Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/raVik4JTcydrG8Cvbh4YbAh-CpE.roa
File: raVik4JTcydrG8Cvbh4YbAh-CpE.roa (raw, json)
Hash identifier: Dj/HKNCuAdD9YxHLSsro6aF4ceBMIKbHG+hc4yiBtGM=
Subject key identifier: AD:A5:62:93:82:53:73:27:6B:1B:C0:AF:6E:1E:18:6C:08:7E:0A:91
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 0181D2985B04B7E04AC16747FD05F7638434
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/raVik4JTcydrG8Cvbh4YbAh-CpE.roa
Signing time: Wed 06 Jul 2022 08:20:08 +0000
ROA not before: Wed 06 Jul 2022 08:20:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 188.241.249.0/24 maxlen: 32
185.66.136.0/22 maxlen: 32
92.255.52.0/24 maxlen: 32
92.255.64.0/24 maxlen: 32
188.241.200.0/21 maxlen: 32
212.70.0.0/23 maxlen: 32
212.70.3.0/24 maxlen: 32
212.70.4.0/22 maxlen: 32
119.12.192.0/20 maxlen: 32
212.70.8.0/21 maxlen: 32
92.255.80.0/22 maxlen: 32
212.70.16.0/20 maxlen: 32
89.46.242.0/24 maxlen: 32
92.114.81.0/24 maxlen: 32
180.235.160.0/20 maxlen: 32
86.104.76.0/22 maxlen: 32
89.40.81.0/24 maxlen: 32
180.235.176.0/20 maxlen: 32
110.238.192.0/19 maxlen: 32
92.114.60.0/22 maxlen: 32
94.177.14.0/23 maxlen: 32
91.92.216.0/23 maxlen: 32
188.241.15.0/24 maxlen: 32
91.92.218.0/24 maxlen: 32
93.113.52.0/23 maxlen: 24
188.240.214.0/23 maxlen: 32
91.92.178.0/23 maxlen: 32
94.139.224.0/20 maxlen: 24
188.241.0.0/23 maxlen: 32
92.255.0.0/24 maxlen: 32
85.217.190.0/23 maxlen: 32
193.56.24.0/22 maxlen: 32
89.32.132.0/22 maxlen: 32
188.211.24.0/23 maxlen: 32
86.106.176.0/23 maxlen: 32
85.217.220.0/23 maxlen: 32
94.139.40.0/21 maxlen: 32
94.139.48.0/21 maxlen: 32
176.223.104.0/22 maxlen: 32
91.92.17.0/24 maxlen: 32
91.92.20.0/24 maxlen: 32
91.92.22.0/23 maxlen: 32
94.139.60.0/23 maxlen: 32
94.176.0.0/23 maxlen: 32
193.142.103.0/24 maxlen: 32
176.223.68.0/22 maxlen: 32
188.240.48.0/23 maxlen: 32
94.176.172.0/22 maxlen: 32
89.38.155.0/24 maxlen: 32
91.92.138.0/24 maxlen: 32
193.200.104.0/23 maxlen: 32
91.92.64.0/24 maxlen: 32
176.223.182.0/23 maxlen: 32
185.101.68.0/22 maxlen: 32
188.212.136.0/21 maxlen: 32
119.13.224.0/20 maxlen: 32
93.114.236.0/22 maxlen: 32
93.114.136.0/23 maxlen: 32
188.94.84.0/22 maxlen: 32
2.57.76.0/22 maxlen: 32
89.104.122.0/23 maxlen: 32
31.14.26.0/24 maxlen: 32
121.91.176.0/20 maxlen: 32
89.223.22.0/23 maxlen: 32
91.192.212.0/22 maxlen: 32
93.115.4.0/23 maxlen: 32
77.81.92.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d2:98:5b:04:b7:e0:4a:c1:67:47:fd:05:f7:63:84:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Jul 6 08:20:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ada56293825373276b1bc0af6e1e186c087e0a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:01:b2:7d:35:75:b2:39:1f:6c:0c:5e:75:
67:af:48:46:69:80:ae:ae:3a:61:40:b9:ee:82:d5:
f9:92:72:16:6e:38:f8:c3:0a:2a:17:a7:72:51:a0:
5c:c1:28:33:83:74:88:a6:b8:9f:96:ba:35:ea:cd:
65:65:93:26:b8:fb:f6:32:73:6f:a5:51:77:86:eb:
1d:2d:13:b2:04:22:2f:e3:13:ef:c6:db:74:4e:48:
97:84:50:05:0a:bf:09:10:8e:92:71:60:83:55:47:
0a:bc:8c:f5:d8:bb:d0:98:ec:b5:d8:0d:78:08:a0:
9f:2a:95:76:e4:49:fe:2f:2f:b5:f4:01:f8:0a:ae:
61:6d:cc:3b:b9:4e:96:95:ac:58:42:e4:9c:86:f8:
a0:d7:ba:f7:6f:fe:06:08:69:b0:95:89:76:97:5f:
61:8c:0e:58:ee:5c:f7:db:ea:ec:77:9e:ca:66:c6:
14:39:d8:ba:81:72:4a:c5:85:1a:c5:7d:80:7c:3f:
e1:42:e0:07:49:9b:95:5d:d7:4a:e1:03:3a:fc:ed:
4b:3f:e1:69:90:cb:02:30:a3:e3:92:18:7a:9a:ca:
a5:09:be:c8:ae:a5:03:68:ca:e6:40:2d:ff:a3:74:
67:9b:92:39:fe:aa:6c:1b:4d:44:68:22:e3:c6:7b:
c3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A5:62:93:82:53:73:27:6B:1B:C0:AF:6E:1E:18:6C:08:7E:0A:91
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/raVik4JTcydrG8Cvbh4YbAh-CpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.76.0/22
31.14.26.0/24
77.81.92.0/22
85.217.190.0/23
85.217.220.0/23
86.104.76.0/22
86.106.176.0/23
89.32.132.0/22
89.38.155.0/24
89.40.81.0/24
89.46.242.0/24
89.104.122.0/23
89.223.22.0/23
91.92.17.0/24
91.92.20.0/24
91.92.22.0/23
91.92.64.0/24
91.92.138.0/24
91.92.178.0/23
91.92.216.0-91.92.218.255
91.192.212.0/22
92.114.60.0/22
92.114.81.0/24
92.255.0.0/24
92.255.52.0/24
92.255.64.0/24
92.255.80.0/22
93.113.52.0/23
93.114.136.0/23
93.114.236.0/22
93.115.4.0/23
94.139.40.0-94.139.55.255
94.139.60.0/23
94.139.224.0/20
94.176.0.0/23
94.176.172.0/22
94.177.14.0/23
110.238.192.0/19
119.12.192.0/20
119.13.224.0/20
121.91.176.0/20
176.223.68.0/22
176.223.104.0/22
176.223.182.0/23
180.235.160.0/19
185.66.136.0/22
185.101.68.0/22
188.94.84.0/22
188.211.24.0/23
188.212.136.0/21
188.240.48.0/23
188.240.214.0/23
188.241.0.0/23
188.241.15.0/24
188.241.200.0/21
188.241.249.0/24
193.56.24.0/22
193.142.103.0/24
193.200.104.0/23
212.70.0.0/23
212.70.3.0-212.70.31.255
Signature Algorithm: sha256WithRSAEncryption
a4:1a:c5:48:07:4d:30:52:d9:47:36:3b:d1:1e:77:8d:61:df:
01:85:42:8c:cb:8f:c5:d8:65:59:d3:e6:40:98:c3:92:2a:d2:
1c:72:92:92:e2:5a:57:f6:b7:2d:5c:40:c5:5b:e5:a7:6e:90:
30:f6:a0:2f:1a:46:d6:be:96:5d:c4:6d:46:ae:24:2c:76:cc:
96:b8:41:cd:0a:fb:a5:fc:df:b7:d9:21:d7:b7:69:18:d7:47:
c5:c0:b3:9e:ce:ef:9b:54:91:38:cb:59:cd:c5:0c:83:5c:82:
d4:ea:8a:0b:dc:fa:2b:20:e0:20:26:4a:05:38:21:bc:31:ac:
4a:e8:80:65:ad:74:ef:f3:4a:1b:24:64:2e:74:b1:e4:3b:4c:
80:ed:5a:04:9f:53:57:b6:49:4e:b8:f4:cb:71:83:e6:cc:1d:
71:81:93:27:25:73:3a:ad:dd:d3:1e:a1:21:ea:67:cc:40:6f:
a7:30:f0:04:40:6d:b1:af:68:4a:13:5d:33:25:eb:2a:c7:70:
79:cb:d1:2b:d8:f3:0b:99:07:4d:82:3c:8d:98:b1:35:f8:86:
ef:d3:86:0c:90:1e:48:2a:0e:92:f3:7d:ba:50:a6:a3:37:1b:
95:aa:6b:71:65:9e:41:bd:bb:0f:47:df:b4:e2:c2:28:78:d3:
cd:48:ee:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:47 2024 by rpki-client on console-fra.rpki-client.org