Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/kVnnwMjiYhT6I4o9AdUvu715_Ys.roa
File: kVnnwMjiYhT6I4o9AdUvu715_Ys.roa (raw, json)
Hash identifier: bCXarOIhJyxgMnOhj5S2gFPBsyfMO6NeRDPSGunVgyU=
Subject key identifier: 91:59:E7:C0:C8:E2:62:14:FA:23:8A:3D:01:D5:2F:BB:BD:79:FD:8B
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A6552BB
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/kVnnwMjiYhT6I4o9AdUvu715_Ys.roa
Signing time: Sat 01 Jan 2022 04:51:46 +0000
ROA not before: Sat 01 Jan 2022 04:51:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20804
IP address blocks: 88.220.224.0/19 maxlen: 19
88.220.252.0/24 maxlen: 24
88.220.253.0/24 maxlen: 24
88.220.165.0/24 maxlen: 24
88.220.181.0/24 maxlen: 24
88.220.185.0/24 maxlen: 24
88.220.192.0/20 maxlen: 20
88.220.208.0/20 maxlen: 20
88.220.0.0/17 maxlen: 17
213.172.160.0/19 maxlen: 19
88.220.107.0/24 maxlen: 24
88.220.114.0/24 maxlen: 24
88.220.116.0/24 maxlen: 24
88.220.117.0/24 maxlen: 24
88.220.120.0/22 maxlen: 22
88.220.128.0/18 maxlen: 18
88.220.132.0/23 maxlen: 23
88.220.152.0/23 maxlen: 23
88.220.52.0/24 maxlen: 24
88.220.60.0/23 maxlen: 23
88.220.66.0/23 maxlen: 23
88.220.65.0/24 maxlen: 24
88.220.84.0/24 maxlen: 24
88.220.81.0/24 maxlen: 24
82.177.249.0/24 maxlen: 24
82.177.251.0/24 maxlen: 24
81.15.254.0/23 maxlen: 23
81.15.254.0/24 maxlen: 24
81.15.255.0/24 maxlen: 24
82.177.177.0/24 maxlen: 24
82.177.179.0/24 maxlen: 24
82.177.183.0/24 maxlen: 24
82.177.182.0/24 maxlen: 24
82.177.192.0/24 maxlen: 24
82.177.199.0/24 maxlen: 24
82.177.195.0/24 maxlen: 24
82.177.206.0/24 maxlen: 24
82.177.207.0/24 maxlen: 24
195.136.164.0/23 maxlen: 23
82.177.21.0/24 maxlen: 24
195.136.176.0/22 maxlen: 22
195.136.174.0/23 maxlen: 23
82.177.27.0/24 maxlen: 24
82.177.35.0/24 maxlen: 24
82.177.37.0/24 maxlen: 24
82.177.43.0/24 maxlen: 24
81.15.128.0/17 maxlen: 17
82.177.48.0/24 maxlen: 24
82.177.50.0/24 maxlen: 24
82.177.46.0/24 maxlen: 24
81.15.136.0/23 maxlen: 23
82.177.52.0/23 maxlen: 23
81.15.133.0/24 maxlen: 24
82.177.54.0/24 maxlen: 24
195.136.113.0/24 maxlen: 24
195.136.114.0/23 maxlen: 23
82.177.2.0/24 maxlen: 24
195.136.148.0/22 maxlen: 22
195.136.156.0/23 maxlen: 23
82.177.0.0/16 maxlen: 16
82.177.119.0/24 maxlen: 24
81.15.201.0/24 maxlen: 24
81.15.203.0/24 maxlen: 24
82.177.122.0/24 maxlen: 24
81.15.204.0/23 maxlen: 23
82.177.127.0/24 maxlen: 24
81.15.214.0/23 maxlen: 23
82.177.133.0/24 maxlen: 24
81.15.217.0/24 maxlen: 24
81.15.218.0/24 maxlen: 24
82.177.140.0/23 maxlen: 23
81.15.222.0/24 maxlen: 24
81.15.225.0/24 maxlen: 24
81.15.227.0/24 maxlen: 24
81.15.232.0/24 maxlen: 24
81.15.237.0/24 maxlen: 24
81.15.239.0/24 maxlen: 24
81.15.242.0/24 maxlen: 24
82.177.164.0/24 maxlen: 24
82.177.165.0/24 maxlen: 24
82.177.68.0/22 maxlen: 22
81.15.150.0/24 maxlen: 24
81.15.156.0/24 maxlen: 24
82.177.90.0/24 maxlen: 24
82.177.91.0/24 maxlen: 24
82.177.90.0/23 maxlen: 23
81.15.174.0/24 maxlen: 24
81.15.175.0/24 maxlen: 24
195.136.252.0/24 maxlen: 24
81.15.184.0/23 maxlen: 23
81.15.182.0/23 maxlen: 23
82.177.102.0/23 maxlen: 24
81.15.187.0/24 maxlen: 24
81.15.191.0/24 maxlen: 24
