Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/gl9e1lTON-BBdj5-UpgRgq3KC38.roa
File: gl9e1lTON-BBdj5-UpgRgq3KC38.roa (raw, json)
Hash identifier: annbhKsiF5XDwDuVEUqsE/5wTAm2LNsiot9jFXrFnNA=
Subject key identifier: 82:5F:5E:D6:54:CE:37:E0:41:76:3E:7E:52:98:11:82:AD:CA:0B:7F
Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial: 018359996CC42814B1822644197BEDA7192E
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/gl9e1lTON-BBdj5-UpgRgq3KC38.roa
Signing time: Tue 20 Sep 2022 06:32:50 +0000
ROA not before: Tue 20 Sep 2022 06:32:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41798
IP address blocks: 37.208.43.0/24 maxlen: 24
37.208.42.0/24 maxlen: 24
37.208.44.0/24 maxlen: 24
37.208.41.0/24 maxlen: 24
37.208.40.0/24 maxlen: 24
37.208.45.0/24 maxlen: 24
37.208.46.0/24 maxlen: 24
37.208.47.0/24 maxlen: 24
87.255.203.0/24 maxlen: 24
87.255.202.0/24 maxlen: 24
87.255.205.0/24 maxlen: 24
87.255.204.0/24 maxlen: 24
87.255.206.0/24 maxlen: 24
87.255.208.0/24 maxlen: 24
87.255.210.0/24 maxlen: 24
87.255.209.0/24 maxlen: 24
87.255.207.0/24 maxlen: 24
87.255.212.0/24 maxlen: 24
87.255.211.0/24 maxlen: 24
87.255.219.0/24 maxlen: 24
87.255.218.0/24 maxlen: 24
87.255.215.0/24 maxlen: 24
87.255.217.0/24 maxlen: 24
87.255.216.0/24 maxlen: 24
87.255.214.0/24 maxlen: 24
87.255.222.0/24 maxlen: 24
87.255.223.0/24 maxlen: 24
87.255.221.0/24 maxlen: 24
87.255.220.0/24 maxlen: 24
176.98.226.0/24 maxlen: 24
176.98.225.0/24 maxlen: 24
176.98.224.0/20 maxlen: 20
176.98.224.0/24 maxlen: 24
176.98.228.0/24 maxlen: 24
176.98.233.0/24 maxlen: 24
176.98.232.0/24 maxlen: 24
176.98.230.0/24 maxlen: 24
176.98.229.0/24 maxlen: 24
176.98.231.0/24 maxlen: 24
176.98.235.0/24 maxlen: 24
176.98.234.0/24 maxlen: 24
176.98.240.0/24 maxlen: 24
176.98.239.0/24 maxlen: 24
176.98.237.0/24 maxlen: 24
176.98.236.0/24 maxlen: 24
176.98.238.0/24 maxlen: 24
37.17.176.0/24 maxlen: 24
37.17.178.0/24 maxlen: 24
37.17.177.0/24 maxlen: 24
37.17.183.0/24 maxlen: 24
37.17.182.0/24 maxlen: 24
37.17.181.0/24 maxlen: 24
176.98.243.0/24 maxlen: 24
176.98.242.0/24 maxlen: 24
176.98.241.0/24 maxlen: 24
2.57.96.0/24 maxlen: 24
2.57.98.0/24 maxlen: 24
2.57.97.0/24 maxlen: 24
2.57.99.0/24 maxlen: 24
91.246.80.0/24 maxlen: 24
91.246.85.0/24 maxlen: 24
91.246.82.0/24 maxlen: 24
91.246.81.0/24 maxlen: 24
91.246.84.0/24 maxlen: 24
91.246.83.0/24 maxlen: 24
91.246.89.0/24 maxlen: 24
91.246.88.0/24 maxlen: 24
91.246.91.0/24 maxlen: 24
91.246.90.0/24 maxlen: 24
91.246.87.0/24 maxlen: 24
