Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/ywLxKFEOXzi4IgZ0sj7lu3I5cFQ.roa
File: ywLxKFEOXzi4IgZ0sj7lu3I5cFQ.roa (raw, json)
Hash identifier: HXPKeR1t22jsw7NV/1iwVonYKWr33c6S2ATC3kGpQf0=
Subject key identifier: CB:02:F1:28:51:0E:5F:38:B8:22:06:74:B2:3E:E5:BB:72:39:70:54
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 01842DA133612D838D4582E873C62AA66D05
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/ywLxKFEOXzi4IgZ0sj7lu3I5cFQ.roa
Signing time: Mon 31 Oct 2022 10:40:49 +0000
ROA not before: Mon 31 Oct 2022 10:40:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 43.255.108.0/22 maxlen: 22
103.215.4.0/22 maxlen: 22
188.161.40.0/21 maxlen: 21
188.161.48.0/21 maxlen: 21
182.161.60.0/22 maxlen: 22
213.6.0.0/16 maxlen: 24
188.161.0.0/16 maxlen: 24
188.161.134.0/23 maxlen: 23
46.60.64.0/18 maxlen: 24
185.19.220.0/22 maxlen: 22
185.19.220.0/24 maxlen: 24
185.19.221.0/24 maxlen: 24
185.19.222.0/24 maxlen: 24
185.19.223.0/24 maxlen: 24
45.127.176.0/22 maxlen: 22
45.127.176.0/24 maxlen: 24
45.127.177.0/24 maxlen: 24
45.127.178.0/24 maxlen: 24
45.127.179.0/24 maxlen: 24
188.161.104.0/24 maxlen: 24
188.161.105.0/24 maxlen: 24
188.161.104.0/21 maxlen: 21
188.161.112.0/22 maxlen: 22
188.161.106.0/24 maxlen: 24
188.161.107.0/24 maxlen: 24
188.161.108.0/24 maxlen: 24
188.161.109.0/24 maxlen: 24
188.161.110.0/24 maxlen: 24
188.161.111.0/24 maxlen: 24
188.161.116.0/22 maxlen: 22
158.140.16.0/20 maxlen: 20
158.140.108.0/22 maxlen: 22
158.140.112.0/22 maxlen: 22
158.140.116.0/22 maxlen: 22
158.140.120.0/22 maxlen: 22
158.140.124.0/22 maxlen: 22
43.241.158.0/24 maxlen: 24
43.241.159.0/24 maxlen: 24
43.241.156.0/22 maxlen: 22
43.241.156.0/24 maxlen: 24
43.241.157.0/24 maxlen: 24
103.53.4.0/24 maxlen: 24
103.53.4.0/22 maxlen: 24
158.140.64.0/22 maxlen: 22
158.140.64.0/18 maxlen: 24
158.140.68.0/23 maxlen: 23
103.248.36.0/24 maxlen: 24
103.248.37.0/24 maxlen: 24
103.248.38.0/24 maxlen: 24
103.248.36.0/22 maxlen: 22
193.227.236.0/23 maxlen: 23
103.248.39.0/24 maxlen: 24
45.113.108.0/24 maxlen: 24
45.113.109.0/24 maxlen: 24
45.113.110.0/24 maxlen: 24
45.113.111.0/24 maxlen: 24
45.113.108.0/22 maxlen: 22
158.140.100.0/22 maxlen: 22
158.140.104.0/22 maxlen: 22
5.11.40.0/21 maxlen: 21
5.11.46.0/24 maxlen: 24
5.11.47.0/24 maxlen: 24
103.206.108.0/22 maxlen: 22
176.65.0.0/21 maxlen: 24
176.65.8.0/22 maxlen: 22
103.193.132.0/22 maxlen: 22
103.239.96.0/22 maxlen: 22
103.37.84.0/22 maxlen: 22
103.37.84.0/24 maxlen: 24
103.37.85.0/24 maxlen: 24
103.37.87.0/24 maxlen: 24
103.37.86.0/24 maxlen: 24
86.104.188.0/22 maxlen: 22
113.212.64.0/22 maxlen: 22
203.30.104.0/22 maxlen: 22
103.57.110.0/24 maxlen: 24
103.57.111.0/24 maxlen: 24
103.57.108.0/24 maxlen: 24
103.57.109.0/24 maxlen: 24
103.57.108.0/22 maxlen: 22
77.91.148.0/22 maxlen: 24
1.179.40.0/21 maxlen: 21
