Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/V_93wdA5_cp8j2org1FSQc5TQ1A.roa
File: V_93wdA5_cp8j2org1FSQc5TQ1A.roa (raw, json)
Hash identifier: m9ymCJ2BYQciqImthbeY4h1FH9wbJgTkoyZ7vdeOnr0=
Subject key identifier: 57:FF:77:C1:D0:39:FD:CA:7C:8F:6A:2B:83:51:52:41:CE:53:43:50
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 0182CFA3827FB77631BA04BBE95196041B33
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/V_93wdA5_cp8j2org1FSQc5TQ1A.roa
Signing time: Wed 24 Aug 2022 11:36:15 +0000
ROA not before: Wed 24 Aug 2022 11:36:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1257
IP address blocks: 83.188.0.0/18 maxlen: 18
83.177.232.0/21 maxlen: 21
90.144.64.0/19 maxlen: 19
90.141.0.0/19 maxlen: 19
193.150.192.0/18 maxlen: 18
77.218.32.0/19 maxlen: 19
83.177.192.0/19 maxlen: 19
83.177.200.0/21 maxlen: 21
83.177.224.0/19 maxlen: 19
188.148.0.0/14 maxlen: 14
178.218.152.0/22 maxlen: 22
83.191.160.0/19 maxlen: 19
213.100.192.0/19 maxlen: 19
90.141.40.0/21 maxlen: 21
90.141.48.0/20 maxlen: 20
91.130.0.0/18 maxlen: 18
85.194.0.0/18 maxlen: 18
90.143.128.0/17 maxlen: 17
213.200.128.0/18 maxlen: 18
151.177.0.0/16 maxlen: 16
90.129.224.0/19 maxlen: 19
83.248.0.0/13 maxlen: 13
83.180.224.0/19 maxlen: 19
213.103.128.0/19 maxlen: 19
83.181.0.0/19 maxlen: 19
83.177.160.0/19 maxlen: 19
90.133.128.0/19 maxlen: 19
90.133.160.0/19 maxlen: 19
213.102.64.0/19 maxlen: 19
37.0.216.0/21 maxlen: 21
37.0.224.0/19 maxlen: 19
77.233.95.0/24 maxlen: 24
90.143.0.0/19 maxlen: 19
83.190.64.0/18 maxlen: 18
193.14.192.0/20 maxlen: 20
213.102.80.0/20 maxlen: 20
87.227.0.0/17 maxlen: 17
213.89.0.0/16 maxlen: 16
83.182.32.0/19 maxlen: 19
83.188.224.0/19 maxlen: 19
193.13.160.0/20 maxlen: 20
91.128.160.0/19 maxlen: 19
90.142.32.0/19 maxlen: 19
90.142.48.0/20 maxlen: 20
91.128.192.0/19 maxlen: 19
37.0.192.0/20 maxlen: 20
77.233.64.0/19 maxlen: 19
80.216.0.0/15 maxlen: 15
37.0.128.0/18 maxlen: 18
81.216.23.0/24 maxlen: 24
81.216.18.0/23 maxlen: 23
91.128.128.0/19 maxlen: 19
2a04:ae00::/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cf:a3:82:7f:b7:76:31:ba:04:bb:e9:51:96:04:1b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Aug 24 11:36:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57ff77c1d039fdca7c8f6a2b83515241ce534350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e0:0a:dd:95:55:f8:42:27:a4:87:be:1c:a9:
c6:dd:44:a4:2e:7c:43:9f:cd:38:11:f4:61:52:20:
24:9e:46:2d:56:7d:e2:36:59:4b:a0:e7:3d:b2:92:
8f:5a:8b:09:cc:83:f5:37:b4:1b:db:52:1f:71:55:
d2:8e:28:17:82:90:92:94:e8:af:4b:d5:80:0c:a9:
19:ea:dd:17:51:9c:01:06:e2:89:13:2e:ff:5a:f7:
df:32:e0:65:0a:0b:82:32:2b:fe:a1:ed:d7:14:2c:
2a:d5:85:ff:49:39:a1:a3:0b:35:7e:69:e9:61:19:
80:27:3b:ca:ac:72:e1:d1:a5:c9:09:46:af:9b:49:
2f:62:32:d3:49:23:ec:bb:ac:c5:0e:81:8c:09:37:
6e:d1:35:49:1f:ef:5d:0f:f4:2f:04:2e:97:b5:46:
af:0f:66:a8:72:b3:75:a7:2c:16:80:df:f0:be:1c:
5b:f9:48:09:0f:df:7b:44:58:fd:35:79:56:e0:17:
1e:89:d2:05:49:fa:81:3d:67:1e:ab:f1:8b:e6:55:
59:b2:93:cd:53:85:35:17:39:5c:e8:90:26:98:95:
e5:37:7f:10:56:93:38:d7:70:7a:c4:a5:2d:2a:31:
31:d4:eb:ec:70:ad:69:08:46:69:b8:72:cc:c4:37:
39:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FF:77:C1:D0:39:FD:CA:7C:8F:6A:2B:83:51:52:41:CE:53:43:50
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/V_93wdA5_cp8j2org1FSQc5TQ1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.128.0-37.0.207.255
37.0.216.0-37.0.255.255
77.218.32.0/19
77.233.64.0/19
80.216.0.0/15
81.216.18.0/23
81.216.23.0/24
83.177.160.0-83.177.255.255
83.180.224.0-83.181.31.255
83.182.32.0/19
83.188.0.0/18
83.188.224.0/19
83.190.64.0/18
83.191.160.0/19
83.248.0.0/13
85.194.0.0/18
87.227.0.0/17
90.129.224.0/19
90.133.128.0/18
90.141.0.0/19
90.141.40.0-90.141.63.255
90.142.32.0/19
90.143.0.0/19
90.143.128.0/17
90.144.64.0/19
91.128.128.0-91.128.223.255
91.130.0.0/18
151.177.0.0/16
178.218.152.0/22
188.148.0.0/14
193.13.160.0/20
193.14.192.0/20
193.150.192.0/18
213.89.0.0/16
213.100.192.0/19
213.102.64.0/19
213.103.128.0/19
213.200.128.0/18
IPv6:
2a04:ae00::/26
Signature Algorithm: sha256WithRSAEncryption
19:12:80:d3:59:d4:10:1f:2f:9b:4c:e9:f4:2e:ab:97:b0:d4:
27:2d:a3:ac:d2:09:af:81:68:a4:f8:3a:9a:b0:4f:c4:0e:ed:
50:d4:07:48:34:89:cf:5e:39:3f:31:d5:6e:a0:c6:e2:eb:3a:
a8:3a:d7:6c:e2:ff:10:e8:e3:fa:19:ce:c8:b0:af:ce:c0:d9:
d5:e8:7e:33:2d:ec:ca:d8:65:01:c5:5c:c8:82:b5:46:34:49:
8e:0f:0e:6b:a7:65:22:46:e4:60:a8:9f:73:8b:05:1c:88:a0:
20:93:1e:d0:25:fd:6f:7b:ad:8d:02:3a:84:d8:10:d7:e1:bf:
3c:1c:07:46:70:7b:a0:19:77:0d:65:16:f4:f6:1b:c8:87:ef:
3f:03:fd:8a:71:82:84:4b:2b:68:7e:44:c4:56:d4:82:81:d6:
a9:46:48:28:98:0a:cd:6c:c9:1a:65:b7:0d:d3:c6:e6:75:36:
72:36:bb:8a:0c:e7:7b:ed:b3:0f:9d:bb:2d:56:e1:7d:cf:66:
d5:92:1a:dd:fe:94:96:d4:23:25:7d:b9:98:c6:83:58:11:52:
be:96:4c:31:df:59:b8:5e:6c:29:ab:f3:2e:54:e9:19:2d:b4:
b8:43:19:1f:72:c6:ec:f9:e6:88:a4:13:1f:e7:c3:a7:9e:da:
47:9d:dd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:27 2024 by rpki-client on console-ams.rpki-client.org