Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/m7bLYYp57xr6R2VvC5_qe9kiR4M.roa
File: m7bLYYp57xr6R2VvC5_qe9kiR4M.roa (raw, json)
Hash identifier: gte1q/nnFZIAaiJpY/ue8JGaC8plDqzbswCy7Dpvw7I=
Subject key identifier: 9B:B6:CB:61:8A:79:EF:1A:FA:47:65:6F:0B:9F:EA:7B:D9:22:47:83
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3B880985
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/m7bLYYp57xr6R2VvC5_qe9kiR4M.roa
Signing time: Tue 12 Apr 2022 08:33:06 +0000
ROA not before: Tue 12 Apr 2022 08:33:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20804
IP address blocks: 88.220.224.0/19 maxlen: 19
88.220.252.0/24 maxlen: 24
88.220.253.0/24 maxlen: 24
88.220.165.0/24 maxlen: 24
88.220.181.0/24 maxlen: 24
88.220.185.0/24 maxlen: 24
88.220.192.0/20 maxlen: 20
88.220.208.0/20 maxlen: 20
88.220.0.0/17 maxlen: 17
213.172.160.0/19 maxlen: 19
88.220.107.0/24 maxlen: 24
88.220.114.0/24 maxlen: 24
88.220.116.0/24 maxlen: 24
88.220.117.0/24 maxlen: 24
88.220.120.0/22 maxlen: 22
88.220.128.0/18 maxlen: 18
88.220.132.0/23 maxlen: 23
88.220.152.0/23 maxlen: 23
88.220.52.0/24 maxlen: 24
88.220.60.0/23 maxlen: 23
88.220.66.0/23 maxlen: 23
88.220.65.0/24 maxlen: 24
88.220.84.0/24 maxlen: 24
88.220.81.0/24 maxlen: 24
82.177.249.0/24 maxlen: 24
82.177.251.0/24 maxlen: 24
81.15.254.0/23 maxlen: 23
81.15.254.0/24 maxlen: 24
81.15.255.0/24 maxlen: 24
82.177.177.0/24 maxlen: 24
82.177.179.0/24 maxlen: 24
82.177.183.0/24 maxlen: 24
82.177.182.0/24 maxlen: 24
82.177.192.0/24 maxlen: 24
82.177.199.0/24 maxlen: 24
82.177.194.0/24 maxlen: 24
82.177.195.0/24 maxlen: 24
82.177.196.0/24 maxlen: 24
82.177.206.0/24 maxlen: 24
82.177.207.0/24 maxlen: 24
195.136.164.0/23 maxlen: 23
82.177.21.0/24 maxlen: 24
195.136.176.0/22 maxlen: 22
195.136.174.0/23 maxlen: 23
82.177.27.0/24 maxlen: 24
82.177.35.0/24 maxlen: 24
82.177.37.0/24 maxlen: 24
82.177.43.0/24 maxlen: 24
81.15.128.0/17 maxlen: 17
82.177.48.0/24 maxlen: 24
82.177.50.0/24 maxlen: 24
82.177.46.0/24 maxlen: 24
81.15.136.0/23 maxlen: 23
82.177.52.0/23 maxlen: 23
81.15.133.0/24 maxlen: 24
82.177.54.0/24 maxlen: 24
195.136.113.0/24 maxlen: 24
195.136.114.0/23 maxlen: 23
82.177.2.0/24 maxlen: 24
195.136.148.0/22 maxlen: 22
195.136.156.0/23 maxlen: 23
82.177.0.0/16 maxlen: 16
82.177.119.0/24 maxlen: 24
81.15.201.0/24 maxlen: 24
81.15.203.0/24 maxlen: 24
82.177.122.0/24 maxlen: 24
81.15.204.0/23 maxlen: 23
82.177.127.0/24 maxlen: 24
81.15.214.0/23 maxlen: 23
82.177.133.0/24 maxlen: 24
81.15.217.0/24 maxlen: 24
81.15.218.0/24 maxlen: 24
82.177.140.0/23 maxlen: 23
81.15.222.0/24 maxlen: 24
81.15.225.0/24 maxlen: 24
81.15.227.0/24 maxlen: 24
81.15.232.0/24 maxlen: 24
81.15.237.0/24 maxlen: 24
81.15.239.0/24 maxlen: 24
81.15.242.0/24 maxlen: 24
82.177.164.0/24 maxlen: 24
82.177.165.0/24 maxlen: 24
82.177.68.0/22 maxlen: 22
81.15.150.0/24 maxlen: 24
81.15.156.0/24 maxlen: 24
82.177.90.0/24 maxlen: 24
82.177.91.0/24 maxlen: 24
82.177.90.0/23 maxlen: 23
81.15.174.0/24 maxlen: 24
81.15.175.0/24 maxlen: 24
195.136.252.0/24 maxlen: 24
81.15.184.0/23 maxlen: 23
81.15.182.0/23 maxlen: 23
82.177.102.0/23 maxlen: 24
81.15.187.0/24 maxlen: 24
