Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xMwXQdKWSIO_4G6aF1JkrEduct4.roa
File: xMwXQdKWSIO_4G6aF1JkrEduct4.roa (raw, json)
Hash identifier: RRO69epiQ8952y8YnSNwY8TQ0pPphxdWUJPeJT4RJlM=
Subject key identifier: C4:CC:17:41:D2:96:48:83:BF:E0:6E:9A:17:52:64:AC:47:6E:72:DE
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 041D3618
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xMwXQdKWSIO_4G6aF1JkrEduct4.roa
Signing time: Mon 20 Jun 2022 11:37:44 +0000
ROA not before: Mon 20 Jun 2022 11:37:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 188.241.249.0/24 maxlen: 32
185.66.136.0/22 maxlen: 32
92.255.52.0/24 maxlen: 32
92.255.64.0/24 maxlen: 32
188.241.200.0/21 maxlen: 32
212.70.0.0/23 maxlen: 32
212.70.3.0/24 maxlen: 32
212.70.4.0/22 maxlen: 32
119.12.192.0/20 maxlen: 32
212.70.8.0/21 maxlen: 32
92.255.80.0/22 maxlen: 32
212.70.16.0/20 maxlen: 32
89.46.242.0/24 maxlen: 32
92.114.81.0/24 maxlen: 32
180.235.160.0/20 maxlen: 32
86.104.76.0/22 maxlen: 32
89.40.81.0/24 maxlen: 32
180.235.176.0/20 maxlen: 32
110.238.192.0/19 maxlen: 32
92.114.60.0/22 maxlen: 32
94.177.14.0/23 maxlen: 32
91.92.216.0/23 maxlen: 32
188.241.15.0/24 maxlen: 32
91.92.218.0/24 maxlen: 32
93.113.52.0/23 maxlen: 24
188.240.214.0/23 maxlen: 32
91.92.178.0/23 maxlen: 32
94.139.224.0/20 maxlen: 24
188.241.0.0/23 maxlen: 32
92.255.0.0/24 maxlen: 32
85.217.190.0/23 maxlen: 32
193.56.24.0/22 maxlen: 32
89.32.132.0/22 maxlen: 32
188.211.24.0/23 maxlen: 32
86.106.176.0/23 maxlen: 32
85.217.220.0/23 maxlen: 32
94.139.40.0/21 maxlen: 32
176.223.104.0/22 maxlen: 32
91.92.17.0/24 maxlen: 32
91.92.20.0/24 maxlen: 32
91.92.22.0/23 maxlen: 32
94.139.60.0/23 maxlen: 32
94.176.0.0/23 maxlen: 32
193.142.103.0/24 maxlen: 32
176.223.68.0/22 maxlen: 32
188.240.48.0/23 maxlen: 32
94.176.172.0/22 maxlen: 32
89.38.155.0/24 maxlen: 32
91.92.138.0/24 maxlen: 32
193.200.104.0/23 maxlen: 32
176.223.182.0/23 maxlen: 32
185.101.68.0/22 maxlen: 32
188.212.136.0/21 maxlen: 32
119.13.224.0/20 maxlen: 32
93.114.236.0/22 maxlen: 32
93.114.136.0/23 maxlen: 32
188.94.84.0/22 maxlen: 32
2.57.76.0/22 maxlen: 32
89.104.122.0/23 maxlen: 32
31.14.26.0/24 maxlen: 32
121.91.176.0/20 maxlen: 32
89.223.22.0/23 maxlen: 32
91.192.212.0/22 maxlen: 32
93.115.4.0/23 maxlen: 32
77.81.92.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69023256 (0x41d3618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Jun 20 11:37:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4cc1741d2964883bfe06e9a175264ac476e72de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:92:c1:8a:73:8b:c4:9f:a4:24:cc:5f:24:
25:09:9b:36:75:ed:1c:b9:96:30:de:99:fc:ca:c7:
ef:6f:b2:98:5b:b9:58:9e:b9:66:ae:92:a1:b4:9e:
4b:39:e6:24:9a:64:e6:bd:08:90:fb:65:16:9a:98:
