:39:ac:1c:e4:ac:df:4b:2f:b7:81:a0:ab:73:80:f1:
bd:ea:b7:97:29:25:c7:e7:44:a9:2b:eb:ed:e9:00:b4:4d:e6:
ee:d0:4c:b0:fb:f3:68:c3:b6:ae:7e:1f:1d:6c:77:29:57:e5:
09:cf:a3:3c:1b:8e:85:aa:96:cd:24:34:e0:cc:21:3f:af:7d:
a4:ce:a1:78:6c:97:7d:2c:e4:29:55:54:3c:c3:05:80:1c:e0:
1a:32:7f:66:bd:02:5b:15:4d:32:76:6a:32:0b:fe:d3:40:4b:
14:b7:b0:5d:ca:dd:58:a2:7b:fa:4b:ed:59:08:1c:a5:07:19:
2b:91:8a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:09 2024 by rpki-client on console-ams.rpki-client.org