81.15.191.0/24 maxlen: 24
82.177.112.0/22 maxlen: 22
82.177.108.0/23 maxlen: 23
81.15.198.0/24 maxlen: 24
81.15.199.0/24 maxlen: 24
81.15.195.0/24 maxlen: 24
81.15.194.0/24 maxlen: 24
194.183.32.0/19 maxlen: 19
194.183.32.0/23 maxlen: 23
194.183.34.0/23 maxlen: 23
195.136.65.0/24 maxlen: 24
195.136.88.0/22 maxlen: 22
195.136.4.0/22 maxlen: 22
195.136.0.0/16 maxlen: 16
194.183.56.0/23 maxlen: 23
195.136.16.0/22 maxlen: 22
194.183.54.0/24 maxlen: 24
194.183.55.0/24 maxlen: 24
195.136.21.0/24 maxlen: 24
195.136.27.0/24 maxlen: 24
195.136.25.0/24 maxlen: 24
195.136.34.0/23 maxlen: 23
195.136.38.0/23 maxlen: 23
195.136.48.0/24 maxlen: 24
2a00:4120:8000:4::/64 maxlen: 64
2a00:4120:8000:70::/65 maxlen: 65
2a00:4120:8000:2::/64 maxlen: 64
2a00:4120::/32 maxlen: 32
2a00:4120:8000:5::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 998771077 (0x3b880985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Apr 12 08:33:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bb6cb618a79ef1afa47656f0b9fea7bd9224783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:64:21:d6:25:a4:79:99:12:bd:18:1a:fd:
9e:45:bd:1a:06:f0:bf:64:0e:32:70:82:30:7d:7b:
72:da:53:b0:2f:35:5a:cf:8d:ed:8e:66:32:22:85:
28:b8:70:78:c7:43:1e:42:14:e0:9d:e8:1d:47:00:
67:e4:da:e7:20:a6:b5:06:e1:05:cd:ba:4e:9c:2d:
d3:53:a8:2c:85:29:4f:d0:ed:6b:53:cf:a3:a0:5d:
5b:a6:79:6a:c9:3f:17:ca:72:53:56:17:25:c2:56:
cb:91:e4:71:4c:1c:9a:9d:db:a7:d9:06:ec:7d:01:
bb:71:0b:27:26:66:1d:1e:8a:23:5e:59:ed:70:f2:
25:54:7e:6d:68:12:a3:96:22:fe:be:18:e7:4a:02:
b3:53:82:13:2a:5f:38:09:1b:85:82:14:c7:a2:23:
2e:4d:9d:74:ad:19:41:b6:41:52:2c:84:35:72:9f:
0e:d9:4d:d1:73:18:8f:44:19:6b:a9:23:00:67:c2:
14:11:e6:b3:91:0c:57:e0:c1:22:f9:3c:b6:6a:fd:
15:12:a8:63:2f:5a:b8:5b:32:36:7e:37:6b:c3:9c:
75:d6:fe:4d:11:4c:36:9c:04:1b:01:2e:2a:ce:71:
55:42:31:74:2a:e7:8b:2a:29:54:85:c4:6a:ea:39:
1b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B6:CB:61:8A:79:EF:1A:FA:47:65:6F:0B:9F:EA:7B:D9:22:47:83
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/m7bLYYp57xr6R2VvC5_qe9kiR4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.128.0/17
82.177.0.0/16
88.220.0.0/16
194.183.32.0/19
195.136.0.0/16
213.172.160.0/19
IPv6:
2a00:4120::/32
Signature Algorithm: sha256WithRSAEncryption
0e:c2:13:35:15:5f:aa:7e:0d:f6:57:aa:2d:44:cc:59:d3:41:
24:9c:77:c0:57:f6:f7:ed:d0:8f:ce:da:65:6f:c6:19:8d:4f:
f7:69:1c:39:3b:e5:e2:2f:51:4b:81:01:8b:93:57:ca:e3:fe:
05:9a:9c:ea:72:2e:17:3c:f0:b8:93:d9:25:ef:0a:f9:b4:17:
65:af:82:0f:bb:18:72:51:06:69:52:94:5f:e4:84:b2:d7:85:
ef:20:08:11:33:9a:cc:6c:f0:30:3a:4e:11:e9:e1:7b:b2:f7:
34:f4:34:b2:bb:77:0e:d4:97:dd:db:25:ca:50:da:31:d2:33:
f6:0f:c4:ce:bd:78:db:56:59:2d:93:2b:cc:33:56:da:1f:9a:
99:47:29:f4:76:22:6b:68:c4:95:f2:ec:bf:ef:3c:53:86:83:
46:64:3c:f5:5b:09:92:ed:37:a1:a6:aa:3d:2f:64:a0:8f:11:
80:68:ca:5b:4c:c9:1e:aa:b3:16:dc:db:11:28:b1:10:f7:4c:
8f:6e:4f:e7:58:4f:32:95:45:db:15:5d:dd:b1:e6:f5:5c:d1:
ab:61:57:4c:0c:e9:08:26:68:a7:ee:17:0c:1c:51:20:f8:f5:
eb:f1:5f:02:94:28:c3:a0:92:ea:f0:a5:e2:26:d3:46:c0:54:
76:d2:e3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:21 2023 by rpki-client on console-fra.rpki-client.org