Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/ijIfKS-_5877u9EPRYdjisdsh28.roa
File: ijIfKS-_5877u9EPRYdjisdsh28.roa (raw, json)
Hash identifier: 97ruhFGPogywgSk2seEzAM1kCpWP5x69BNsoj3nI8Us=
Subject key identifier: 8A:32:1F:29:2F:BF:E7:CE:FB:BB:D1:0F:45:87:63:8A:C7:6C:87:6F
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 0DAF1970
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/ijIfKS-_5877u9EPRYdjisdsh28.roa
Signing time: Tue 19 Apr 2022 13:22:28 +0000
ROA not before: Tue 19 Apr 2022 13:22:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12491
IP address blocks: 81.199.200.0/24 maxlen: 24
81.199.204.0/24 maxlen: 24
81.199.210.0/24 maxlen: 24
81.199.208.0/23 maxlen: 23
81.199.212.0/24 maxlen: 24
81.199.213.0/24 maxlen: 24
81.199.211.0/24 maxlen: 24
81.199.216.0/24 maxlen: 24
81.199.217.0/24 maxlen: 24
81.199.214.0/24 maxlen: 24
81.199.215.0/24 maxlen: 24
81.199.219.0/24 maxlen: 24
81.199.220.0/22 maxlen: 22
81.199.220.0/24 maxlen: 24
81.199.230.0/24 maxlen: 24
81.199.240.0/22 maxlen: 22
81.199.146.0/24 maxlen: 24
81.199.147.0/24 maxlen: 24
81.199.152.0/22 maxlen: 22
81.199.156.0/23 maxlen: 23
81.199.160.0/21 maxlen: 21
81.199.172.0/23 maxlen: 23
81.199.174.0/23 maxlen: 23
81.199.176.0/21 maxlen: 21
81.199.186.0/24 maxlen: 24
81.199.185.0/24 maxlen: 24
81.199.184.0/24 maxlen: 24
81.199.188.0/22 maxlen: 22
81.199.187.0/24 maxlen: 24
81.199.192.0/24 maxlen: 24
81.199.195.0/24 maxlen: 24
81.199.194.0/24 maxlen: 24
81.199.4.0/22 maxlen: 22
81.199.2.0/23 maxlen: 23
81.199.0.0/24 maxlen: 24
81.199.8.0/24 maxlen: 24
81.199.9.0/24 maxlen: 24
81.199.10.0/23 maxlen: 23
81.199.13.0/24 maxlen: 24
81.199.16.0/24 maxlen: 24
81.199.16.0/22 maxlen: 22
81.199.16.0/23 maxlen: 23
81.199.17.0/24 maxlen: 24
81.199.21.0/24 maxlen: 24
81.199.19.0/24 maxlen: 24
81.199.18.0/24 maxlen: 24
81.199.18.0/23 maxlen: 23
81.199.32.0/24 maxlen: 24
81.199.32.0/22 maxlen: 22
81.199.94.0/24 maxlen: 24
81.199.95.0/24 maxlen: 24
81.199.92.0/24 maxlen: 24
81.199.93.0/24 maxlen: 24
81.199.105.0/24 maxlen: 24
81.199.104.0/24 maxlen: 24
81.199.101.0/24 maxlen: 24
81.199.102.0/23 maxlen: 23
81.199.108.0/22 maxlen: 22
81.199.108.0/24 maxlen: 24
81.199.106.0/24 maxlen: 24
81.199.118.0/23 maxlen: 23
81.199.129.0/24 maxlen: 24
81.199.128.0/24 maxlen: 24
81.199.139.0/24 maxlen: 24
81.199.138.0/24 maxlen: 24
81.199.138.0/23 maxlen: 23
