Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/tND7lJ-R3mACrRSfK-hMGVyCeUs.roa
File: tND7lJ-R3mACrRSfK-hMGVyCeUs.roa (raw, json)
Hash identifier: LpUb8VCiUrV7megLeYDVtMJtPDds3p7jothUqcrtnDk=
Subject key identifier: B4:D0:FB:94:9F:91:DE:60:02:AD:14:9F:2B:E8:4C:19:5C:82:79:4B
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 01847885792F557EA66169C8DCE811231916
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/tND7lJ-R3mACrRSfK-hMGVyCeUs.roa
Signing time: Mon 14 Nov 2022 23:42:04 +0000
ROA not before: Mon 14 Nov 2022 23:42:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 188.161.24.0/23 maxlen: 23
103.215.4.0/22 maxlen: 22
188.161.30.0/23 maxlen: 23
43.255.108.0/22 maxlen: 22
188.161.40.0/21 maxlen: 21
188.161.48.0/21 maxlen: 21
188.161.56.0/21 maxlen: 21
213.6.64.0/18 maxlen: 18
182.161.60.0/22 maxlen: 22
213.6.0.0/18 maxlen: 18
213.6.0.0/16 maxlen: 24
188.161.0.0/16 maxlen: 24
188.161.134.0/23 maxlen: 23
46.60.64.0/18 maxlen: 24
185.19.220.0/24 maxlen: 24
185.19.222.0/24 maxlen: 24
185.19.220.0/22 maxlen: 22
185.19.221.0/24 maxlen: 24
185.19.223.0/24 maxlen: 24
45.127.176.0/24 maxlen: 24
45.127.178.0/24 maxlen: 24
45.127.176.0/22 maxlen: 22
45.127.177.0/24 maxlen: 24
45.127.179.0/24 maxlen: 24
188.161.104.0/24 maxlen: 24
188.161.105.0/24 maxlen: 24
188.161.104.0/21 maxlen: 21
188.161.112.0/22 maxlen: 22
188.161.106.0/24 maxlen: 24
188.161.108.0/24 maxlen: 24
188.161.111.0/24 maxlen: 24
188.161.107.0/24 maxlen: 24
188.161.109.0/24 maxlen: 24
188.161.110.0/24 maxlen: 24
188.161.116.0/22 maxlen: 22
213.6.128.0/18 maxlen: 18
158.140.16.0/20 maxlen: 20
158.140.108.0/22 maxlen: 22
158.140.112.0/22 maxlen: 22
158.140.116.0/22 maxlen: 22
158.140.120.0/22 maxlen: 22
158.140.124.0/22 maxlen: 22
43.241.158.0/24 maxlen: 24
43.241.156.0/24 maxlen: 24
43.241.159.0/24 maxlen: 24
43.241.156.0/22 maxlen: 22
43.241.157.0/24 maxlen: 24
103.53.4.0/24 maxlen: 24
103.53.4.0/22 maxlen: 24
158.140.64.0/22 maxlen: 22
158.140.68.0/23 maxlen: 23
158.140.64.0/18 maxlen: 24
158.140.80.0/22 maxlen: 22
158.140.84.0/22 maxlen: 22
103.248.37.0/24 maxlen: 24
103.248.36.0/22 maxlen: 22
193.227.236.0/23 maxlen: 23
103.248.36.0/24 maxlen: 24
103.248.38.0/24 maxlen: 24
158.140.88.0/22 maxlen: 22
103.248.39.0/24 maxlen: 24
45.113.109.0/24 maxlen: 24
45.113.111.0/24 maxlen: 24
45.113.108.0/22 maxlen: 22
45.113.108.0/24 maxlen: 24
45.113.110.0/24 maxlen: 24
158.140.92.0/22 maxlen: 22
158.140.96.0/22 maxlen: 22
158.140.100.0/22 maxlen: 22
158.140.104.0/22 maxlen: 22
5.11.40.0/21 maxlen: 21
5.11.46.0/24 maxlen: 24
5.11.47.0/24 maxlen: 24
103.206.108.0/22 maxlen: 22
176.65.0.0/21 maxlen: 24
176.65.8.0/22 maxlen: 22
103.193.132.0/22 maxlen: 22
103.239.96.0/22 maxlen: 22
103.37.84.0/24 maxlen: 24
103.37.84.0/22 maxlen: 22
103.37.85.0/24 maxlen: 24
103.37.86.0/24 maxlen: 24
103.37.87.0/24 maxlen: 24
86.104.188.0/22 maxlen: 22
113.212.64.0/22 maxlen: 22
203.30.104.0/22 maxlen: 22
103.57.110.0/24 maxlen: 24
103.57.108.0/24 maxlen: 24