96:52:14:99:83:73:dc:b4:d2:2d:ce:1f:6e:4a:a3:
a6:0f:b7:ac:2a:65:09:ad:b2:62:aa:88:f5:02:f2:
79:a0:67:14:7b:a0:fc:d4:6b:3c:a4:35:a5:b6:02:
a1:fe:e0:6e:d0:cb:90:97:a5:f3:f4:ad:74:b2:db:
78:ad:cb:b6:05:8d:96:c5:fe:bb:46:77:f6:d0:c3:
41:35:05:83:68:bc:c3:6a:a2:55:cd:26:4c:d6:d0:
1c:d2:92:1c:b2:b0:2b:76:a7:e1:52:c6:c0:4b:ea:
90:40:54:40:8e:d8:58:f5:00:cf:2b:12:cf:5f:40:
58:69:af:a0:38:67:d2:15:e2:2f:69:eb:a8:32:95:
91:28:31:1d:21:77:ad:35:3e:75:2a:c6:f1:2c:a5:
c0:81:71:c5:22:2f:75:df:89:7e:0f:a9:09:ab:23:
40:3e:f3:5e:2d:7b:9a:79:2b:a9:26:e0:ac:e2:01:
40:42:ec:2e:dc:d5:3f:a3:6c:c7:bc:d9:02:36:4d:
5e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CC:17:41:D2:96:48:83:BF:E0:6E:9A:17:52:64:AC:47:6E:72:DE
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xMwXQdKWSIO_4G6aF1JkrEduct4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.76.0/22
31.14.26.0/24
77.81.92.0/22
85.217.190.0/23
85.217.220.0/23
86.104.76.0/22
86.106.176.0/23
89.32.132.0/22
89.38.155.0/24
89.40.81.0/24
89.46.242.0/24
89.104.122.0/23
89.223.22.0/23
91.92.17.0/24
91.92.20.0/24
91.92.22.0/23
91.92.138.0/24
91.92.178.0/23
91.92.216.0-91.92.218.255
91.192.212.0/22
92.114.60.0/22
92.114.81.0/24
92.255.0.0/24
92.255.52.0/24
92.255.64.0/24
92.255.80.0/22
93.113.52.0/23
93.114.136.0/23
93.114.236.0/22
93.115.4.0/23
94.139.40.0/21
94.139.60.0/23
94.139.224.0/20
94.176.0.0/23
94.176.172.0/22
94.177.14.0/23
110.238.192.0/19
119.12.192.0/20
119.13.224.0/20
121.91.176.0/20
176.223.68.0/22
176.223.104.0/22
176.223.182.0/23
180.235.160.0/19
185.66.136.0/22
185.101.68.0/22
188.94.84.0/22
188.211.24.0/23
188.212.136.0/21
188.240.48.0/23
188.240.214.0/23
188.241.0.0/23
188.241.15.0/24
188.241.200.0/21
188.241.249.0/24
193.56.24.0/22
193.142.103.0/24
193.200.104.0/23
212.70.0.0/23
212.70.3.0-212.70.31.255
Signature Algorithm: sha256WithRSAEncryption
76:f8:3d:6e:0a:c5:fd:bd:00:a9:c3:88:5d:d1:42:7c:e8:7e:
d1:24:7e:2a:9c:ad:20:49:06:70:a6:2c:de:1a:04:99:17:50:
2c:79:0e:a2:ec:5f:df:b6:92:dd:ea:43:86:25:9e:10:fa:46:
97:b3:2c:17:3b:1c:bc:25:01:f4:84:38:9f:9c:b1:cc:b2:4f:
8c:6d:a9:ff:7d:cd:1e:20:3f:8d:43:3a:49:7f:be:00:7d:56:
ca:ab:3b:ad:4c:6b:c5:22:02:3f:3c:d1:45:c2:84:c6:e7:b8:
6f:2e:c0:82:c8:81:13:51:c4:4f:1c:2b:eb:aa:68:03:80:92:
18:79:cb:8f:05:31:a0:91:ee:8c:56:38:8b:3a:ea:dc:ec:68:
97:13:0c:e0:76:16:b0:76:91:b5:53:ce:a4:13:c6:ee:fe:43:
53:5c:d0:8d:24:6a:80:e4:f5:05:79:1e:a0:29:8e:6c:02:5d:
0f:6e:c4:89:92:73:d1:3d:6e:cd:ff:fc:c9:91:38:d4:43:9a:
6d:74:0b:85:db:35:4e:c1:8d:38:fa:21:b9:11:20:80:69:57:
77:46:13:b8:ec:1f:04:79:62:b2:83:9e:fb:97:c0:6c:0f:d7:
cd:54:3c:cf:2b:1c:a9:2c:9c:a8:f6:41:1c:ed:dd:8b:f5:20:
a4:0d:d2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:47 2024 by rpki-client on console-fra.rpki-client.org