Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/7lfjbTEosrvaZXFFs5vTSR7UFzs.roa
File: 7lfjbTEosrvaZXFFs5vTSR7UFzs.roa (raw, json)
Hash identifier: FcE9uuGa38hEFUQWiRr5xllgrwg0kQFW/q06tjk8CuY=
Subject key identifier: EE:57:E3:6D:31:28:B2:BB:DA:65:71:45:B3:9B:D3:49:1E:D4:17:3B
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 018494578BD0C5C82BC3D7AC348855AA1B0F
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/7lfjbTEosrvaZXFFs5vTSR7UFzs.roa
Signing time: Sun 20 Nov 2022 09:21:16 +0000
ROA not before: Sun 20 Nov 2022 09:21:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50463
IP address blocks: 37.19.112.0/24 maxlen: 24
37.19.115.0/24 maxlen: 24
37.19.114.0/24 maxlen: 24
37.19.112.0/20 maxlen: 20
37.19.116.0/24 maxlen: 24
37.19.125.0/24 maxlen: 24
141.226.192.0/19 maxlen: 19
141.226.192.0/24 maxlen: 24
141.226.196.0/24 maxlen: 24
141.226.195.0/24 maxlen: 24
141.226.194.0/24 maxlen: 24
141.226.198.0/24 maxlen: 24
141.226.193.0/24 maxlen: 24
141.226.204.0/24 maxlen: 24
141.226.206.0/24 maxlen: 24
141.226.205.0/24 maxlen: 24
141.226.210.0/24 maxlen: 24
141.226.209.0/24 maxlen: 24
141.226.208.0/24 maxlen: 24
141.226.212.0/24 maxlen: 24
141.226.223.0/24 maxlen: 24
141.226.221.0/24 maxlen: 24
109.226.2.0/24 maxlen: 24
109.226.0.0/18 maxlen: 18
109.226.0.0/24 maxlen: 24
109.226.4.0/24 maxlen: 24
109.226.3.0/24 maxlen: 24
109.226.6.0/24 maxlen: 24
109.226.5.0/24 maxlen: 24
109.226.8.0/22 maxlen: 22
109.226.7.0/24 maxlen: 24
109.226.16.0/22 maxlen: 22
109.226.15.0/24 maxlen: 24
109.226.14.0/24 maxlen: 24
109.226.17.0/24 maxlen: 24
109.226.13.0/24 maxlen: 24
109.226.23.0/24 maxlen: 24
109.226.22.0/24 maxlen: 24
109.226.21.0/24 maxlen: 24
109.226.24.0/24 maxlen: 24
185.3.145.0/24 maxlen: 24
185.3.144.0/22 maxlen: 22
109.226.29.0/24 maxlen: 24
109.226.28.0/24 maxlen: 24
109.226.31.0/24 maxlen: 24
109.226.26.0/24 maxlen: 24
109.226.25.0/24 maxlen: 24
109.226.37.0/24 maxlen: 24
109.226.36.0/24 maxlen: 24
109.226.35.0/24 maxlen: 24
109.226.34.0/24 maxlen: 24
109.226.38.0/24 maxlen: 24
109.226.33.0/24 maxlen: 24
109.226.32.0/24 maxlen: 24
109.226.44.0/24 maxlen: 24
109.226.51.0/24 maxlen: 24
109.226.50.0/24 maxlen: 24
109.226.49.0/24 maxlen: 24
109.226.48.0/24 maxlen: 24
109.226.47.0/24 maxlen: 24
109.226.45.0/24 maxlen: 24
109.226.57.0/24 maxlen: 24
109.226.56.0/24 maxlen: 24
109.226.55.0/24 maxlen: 24
109.226.53.0/24 maxlen: 24
109.226.52.0/24 maxlen: 24
109.226.61.0/24 maxlen: 24
109.226.60.0/24 maxlen: 24
109.226.59.0/24 maxlen: 24
109.226.63.0/24 maxlen: 24
109.226.62.0/24 maxlen: 24
5.144.55.0/24 maxlen: 24
5.144.54.0/24 maxlen: 24
5.144.57.0/24 maxlen: 24