81.199.136.0/24 maxlen: 24
81.199.136.0/22 maxlen: 22
81.199.136.0/23 maxlen: 23
81.199.137.0/24 maxlen: 24
81.199.142.0/23 maxlen: 23
81.199.40.0/22 maxlen: 22
81.199.44.0/24 maxlen: 24
81.199.49.0/24 maxlen: 24
81.199.48.0/21 maxlen: 21
81.199.47.0/24 maxlen: 24
81.199.48.0/24 maxlen: 24
81.199.46.0/24 maxlen: 24
81.199.45.0/24 maxlen: 24
81.199.56.0/22 maxlen: 22
81.199.54.0/24 maxlen: 24
81.199.63.0/24 maxlen: 24
81.199.61.0/24 maxlen: 24
81.199.62.0/24 maxlen: 24
81.199.60.0/24 maxlen: 24
81.199.84.0/24 maxlen: 24
81.199.85.0/24 maxlen: 24
81.199.82.0/24 maxlen: 24
81.199.83.0/24 maxlen: 24
81.199.80.0/24 maxlen: 24
81.199.81.0/24 maxlen: 24
81.199.91.0/24 maxlen: 24
81.199.90.0/24 maxlen: 24
81.199.86.0/23 maxlen: 23
62.56.160.0/22 maxlen: 22
62.56.165.0/24 maxlen: 24
62.56.166.0/24 maxlen: 24
62.56.164.0/24 maxlen: 24
62.56.171.0/24 maxlen: 24
62.56.172.0/24 maxlen: 24
62.56.170.0/23 maxlen: 23
62.56.170.0/24 maxlen: 24
62.56.168.0/22 maxlen: 22
62.56.169.0/24 maxlen: 24
62.56.167.0/24 maxlen: 24
62.56.168.0/24 maxlen: 24
62.56.168.0/23 maxlen: 23
62.56.173.0/24 maxlen: 24
62.56.130.0/24 maxlen: 24
62.56.129.0/24 maxlen: 24
62.56.137.0/24 maxlen: 24
62.56.144.0/21 maxlen: 21
62.56.151.0/24 maxlen: 24
62.56.152.0/24 maxlen: 24
62.56.153.0/24 maxlen: 24
62.56.154.0/24 maxlen: 24
62.56.156.0/22 maxlen: 22
62.56.216.0/24 maxlen: 24
62.56.224.0/21 maxlen: 21
62.56.230.0/24 maxlen: 24
62.56.240.0/22 maxlen: 22
62.56.246.0/24 maxlen: 24
62.56.250.0/23 maxlen: 23
62.56.250.0/24 maxlen: 24
62.56.251.0/24 maxlen: 24
62.56.248.0/22 maxlen: 22
62.56.248.0/23 maxlen: 23
62.56.249.0/24 maxlen: 24
62.56.247.0/24 maxlen: 24
62.56.248.0/24 maxlen: 24
91.203.122.0/23 maxlen: 23
91.203.121.0/24 maxlen: 24
2a02:ba0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229579120 (0xdaf1970)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Apr 19 13:22:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a321f292fbfe7cefbbbd10f4587638ac76c876f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:ee:e1:eb:a8:f6:7a:65:fa:f4:17:ce:aa:
ae:88:44:54:f6:93:95:c7:17:9c:d4:4f:ad:18:d7:
fe:5d:46:10:57:fe:a0:7e:9f:75:8a:e0:ef:e7:78:
15:6f:f8:95:19:61:94:c8:4d:f1:b3:3a:26:5e:5c:
bf:c9:87:03:39:23:90:1d:fd:27:d1:93:47:8f:ca:
40:55:cd:74:d4:78:d5:7a:1f:6c:4f:2d:0a:ae:c2:
f7:cb:8e:0f:89:b4:ac:59:dc:97:89:e4:fc:c7:5a:
4c:16:cb:94:db:ef:78:9d:ba:15:f2:6d:b0:35:40:
7e:7c:61:75:d9:ad:81:b5:51:91:ba:54:d7:fb:bd:
aa:01:29:45:7f:d9:03:2b:5b:5d:fa:d1:89:0d:e2:
7d:ff:34:4a:91:c6:5e:b4:f1:e4:2f:cb:51:c3:d3:
65:80:11:c8:5d:c2:40:7d:ee:fa:18:41:71:b1:8b:
ab:78:8a:8d:02:b4:84:f2:dc:3a:ec:20:e4:23:33:
55:71:8b:1f:47:94:14:74:9d:81:d7:e3:1c:3d:45:
9a:cf:99:bb:bf:c4:bd:26:68:0e:d1:cf:ee:e0:1b:
f5:a8:e0:37:dc:89:ad:8f:b6:41:cd:18:e3:8a:3e:
55:a7:ac:6f:3e:04:fc:53:50:87:df:94:16:cf:62:
ef:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:32:1F:29:2F:BF:E7:CE:FB:BB:D1:0F:45:87:63:8A:C7:6C:87:6F
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/ijIfKS-_5877u9EPRYdjisdsh28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.56.129.0-62.56.130.255
62.56.137.0/24
62.56.144.0-62.56.154.255
62.56.156.0-62.56.173.255
62.56.216.0/24
62.56.224.0/21
62.56.240.0/22
62.56.246.0-62.56.251.255
81.199.0.0/24
81.199.2.0-81.199.11.255
81.199.13.0/24
81.199.16.0/22
81.199.21.0/24
81.199.32.0/22
81.199.40.0-81.199.63.255
81.199.80.0/21
81.199.90.0-81.199.95.255
81.199.101.0-81.199.106.255
81.199.108.0/22
81.199.118.0/23
81.199.128.0/23
81.199.136.0/22
81.199.142.0/23
81.199.146.0/23
81.199.152.0-81.199.157.255
81.199.160.0/21
81.199.172.0-81.199.192.255
81.199.194.0/23
81.199.200.0/24
81.199.204.0/24
81.199.208.0-81.199.217.255
81.199.219.0-81.199.223.255
81.199.230.0/24
81.199.240.0/22
91.203.121.0-91.203.123.255
IPv6:
2a02:ba0:1::/48
Signature Algorithm: sha256WithRSAEncryption
23:24:22:74:42:7b:07:e3:81:f9:cd:93:1d:f2:66:4a:01:5c:
f8:f7:85:d2:f2:ea:a2:b0:10:51:95:ca:27:94:8c:13:07:58:
22:da:c4:c9:6c:ca:86:df:af:d8:8e:13:a7:80:19:92:75:1f:
fe:5c:f6:2c:80:2c:ce:da:db:9f:cf:6c:fa:d4:38:7e:a5:54:
17:dd:40:b7:01:cd:80:b3:22:58:a7:0e:f8:0d:2e:0c:df:86:
04:2d:0c:43:68:ab:e4:93:37:0e:8d:c0:89:9d:3c:ca:77:57:
95:a9:60:fc:ba:db:47:29:af:90:e0:03:a0:bb:e2:0a:17:ba:
63:8b:c3:62:1e:fb:b9:cf:66:62:28:49:83:52:01:06:76:fa:
52:a4:11:3f:27:fc:86:e1:e7:8f:d4:71:6d:c9:d7:7a:1d:54:
0e:1f:e7:a3:64:e8:db:cf:72:29:5d:16:e6:9a:40:7d:5a:81:
70:ef:1e:1b:66:29:39:99:b7:ad:17:cd:4f:c6:2e:ab:af:ed:
b2:ff:8c:a8:d6:bd:c5:79:b4:78:f7:8b:7f:42:49:13:9d:b1:
36:1c:30:22:5d:f5:5f:88:2e:40:67:77:0b:85:79:b8:10:43:
80:4e:61:45:dc:e8:ec:1f:50:74:8d:e9:e7:16:fd:8c:9e:a5:
f9:12:68:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:50 2024 by rpki-client on console-ams.rpki-client.org