Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Ai5rLojN-PFsqwelNZetEIs8qfw.roa
File: Ai5rLojN-PFsqwelNZetEIs8qfw.roa (raw, json)
Hash identifier: 70WHO7K0k6k+OGm/7U1BLb1B/Do4x6iiCb1VYm2PWpQ=
Subject key identifier: 02:2E:6B:2E:88:CD:F8:F1:6C:AB:07:A5:35:97:AD:10:8B:3C:A9:FC
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 11C59827
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Ai5rLojN-PFsqwelNZetEIs8qfw.roa
Signing time: Tue 08 Mar 2022 08:29:55 +0000
ROA not before: Tue 08 Mar 2022 08:29:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48309
IP address blocks: 37.191.92.0/22 maxlen: 22
37.191.64.0/22 maxlen: 22
37.191.68.0/22 maxlen: 22
37.191.74.0/24 maxlen: 24
37.191.72.0/22 maxlen: 22
37.191.76.0/22 maxlen: 22
37.191.80.0/21 maxlen: 21
37.191.88.0/22 maxlen: 22
188.136.161.0/24 maxlen: 24
188.136.163.0/24 maxlen: 24
188.136.165.0/24 maxlen: 24
188.136.160.0/24 maxlen: 24
188.136.162.0/24 maxlen: 24
188.136.164.0/24 maxlen: 24
188.136.166.0/24 maxlen: 24
188.136.167.0/24 maxlen: 24
188.136.169.0/24 maxlen: 24
188.136.171.0/24 maxlen: 24
188.136.168.0/24 maxlen: 24
188.136.170.0/24 maxlen: 24
188.136.172.0/24 maxlen: 24
188.136.173.0/24 maxlen: 24
188.136.175.0/24 maxlen: 24
188.136.176.0/21 maxlen: 21
188.136.174.0/24 maxlen: 24
188.136.185.0/24 maxlen: 24
188.136.184.0/24 maxlen: 24
188.136.186.0/24 maxlen: 24
188.136.192.0/23 maxlen: 23
188.136.187.0/24 maxlen: 24
188.136.188.0/24 maxlen: 24
188.136.190.0/24 maxlen: 24
188.136.189.0/24 maxlen: 24
188.136.191.0/24 maxlen: 24
188.136.194.0/24 maxlen: 24
188.136.196.0/24 maxlen: 24
188.136.196.0/22 maxlen: 22
188.136.195.0/24 maxlen: 24
188.136.200.0/24 maxlen: 24
188.136.202.0/24 maxlen: 24
188.136.204.0/24 maxlen: 24
188.136.206.0/24 maxlen: 24
188.136.201.0/24 maxlen: 24
188.136.203.0/24 maxlen: 24
188.136.205.0/24 maxlen: 24
188.136.208.0/24 maxlen: 24
188.136.210.0/24 maxlen: 24
188.136.212.0/24 maxlen: 24
188.136.207.0/24 maxlen: 24
188.136.209.0/24 maxlen: 24
188.136.211.0/24 maxlen: 24
188.136.213.0/24 maxlen: 24
188.136.129.0/24 maxlen: 24
188.136.131.0/24 maxlen: 24
188.136.128.0/24 maxlen: 24
188.136.130.0/24 maxlen: 24
188.136.132.0/24 maxlen: 24
188.136.133.0/24 maxlen: 24
188.136.135.0/24 maxlen: 24
188.136.134.0/24 maxlen: 24
188.136.141.0/24 maxlen: 24
188.136.143.0/24 maxlen: 24
188.136.145.0/24 maxlen: 24
188.136.144.0/22 maxlen: 22
188.136.140.0/24 maxlen: 24
188.136.142.0/24 maxlen: 24
188.136.144.0/24 maxlen: 24
31.25.104.0/22 maxlen: 22
188.136.149.0/24 maxlen: 24
188.136.147.0/24 maxlen: 24
188.136.151.0/24 maxlen: 24
31.25.108.0/24 maxlen: 24
31.25.110.0/23 maxlen: 23
188.136.146.0/24 maxlen: 24
188.136.150.0/24 maxlen: 24
188.136.152.0/24 maxlen: 24
31.25.109.0/24 maxlen: 24
188.136.153.0/24 maxlen: 24