103.57.111.0/24 maxlen: 24
103.57.109.0/24 maxlen: 24
103.57.108.0/22 maxlen: 22
77.91.148.0/22 maxlen: 24
1.179.40.0/21 maxlen: 21
103.206.36.0/22 maxlen: 22
1.179.72.0/21 maxlen: 21
82.213.0.0/18 maxlen: 24
1.179.88.0/21 maxlen: 21
77.91.128.0/21 maxlen: 21
77.91.128.0/18 maxlen: 24
77.91.136.0/21 maxlen: 21
45.117.42.0/24 maxlen: 24
45.117.40.0/24 maxlen: 24
45.117.40.0/22 maxlen: 22
45.117.43.0/24 maxlen: 24
45.117.41.0/24 maxlen: 24
1.178.112.0/20 maxlen: 20
1.178.128.0/20 maxlen: 20
85.184.240.0/22 maxlen: 22
213.244.117.0/24 maxlen: 24
213.244.115.0/24 maxlen: 24
213.244.116.0/24 maxlen: 24
213.244.124.0/22 maxlen: 22
213.244.121.0/24 maxlen: 24
213.244.122.0/24 maxlen: 24
139.190.176.0/20 maxlen: 20
37.75.208.0/21 maxlen: 21
37.75.211.0/24 maxlen: 24
213.244.70.0/24 maxlen: 24
213.244.70.0/23 maxlen: 24
213.244.71.0/24 maxlen: 24
213.244.64.0/18 maxlen: 24
144.48.236.0/22 maxlen: 22
213.244.76.0/24 maxlen: 24
83.244.78.0/24 maxlen: 24
213.244.72.0/24 maxlen: 24
83.244.74.0/24 maxlen: 24
83.244.75.0/24 maxlen: 24
83.244.73.0/24 maxlen: 24
213.244.73.0/24 maxlen: 24
213.244.72.0/21 maxlen: 24
83.244.79.0/24 maxlen: 24
24.42.64.0/18 maxlen: 18
139.190.128.0/18 maxlen: 24
103.231.104.0/22 maxlen: 22
103.231.105.0/24 maxlen: 24
103.231.104.0/24 maxlen: 24
195.123.161.0/24 maxlen: 24
195.123.160.0/21 maxlen: 21
103.231.107.0/24 maxlen: 24
195.123.166.0/24 maxlen: 24
195.123.163.0/24 maxlen: 24
195.123.164.0/24 maxlen: 24
195.123.165.0/24 maxlen: 24
195.123.160.0/23 maxlen: 23
195.123.162.0/24 maxlen: 24
103.231.106.0/24 maxlen: 24
195.123.160.0/24 maxlen: 24
195.123.167.0/24 maxlen: 24
45.117.4.0/22 maxlen: 22
195.123.112.0/24 maxlen: 24
195.123.114.0/24 maxlen: 24
195.123.116.0/24 maxlen: 24
195.123.118.0/24 maxlen: 24
195.123.113.0/24 maxlen: 24
195.123.115.0/24 maxlen: 24
195.123.117.0/24 maxlen: 24
195.123.112.0/21 maxlen: 21
195.123.119.0/24 maxlen: 24
103.196.120.0/22 maxlen: 22
203.28.19.0/24 maxlen: 24
194.176.98.0/23 maxlen: 24
43.243.92.0/24 maxlen: 24
43.243.94.0/24 maxlen: 24
43.243.95.0/24 maxlen: 24
43.243.93.0/24 maxlen: 24
43.243.92.0/22 maxlen: 22
83.244.0.0/17 maxlen: 24
83.244.22.0/23 maxlen: 23
193.223.252.0/23 maxlen: 23
203.189.236.0/22 maxlen: 22
194.169.188.0/23 maxlen: 23
212.14.224.0/19 maxlen: 24
188.161.184.0/22 maxlen: 22
213.6.192.0/18 maxlen: 18
45.134.202.0/24 maxlen: 24
45.134.202.0/23 maxlen: 23
45.134.203.0/24 maxlen: 24
188.161.200.0/21 maxlen: 21
45.121.105.0/24 maxlen: 24
45.121.104.0/22 maxlen: 22
45.121.104.0/24 maxlen: 24
45.121.107.0/24 maxlen: 24
45.121.106.0/24 maxlen: 24
45.121.106.0/23 maxlen: 23
43.243.24.0/22 maxlen: 22
43.243.35.0/24 maxlen: 24
43.243.32.0/22 maxlen: 22
103.27.144.0/22 maxlen: 22
43.243.32.0/24 maxlen: 24
43.243.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:78:85:79:2f:55:7e:a6:61:69:c8:dc:e8:11:23:19:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Nov 14 23:42:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4d0fb949f91de6002ad149f2be84c195c82794b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:be:86:5e:3f:a9:b2:2c:88:3c:48:ff:4e:c3:
10:79:dc:20:01:5f:d2:b5:a4:f6:89:98:08:08:c1:
71:db:14:49:7a:71:4a:6a:66:5e:4e:0e:b1:7d:84:
3b:9c:96:c8:e4:31:47:c0:39:9f:cc:09:de:c3:8d:
1d:20:46:7e:1a:08:96:5b:f7:a6:a5:23:6f:ce:35:
44:1e:9f:7d:1a:4f:45:55:13:9a:09:13:00:cc:22:
3a:31:85:78:ba:ff:ea:eb:86:91:c0:04:33:31:76:
c7:2c:a7:1c:62:a9:9a:aa:c2:c0:59:a7:67:0e:29:
4c:b0:8f:ea:01:af:66:62:8b:a7:72:4b:44:2d:cf:
ac:de:90:f5:b7:b9:b3:19:1a:c5:2d:6b:87:20:7e:
99:4c:13:1a:09:86:73:38:fe:ed:82:1b:31:2f:89:
58:1d:e6:00:aa:a6:16:9b:e1:29:9e:72:70:f6:af:
63:77:fc:ca:2e:55:ae:8c:30:50:8a:fa:20:bc:ed:
49:6f:a9:2a:ab:0f:51:b2:b1:14:de:25:08:a2:9c:
ca:d2:90:df:41:79:03:72:29:d3:16:16:34:df:52:
0a:6e:c8:ba:d7:36:d3:71:06:3f:00:07:e2:dd:19:
10:e8:9a:e1:77:03:3d:d6:b0:65:85:10:24:ca:96:
f5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D0:FB:94:9F:91:DE:60:02:AD:14:9F:2B:E8:4C:19:5C:82:79:4B
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/tND7lJ-R3mACrRSfK-hMGVyCeUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.112.0-1.178.143.255
1.179.40.0/21
1.179.72.0/21
1.179.88.0/21
5.11.40.0/21
24.42.64.0/18
37.75.208.0/21
43.241.156.0/22
43.243.24.0/22
43.243.32.0/22
43.243.92.0/22
43.255.108.0/22
45.113.108.0/22
45.117.4.0/22
45.117.40.0/22
45.121.104.0/22
45.127.176.0/22
45.134.202.0/23
46.60.64.0/18
77.91.128.0/18
82.213.0.0/18
83.244.0.0/17
85.184.240.0/22
86.104.188.0/22
103.27.144.0/22
103.37.84.0/22
103.53.4.0/22
103.57.108.0/22
103.193.132.0/22
103.196.120.0/22
103.206.36.0/22
103.206.108.0/22
103.215.4.0/22
103.231.104.0/22
103.239.96.0/22
103.248.36.0/22
113.212.64.0/22
139.190.128.0/18
144.48.236.0/22
158.140.16.0/20
158.140.64.0/18
176.65.0.0-176.65.11.255
182.161.60.0/22
185.19.220.0/22
188.161.0.0/16
193.223.252.0/23
193.227.236.0/23
194.169.188.0/23
194.176.98.0/23
195.123.112.0/21
195.123.160.0/21
203.28.19.0/24
203.30.104.0/22
203.189.236.0/22
212.14.224.0/19
213.6.0.0/16
213.244.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b7:44:42:e1:d6:8a:13:75:94:23:d3:04:e0:1b:53:0b:e4:97:
75:e0:f3:3e:61:ef:91:3f:90:98:f7:ff:3f:70:a8:a3:76:f4:
a6:26:9f:c1:45:3f:e7:17:67:a1:46:08:df:30:47:c1:e8:8e:
f3:b9:11:08:e9:1a:99:76:f0:f4:b9:95:cb:f1:08:b3:02:25:
f4:52:c5:72:1e:9a:03:17:a4:8f:3c:91:5c:97:46:b9:6a:c5:
ca:55:54:b6:69:d2:31:e7:21:6f:21:36:08:6a:78:23:e0:d5:
f6:7e:65:8c:ef:d5:81:53:27:c6:4c:d1:f0:c8:f5:4c:41:2c:
0e:fa:40:6e:b9:59:d8:a0:44:10:92:27:9f:f1:a5:85:13:24:
7b:7f:e0:cd:66:1c:d9:91:4b:39:7d:42:00:1d:64:4d:e9:a0:
ac:07:79:4b:d2:0f:05:c0:7d:7d:3e:00:52:90:e8:ea:80:11:
45:67:ef:f9:c8:ab:5e:51:b7:a5:20:ba:ff:88:ba:4a:a9:8e:
c7:9b:91:00:a5:fe:1f:a2:fa:38:2c:29:53:54:fb:f3:c4:59:
7f:c2:f3:4c:f9:00:76:e0:40:12:70:09:02:74:f5:65:0e:5e:
c8:ca:c6:6e:3a:50:16:7d:f4:06:21:cb:a9:ec:52:ad:40:3c:
ff:ed:05:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:10 2024 by rpki-client on console-ams.rpki-client.org