5.144.61.0/24 maxlen: 24
5.144.63.0/24 maxlen: 24
5.144.48.0/24 maxlen: 24
5.144.48.0/20 maxlen: 20
5.144.50.0/24 maxlen: 24
5.22.133.0/24 maxlen: 24
5.22.135.0/24 maxlen: 24
5.22.134.0/24 maxlen: 24
5.22.132.0/24 maxlen: 24
5.22.130.0/23 maxlen: 23
5.22.128.0/21 maxlen: 21
5.22.129.0/24 maxlen: 24
5.22.128.0/24 maxlen: 24
2a00:c281:4::/48 maxlen: 48
2a00:c281:1004::/48 maxlen: 48
2a00:c281:2004::/48 maxlen: 48
2a00:c281:3004::/48 maxlen: 48
2a00:c281:1::/48 maxlen: 48
2a00:c281:1001::/48 maxlen: 48
2a00:c281:2001::/48 maxlen: 48
2a00:c281:3001::/48 maxlen: 48
2a00:c281:4001::/48 maxlen: 48
2a00:c281:d::/48 maxlen: 48
2a00:c281:100d::/48 maxlen: 48
2a00:c281:200d::/48 maxlen: 48
2a00:c281:300d::/48 maxlen: 48
2a00:c281:a::/48 maxlen: 48
2a00:c281:100a::/48 maxlen: 48
2a00:c281:200a::/48 maxlen: 48
2a00:c281:300a::/48 maxlen: 48
2a00:c281:101b::/48 maxlen: 48
2a00:c281:101d::/48 maxlen: 48
2a00:c281:101a::/48 maxlen: 48
2a00:c281:1012::/48 maxlen: 48
2a00:c280::/29 maxlen: 29
2a00:c281:c::/48 maxlen: 48
2a00:c281:100c::/48 maxlen: 48
2a00:c281:200c::/48 maxlen: 48
2a00:c281:300c::/48 maxlen: 48
2a00:c280:100::/48 maxlen: 48
2a00:c281:300b::/48 maxlen: 48
2a00:c281:200b::/48 maxlen: 48
2a00:c281:100b::/48 maxlen: 48
2a00:c281:b::/48 maxlen: 48
2a00:c281:101c::/48 maxlen: 48
2a00:c281:3::/48 maxlen: 48
2a00:c281:1003::/48 maxlen: 48
2a00:c281:2003::/48 maxlen: 48
2a00:c281:3003::/48 maxlen: 48
2a00:c281:1014::/48 maxlen: 48
2a00:c281:4000::/48 maxlen: 48
2a00:c281:1011::/48 maxlen: 48
2a00:c281:1002::/48 maxlen: 48
2a00:c281:3002::/48 maxlen: 48
2a00:c281:2002::/48 maxlen: 48
2a00:c281:2::/48 maxlen: 48
2a00:c281:1013::/48 maxlen: 48
2a00:c281:1700::/40 maxlen: 40
2a00:c281:2400::/40 maxlen: 40
2a00:c281:1300::/40 maxlen: 40
2a00:c281:200::/40 maxlen: 40
2a00:c281:1600::/40 maxlen: 40
2a00:c281:3b00::/40 maxlen: 40
2a00:c281:2a00::/40 maxlen: 40
2a00:c281:2d00::/40 maxlen: 40
2a00:c281:4100::/40 maxlen: 40
2a00:c281:1c00::/40 maxlen: 40
2a00:c281:b00::/40 maxlen: 40
2a00:c281:3300::/40 maxlen: 40
2a00:c281:4400::/40 maxlen: 40
2a00:c281:1100::/40 maxlen: 40
2a00:c281:2200::/40 maxlen: 40
2a00:c281:2300::/40 maxlen: 40
2a00:c281:2100::/40 maxlen: 40
2a00:c281:2b00::/40 maxlen: 40
2a00:c281:c00::/40 maxlen: 40
2a00:c281:1a00::/40 maxlen: 40
2a00:c281:4200::/40 maxlen: 40
2a00:c281:1d00::/40 maxlen: 40
2a00:c281:3400::/40 maxlen: 40
2a00:c281:3100::/40 maxlen: 40
2a00:c281:3c00::/40 maxlen: 40
2a00:c281:d00::/40 maxlen: 40
2a00:c281:1b00::/40 maxlen: 40
2a00:c281:2c00::/40 maxlen: 40
2a00:c281:a00::/40 maxlen: 40
2a00:c281:4300::/40 maxlen: 40
2a00:c281:3d00::/40 maxlen: 40
