Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/ZVhf1rLCXpl6F7KX7NAEUD2lNlc.roa
File: ZVhf1rLCXpl6F7KX7NAEUD2lNlc.roa (raw, json)
Hash identifier: jr8FdHXDX68p3r5i0HHg7qSw7yyXJsaf5akbLeMhd9g=
Subject key identifier: 65:58:5F:D6:B2:C2:5E:99:7A:17:B2:97:EC:D0:04:50:3D:A5:36:57
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 0EC35A40
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/ZVhf1rLCXpl6F7KX7NAEUD2lNlc.roa
Signing time: Tue 03 May 2022 10:18:52 +0000
ROA not before: Tue 03 May 2022 10:18:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61323
IP address blocks: 81.201.128.0/20 maxlen: 20
80.66.200.0/22 maxlen: 22
185.241.248.0/22 maxlen: 24
185.221.204.0/22 maxlen: 22
193.39.252.0/22 maxlen: 22
194.39.164.0/22 maxlen: 22
185.160.252.0/23 maxlen: 23
185.160.254.0/24 maxlen: 24
78.137.112.0/20 maxlen: 20
178.238.128.0/20 maxlen: 20
45.84.20.0/22 maxlen: 24
185.181.196.0/22 maxlen: 22
176.124.52.0/22 maxlen: 24
185.210.196.0/22 maxlen: 22
185.207.108.0/22 maxlen: 22
195.69.102.0/24 maxlen: 24
185.234.36.0/22 maxlen: 22
78.109.160.0/20 maxlen: 20
185.197.60.0/22 maxlen: 22
185.160.180.0/22 maxlen: 22
80.244.176.0/20 maxlen: 20
45.157.40.0/22 maxlen: 24
192.166.44.0/24 maxlen: 24
192.166.45.0/24 maxlen: 24
192.166.46.0/23 maxlen: 23
159.253.208.0/21 maxlen: 21
185.226.220.0/22 maxlen: 22
185.162.224.0/22 maxlen: 22
31.193.0.0/20 maxlen: 20
185.217.40.0/22 maxlen: 22
185.220.60.0/22 maxlen: 22
185.156.64.0/24 maxlen: 24
185.156.65.0/24 maxlen: 24
185.156.66.0/23 maxlen: 23
37.220.88.0/21 maxlen: 21
185.55.78.0/23 maxlen: 23
185.55.77.0/24 maxlen: 24
185.166.128.0/22 maxlen: 22
45.131.136.0/22 maxlen: 22
109.108.128.0/19 maxlen: 19
185.216.76.0/22 maxlen: 22
78.24.89.0/24 maxlen: 24
78.24.90.0/23 maxlen: 23
78.24.88.0/24 maxlen: 24
185.182.88.0/22 maxlen: 22
45.145.100.0/22 maxlen: 22
46.37.160.0/19 maxlen: 19
94.229.160.0/20 maxlen: 20
2a02:21a8:5::/48 maxlen: 48
2a02:21a8:6::/48 maxlen: 48
2a02:22d0::/32 maxlen: 32
2a09:b600:5::/48 maxlen: 48
2a02:21a8:2::/48 maxlen: 48
2a09:ba00:4::/48 maxlen: 48
2a02:22d0:c::/48 maxlen: 48
2a09:b200:6::/48 maxlen: 48
2a0c:3dc0::/29 maxlen: 29
2a02:21a8::/48 maxlen: 48
2a02:21a8:1::/48 maxlen: 48
2a02:21a8:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247683648 (0xec35a40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: May 3 10:18:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65585fd6b2c25e997a17b297ecd004503da53657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:8b:c9:0c:39:bc:1e:f8:6a:0d:8c:83:31:
f1:18:49:41:6e:48:14:2c:9c:a8:32:2f:ad:83:15:
b3:31:dc:76:d3:6b:42:71:2c:ac:3e:77:11:2c:ff:
c5:d5:9e:ee:93:e5:d5:e1:b7:a8:a8:bd:40:84:ac:
c0:6c:2f:3e:32:b1:38:90:36:ff:f7:a9:16:38:e2:
97:11:de:66:aa:37:67:c4:a3:da:c1:10:1f:ca:64:
62:c4:4e:4a:9d:81:54:07:aa:21:6d:24:89:17:f8:
7d:08:c9:53:00:28:3b:9b:02:2a:e7:3f:c3:46:3b:
02:65:83:1e:6b:b5:be:20:6f:e7:b6:58:74:92:d7:
52:ff:fa:02:a5:4f:5a:cd:81:83:71:4c:4c:8e:3c:
9c:58:bb:66:a2:b1:5e:c5:be:f1:d6:f6:4f:b3:2c:
5f:cd:14:97:a0:0f:67:19:4f:d2:50:3a:be:82:ae:
ae:05:e4:19:38:8e:3d:13:98:b2:a9:2f:89:fb:c9:
76:6c:61:e1:55:34:d1:e9:3c:4e:09:e3:15:70:63:
05:06:09:06:3f:d9:12:57:77:22:93:fa:e5:2c:6c:
85:cc:d0:06:39:05:7b:83:36:14:3d:9f:96:2d:c7:
f7:79:df:60:82:1d:81:0c:a0:25:2e:2c:76:2b:06:
de:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:58:5F:D6:B2:C2:5E:99:7A:17:B2:97:EC:D0:04:50:3D:A5:36:57
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/ZVhf1rLCXpl6F7KX7NAEUD2lNlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.0.0/20
37.220.88.0/21
45.84.20.0/22
45.131.136.0/22
45.145.100.0/22
45.157.40.0/22
46.37.160.0/19
78.24.88.0/22
78.109.160.0/20
78.137.112.0/20
80.66.200.0/22
80.244.176.0/20
81.201.128.0/20
94.229.160.0/20
109.108.128.0/19
159.253.208.0/21
176.124.52.0/22
178.238.128.0/20
185.55.77.0-185.55.79.255
185.156.64.0/22
185.160.180.0/22
185.160.252.0-185.160.254.255
185.162.224.0/22
185.166.128.0/22
185.181.196.0/22
185.182.88.0/22
185.197.60.0/22
185.207.108.0/22
185.210.196.0/22
185.216.76.0/22
185.217.40.0/22
185.220.60.0/22
185.221.204.0/22
185.226.220.0/22
185.234.36.0/22
185.241.248.0/22
192.166.44.0/22
193.39.252.0/22
194.39.164.0/22
195.69.102.0/24
IPv6:
2a02:21a8::-2a02:21a8:2:ffff:ffff:ffff:ffff:ffff
2a02:21a8:4::-2a02:21a8:6:ffff:ffff:ffff:ffff:ffff
2a02:22d0::/32
2a09:b200:6::/48
2a09:b600:5::/48
2a09:ba00:4::/48
2a0c:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
00:13:e9:7a:3e:3c:3b:b3:2f:fd:8f:39:d2:cf:77:eb:ce:c6:
ee:70:0c:4d:6e:26:cc:e7:e6:0a:99:ee:4c:47:02:b8:7c:31:
0b:de:47:65:e1:ac:d9:6c:e5:10:21:77:ab:fb:ef:86:ca:bf:
34:51:f8:a9:04:0c:3e:1b:70:ca:97:95:44:e6:1b:6d:48:7c:
ec:43:75:9c:3a:8e:16:bd:40:1d:ff:b9:4c:46:8c:5e:33:83:
d7:13:29:b0:9c:71:c3:c1:b0:c5:59:00:10:e5:de:89:85:77:
1e:94:17:84:94:6d:91:c4:98:4f:a1:11:dc:84:07:5c:5c:6d:
8c:b8:f3:60:76:3e:66:7f:91:6b:eb:3b:0b:0d:5f:db:3f:1f:
d7:a3:8c:53:76:df:23:8c:05:75:a5:03:f2:ca:08:a9:3d:e8:
f2:4c:57:5e:ca:85:fd:10:c7:fe:ab:14:fa:a5:13:e4:7a:97:
e0:fb:23:7e:ad:58:ad:8c:cc:e5:be:4d:62:fb:dd:58:1a:b5:
c7:83:b7:4e:93:18:71:37:64:89:cc:2f:96:f7:eb:33:66:04:
9b:b4:46:2a:3b:46:bc:0a:fc:c1:17:80:3d:90:63:b9:58:97:
12:ad:97:db:b6:2b:b9:32:31:30:9b:e1:3d:46:54:71:a7:58:
12:6b:f4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:36 2024 by rpki-client on console-ams.rpki-client.org