82.177.112.0/22 maxlen: 22
82.177.108.0/23 maxlen: 23
81.15.198.0/24 maxlen: 24
81.15.199.0/24 maxlen: 24
81.15.195.0/24 maxlen: 24
81.15.194.0/24 maxlen: 24
194.183.32.0/19 maxlen: 19
194.183.32.0/23 maxlen: 23
194.183.34.0/23 maxlen: 23
195.136.65.0/24 maxlen: 24
195.136.88.0/22 maxlen: 22
195.136.4.0/22 maxlen: 22
195.136.0.0/16 maxlen: 16
194.183.56.0/23 maxlen: 23
195.136.16.0/22 maxlen: 22
194.183.54.0/24 maxlen: 24
194.183.55.0/24 maxlen: 24
195.136.21.0/24 maxlen: 24
195.136.27.0/24 maxlen: 24
195.136.25.0/24 maxlen: 24
195.136.28.0/22 maxlen: 22
195.136.34.0/23 maxlen: 23
195.136.38.0/23 maxlen: 23
195.136.48.0/24 maxlen: 24
2a00:4120:8000:4::/64 maxlen: 64
2a00:4120:8000:70::/65 maxlen: 65
2a00:4120:8000:2::/64 maxlen: 64
2a00:4120::/32 maxlen: 32
2a00:4120:8000:5::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 979718843 (0x3a6552bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:51:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9159e7c0c8e26214fa238a3d01d52fbbbd79fd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:fe:e7:42:27:cb:18:6f:75:bb:dd:c4:a7:
08:71:26:30:14:21:67:3a:06:f5:28:a2:d2:17:81:
6d:bd:03:b0:06:49:1f:58:0a:ef:49:21:53:3a:74:
ac:a0:07:5e:59:9d:5a:d9:08:ef:db:3f:4d:f5:0a:
01:cc:aa:28:dd:3e:e0:0f:5e:b8:e8:88:fb:7e:35:
08:bb:29:98:db:7e:1d:85:d9:85:2a:10:72:9c:29:
e3:03:31:c2:ec:bd:6b:0f:a8:8d:7e:90:a7:fb:ef:
ab:47:1a:8f:27:e1:ca:1e:df:98:2a:4d:2e:e2:43:
f7:87:9e:13:65:52:e9:60:d3:cb:07:a5:f9:9b:68:
be:30:90:70:ef:1c:a0:64:4e:06:00:12:ae:4e:29:
2f:14:8d:8a:e5:3e:ce:d3:df:79:fd:3b:09:c3:85:
29:85:75:e8:28:d8:d0:84:fd:37:82:1a:fc:a2:e9:
d0:68:21:44:2c:12:15:01:9c:96:cf:ae:76:54:01:
28:68:c2:14:91:2b:64:cd:a1:8a:79:76:1e:1a:4c:
65:7a:3e:fa:e3:7f:80:9d:e4:d2:c9:56:e5:8c:6b:
8d:a7:90:28:d4:09:da:a9:9a:d9:6c:e4:3b:c0:23:
01:fa:7b:c5:52:0c:c5:84:cb:d3:8d:47:2a:31:62:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:59:E7:C0:C8:E2:62:14:FA:23:8A:3D:01:D5:2F:BB:BD:79:FD:8B
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/kVnnwMjiYhT6I4o9AdUvu715_Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.128.0/17
82.177.0.0/16
88.220.0.0/16
194.183.32.0/19
195.136.0.0/16
213.172.160.0/19
IPv6:
2a00:4120::/32
Signature Algorithm: sha256WithRSAEncryption
aa:be:ce:5c:c2:56:0a:3e:e4:ec:9a:31:a1:6e:7e:6b:50:4b:
c1:f5:9c:46:86:49:b1:3b:47:2d:92:c2:ec:cb:71:b8:07:27:
fc:97:f8:74:0c:62:66:d6:63:77:71:0d:51:71:ca:ea:9c:f7:
f0:11:42:11:ac:61:a6:8c:57:e8:ef:a2:66:f0:3b:3d:86:4e:
a8:0a:b3:4c:83:06:ac:cf:56:6a:7f:c5:aa:e6:45:bd:ae:27:
42:1e:43:b9:b7:e2:5a:56:5b:5b:96:51:0c:61:f4:ec:ae:ef:
8c:83:eb:c9:58:f4:79:3e:93:4b:75:17:5c:a4:98:4b:18:33:
ab:c4:f7:26:16:4b:ac:b0:cc:81:6a:cc:e8:8a:bd:66:78:11:
53:e4:29:0c:1d:62:31:5a:aa:46:19:0a:a8:d5:7d:48:a0:fb:
c5:3e:17:13:ba:10:55:9e:b0:55:66:8a:c9:7b:09:01:13:49:
33:f9:0c:97:90:ed:36:2d:e9:49:43:81:1e:97:ea:bc:88:63:
99:11:c4:4f:89:c6:6f:c3:2e:1d:aa:22:90:80:e2:7e:b8:d8:
29:71:8a:30:df:42:d7:5e:52:5b:6e:f3:4b:bd:81:1e:58:9a:
d8:90:8e:58:79:18:cd:c3:9f:cf:08:a8:03:6d:83:ad:e7:ee:
18:f0:80:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org