Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/L60gVm39B6IvN0PC5hHwTN1aXhI.roa
File: L60gVm39B6IvN0PC5hHwTN1aXhI.roa (raw, json)
Hash identifier: 76DAG0w5YObzBwUZpA/cw29NZRqwx8ESBK0+fnbVNNc=
Subject key identifier: 2F:AD:20:56:6D:FD:07:A2:2F:37:43:C2:E6:11:F0:4C:DD:5A:5E:12
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 0184289AE8E6D6E328D2125885C47A907C32
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/L60gVm39B6IvN0PC5hHwTN1aXhI.roa
Signing time: Sun 30 Oct 2022 11:15:51 +0000
ROA not before: Sun 30 Oct 2022 11:15:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 43.255.108.0/22 maxlen: 22
103.215.4.0/22 maxlen: 22
182.161.60.0/22 maxlen: 22
213.6.0.0/16 maxlen: 24
188.161.0.0/16 maxlen: 24
188.161.134.0/23 maxlen: 23
46.60.64.0/18 maxlen: 24
185.19.220.0/22 maxlen: 22
185.19.220.0/24 maxlen: 24
185.19.221.0/24 maxlen: 24
185.19.222.0/24 maxlen: 24
185.19.223.0/24 maxlen: 24
45.127.176.0/22 maxlen: 22
45.127.176.0/24 maxlen: 24
45.127.177.0/24 maxlen: 24
45.127.178.0/24 maxlen: 24
45.127.179.0/24 maxlen: 24
188.161.104.0/24 maxlen: 24
188.161.105.0/24 maxlen: 24
188.161.104.0/21 maxlen: 21
188.161.112.0/22 maxlen: 22
188.161.106.0/24 maxlen: 24
188.161.107.0/24 maxlen: 24
188.161.108.0/24 maxlen: 24
188.161.109.0/24 maxlen: 24
188.161.110.0/24 maxlen: 24
188.161.111.0/24 maxlen: 24
188.161.116.0/22 maxlen: 22
158.140.16.0/20 maxlen: 20
158.140.108.0/22 maxlen: 22
158.140.112.0/22 maxlen: 22
158.140.116.0/22 maxlen: 22
158.140.120.0/22 maxlen: 22
158.140.124.0/22 maxlen: 22
43.241.158.0/24 maxlen: 24
43.241.159.0/24 maxlen: 24
43.241.156.0/22 maxlen: 22
43.241.156.0/24 maxlen: 24
43.241.157.0/24 maxlen: 24
103.53.4.0/24 maxlen: 24
103.53.4.0/22 maxlen: 24
158.140.64.0/22 maxlen: 22
158.140.64.0/18 maxlen: 24
158.140.68.0/23 maxlen: 23
103.248.36.0/24 maxlen: 24
103.248.37.0/24 maxlen: 24
103.248.38.0/24 maxlen: 24
193.227.236.0/23 maxlen: 23
103.248.39.0/24 maxlen: 24
45.113.108.0/24 maxlen: 24
45.113.109.0/24 maxlen: 24
45.113.110.0/24 maxlen: 24
45.113.111.0/24 maxlen: 24
45.113.108.0/22 maxlen: 22
158.140.100.0/22 maxlen: 22
158.140.104.0/22 maxlen: 22
5.11.40.0/21 maxlen: 21
5.11.46.0/24 maxlen: 24
5.11.47.0/24 maxlen: 24
103.206.108.0/22 maxlen: 22
176.65.0.0/21 maxlen: 24
176.65.8.0/22 maxlen: 22
103.193.132.0/22 maxlen: 22
103.239.96.0/22 maxlen: 22
103.37.84.0/22 maxlen: 22
103.37.84.0/24 maxlen: 24
103.37.85.0/24 maxlen: 24
103.37.87.0/24 maxlen: 24
103.37.86.0/24 maxlen: 24
86.104.188.0/22 maxlen: 22
113.212.64.0/22 maxlen: 22
203.30.104.0/22 maxlen: 22
103.57.110.0/24 maxlen: 24
103.57.111.0/24 maxlen: 24
103.57.108.0/24 maxlen: 24
103.57.109.0/24 maxlen: 24
103.57.108.0/22 maxlen: 22
77.91.148.0/22 maxlen: 24
1.179.40.0/21 maxlen: 21
103.206.36.0/22 maxlen: 22
