Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/EcPgyI1Nu0bgDRb8LFMK2v2DLPA.roa
File: EcPgyI1Nu0bgDRb8LFMK2v2DLPA.roa (raw, json)
Hash identifier: 4RJQ79X3oeAk+zV0VZBCb7QQo5cXxdjSfKmgSudwFdU=
Subject key identifier: 11:C3:E0:C8:8D:4D:BB:46:E0:0D:16:FC:2C:53:0A:DA:FD:83:2C:F0
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 0181EC9B00464A6002435C567C1E2B6D72EB
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/EcPgyI1Nu0bgDRb8LFMK2v2DLPA.roa
Signing time: Mon 11 Jul 2022 09:33:09 +0000
ROA not before: Mon 11 Jul 2022 09:33:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8680
IP address blocks: 89.33.15.0/24 maxlen: 24
89.43.49.0/24 maxlen: 24
85.204.192.0/24 maxlen: 24
217.19.128.0/20 maxlen: 24
89.40.64.0/24 maxlen: 24
86.104.64.0/24 maxlen: 24
89.43.172.0/23 maxlen: 24
86.104.12.0/24 maxlen: 24
212.30.4.0/24 maxlen: 24
92.114.55.0/24 maxlen: 24
212.30.0.0/19 maxlen: 24
212.30.9.0/24 maxlen: 24
212.30.8.0/24 maxlen: 24
212.30.16.0/24 maxlen: 24
188.241.17.0/24 maxlen: 24
91.190.160.0/21 maxlen: 24
89.42.115.0/24 maxlen: 24
188.214.59.0/24 maxlen: 24
37.72.152.0/21 maxlen: 24
37.72.158.0/24 maxlen: 24
37.72.156.0/23 maxlen: 23
85.204.135.0/24 maxlen: 24
85.204.144.0/24 maxlen: 24
89.32.207.0/24 maxlen: 24
85.204.71.0/24 maxlen: 24
89.42.174.0/23 maxlen: 24
89.42.179.0/24 maxlen: 24
93.187.144.0/21 maxlen: 24
84.247.1.0/24 maxlen: 24
89.35.82.0/23 maxlen: 24
62.68.160.0/19 maxlen: 24
62.68.160.0/21 maxlen: 21
62.68.168.0/23 maxlen: 23
62.68.170.0/24 maxlen: 24
62.68.172.0/22 maxlen: 22
62.68.178.0/23 maxlen: 23
62.68.176.0/23 maxlen: 23
62.68.176.0/20 maxlen: 20
62.68.185.0/24 maxlen: 24
62.68.184.0/24 maxlen: 24
62.68.181.0/24 maxlen: 24
62.68.183.0/24 maxlen: 24
62.68.182.0/24 maxlen: 24
62.68.180.0/24 maxlen: 24
62.68.188.0/22 maxlen: 22
46.102.107.0/24 maxlen: 24
93.114.188.0/23 maxlen: 24
185.3.100.0/22 maxlen: 24
89.37.59.0/24 maxlen: 24
89.44.107.0/24 maxlen: 24
88.81.128.0/19 maxlen: 24
88.81.157.0/24 maxlen: 24
89.47.253.0/24 maxlen: 24
89.47.248.0/24 maxlen: 24
77.81.75.0/24 maxlen: 24
78.111.192.0/20 maxlen: 24
86.105.10.0/23 maxlen: 24
2a02:7380::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ec:9b:00:46:4a:60:02:43:5c:56:7c:1e:2b:6d:72:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Jul 11 09:33:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11c3e0c88d4dbb46e00d16fc2c530adafd832cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:63:ba:f1:29:f3:1c:f0:02:d1:b6:b4:ee:
44:2a:49:d4:71:a1:ae:e3:56:7e:af:46:b5:50:99:
aa:21:c4:97:f2:9a:c2:94:94:dd:a5:67:94:a9:c5:
08:39:35:d2:60:cb:bc:d4:1a:1e:ac:e9:01:11:be:
0a:d2:85:d6:8e:f3:58:6e:bd:95:45:08:f6:45:ab:
a8:e5:87:46:bd:97:f6:1c:af:c2:b9:aa:6c:14:01:
3e:8d:82:c9:ef:75:6c:87:f1:2d:98:07:b3:17:09:
86:c7:2c:75:64:3e:6d:c1:82:d3:5f:38:85:08:6f:
90:6f:68:a4:31:aa:17:a3:17:76:9e:ae:2c:42:bc:
e3:f8:6c:a4:5c:01:88:87:0c:bd:a9:84:9b:3b:d0:
33:85:12:ba:6b:7a:ef:50:a4:da:e8:03:d9:5d:c3:
a3:20:67:0d:69:0e:2d:8a:91:94:50:37:88:8a:f2:
5d:97:27:fc:9e:77:97:8e:8c:95:82:c3:78:cf:f1:
31:1f:f7:b0:1f:54:6b:86:fe:22:56:d8:1a:b6:8f:
47:f6:9a:26:12:a5:b0:62:d9:8b:d5:ec:1c:2c:94:
a2:0c:a3:96:ac:de:71:00:fe:3f:3e:d1:1c:3c:4e:
88:e1:11:ac:1e:13:d5:6d:45:6a:7e:48:8e:87:1b:
5e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C3:E0:C8:8D:4D:BB:46:E0:0D:16:FC:2C:53:0A:DA:FD:83:2C:F0
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/EcPgyI1Nu0bgDRb8LFMK2v2DLPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.152.0/21
46.102.107.0/24
62.68.160.0/19
77.81.75.0/24
78.111.192.0/20
84.247.1.0/24
85.204.71.0/24
85.204.135.0/24
85.204.144.0/24
85.204.192.0/24
86.104.12.0/24
86.104.64.0/24
86.105.10.0/23
88.81.128.0/19
89.32.207.0/24
89.33.15.0/24
89.35.82.0/23
89.37.59.0/24
89.40.64.0/24
89.42.115.0/24
89.42.174.0/23
89.42.179.0/24
89.43.49.0/24
89.43.172.0/23
89.44.107.0/24
89.47.248.0/24
89.47.253.0/24
91.190.160.0/21
92.114.55.0/24
93.114.188.0/23
93.187.144.0/21
185.3.100.0/22
188.214.59.0/24
188.241.17.0/24
212.30.0.0/19
217.19.128.0/20
IPv6:
2a02:7380::/32
Signature Algorithm: sha256WithRSAEncryption
46:d6:17:cb:76:a8:64:f0:3c:81:92:04:29:ef:6d:da:d9:ab:
ff:af:b8:2c:d6:52:d9:cc:34:bc:a4:97:30:2a:01:6f:78:73:
99:b2:59:d5:47:71:15:ab:f0:a5:8f:53:eb:10:09:1b:0a:7e:
d5:d2:7e:59:e9:9a:d5:6b:6a:97:90:c6:8c:97:87:31:fc:1a:
d6:46:9e:5f:52:7f:07:12:7b:ea:c0:74:3f:3b:ca:65:3a:09:
1b:f6:c3:ec:48:ce:56:b4:f0:fa:7b:b1:54:a9:d6:4d:c4:3c:
fa:5a:6c:5d:97:1e:14:eb:59:4b:a0:07:43:5d:74:4a:00:08:
e3:07:f5:cf:f5:0c:74:0d:92:82:8a:a3:d5:07:7c:46:29:32:
17:e4:53:59:23:fb:08:88:e2:ac:95:f6:8e:c6:d8:6f:fb:8b:
32:a7:4e:e9:fd:2e:d0:91:d7:95:5f:6d:08:d5:22:36:6b:22:
da:1d:01:de:ff:63:ad:fe:9d:9d:57:89:4f:39:57:47:ba:4e:
f6:cb:31:0e:da:b0:85:51:22:bf:8e:9b:6f:fc:95:b6:b0:40:
4e:78:e6:96:6c:0b:5e:0d:d4:ab:42:a6:00:03:df:f3:1d:1a:
ac:68:a3:f5:99:d2:aa:62:6f:8b:b1:66:d9:5c:3c:2d:66:6b:
65:6c:75:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:18 2024 by rpki-client on console-fra.rpki-client.org