Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/VvWa7i680gmiLBdaAwGQVgdWIkU.roa
File: VvWa7i680gmiLBdaAwGQVgdWIkU.roa (raw, json)
Hash identifier: 7LtUvHqtlmb/RsNkavAhGTdsgeInvs4k9phpLPL9f80=
Subject key identifier: 56:F5:9A:EE:2E:BC:D2:09:A2:2C:17:5A:03:01:90:56:07:56:22:45
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 0DB2ACD9
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/VvWa7i680gmiLBdaAwGQVgdWIkU.roa
Signing time: Wed 20 Apr 2022 07:18:01 +0000
ROA not before: Wed 20 Apr 2022 07:18:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12491
IP address blocks: 81.199.200.0/24 maxlen: 24
81.199.204.0/24 maxlen: 24
81.199.210.0/24 maxlen: 24
81.199.208.0/23 maxlen: 23
81.199.212.0/24 maxlen: 24
81.199.213.0/24 maxlen: 24
81.199.211.0/24 maxlen: 24
81.199.216.0/24 maxlen: 24
81.199.217.0/24 maxlen: 24
81.199.214.0/24 maxlen: 24
81.199.215.0/24 maxlen: 24
81.199.219.0/24 maxlen: 24
81.199.220.0/22 maxlen: 22
81.199.220.0/24 maxlen: 24
81.199.230.0/24 maxlen: 24
81.199.240.0/22 maxlen: 22
81.199.146.0/24 maxlen: 24
81.199.147.0/24 maxlen: 24
81.199.152.0/22 maxlen: 22
81.199.156.0/23 maxlen: 23
81.199.160.0/21 maxlen: 21
81.199.172.0/23 maxlen: 23
81.199.174.0/23 maxlen: 23
81.199.176.0/21 maxlen: 21
81.199.186.0/24 maxlen: 24
81.199.185.0/24 maxlen: 24
81.199.184.0/24 maxlen: 24
81.199.188.0/22 maxlen: 22
81.199.187.0/24 maxlen: 24
81.199.192.0/24 maxlen: 24
81.199.195.0/24 maxlen: 24
81.199.194.0/24 maxlen: 24
81.199.4.0/22 maxlen: 22
81.199.2.0/23 maxlen: 23
81.199.0.0/24 maxlen: 24
81.199.1.0/24 maxlen: 24
81.199.8.0/24 maxlen: 24
81.199.9.0/24 maxlen: 24
81.199.10.0/23 maxlen: 23
81.199.13.0/24 maxlen: 24
81.199.16.0/24 maxlen: 24
81.199.16.0/22 maxlen: 22
81.199.16.0/23 maxlen: 23
81.199.17.0/24 maxlen: 24
81.199.21.0/24 maxlen: 24
81.199.19.0/24 maxlen: 24
81.199.18.0/24 maxlen: 24
81.199.18.0/23 maxlen: 23
81.199.32.0/24 maxlen: 24
81.199.32.0/22 maxlen: 22
81.199.94.0/24 maxlen: 24
81.199.95.0/24 maxlen: 24
81.199.92.0/24 maxlen: 24
81.199.93.0/24 maxlen: 24
81.199.105.0/24 maxlen: 24
81.199.104.0/24 maxlen: 24
81.199.101.0/24 maxlen: 24
81.199.102.0/23 maxlen: 23
81.199.108.0/22 maxlen: 22
81.199.108.0/24 maxlen: 24
81.199.106.0/24 maxlen: 24
81.199.118.0/23 maxlen: 23
81.199.129.0/24 maxlen: 24
81.199.128.0/24 maxlen: 24
81.199.139.0/24 maxlen: 24
81.199.138.0/24 maxlen: 24
