Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/ppV0NBZWLtVZKFejUXupA_pUqZA.roa
File: ppV0NBZWLtVZKFejUXupA_pUqZA.roa (raw, json)
Hash identifier: WE9y0f6ApJAksdGIGYS3w7abWcThTAh3ctcpb3t+EN0=
Subject key identifier: A6:95:74:34:16:56:2E:D5:59:28:57:A3:51:7B:A9:03:FA:54:A9:90
Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial: 01847A703373E8B47DCBF5CE5964BFD90FA7
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/ppV0NBZWLtVZKFejUXupA_pUqZA.roa
Signing time: Tue 15 Nov 2022 08:38:04 +0000
ROA not before: Tue 15 Nov 2022 08:38:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41798
IP address blocks: 37.208.43.0/24 maxlen: 24
37.208.42.0/24 maxlen: 24
37.208.44.0/24 maxlen: 24
37.208.41.0/24 maxlen: 24
37.208.40.0/24 maxlen: 24
37.208.45.0/24 maxlen: 24
37.208.46.0/24 maxlen: 24
37.208.47.0/24 maxlen: 24
87.255.203.0/24 maxlen: 24
87.255.202.0/24 maxlen: 24
87.255.205.0/24 maxlen: 24
87.255.204.0/24 maxlen: 24
87.255.206.0/24 maxlen: 24
87.255.208.0/24 maxlen: 24
87.255.210.0/24 maxlen: 24
87.255.209.0/24 maxlen: 24
87.255.207.0/24 maxlen: 24
87.255.212.0/24 maxlen: 24
87.255.211.0/24 maxlen: 24
87.255.219.0/24 maxlen: 24
87.255.218.0/24 maxlen: 24
87.255.215.0/24 maxlen: 24
87.255.217.0/24 maxlen: 24
87.255.216.0/24 maxlen: 24
87.255.214.0/24 maxlen: 24
87.255.222.0/24 maxlen: 24
87.255.223.0/24 maxlen: 24
87.255.221.0/24 maxlen: 24
87.255.220.0/24 maxlen: 24
176.98.226.0/24 maxlen: 24
176.98.225.0/24 maxlen: 24
176.98.224.0/20 maxlen: 20
176.98.224.0/24 maxlen: 24
176.98.228.0/24 maxlen: 24
176.98.233.0/24 maxlen: 24
176.98.232.0/24 maxlen: 24
176.98.230.0/24 maxlen: 24
176.98.229.0/24 maxlen: 24
176.98.231.0/24 maxlen: 24
176.98.235.0/24 maxlen: 24
176.98.234.0/24 maxlen: 24
176.98.240.0/24 maxlen: 24
176.98.239.0/24 maxlen: 24
176.98.237.0/24 maxlen: 24
176.98.236.0/24 maxlen: 24
176.98.238.0/24 maxlen: 24
37.17.176.0/24 maxlen: 24
37.17.178.0/24 maxlen: 24
37.17.177.0/24 maxlen: 24
37.17.179.0/24 maxlen: 24
37.17.183.0/24 maxlen: 24
37.17.182.0/24 maxlen: 24
37.17.181.0/24 maxlen: 24
176.98.243.0/24 maxlen: 24
176.98.242.0/24 maxlen: 24
176.98.241.0/24 maxlen: 24
2.57.96.0/24 maxlen: 24
2.57.98.0/24 maxlen: 24
2.57.97.0/24 maxlen: 24
2.57.99.0/24 maxlen: 24
91.246.80.0/24 maxlen: 24
91.246.85.0/24 maxlen: 24
91.246.82.0/24 maxlen: 24
91.246.81.0/24 maxlen: 24
91.246.84.0/24 maxlen: 24
91.246.83.0/24 maxlen: 24
91.246.89.0/24 maxlen: 24
91.246.88.0/24 maxlen: 24
91.246.91.0/24 maxlen: 24
91.246.90.0/24 maxlen: 24