91.246.86.0/24 maxlen: 24
91.246.92.0/24 maxlen: 24
91.246.94.0/24 maxlen: 24
91.246.93.0/24 maxlen: 24
91.246.96.0/24 maxlen: 24
91.246.95.0/24 maxlen: 24
91.246.98.0/24 maxlen: 24
91.246.97.0/24 maxlen: 24
91.246.103.0/24 maxlen: 24
91.246.102.0/24 maxlen: 24
91.246.99.0/24 maxlen: 24
91.246.101.0/24 maxlen: 24
91.246.100.0/24 maxlen: 24
193.104.253.0/24 maxlen: 24
91.185.16.0/24 maxlen: 24
91.185.17.0/24 maxlen: 24
91.185.13.0/24 maxlen: 24
91.185.12.0/24 maxlen: 24
91.185.15.0/24 maxlen: 24
91.185.14.0/24 maxlen: 24
91.185.20.0/24 maxlen: 24
91.185.19.0/24 maxlen: 24
91.185.22.0/24 maxlen: 24
91.185.21.0/24 maxlen: 24
91.185.18.0/24 maxlen: 24
91.185.23.0/24 maxlen: 24
91.185.24.0/24 maxlen: 24
91.185.30.0/24 maxlen: 24
91.185.31.0/24 maxlen: 24
91.185.27.0/24 maxlen: 24
91.185.26.0/24 maxlen: 24
91.185.29.0/24 maxlen: 24
91.185.25.0/24 maxlen: 24
91.185.2.0/24 maxlen: 24
91.185.4.0/24 maxlen: 24
91.185.3.0/24 maxlen: 24
91.185.1.0/24 maxlen: 24
91.185.0.0/24 maxlen: 24
91.185.6.0/24 maxlen: 24
91.185.5.0/24 maxlen: 24
91.185.8.0/24 maxlen: 24
91.185.7.0/24 maxlen: 24
91.185.9.0/24 maxlen: 24
91.185.11.0/24 maxlen: 24
178.22.172.0/24 maxlen: 24
178.22.169.0/24 maxlen: 24
178.22.168.0/24 maxlen: 24
178.22.171.0/24 maxlen: 24
178.22.175.0/24 maxlen: 24
178.22.174.0/24 maxlen: 24
178.22.173.0/24 maxlen: 24
94.141.226.0/24 maxlen: 24
94.141.225.0/24 maxlen: 24
94.141.224.0/24 maxlen: 24
94.141.228.0/24 maxlen: 24
94.141.227.0/24 maxlen: 24
94.141.233.0/24 maxlen: 24
94.141.230.0/24 maxlen: 24
94.141.229.0/24 maxlen: 24
94.141.232.0/24 maxlen: 24
94.141.231.0/24 maxlen: 24
94.141.234.0/24 maxlen: 24
94.141.235.0/24 maxlen: 24
94.141.240.0/24 maxlen: 24
94.141.237.0/24 maxlen: 24
94.141.236.0/24 maxlen: 24
94.141.239.0/24 maxlen: 24
94.141.238.0/24 maxlen: 24
94.141.241.0/24 maxlen: 24
94.141.242.0/24 maxlen: 24
94.141.243.0/24 maxlen: 24
94.141.251.0/24 maxlen: 24
94.141.250.0/24 maxlen: 24
94.141.248.0/24 maxlen: 24
94.141.249.0/24 maxlen: 24
2a00:ab40:7401::/48 maxlen: 48
2a00:ab40:7301::/48 maxlen: 48
2a00:ab40:7201::/48 maxlen: 48
2a00:ab40:7400::/48 maxlen: 48
2a00:ab40:7300::/48 maxlen: 48
2a00:ab40:7200::/48 maxlen: 48
2a00:ab40:5000::/48 maxlen: 48
2a00:ab40:4000::/48 maxlen: 48
2a00:ab40:3000::/48 maxlen: 48
2a00:ab40::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:59:99:6c:c4:28:14:b1:82:26:44:19:7b:ed:a7:19:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
Validity