81.199.138.0/23 maxlen: 23
81.199.136.0/24 maxlen: 24
81.199.136.0/22 maxlen: 22
81.199.136.0/23 maxlen: 23
81.199.137.0/24 maxlen: 24
81.199.142.0/23 maxlen: 23
81.199.40.0/22 maxlen: 22
81.199.44.0/24 maxlen: 24
81.199.49.0/24 maxlen: 24
81.199.48.0/21 maxlen: 21
81.199.47.0/24 maxlen: 24
81.199.48.0/24 maxlen: 24
81.199.46.0/24 maxlen: 24
81.199.45.0/24 maxlen: 24
81.199.56.0/22 maxlen: 22
81.199.54.0/24 maxlen: 24
81.199.63.0/24 maxlen: 24
81.199.61.0/24 maxlen: 24
81.199.62.0/24 maxlen: 24
81.199.60.0/24 maxlen: 24
81.199.84.0/24 maxlen: 24
81.199.85.0/24 maxlen: 24
81.199.82.0/24 maxlen: 24
81.199.83.0/24 maxlen: 24
81.199.80.0/24 maxlen: 24
81.199.81.0/24 maxlen: 24
81.199.91.0/24 maxlen: 24
81.199.90.0/24 maxlen: 24
81.199.86.0/23 maxlen: 23
62.56.160.0/22 maxlen: 22
62.56.165.0/24 maxlen: 24
62.56.166.0/24 maxlen: 24
62.56.164.0/24 maxlen: 24
62.56.171.0/24 maxlen: 24
62.56.172.0/24 maxlen: 24
62.56.170.0/23 maxlen: 23
62.56.170.0/24 maxlen: 24
62.56.168.0/22 maxlen: 22
62.56.169.0/24 maxlen: 24
62.56.167.0/24 maxlen: 24
62.56.168.0/24 maxlen: 24
62.56.168.0/23 maxlen: 23
62.56.173.0/24 maxlen: 24
62.56.130.0/24 maxlen: 24
62.56.129.0/24 maxlen: 24
62.56.137.0/24 maxlen: 24
62.56.144.0/21 maxlen: 21
62.56.151.0/24 maxlen: 24
62.56.152.0/24 maxlen: 24
62.56.153.0/24 maxlen: 24
62.56.154.0/24 maxlen: 24
62.56.156.0/22 maxlen: 22
62.56.216.0/24 maxlen: 24
62.56.224.0/21 maxlen: 21
62.56.230.0/24 maxlen: 24
62.56.240.0/22 maxlen: 22
62.56.246.0/24 maxlen: 24
62.56.250.0/23 maxlen: 23
62.56.250.0/24 maxlen: 24
62.56.251.0/24 maxlen: 24
62.56.248.0/22 maxlen: 22
62.56.248.0/23 maxlen: 23
62.56.249.0/24 maxlen: 24
62.56.247.0/24 maxlen: 24
62.56.248.0/24 maxlen: 24
91.203.122.0/23 maxlen: 23
91.203.121.0/24 maxlen: 24
2a02:ba0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229813465 (0xdb2acd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Apr 20 07:18:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56f59aee2ebcd209a22c175a0301905607562245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:35:c8:ea:97:30:d3:89:63:63:0d:82:84:
4b:a6:63:68:bd:33:94:ca:ad:f8:63:63:78:b0:b0:
ce:f4:dc:2e:77:14:85:5c:06:ac:e7:96:2c:c9:e2:
03:60:22:4b:43:75:90:41:66:b9:19:82:7d:0f:54:
2f:ca:dd:67:00:fe:09:77:7f:45:e7:a4:a2:e8:cd:
40:c2:43:28:d2:6c:a6:36:c7:85:01:d8:2e:4c:1f:
36:dc:87:f3:e6:bd:e2:cf:26:c5:d8:13:ae:3a:ec:
e1:be:17:58:fa:45:fa:7b:5b:94:d0:ea:dc:ee:87:
c0:6a:85:bb:fc:d9:2e:b2:4e:01:0e:03:13:35:e4:
c9:35:3a:c3:10:24:9d:50:b5:27:23:f2:bf:41:7d:
ef:3e:22:b8:59:8d:21:12:2b:b2:ff:9f:74:58:20:
36:e0:08:fa:76:a1:66:d4:4a:c1:a5:4b:a4:1d:af:
4a:ed:dd:a5:c6:38:23:71:0a:f9:4a:e7:32:66:aa:
2a:bb:18:1a:a9:f4:0e:21:7a:8d:ca:17:57:b7:95:
ae:c6:12:6e:03:43:a6:aa:5a:a4:7c:ad:a2:aa:10:
18:0d:a2:22:62:78:b1:1a:11:e1:71:d3:77:63:5a:
06:61:13:9f:4a:77:32:a8:d9:e0:08:7e:da:5d:29:
4c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F5:9A:EE:2E:BC:D2:09:A2:2C:17:5A:03:01:90:56:07:56:22:45
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/VvWa7i680gmiLBdaAwGQVgdWIkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.56.129.0-62.56.130.255
62.56.137.0/24
62.56.144.0-62.56.154.255
62.56.156.0-62.56.173.255
62.56.216.0/24
62.56.224.0/21
62.56.240.0/22
62.56.246.0-62.56.251.255
81.199.0.0-81.199.11.255
81.199.13.0/24
81.199.16.0/22
81.199.21.0/24
81.199.32.0/22
81.199.40.0-81.199.63.255
81.199.80.0/21
81.199.90.0-81.199.95.255
81.199.101.0-81.199.106.255
81.199.108.0/22
81.199.118.0/23
81.199.128.0/23
81.199.136.0/22
81.199.142.0/23
81.199.146.0/23
81.199.152.0-81.199.157.255
81.199.160.0/21
81.199.172.0-81.199.192.255
81.199.194.0/23
81.199.200.0/24
81.199.204.0/24
81.199.208.0-81.199.217.255
81.199.219.0-81.199.223.255
81.199.230.0/24
81.199.240.0/22
91.203.121.0-91.203.123.255
IPv6:
2a02:ba0:1::/48
Signature Algorithm: sha256WithRSAEncryption
4c:05:05:b3:a3:21:14:ef:7e:8e:70:a9:6d:cb:58:a4:a7:be:
1e:e8:84:51:be:ba:50:47:19:60:41:e3:fc:70:83:e5:8b:61:
13:bf:8e:c3:f3:03:28:e6:eb:a7:7e:9f:2f:f4:d4:a1:de:f2:
b0:ed:a4:1f:37:5b:19:d9:7b:4a:d1:11:18:da:5a:89:2f:47:
7d:41:81:1d:0a:19:56:c7:f6:bc:0e:78:bf:ca:a5:38:40:e1:
3e:08:bf:64:ce:c2:66:91:85:93:2d:02:10:a3:a8:97:f9:80:
48:f2:49:e0:17:b4:f5:cb:04:e0:80:52:0c:9a:1c:79:1d:9b:
52:0a:45:f1:9c:26:47:73:4a:7a:a2:8f:c3:04:71:93:49:9a:
71:72:52:74:11:be:93:13:f9:e9:81:e0:59:20:87:67:9e:16:
50:9e:9f:42:5d:94:d1:42:f2:4c:dc:c1:03:d0:c0:8d:ab:12:
7b:14:41:18:3c:ce:26:5d:4a:8f:d5:b3:38:a7:cf:41:1f:8e:
4d:cb:c9:d5:16:e1:ea:56:d7:ba:6b:7e:31:01:42:8f:a1:30:
fb:4e:9e:9c:90:f9:2f:dd:ea:c0:b2:f1:3f:c9:34:1a:8a:57:
2b:8e:48:af:3c:23:e7:c4:a8:e3:c1:91:7f:55:61:a7:61:9c:
43:2e:67:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:41 2024 by rpki-client on console-fra.rpki-client.org