103.206.36.0/22 maxlen: 22
1.179.72.0/21 maxlen: 21
82.213.0.0/18 maxlen: 24
1.179.88.0/21 maxlen: 21
77.91.128.0/21 maxlen: 21
77.91.128.0/18 maxlen: 24
77.91.136.0/21 maxlen: 21
45.117.40.0/22 maxlen: 22
45.117.42.0/24 maxlen: 24
45.117.43.0/24 maxlen: 24
45.117.40.0/24 maxlen: 24
45.117.41.0/24 maxlen: 24
1.178.112.0/20 maxlen: 20
1.178.128.0/20 maxlen: 20
213.244.117.0/24 maxlen: 24
213.244.115.0/24 maxlen: 24
213.244.116.0/24 maxlen: 24
213.244.124.0/22 maxlen: 22
213.244.121.0/24 maxlen: 24
213.244.122.0/24 maxlen: 24
139.190.176.0/20 maxlen: 20
37.75.208.0/21 maxlen: 21
37.75.211.0/24 maxlen: 24
213.244.70.0/24 maxlen: 24
213.244.71.0/24 maxlen: 24
213.244.70.0/23 maxlen: 24
213.244.64.0/18 maxlen: 24
144.48.236.0/22 maxlen: 22
83.244.75.0/24 maxlen: 24
213.244.76.0/24 maxlen: 24
83.244.78.0/24 maxlen: 24
213.244.72.0/24 maxlen: 24
83.244.73.0/24 maxlen: 24
213.244.73.0/24 maxlen: 24
83.244.74.0/24 maxlen: 24
213.244.72.0/21 maxlen: 24
83.244.79.0/24 maxlen: 24
24.42.64.0/18 maxlen: 18
139.190.128.0/18 maxlen: 24
103.231.104.0/22 maxlen: 22
103.231.104.0/24 maxlen: 24
103.231.105.0/24 maxlen: 24
195.123.162.0/24 maxlen: 24
195.123.160.0/23 maxlen: 23
195.123.160.0/21 maxlen: 21
103.231.107.0/24 maxlen: 24
195.123.161.0/24 maxlen: 24
195.123.163.0/24 maxlen: 24
103.231.106.0/24 maxlen: 24
195.123.160.0/24 maxlen: 24
195.123.164.0/24 maxlen: 24
195.123.165.0/24 maxlen: 24
195.123.166.0/24 maxlen: 24
195.123.167.0/24 maxlen: 24
195.123.112.0/24 maxlen: 24
195.123.113.0/24 maxlen: 24
195.123.114.0/24 maxlen: 24
195.123.115.0/24 maxlen: 24
195.123.116.0/24 maxlen: 24
195.123.117.0/24 maxlen: 24
195.123.118.0/24 maxlen: 24
195.123.112.0/21 maxlen: 21
195.123.119.0/24 maxlen: 24
103.196.120.0/22 maxlen: 22
203.28.19.0/24 maxlen: 24
194.176.98.0/23 maxlen: 24
43.243.95.0/24 maxlen: 24
43.243.92.0/24 maxlen: 24
43.243.93.0/24 maxlen: 24
43.243.94.0/24 maxlen: 24
43.243.92.0/22 maxlen: 22
83.244.0.0/17 maxlen: 24
193.223.252.0/23 maxlen: 23
203.189.236.0/22 maxlen: 22
194.169.188.0/23 maxlen: 23
212.14.224.0/19 maxlen: 24
45.134.203.0/24 maxlen: 24
45.134.202.0/24 maxlen: 24
45.134.202.0/23 maxlen: 23
45.121.104.0/24 maxlen: 24
45.121.105.0/24 maxlen: 24
45.121.104.0/22 maxlen: 22
45.121.106.0/24 maxlen: 24
45.121.107.0/24 maxlen: 24
45.121.106.0/23 maxlen: 23
43.243.24.0/22 maxlen: 22
103.27.144.0/22 maxlen: 22
43.243.32.0/24 maxlen: 24
43.243.34.0/24 maxlen: 24
43.243.35.0/24 maxlen: 24
43.243.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:a1:33:61:2d:83:8d:45:82:e8:73:c6:2a:a6:6d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Oct 31 10:40:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb02f128510e5f38b8220674b23ee5bb72397054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:34:51:61:37:78:e1:4f:b8:9e:e1:d1:a1:
6d:85:fe:96:6a:bb:09:41:4c:58:f4:35:61:e7:da:
c7:47:c3:0b:71:d8:dc:0e:f9:57:ef:d4:85:d5:c0:
d0:40:da:9e:94:8e:84:f9:4f:4d:e5:47:d4:ea:64:
9e:0f:b0:cc:e3:e4:95:88:80:25:f5:8e:da:70:2e:
34:db:9a:ad:d9:e8:65:4a:a1:44:eb:af:44:94:5f:
aa:dc:92:09:f5:88:26:c7:88:ff:83:0a:bb:1c:27:
1b:d6:08:0f:8c:39:49:f2:80:da:80:1a:68:6b:7d:
2d:6b:5a:27:3a:29:fd:e5:d0:f0:68:0a:6f:7e:4e:
87:d1:51:96:77:e4:66:46:c6:ee:1e:90:1c:92:93:
32:8b:53:43:c6:5c:e8:8c:6c:1d:e5:3e:b4:d3:68:
56:89:3d:e1:e9:e7:16:45:59:e9:44:74:7d:d8:23:
87:60:15:6c:11:b6:85:90:39:b7:46:72:de:fd:39:
72:c6:f4:6b:96:82:3f:96:1f:20:29:2b:c8:46:57:
c5:15:e7:89:b4:56:9b:14:2b:6a:55:71:2d:05:f2:
ce:b6:cf:f7:b5:67:cf:02:db:7d:22:d7:98:a4:aa:
a0:90:25:4e:9c:03:69:af:20:03:6e:70:a2:49:10:
16:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:02:F1:28:51:0E:5F:38:B8:22:06:74:B2:3E:E5:BB:72:39:70:54
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/ywLxKFEOXzi4IgZ0sj7lu3I5cFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.112.0-1.178.143.255
1.179.40.0/21
1.179.72.0/21
1.179.88.0/21
5.11.40.0/21
24.42.64.0/18
37.75.208.0/21
43.241.156.0/22
43.243.24.0/22
43.243.32.0/22
43.243.92.0/22
43.255.108.0/22
45.113.108.0/22
45.117.40.0/22
45.121.104.0/22
45.127.176.0/22
45.134.202.0/23
46.60.64.0/18
77.91.128.0/18
82.213.0.0/18
83.244.0.0/17
86.104.188.0/22
103.27.144.0/22
103.37.84.0/22
103.53.4.0/22
103.57.108.0/22
103.193.132.0/22
103.196.120.0/22
103.206.36.0/22
103.206.108.0/22
103.215.4.0/22
103.231.104.0/22
103.239.96.0/22
103.248.36.0/22
113.212.64.0/22
139.190.128.0/18
144.48.236.0/22
158.140.16.0/20
158.140.64.0/18
176.65.0.0-176.65.11.255
182.161.60.0/22
185.19.220.0/22
188.161.0.0/16
193.223.252.0/23
193.227.236.0/23
194.169.188.0/23
194.176.98.0/23
195.123.112.0/21
195.123.160.0/21
203.28.19.0/24
203.30.104.0/22
203.189.236.0/22
212.14.224.0/19
213.6.0.0/16
213.244.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4b:f2:2b:ba:29:60:fe:7c:18:b2:1a:c7:49:0d:70:f3:ae:15:
80:d6:57:40:ba:88:16:79:be:e8:3e:c8:07:c9:ed:18:2b:69:
b3:76:ca:82:91:fb:d8:e8:27:d2:61:0e:6f:2e:5e:8c:63:20:
d7:11:c2:cb:16:e9:83:c9:2c:cd:6d:a3:f7:0a:b9:37:dc:95:
d3:d3:46:a7:ac:e7:9d:48:36:06:40:d4:bc:59:1d:51:02:60:
e9:a3:70:5a:ee:9f:f2:3d:9e:54:8a:77:a9:71:0c:27:4e:6e:
fe:b3:8c:74:cc:db:39:c9:a2:76:00:74:18:19:d9:ae:3f:d0:
bb:55:d5:a8:fe:29:14:23:e4:ef:5c:82:82:4a:73:39:5a:4b:
70:8f:fd:36:01:0c:a0:e5:ab:4d:f2:1e:57:e5:99:b5:90:34:
c8:af:63:ff:c7:8a:7a:da:ec:db:be:0c:c0:9f:cc:03:fe:1b:
af:be:88:43:47:ef:eb:e0:cb:f4:11:94:87:d6:7a:c7:f1:bd:
38:67:20:09:e1:85:2a:64:13:f0:4e:5f:d9:ca:4c:9f:68:57:
32:0a:3b:c4:fb:45:26:db:dc:68:81:2b:28:d8:84:2e:64:24:
86:e7:bd:59:b9:48:db:d7:72:a9:61:09:76:c9:dc:01:ae:3d:
00:ca:ce:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:20 2024 by rpki-client on console-fra.rpki-client.org