Not Before: Sep 20 06:32:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=825f5ed654ce37e041763e7e52981182adca0b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d7:ed:e2:36:a2:c4:b9:82:58:85:6f:b6:ce:
64:c0:58:58:fe:3f:49:10:c9:3a:5c:f4:69:e1:b4:
0f:31:01:8a:d9:6e:a1:f8:eb:6e:d4:0b:0a:80:cc:
4c:1e:d5:14:df:e8:ea:c8:45:50:88:27:8d:2b:01:
0e:05:62:b6:4a:a9:c7:5d:a7:2e:15:94:c9:dd:fb:
28:dc:28:21:40:ec:41:d9:ad:0b:b5:ff:71:b5:95:
13:25:13:b7:72:91:d4:b4:4c:f7:71:5e:a9:3e:92:
51:13:8f:35:2e:64:0d:9d:5d:40:44:1d:91:c5:68:
cd:ca:8a:bc:4d:bf:3a:9f:cf:9b:9a:6a:e4:64:af:
d3:0f:97:2f:a4:87:31:6f:5f:26:83:2a:c5:cf:1c:
fc:93:2e:af:70:db:ce:57:fe:90:d2:a9:22:6b:ee:
5c:b0:da:36:29:a4:82:d0:45:5a:42:c7:92:ec:82:
c5:50:94:5d:56:bd:83:1d:43:f0:c0:85:a8:46:aa:
5b:5d:d6:67:52:ac:e5:38:ab:84:d3:65:91:9d:04:
8a:46:13:0b:93:59:5b:ad:c8:2e:3f:6f:d0:d3:58:
81:8d:74:b6:d1:b8:1f:1d:7c:8f:34:6a:96:cc:2c:
39:84:5a:1d:47:46:f3:64:1c:b3:5b:f0:8b:b8:40:
3f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5F:5E:D6:54:CE:37:E0:41:76:3E:7E:52:98:11:82:AD:CA:0B:7F
X509v3 Authority Key Identifier:
keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/gl9e1lTON-BBdj5-UpgRgq3KC38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.96.0/22
37.17.176.0-37.17.178.255
37.17.181.0-37.17.183.255
37.208.40.0/21
87.255.202.0-87.255.212.255
87.255.214.0-87.255.223.255
91.185.0.0-91.185.9.255
91.185.11.0-91.185.27.255
91.185.29.0-91.185.31.255
91.246.80.0-91.246.103.255
94.141.224.0-94.141.243.255
94.141.248.0/22
176.98.224.0-176.98.243.255
178.22.168.0/23
178.22.171.0-178.22.175.255
193.104.253.0/24
IPv6:
2a00:ab40::/32
Signature Algorithm: sha256WithRSAEncryption
9a:0a:3b:02:ea:c4:c2:33:c5:ec:e7:be:a8:7e:5d:af:06:73:
8f:59:74:c7:cf:ad:81:1f:a9:32:7c:62:4f:03:ca:34:19:52:
7a:eb:56:1f:8c:56:4e:bc:37:78:54:e4:43:f6:29:0f:1a:25:
2d:74:35:7c:ae:61:74:81:4b:62:9f:b7:19:cd:e1:78:0d:02:
36:7b:d6:cc:64:16:24:74:a5:81:fc:04:c6:f8:95:0f:9f:e3:
f6:fb:72:fd:46:9b:52:d0:d3:6f:f4:22:e9:bc:1f:57:05:f6:
25:90:b0:5f:18:7f:b9:9f:6e:7e:df:a2:40:b0:3c:77:57:90:
c1:4b:b0:b6:45:f1:8d:46:04:27:19:6c:33:f1:ea:1e:bd:3b:
6e:75:85:63:d5:5e:47:1a:7e:ee:d8:e2:42:47:d7:32:41:e9:
6d:cb:37:b0:a6:5d:b7:99:09:70:59:d9:72:ca:61:75:09:3f:
b4:25:4f:f2:c5:b8:45:3b:01:21:ca:d2:3e:c7:f9:c4:55:ad:
6b:40:0d:af:8e:ca:90:26:01:d9:13:3d:90:f1:0f:f3:e2:70:
5c:25:13:0d:db:f4:94:d9:bb:b2:2c:95:a0:b1:25:da:90:17:
30:97:03:8a:4d:46:36:18:ef:e8:72:0f:c2:d6:1c:77:5b:32:
45:f5:3d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:03 2023 by rpki-client on console-fra.rpki-client.org