1.179.72.0/21 maxlen: 21
82.213.0.0/18 maxlen: 24
1.179.88.0/21 maxlen: 21
77.91.128.0/21 maxlen: 21
77.91.128.0/18 maxlen: 24
77.91.136.0/21 maxlen: 21
45.117.40.0/22 maxlen: 22
45.117.42.0/24 maxlen: 24
45.117.43.0/24 maxlen: 24
45.117.40.0/24 maxlen: 24
45.117.41.0/24 maxlen: 24
1.178.112.0/20 maxlen: 20
1.178.128.0/20 maxlen: 20
213.244.117.0/24 maxlen: 24
213.244.115.0/24 maxlen: 24
213.244.116.0/24 maxlen: 24
213.244.124.0/22 maxlen: 22
213.244.121.0/24 maxlen: 24
213.244.122.0/24 maxlen: 24
139.190.176.0/20 maxlen: 20
37.75.208.0/21 maxlen: 21
37.75.211.0/24 maxlen: 24
213.244.70.0/24 maxlen: 24
213.244.71.0/24 maxlen: 24
213.244.70.0/23 maxlen: 24
213.244.64.0/18 maxlen: 24
144.48.236.0/22 maxlen: 22
83.244.75.0/24 maxlen: 24
213.244.76.0/24 maxlen: 24
83.244.78.0/24 maxlen: 24
213.244.72.0/24 maxlen: 24
83.244.73.0/24 maxlen: 24
213.244.73.0/24 maxlen: 24
83.244.74.0/24 maxlen: 24
213.244.72.0/21 maxlen: 24
83.244.79.0/24 maxlen: 24
24.42.64.0/18 maxlen: 18
139.190.128.0/18 maxlen: 24
103.231.104.0/24 maxlen: 24
103.231.105.0/24 maxlen: 24
195.123.162.0/24 maxlen: 24
195.123.160.0/23 maxlen: 23
195.123.160.0/21 maxlen: 21
103.231.107.0/24 maxlen: 24
195.123.161.0/24 maxlen: 24
195.123.163.0/24 maxlen: 24
103.231.106.0/24 maxlen: 24
195.123.160.0/24 maxlen: 24
195.123.164.0/24 maxlen: 24
195.123.165.0/24 maxlen: 24
195.123.166.0/24 maxlen: 24
195.123.167.0/24 maxlen: 24
195.123.112.0/24 maxlen: 24
195.123.113.0/24 maxlen: 24
195.123.114.0/24 maxlen: 24
195.123.115.0/24 maxlen: 24
195.123.116.0/24 maxlen: 24
195.123.117.0/24 maxlen: 24
195.123.118.0/24 maxlen: 24
195.123.112.0/21 maxlen: 21
195.123.119.0/24 maxlen: 24
103.196.120.0/22 maxlen: 22
203.28.19.0/24 maxlen: 24
194.176.98.0/23 maxlen: 24
43.243.95.0/24 maxlen: 24
43.243.92.0/24 maxlen: 24
43.243.93.0/24 maxlen: 24
43.243.94.0/24 maxlen: 24
43.243.92.0/22 maxlen: 22
83.244.0.0/17 maxlen: 24
193.223.252.0/23 maxlen: 23
203.189.236.0/22 maxlen: 22
194.169.188.0/23 maxlen: 23
212.14.224.0/19 maxlen: 24
45.134.203.0/24 maxlen: 24
45.134.202.0/24 maxlen: 24
45.134.202.0/23 maxlen: 23
45.121.104.0/24 maxlen: 24
45.121.105.0/24 maxlen: 24
45.121.104.0/22 maxlen: 22
45.121.106.0/24 maxlen: 24
45.121.107.0/24 maxlen: 24
45.121.106.0/23 maxlen: 23
43.243.24.0/22 maxlen: 22
103.27.144.0/22 maxlen: 22
43.243.32.0/24 maxlen: 24
43.243.34.0/24 maxlen: 24
43.243.35.0/24 maxlen: 24
43.243.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:28:9a:e8:e6:d6:e3:28:d2:12:58:85:c4:7a:90:7c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Oct 30 11:15:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fad20566dfd07a22f3743c2e611f04cdd5a5e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:34:52:52:f3:6b:cf:f5:91:40:b3:89:44:cb:
a6:a9:fb:88:a8:f2:cc:45:38:27:b0:a2:7c:dd:29:
9c:0b:4d:15:21:ae:b1:f0:e9:be:41:9e:31:b2:ef:
7f:b0:38:5a:ea:a3:a1:8e:ea:43:4e:c1:34:00:e6:
f3:90:66:d3:33:ac:13:db:e8:12:87:3a:e4:98:67:
ab:8a:83:70:26:ee:16:be:76:4d:b0:a0:a8:62:01:
d9:5d:f3:0d:c4:b3:da:6e:5e:6a:d0:ae:08:6e:12:
82:fc:bf:14:23:e3:85:f8:94:49:6a:e5:bb:a3:1f:
f6:a1:1b:67:75:4f:f8:7e:ac:f8:85:4e:f2:15:16:
e0:37:7a:a4:91:a4:03:60:ce:11:59:24:bb:67:c5:
b5:24:1e:3c:62:3e:93:b3:60:10:35:41:6c:7a:89:
2d:f7:d4:9f:f7:c5:2f:d6:a5:fd:ce:e7:f5:29:fe:
b9:53:fc:39:9f:11:34:1a:68:67:f3:6e:4d:72:74:
e2:b2:0f:d7:3b:26:df:96:37:b0:97:0b:54:8a:07:
5a:2f:ed:e3:78:c3:e1:87:2c:7c:4c:61:39:c5:e5:
21:45:91:8c:c0:88:e5:66:a2:d3:b0:1a:89:2d:2d:
6e:0f:a9:77:e7:75:ba:43:02:0a:3b:e3:10:42:79:
d9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AD:20:56:6D:FD:07:A2:2F:37:43:C2:E6:11:F0:4C:DD:5A:5E:12
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/L60gVm39B6IvN0PC5hHwTN1aXhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.112.0-1.178.143.255
1.179.40.0/21
1.179.72.0/21
1.179.88.0/21
5.11.40.0/21
24.42.64.0/18
37.75.208.0/21
43.241.156.0/22
43.243.24.0/22
43.243.32.0/22
43.243.92.0/22
43.255.108.0/22
45.113.108.0/22
45.117.40.0/22
45.121.104.0/22
45.127.176.0/22
45.134.202.0/23
46.60.64.0/18
77.91.128.0/18
82.213.0.0/18
83.244.0.0/17
86.104.188.0/22
103.27.144.0/22
103.37.84.0/22
103.53.4.0/22
103.57.108.0/22
103.193.132.0/22
103.196.120.0/22
103.206.36.0/22
103.206.108.0/22
103.215.4.0/22
103.231.104.0/22
103.239.96.0/22
103.248.36.0/22
113.212.64.0/22
139.190.128.0/18
144.48.236.0/22
158.140.16.0/20
158.140.64.0/18
176.65.0.0-176.65.11.255
182.161.60.0/22
185.19.220.0/22
188.161.0.0/16
193.223.252.0/23
193.227.236.0/23
194.169.188.0/23
194.176.98.0/23
195.123.112.0/21
195.123.160.0/21
203.28.19.0/24
203.30.104.0/22
203.189.236.0/22
212.14.224.0/19
213.6.0.0/16
213.244.64.0/18
Signature Algorithm: sha256WithRSAEncryption
23:b1:72:e5:5e:c4:82:18:42:3d:b5:3f:d7:ac:73:e1:7f:d7:
d0:6d:d2:f3:aa:c7:67:66:52:8b:c8:22:ee:57:b2:af:b7:ba:
95:3f:9a:cd:d4:4c:05:cc:89:4e:4b:6d:7e:b7:b4:a0:2f:47:
06:e2:35:58:d8:35:76:1b:c1:ea:f9:c6:77:1f:d9:7a:73:04:
bf:de:5b:81:ca:29:47:68:65:77:6d:40:60:cf:21:34:40:0c:
4d:95:4c:9a:e7:4b:8e:43:59:73:ff:82:b8:f2:75:25:d9:d8:
76:22:16:dd:00:1a:e3:f6:47:59:ba:c6:38:b3:fa:ea:14:31:
31:4b:cc:17:72:b9:3e:3e:7c:35:22:39:71:5e:11:01:0b:59:
08:3e:28:4a:74:c1:5b:5f:a9:b6:dc:cc:5c:70:ff:65:fa:29:
08:75:9d:7c:98:6d:8b:41:25:7d:a1:b5:06:6d:e7:cb:a5:ad:
1e:4c:3e:ac:09:e8:06:aa:95:32:89:97:62:9a:d3:6c:d8:4e:
17:ea:ae:b2:3d:8a:a6:c3:b3:7c:ed:9c:c7:db:d1:cd:48:c9:
04:e4:43:f0:46:b4:0d:9a:b4:78:04:e0:94:4d:44:7b:7d:64:
59:bd:26:f1:62:1b:8a:15:8e:b0:52:b1:20:d2:08:a3:cd:90:
77:df:f1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:03 2023 by rpki-client on console-fra.rpki-client.org