91.246.87.0/24 maxlen: 24
91.246.86.0/24 maxlen: 24
91.246.92.0/24 maxlen: 24
91.246.94.0/24 maxlen: 24
91.246.93.0/24 maxlen: 24
91.246.96.0/24 maxlen: 24
91.246.95.0/24 maxlen: 24
91.246.98.0/24 maxlen: 24
91.246.97.0/24 maxlen: 24
91.246.103.0/24 maxlen: 24
91.246.102.0/24 maxlen: 24
91.246.99.0/24 maxlen: 24
91.246.101.0/24 maxlen: 24
91.246.100.0/24 maxlen: 24
193.104.253.0/24 maxlen: 24
91.185.16.0/24 maxlen: 24
91.185.17.0/24 maxlen: 24
91.185.13.0/24 maxlen: 24
91.185.12.0/24 maxlen: 24
91.185.15.0/24 maxlen: 24
91.185.14.0/24 maxlen: 24
91.185.20.0/24 maxlen: 24
91.185.19.0/24 maxlen: 24
91.185.22.0/24 maxlen: 24
91.185.21.0/24 maxlen: 24
91.185.18.0/24 maxlen: 24
91.185.23.0/24 maxlen: 24
91.185.24.0/24 maxlen: 24
91.185.30.0/24 maxlen: 24
91.185.31.0/24 maxlen: 24
91.185.27.0/24 maxlen: 24
91.185.26.0/24 maxlen: 24
91.185.29.0/24 maxlen: 24
91.185.25.0/24 maxlen: 24
91.185.2.0/24 maxlen: 24
91.185.4.0/24 maxlen: 24
91.185.3.0/24 maxlen: 24
91.185.1.0/24 maxlen: 24
91.185.0.0/24 maxlen: 24
91.185.6.0/24 maxlen: 24
91.185.5.0/24 maxlen: 24
91.185.8.0/24 maxlen: 24
91.185.7.0/24 maxlen: 24
91.185.9.0/24 maxlen: 24
91.185.11.0/24 maxlen: 24
178.22.172.0/24 maxlen: 24
178.22.169.0/24 maxlen: 24
178.22.168.0/24 maxlen: 24
178.22.171.0/24 maxlen: 24
178.22.170.0/24 maxlen: 24
178.22.175.0/24 maxlen: 24
178.22.174.0/24 maxlen: 24
178.22.173.0/24 maxlen: 24
94.141.226.0/24 maxlen: 24
94.141.225.0/24 maxlen: 24
94.141.224.0/24 maxlen: 24
94.141.228.0/24 maxlen: 24
94.141.227.0/24 maxlen: 24
94.141.233.0/24 maxlen: 24
94.141.230.0/24 maxlen: 24
94.141.229.0/24 maxlen: 24
94.141.232.0/24 maxlen: 24
94.141.231.0/24 maxlen: 24
94.141.234.0/24 maxlen: 24
94.141.235.0/24 maxlen: 24
94.141.240.0/24 maxlen: 24
94.141.237.0/24 maxlen: 24
94.141.236.0/24 maxlen: 24
94.141.239.0/24 maxlen: 24
94.141.238.0/24 maxlen: 24
94.141.241.0/24 maxlen: 24
94.141.242.0/24 maxlen: 24
94.141.243.0/24 maxlen: 24
94.141.251.0/24 maxlen: 24
94.141.250.0/24 maxlen: 24
94.141.248.0/24 maxlen: 24
94.141.249.0/24 maxlen: 24
2a00:ab40:7201::/48 maxlen: 48
2a00:ab40:7301::/48 maxlen: 48
2a00:ab40:7401::/48 maxlen: 48
2a00:ab40:3000::/48 maxlen: 48
2a00:ab40:4000::/48 maxlen: 48
2a00:ab40:5000::/48 maxlen: 48
2a00:ab40:7200::/48 maxlen: 48
2a00:ab40:7300::/48 maxlen: 48
2a00:ab40:7400::/48 maxlen: 48
2a00:ab40::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7a:70:33:73:e8:b4:7d:cb:f5:ce:59:64:bf:d9:0f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
Validity