188.136.155.0/24 maxlen: 24
188.136.157.0/24 maxlen: 24
188.136.159.0/24 maxlen: 24
188.136.154.0/24 maxlen: 24
188.136.156.0/24 maxlen: 24
188.136.158.0/24 maxlen: 24
188.136.214.0/24 maxlen: 24
188.136.216.0/22 maxlen: 22
188.136.215.0/24 maxlen: 24
188.136.220.0/24 maxlen: 24
188.136.222.0/24 maxlen: 24
188.136.221.0/24 maxlen: 24
188.136.223.0/24 maxlen: 24
185.85.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298162215 (0x11c59827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Mar 8 08:29:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=022e6b2e88cdf8f16cab07a53597ad108b3ca9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:99:d0:d8:6c:a2:fb:c6:68:65:b1:ad:2b:61:
8c:f5:ed:48:9e:34:d9:c6:77:fc:13:7c:20:47:a9:
55:ec:15:21:d7:17:5b:79:bb:52:a2:9a:d8:fc:40:
4c:81:80:3d:c3:c6:4f:f5:a7:8b:a7:5e:33:55:6a:
e7:1f:00:6c:db:06:3b:e4:fc:74:ca:d1:34:bf:65:
a9:0f:ba:f8:6e:a1:04:08:be:77:ab:49:57:fe:90:
84:21:56:83:ce:9d:d3:52:a4:50:ed:f4:29:aa:db:
b0:33:f5:11:94:7f:a3:96:e8:6f:d9:d2:48:05:ec:
53:88:2b:f9:cc:bf:7c:e7:6c:b8:e8:d9:5f:34:75:
17:ac:e4:58:81:13:19:ba:65:89:d4:13:d1:a2:14:
57:40:ab:98:c8:6e:6c:b0:9f:54:fd:5b:70:d2:96:
e9:30:71:6d:a4:f3:d3:ea:40:48:7d:75:6a:d2:0e:
4f:39:e1:2f:37:ba:eb:e3:aa:b7:13:34:69:8a:ed:
9b:17:88:5a:4c:7d:e9:bf:d5:58:18:19:b9:ed:c2:
fb:1c:41:a7:41:84:94:b1:c4:b5:fd:59:f2:92:04:
62:17:73:98:e1:b9:f2:bf:8e:29:48:7a:6e:10:1e:
b0:86:68:3a:5c:4d:4d:80:18:a7:9f:1c:6e:4e:9e:
e9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2E:6B:2E:88:CD:F8:F1:6C:AB:07:A5:35:97:AD:10:8B:3C:A9:FC
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Ai5rLojN-PFsqwelNZetEIs8qfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.104.0/21
37.191.64.0/19
185.85.68.0/22
188.136.128.0/21
188.136.140.0-188.136.147.255
188.136.149.0-188.136.223.255
Signature Algorithm: sha256WithRSAEncryption
8c:1b:ab:c1:be:29:a2:98:eb:0d:25:22:56:95:6b:c4:d3:4e:
49:0a:83:1a:46:23:9c:10:36:1e:c5:cb:ea:67:d4:a7:ca:9e:
29:48:92:c1:a4:f0:17:eb:98:bf:24:bb:61:37:fc:0b:69:ad:
ac:6b:69:ef:9e:20:63:07:f8:a7:7c:6d:08:2c:8e:18:fc:99:
c1:2c:8d:3a:a7:3c:a4:30:b0:92:77:cf:fa:cc:c7:4e:8b:3c:
e3:45:77:eb:49:e2:76:1e:48:34:d1:de:04:e1:cc:d4:53:ea:
68:51:79:d9:1e:4a:cc:ff:a0:d1:bb:fb:d9:e0:44:f0:28:df:
77:ac:8f:ef:65:bc:1d:83:bc:51:97:70:04:d8:45:e1:58:94:
50:26:68:ca:fc:07:fa:63:df:ff:01:7d:21:9e:70:37:31:91:
16:d2:01:82:90:91:10:53:49:87:72:3e:1b:4e:1e:b3:ee:19:
41:62:e1:75:4d:25:2d:71:19:2f:ae:1b:56:97:bd:92:1b:7b:
93:66:51:44:82:08:42:a7:45:77:c7:dc:2d:13:55:95:7c:d4:
53:e3:6c:20:92:2d:63:1f:9b:34:88:37:c0:6f:40:eb:1d:45:
30:55:c1:a9:6e:e8:0a:10:36:2e:23:50:4e:12:62:92:d1:17:
41:b5:ef:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:01 2024 by rpki-client on console-fra.rpki-client.org