Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/UQarhxEZdT_7OTCFlVMKNHTbX2M.roa
File: UQarhxEZdT_7OTCFlVMKNHTbX2M.roa (raw, json)
Hash identifier: wuV3yj+4LGlBzIotMkk+NziphUFDxhjGtkOhEoS1UaE=
Subject key identifier: 51:06:AB:87:11:19:75:3F:FB:39:30:85:95:53:0A:34:74:DB:5F:63
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 2AB3F151
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/UQarhxEZdT_7OTCFlVMKNHTbX2M.roa
Signing time: Tue 24 May 2022 08:58:13 +0000
ROA not before: Tue 24 May 2022 08:58:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8708
IP address blocks: 213.157.189.0/24 maxlen: 24
213.154.100.0/24 maxlen: 24
188.26.128.0/18 maxlen: 24
212.93.128.0/19 maxlen: 24
86.127.54.0/24 maxlen: 24
86.127.59.0/24 maxlen: 24
212.93.143.0/24 maxlen: 24
213.157.160.0/19 maxlen: 24
188.26.224.0/19 maxlen: 24
5.12.0.0/14 maxlen: 24
82.76.0.0/14 maxlen: 24
93.113.40.0/22 maxlen: 24
86.120.0.0/13 maxlen: 24
82.137.16.0/20 maxlen: 24
82.137.32.0/19 maxlen: 24
188.26.0.0/17 maxlen: 24
62.231.120.0/24 maxlen: 24
5.2.128.0/17 maxlen: 24
79.117.0.0/16 maxlen: 24
62.231.64.0/18 maxlen: 24
82.137.0.0/21 maxlen: 24
82.137.0.0/18 maxlen: 24
89.46.12.0/22 maxlen: 24
79.112.0.0/13 maxlen: 24
185.129.36.0/22 maxlen: 22
31.14.104.0/21 maxlen: 24
79.112.0.0/14 maxlen: 24
82.79.10.0/24 maxlen: 24
194.102.80.0/23 maxlen: 24
194.102.81.0/24 maxlen: 24
31.14.192.0/21 maxlen: 24
81.18.64.0/19 maxlen: 24
31.14.224.0/22 maxlen: 24
84.232.128.0/17 maxlen: 24
188.27.0.0/16 maxlen: 24
79.118.0.0/15 maxlen: 24
84.232.149.0/24 maxlen: 24
81.196.0.0/16 maxlen: 24
79.118.155.0/24 maxlen: 24
193.111.232.0/24 maxlen: 24
188.24.0.0/15 maxlen: 24
212.54.96.0/19 maxlen: 24
188.27.120.0/24 maxlen: 24
212.54.122.0/24 maxlen: 24
212.54.123.0/24 maxlen: 24
212.54.120.0/24 maxlen: 24
86.121.222.0/24 maxlen: 24
2a02:2f00::/28 maxlen: 48
2a02:2f0c:8002::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 716435793 (0x2ab3f151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: May 24 08:58:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5106ab871119753ffb39308595530a3474db5f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7f:ad:98:db:6f:39:65:82:50:79:9d:a3:68:
f2:fd:bb:2a:ca:fc:c6:ae:23:84:74:7a:aa:a0:69:
7c:db:2a:f6:f8:e3:09:0c:21:a1:fc:6e:42:25:31:
8e:06:54:d0:0a:67:11:ee:49:eb:98:50:f8:24:00:
a3:02:0a:a9:72:35:b0:67:52:a1:38:da:d3:07:45:
f6:2a:bf:80:aa:4e:d5:b0:2e:21:11:07:73:db:c5:
92:0e:45:7e:35:41:e3:2c:85:84:63:0e:7f:87:93:
eb:47:ca:fc:d4:4a:f3:8d:1f:fe:bf:d3:5a:29:57:
00:a0:77:88:75:40:c7:85:aa:11:b4:cb:d3:ce:8e:
21:10:3e:51:e8:c6:e6:7c:f7:99:81:25:37:0c:7c:
80:8f:5f:f0:ce:78:b6:7f:b1:28:bf:0c:3a:87:57:
0b:8d:4d:90:4b:a1:75:67:cc:be:36:f7:bf:98:b5:
2f:fb:5b:1e:47:13:1c:81:61:69:2d:36:9d:2f:5b:
6b:9d:b4:62:ed:ea:05:3b:f8:d8:79:ac:61:34:a7:
66:66:c5:48:d2:9b:05:a3:f4:52:67:8f:15:31:ac:
c4:6e:d2:a9:f3:4c:a5:cb:e7:f7:e1:33:2e:d5:08:
86:57:3b:47:1e:40:ae:1a:34:80:39:db:e9:f3:13:
e5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:06:AB:87:11:19:75:3F:FB:39:30:85:95:53:0A:34:74:DB:5F:63
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/UQarhxEZdT_7OTCFlVMKNHTbX2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.128.0/17
5.12.0.0/14
31.14.104.0/21
31.14.192.0/21
31.14.224.0/22
62.231.64.0/18
79.112.0.0/13
81.18.64.0/19
81.196.0.0/16
82.76.0.0/14
82.137.0.0/18
84.232.128.0/17
86.120.0.0/13
89.46.12.0/22
93.113.40.0/22
185.129.36.0/22
188.24.0.0-188.26.191.255
188.26.224.0-188.27.255.255
193.111.232.0/24
194.102.80.0/23
212.54.96.0/19
212.93.128.0/19
213.154.100.0/24
213.157.160.0/19
IPv6:
2a02:2f00::/28
Signature Algorithm: sha256WithRSAEncryption
00:38:25:dc:12:78:32:ee:10:c2:a8:e8:4a:bf:ec:5a:63:27:
5d:38:4f:35:51:63:71:85:6d:f4:88:80:00:3d:8b:34:06:a8:
ae:d7:0e:da:30:fe:31:b4:de:fa:7f:31:eb:4e:fe:36:13:d7:
cd:59:b1:be:f8:5a:4e:32:0c:be:6d:63:13:5a:f1:e3:08:02:
e3:8d:14:f3:5d:f4:29:a3:7d:ac:6d:e8:7b:56:8e:09:03:b8:
1a:de:ab:af:3c:b6:6d:58:bd:2f:f6:96:62:2d:de:eb:7d:65:
0b:fa:77:98:3f:a9:eb:e2:67:c4:4c:ff:4c:a1:22:41:29:f2:
bc:27:5a:6e:dc:78:87:b5:80:53:69:52:d4:36:65:44:c9:1c:
cb:03:cc:76:52:1d:7d:f4:84:52:11:c2:65:72:41:49:ce:78:
2e:b4:eb:64:b2:87:7f:ee:84:15:e6:ba:23:a9:e6:ad:69:47:
1a:fb:e6:e2:b6:cb:14:7b:46:92:1a:7e:37:cc:82:46:10:01:
e9:ce:aa:82:e2:4b:14:cf:0a:d3:b3:86:eb:5a:eb:80:6a:82:
51:bc:c9:3c:8c:35:d0:e3:23:97:9f:90:23:61:48:68:fb:59:
f1:6d:a1:fb:16:c5:28:aa:c3:bd:af:48:86:32:4c:a1:ac:a9:
c6:b3:64:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:37 2023 by rpki-client on console-fra.rpki-client.org