Not Before: Nov 15 08:38:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a695743416562ed5592857a3517ba903fa54a990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:25:59:f1:3d:7a:15:31:83:ae:1e:58:ce:cb:
3c:6b:62:3e:19:03:cf:31:c3:47:45:85:10:e2:6d:
0e:f5:74:ca:dc:16:13:2a:1a:65:2f:25:aa:ee:b5:
2e:4d:57:a8:d5:63:f6:e2:06:d7:dd:8a:a0:c2:44:
bd:37:f9:bb:c7:de:f8:57:b9:90:a8:f1:e1:93:5f:
03:4e:95:29:15:19:94:5f:d9:39:0c:d6:7c:3d:68:
e9:34:9d:fc:e1:e7:bc:cf:00:ee:20:80:8c:9c:9c:
d8:a7:62:81:9c:c0:c2:c8:67:21:d2:fb:4c:43:4b:
f2:cf:79:21:84:48:13:8f:b7:7c:e3:da:6d:ad:1f:
6f:ae:f1:17:40:0a:50:a3:a9:9c:05:04:02:df:95:
74:0c:38:d7:f3:eb:4e:93:9f:24:8d:92:c4:ad:ca:
fb:72:47:a2:81:d1:41:56:2d:cf:85:7c:3c:6c:41:
ca:2a:a9:35:33:c2:a7:a8:5a:21:b2:aa:80:57:a7:
d6:24:b0:12:f1:0a:87:a9:71:30:5d:51:c7:fa:89:
0f:a2:27:10:6a:58:ac:a3:eb:bf:19:6c:d6:36:c7:
53:15:c4:3d:73:ee:b9:cb:21:a2:38:b7:2d:b5:c3:
b5:91:f4:13:6b:c1:8f:c6:85:e7:9b:c6:c9:ca:c2:
00:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:95:74:34:16:56:2E:D5:59:28:57:A3:51:7B:A9:03:FA:54:A9:90
X509v3 Authority Key Identifier:
keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/ppV0NBZWLtVZKFejUXupA_pUqZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.96.0/22
37.17.176.0/22
37.17.181.0-37.17.183.255
37.208.40.0/21
87.255.202.0-87.255.212.255
87.255.214.0-87.255.223.255
91.185.0.0-91.185.9.255
91.185.11.0-91.185.27.255
91.185.29.0-91.185.31.255
91.246.80.0-91.246.103.255
94.141.224.0-94.141.243.255
94.141.248.0/22
176.98.224.0-176.98.243.255
178.22.168.0/21
193.104.253.0/24
IPv6:
2a00:ab40::/32
Signature Algorithm: sha256WithRSAEncryption
5e:9e:2e:64:77:dc:70:0e:d3:fd:28:b6:b8:12:86:86:b3:fc:
ff:6f:be:d3:45:f4:65:fc:a7:d2:8d:37:16:cc:79:0e:71:86:
17:8a:cb:84:c2:77:cc:d2:53:5c:e2:02:11:e6:d7:97:73:11:
6c:19:94:cf:b7:a0:95:04:6c:70:cc:a5:7a:22:4d:fa:ad:8b:
8e:d7:75:be:e6:94:aa:f7:f1:8f:4b:23:32:87:f0:78:27:33:
e1:bd:a1:fe:29:b9:c9:93:83:a1:1c:db:3b:00:15:df:33:63:
1a:bd:ce:c3:8f:3d:d9:ed:6b:ec:14:c4:bb:00:f7:11:18:13:
69:25:8d:40:07:34:0a:33:2f:ea:80:15:c6:2a:5a:86:51:73:
c0:1b:5c:d5:0e:5f:02:22:66:03:cc:d8:84:60:e0:c6:66:fb:
34:35:d0:09:eb:9f:5d:e6:a1:4b:ba:32:af:1d:55:10:cb:5b:
3a:42:49:8c:a0:da:9c:fb:ae:9e:0f:5c:55:94:4b:a5:20:9e:
f2:d8:8a:27:0b:a5:29:fc:ad:9b:5f:2c:86:7e:15:be:ad:59:
05:c8:ff:ca:7c:db:45:21:be:64:1e:1e:0e:22:a4:35:e7:ed:
be:f8:4d:34:f9:d0:e3:21:27:8b:62:a3:c0:76:5e:b2:1c:f8:
d0:96:65:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:38 2024 by rpki-client on console-fra.rpki-client.org