2a00:c281:400::/40 maxlen: 40
2a00:c281:1800::/40 maxlen: 40
2a00:c281:3a00::/40 maxlen: 40
2a00:c281:100::/40 maxlen: 40
2a00:c281:1200::/40 maxlen: 40
2a00:c281:1500::/40 maxlen: 40
2a00:c281:300::/40 maxlen: 40
2a00:c281:1400::/40 maxlen: 40
2a00:c281:3200::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:94:57:8b:d0:c5:c8:2b:c3:d7:ac:34:88:55:aa:1b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Nov 20 09:21:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee57e36d3128b2bbda657145b39bd3491ed4173b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b8:ca:eb:ef:8c:76:06:f5:ba:b2:ce:c8:d4:
c4:5f:18:40:22:aa:05:b0:6b:57:52:eb:66:4d:d5:
b4:64:44:f5:4a:6d:04:84:18:6c:9e:14:34:73:9d:
8a:53:d6:1a:9f:76:a6:8b:2f:d4:48:c9:fb:20:34:
2f:33:e9:a4:13:43:04:02:64:5c:8d:fe:1f:71:fb:
ab:df:77:3c:9e:59:13:1a:56:0c:15:b7:73:76:37:
85:81:c7:cb:5d:49:f7:35:05:6c:29:45:d7:de:59:
93:0e:a8:be:36:b9:94:c9:3a:36:8b:75:9d:1c:7a:
99:16:48:0f:7c:0f:c9:12:06:37:b6:66:1a:5e:88:
6c:ac:a9:57:cd:07:c1:6f:4c:ba:d4:b8:7f:ef:b5:
6f:33:a1:27:6a:70:d2:aa:4b:51:f2:d0:cb:0f:3c:
d0:f1:d2:77:9a:5c:57:1a:74:a5:05:87:e0:3f:fa:
b3:8e:1d:69:57:c8:59:ba:39:d4:03:1c:41:d4:7d:
c8:c3:5f:cd:18:b4:3a:0b:c0:82:70:54:e8:67:0d:
a0:3d:4c:f8:32:c8:ce:9c:8e:8b:f6:72:d4:60:03:
f2:aa:a1:31:b4:b3:21:a9:1e:2e:e2:5d:e9:6d:08:
97:a5:a3:99:32:0f:49:30:a5:6c:20:7b:c7:39:9a:
6e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:57:E3:6D:31:28:B2:BB:DA:65:71:45:B3:9B:D3:49:1E:D4:17:3B
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/7lfjbTEosrvaZXFFs5vTSR7UFzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.128.0/21
5.144.48.0/20
37.19.112.0/20
109.226.0.0/18
141.226.192.0/19
185.3.144.0/22
IPv6:
2a00:c280::/29
Signature Algorithm: sha256WithRSAEncryption
32:cd:41:73:46:11:a4:ce:e5:e3:42:5b:97:f9:5d:fc:c8:82:
03:ed:88:f6:29:22:44:d9:85:07:b2:82:9a:77:97:73:b5:e9:
13:67:19:48:a5:c0:56:26:6e:01:8f:33:c1:36:52:9a:b4:bb:
b4:03:91:56:ea:91:ec:49:fa:70:40:8c:fc:52:d1:8f:73:f0:
04:4b:bd:cc:03:8c:05:a0:00:d1:1e:4a:eb:d1:aa:dc:ca:95:
dd:f3:c5:f7:7f:bf:54:61:92:26:d2:77:91:fd:f2:38:f2:55:
8d:91:bb:cf:61:d5:6c:9a:14:b1:31:cc:34:05:8f:0d:8b:b1:
7f:7b:f2:aa:5c:f6:61:1e:bb:8b:24:8b:06:71:45:1e:b3:f0:
be:d3:0c:80:45:86:ab:79:c2:2b:80:f4:a5:f5:c2:16:77:99:
56:af:17:9d:3a:f9:c4:b0:6f:31:e1:28:d2:54:28:47:26:62:
a6:1a:db:ea:66:6c:3c:31:b0:e4:e2:1f:92:60:63:14:0b:5b:
67:ca:3b:22:3f:5e:4a:6b:8b:0f:63:ef:47:22:67:63:3a:14:
0d:11:54:98:e5:95:cd:ec:93:8b:e3:c0:c3:fe:09:e0:b0:70:
37:94:95:19:ed:46:ae:07:dd:0f:e3:d5:79:67:f3:24:c3:12:
6b:7c:73:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-fra.rpki-client.org