Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/MMHlwvYglFS4JiVhb15CWavXU8M.roa
File: MMHlwvYglFS4JiVhb15CWavXU8M.roa (raw, json)
Hash identifier: yhL/Tqjq7JlK8yocK+FRR6pAebhW14dLcLvzaPP6PG0=
Subject key identifier: 30:C1:E5:C2:F6:20:94:54:B8:26:25:61:6F:5E:42:59:AB:D7:53:C3
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 029150C1
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/MMHlwvYglFS4JiVhb15CWavXU8M.roa
Signing time: Sat 01 Jan 2022 11:59:27 +0000
ROA not before: Sat 01 Jan 2022 11:59:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 188.241.249.0/24 maxlen: 32
185.66.136.0/22 maxlen: 32
92.255.52.0/24 maxlen: 32
92.255.64.0/24 maxlen: 32
188.241.200.0/21 maxlen: 32
212.70.0.0/23 maxlen: 32
212.70.3.0/24 maxlen: 32
212.70.4.0/22 maxlen: 32
119.12.192.0/20 maxlen: 32
212.70.8.0/21 maxlen: 32
92.255.80.0/22 maxlen: 32
212.70.16.0/20 maxlen: 32
89.46.242.0/24 maxlen: 32
92.114.81.0/24 maxlen: 32
86.104.76.0/22 maxlen: 32
89.40.81.0/24 maxlen: 32
110.238.192.0/19 maxlen: 32
92.114.60.0/22 maxlen: 32
94.177.14.0/23 maxlen: 32
91.92.216.0/23 maxlen: 32
188.241.15.0/24 maxlen: 32
91.92.218.0/24 maxlen: 32
93.113.52.0/23 maxlen: 32
188.240.214.0/23 maxlen: 32
91.92.178.0/23 maxlen: 32
94.139.224.0/20 maxlen: 32
188.241.0.0/23 maxlen: 32
92.255.0.0/24 maxlen: 32
85.217.190.0/23 maxlen: 32
193.56.24.0/22 maxlen: 32
89.32.132.0/22 maxlen: 32
188.211.24.0/23 maxlen: 32
86.106.176.0/23 maxlen: 32
85.217.220.0/23 maxlen: 32
94.139.40.0/21 maxlen: 32
176.223.104.0/22 maxlen: 32
91.92.17.0/24 maxlen: 32
91.92.20.0/24 maxlen: 32
91.92.22.0/23 maxlen: 32
94.139.60.0/23 maxlen: 32
94.176.0.0/23 maxlen: 32
193.142.103.0/24 maxlen: 32
176.223.68.0/22 maxlen: 32
188.240.48.0/23 maxlen: 32
94.176.172.0/22 maxlen: 32
89.38.155.0/24 maxlen: 32
91.92.138.0/24 maxlen: 32
193.200.104.0/23 maxlen: 32
176.223.182.0/23 maxlen: 32
185.101.68.0/22 maxlen: 32
188.212.136.0/21 maxlen: 32
119.13.224.0/20 maxlen: 32
93.114.236.0/22 maxlen: 32
93.114.136.0/23 maxlen: 32
188.94.84.0/22 maxlen: 32
2.57.76.0/22 maxlen: 32
89.104.122.0/23 maxlen: 32
31.14.26.0/24 maxlen: 32
121.91.176.0/20 maxlen: 32
89.223.22.0/23 maxlen: 32
91.192.212.0/22 maxlen: 32
93.115.4.0/23 maxlen: 32
77.81.92.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43077825 (0x29150c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Jan 1 11:59:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30c1e5c2f6209454b82625616f5e4259abd753c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:53:3b:f6:3d:3e:63:93:ed:e7:52:ac:e5:
89:45:51:38:12:62:1f:e7:9e:29:78:3f:22:5c:8f:
c4:eb:ee:9b:62:e9:e5:6f:48:9d:a2:ff:dd:fa:27:
45:42:69:14:1d:97:c7:42:05:16:4e:90:3b:a2:50:
29:ed:10:f5:75:b4:e1:3e:53:c0:70:5a:07:7c:5c:
4d:7a:ae:59:b0:9a:84:be:76:6a:90:23:7c:32:c3:
49:6c:34:c3:18:b2:c1:bd:6d:c6:a5:7b:60:52:19:
f0:3d:b3:98:b1:ef:ae:32:b5:1e:b8:56:1b:2c:a1:
6f:8f:43:9a:52:23:79:a9:82:cc:be:03:d4:f9:bd:
98:6a:7b:9d:89:4a:53:a6:54:41:52:46:f5:d7:0b:
12:f2:fd:8c:46:c1:22:6f:01:d3:16:b1:4d:d6:02:
28:bd:75:e4:1b:04:98:34:5c:33:f7:86:2d:50:f5:
45:66:29:b5:9c:8b:ff:47:79:a2:59:59:21:41:42:
65:ff:f3:4a:3a:04:26:f2:a9:b5:08:30:0b:52:6b:
b1:56:32:4a:a0:67:37:ee:d0:ac:f4:b1:5f:ce:af:
03:df:e1:14:0e:d0:5f:e3:1e:51:fa:f0:54:fc:eb:
fa:5f:9f:36:a9:5d:a1:2b:92:34:25:18:bf:da:36:
fe:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C1:E5:C2:F6:20:94:54:B8:26:25:61:6F:5E:42:59:AB:D7:53:C3
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/MMHlwvYglFS4JiVhb15CWavXU8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.76.0/22
31.14.26.0/24
77.81.92.0/22
85.217.190.0/23
85.217.220.0/23
86.104.76.0/22
86.106.176.0/23
89.32.132.0/22
89.38.155.0/24
89.40.81.0/24
89.46.242.0/24
89.104.122.0/23
89.223.22.0/23
91.92.17.0/24
91.92.20.0/24
91.92.22.0/23
91.92.138.0/24
91.92.178.0/23
91.92.216.0-91.92.218.255
91.192.212.0/22
92.114.60.0/22
92.114.81.0/24
92.255.0.0/24
92.255.52.0/24
92.255.64.0/24
92.255.80.0/22
93.113.52.0/23
93.114.136.0/23
93.114.236.0/22
93.115.4.0/23
94.139.40.0/21
94.139.60.0/23
94.139.224.0/20
94.176.0.0/23
94.176.172.0/22
94.177.14.0/23
110.238.192.0/19
119.12.192.0/20
119.13.224.0/20
121.91.176.0/20
176.223.68.0/22
176.223.104.0/22
176.223.182.0/23
185.66.136.0/22
185.101.68.0/22
188.94.84.0/22
188.211.24.0/23
188.212.136.0/21
188.240.48.0/23
188.240.214.0/23
188.241.0.0/23
188.241.15.0/24
188.241.200.0/21
188.241.249.0/24
193.56.24.0/22
193.142.103.0/24
193.200.104.0/23
212.70.0.0/23
212.70.3.0-212.70.31.255
Signature Algorithm: sha256WithRSAEncryption
31:77:74:0c:d8:ec:0c:79:3a:7d:03:5c:12:7b:4e:69:3c:00:
c0:70:dd:e1:13:5d:83:53:d9:f9:c4:c6:09:93:b5:72:f3:c3:
ca:b2:f4:00:71:9b:12:b3:55:93:9d:f9:05:9f:de:09:57:7a:
0e:79:7b:19:67:97:51:dd:b2:21:dc:30:78:f6:06:e7:00:02:
24:3d:f5:8e:d3:90:48:bf:d4:a6:77:8d:24:2b:ba:13:00:a1:
18:64:31:e8:43:c6:f6:d4:eb:82:5d:11:24:1c:e7:d4:65:0a:
91:ea:d2:5a:f5:b6:ae:e7:27:56:06:55:67:b0:7a:27:f7:55:
56:6c:85:4a:54:f0:2f:c8:b8:42:38:9b:62:1a:05:71:75:0e:
0a:f3:7a:8f:b3:bc:31:0a:72:e1:09:38:a9:3c:df:5c:3b:13:
d4:ab:43:6f:ac:4f:b6:88:a6:bb:28:b7:36:60:8a:8f:51:31:
db:ee:08:cb:f0:2b:62:d2:60:83:bc:3f:3e:68:ab:12:87:12:
31:09:0b:51:bf:9c:38:27:1c:60:ef:be:d3:33:92:73:d1:b8:
96:13:2d:a2:78:0f:cf:66:93:cb:26:f3:ce:8c:6c:52:14:7e:
9f:03:84:a0:a3:35:b7:c9:63:d8:4e:33:07:6a:30:ee:4f:66:
d9:16:5c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:46 2024 by rpki-client on console-fra.rpki-client.org