Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/j72IVa7-X-VijuRRSheUyiGx97I.roa
File: j72IVa7-X-VijuRRSheUyiGx97I.roa (raw, json)
Hash identifier: DTN541W1RVzd2H4a+lTBBGAwH28ism67eePbli8d9C8=
Subject key identifier: 8F:BD:88:55:AE:FE:5F:E5:62:8E:E4:51:4A:17:94:CA:21:B1:F7:B2
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 2ADCD39D
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/j72IVa7-X-VijuRRSheUyiGx97I.roa
Signing time: Thu 09 Jun 2022 14:19:05 +0000
ROA not before: Thu 09 Jun 2022 14:19:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8708
IP address blocks: 213.157.189.0/24 maxlen: 24
213.154.100.0/24 maxlen: 24
188.26.128.0/18 maxlen: 24
212.93.128.0/19 maxlen: 24
86.127.54.0/24 maxlen: 24
86.127.59.0/24 maxlen: 24
212.93.143.0/24 maxlen: 24
213.157.160.0/19 maxlen: 24
188.26.224.0/19 maxlen: 24
5.12.0.0/14 maxlen: 24
82.76.0.0/14 maxlen: 24
93.113.40.0/22 maxlen: 24
86.120.0.0/13 maxlen: 24
82.137.16.0/20 maxlen: 24
82.137.32.0/19 maxlen: 24
188.26.0.0/17 maxlen: 24
62.231.120.0/24 maxlen: 24
5.2.128.0/17 maxlen: 24
79.117.0.0/16 maxlen: 24
62.231.64.0/18 maxlen: 24
82.137.0.0/21 maxlen: 24
82.137.0.0/18 maxlen: 24
89.46.12.0/22 maxlen: 24
79.112.0.0/13 maxlen: 24
185.129.36.0/22 maxlen: 22
31.14.104.0/21 maxlen: 24
79.112.0.0/14 maxlen: 24
82.79.10.0/24 maxlen: 24
194.102.80.0/23 maxlen: 24
194.102.81.0/24 maxlen: 24
31.14.192.0/21 maxlen: 24
81.18.64.0/19 maxlen: 24
31.14.224.0/22 maxlen: 24
84.232.128.0/17 maxlen: 24
188.27.0.0/16 maxlen: 24
79.118.0.0/15 maxlen: 24
84.232.149.0/24 maxlen: 24
81.196.0.0/16 maxlen: 24
79.118.155.0/24 maxlen: 24
193.111.232.0/24 maxlen: 24
188.24.0.0/15 maxlen: 24
212.54.96.0/19 maxlen: 24
188.27.120.0/24 maxlen: 24
212.54.122.0/24 maxlen: 24
212.54.123.0/24 maxlen: 24
212.54.120.0/24 maxlen: 24
86.121.222.0/24 maxlen: 24
2a02:2f00::/28 maxlen: 48
2a02:2f09:3100::/48 maxlen: 48
2a03:9c20:1000::/48 maxlen: 48
2a03:9c20:f000::/48 maxlen: 48
2a02:2f0c:8002::/48 maxlen: 48
2a02:2f01:100::/48 maxlen: 48
2a03:9c20::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719115165 (0x2adcd39d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Jun 9 14:19:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fbd8855aefe5fe5628ee4514a1794ca21b1f7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:66:a7:cb:6f:fa:3d:c1:0e:69:e5:1f:d5:a6:
45:76:1c:dd:d3:5f:38:9d:3b:d5:68:39:c9:b7:06:
40:7a:5e:4e:03:5e:23:e5:d5:63:b7:5e:ac:dd:60:
14:a4:15:18:0f:2a:86:33:8f:34:bc:c4:c3:d2:ba:
c1:79:ff:cd:7a:d6:99:1c:a6:fd:db:ac:59:ea:d9:
a3:6d:c6:30:8c:93:26:a6:2b:4d:0a:0c:27:1d:82:
31:a5:4d:5e:fa:c0:cd:7c:14:60:22:57:12:7c:26:
ae:5b:1e:87:9b:d0:75:83:3f:d7:cd:c2:c7:30:37:
ca:74:34:f7:22:7c:d6:98:8b:8a:54:5d:77:68:83:
72:0f:fb:d5:5c:ff:51:7c:c3:6d:30:e5:dd:d7:65:
28:37:1c:de:5d:b8:2d:a4:e7:b8:ed:7a:b4:5d:43:
50:e8:11:38:ad:1a:ae:79:ee:0b:cd:a9:43:c5:06:
1a:4f:b8:25:47:b3:34:04:39:f2:08:2e:34:65:c3:
4c:cb:52:4e:ac:99:c4:37:a1:9a:62:30:1c:5e:12:
1a:7b:ce:07:26:e4:50:00:d0:b2:5d:72:a4:87:bf:
22:71:cd:b9:9e:61:4d:4b:ca:fe:2e:16:9e:d5:c1:
9a:5f:03:88:b3:54:85:be:58:7c:12:31:ef:fd:00:
93:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BD:88:55:AE:FE:5F:E5:62:8E:E4:51:4A:17:94:CA:21:B1:F7:B2
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/j72IVa7-X-VijuRRSheUyiGx97I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.128.0/17
5.12.0.0/14
31.14.104.0/21
31.14.192.0/21
31.14.224.0/22
62.231.64.0/18
79.112.0.0/13
81.18.64.0/19
81.196.0.0/16
82.76.0.0/14
82.137.0.0/18
84.232.128.0/17
86.120.0.0/13
89.46.12.0/22
93.113.40.0/22
185.129.36.0/22
188.24.0.0-188.26.191.255
188.26.224.0-188.27.255.255
193.111.232.0/24
194.102.80.0/23
212.54.96.0/19
212.93.128.0/19
213.154.100.0/24
213.157.160.0/19
IPv6:
2a02:2f00::/28
2a03:9c20::/32
Signature Algorithm: sha256WithRSAEncryption
a0:b7:a9:96:06:27:23:78:fd:94:35:f0:70:73:59:f8:34:01:
a0:fe:e9:0c:f7:9d:02:dd:59:63:9d:28:bc:43:bf:68:b0:1a:
dd:c3:04:bd:78:d6:29:48:4d:2f:63:74:a7:45:31:9d:7f:b1:
07:69:e6:56:ad:a6:9f:09:b7:a1:4e:5c:5a:31:38:fa:ea:aa:
13:3a:f3:76:a5:dc:f9:d8:eb:d8:63:7b:94:0d:02:2c:d4:5b:
f0:e9:81:6d:ca:cf:ef:b2:09:9a:db:94:c8:2a:e2:d7:c6:78:
0e:4b:0f:de:82:73:cb:94:3d:c2:56:39:9c:b6:da:ec:ec:69:
1f:6d:50:e5:f7:df:1b:5d:46:07:7c:87:f2:18:2a:df:c9:c4:
cf:03:8c:ed:a1:b6:81:e5:f6:29:91:84:d3:46:4e:0f:a2:e6:
96:c3:83:6a:da:ef:77:e1:ab:f2:28:ba:1b:9e:46:1f:d6:44:
0a:ac:7e:53:28:53:eb:b9:96:5f:91:94:bc:8e:20:ef:6d:ad:
53:fc:0d:84:8d:56:bd:30:d5:51:06:03:a9:3d:7b:b5:7a:11:
20:72:05:c0:8f:2e:b3:16:d9:40:c0:5c:eb:60:c2:d3:b2:86:
b7:41:00:b4:21:1f:fb:fb:ff:76:37:54:a7:ad:c2:61:42:20:
89:43:1c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:37 2023 by rpki-client on console-fra.rpki-client.org