Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/XbyWCk6AtazZzKu_C0AZXqtJ5qg.roa
File: XbyWCk6AtazZzKu_C0AZXqtJ5qg.roa (raw, json)
Hash identifier: lTUXC59/RTmpsiNxqlXvvzwp8fbxUJIvMpuEgUAfIuw=
Subject key identifier: 5D:BC:96:0A:4E:80:B5:AC:D9:CC:AB:BF:0B:40:19:5E:AB:49:E6:A8
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 0182CB5362C6420AC97DE488433092EC1C05
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/XbyWCk6AtazZzKu_C0AZXqtJ5qg.roa
Signing time: Tue 23 Aug 2022 15:30:15 +0000
ROA not before: Tue 23 Aug 2022 15:30:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58272
IP address blocks: 37.230.187.0/24 maxlen: 24
188.72.119.0/24 maxlen: 24
178.170.231.0/24 maxlen: 24
178.170.139.0/24 maxlen: 24
178.170.137.0/24 maxlen: 24
217.150.90.0/24 maxlen: 24
217.150.89.0/24 maxlen: 24
217.150.88.0/24 maxlen: 24
217.150.91.0/24 maxlen: 24
178.170.140.0/24 maxlen: 24
217.150.94.0/24 maxlen: 24
217.150.93.0/24 maxlen: 24
217.150.92.0/24 maxlen: 24
217.150.95.0/24 maxlen: 24
46.243.149.0/24 maxlen: 24
37.18.0.0/24 maxlen: 24
185.4.150.0/24 maxlen: 24
37.18.15.0/24 maxlen: 24
185.4.149.0/24 maxlen: 24
185.4.148.0/24 maxlen: 24
185.4.151.0/24 maxlen: 24
141.101.255.0/24 maxlen: 24
46.243.139.0/24 maxlen: 24
46.243.138.0/24 maxlen: 24
37.230.134.0/24 maxlen: 24
37.230.151.0/24 maxlen: 24
188.72.83.0/24 maxlen: 24
188.72.81.0/24 maxlen: 24
188.72.80.0/24 maxlen: 24
188.72.85.0/24 maxlen: 24
188.72.84.0/24 maxlen: 24
37.230.163.0/24 maxlen: 24
188.72.86.0/24 maxlen: 24
37.230.170.0/24 maxlen: 24
37.230.171.0/24 maxlen: 24
37.230.176.0/24 maxlen: 24
37.230.183.0/24 maxlen: 24
37.230.182.0/24 maxlen: 24
46.243.204.0/24 maxlen: 24
46.243.214.0/24 maxlen: 24
46.243.222.0/24 maxlen: 24
46.243.221.0/24 maxlen: 24
46.243.225.0/24 maxlen: 24
46.243.223.0/24 maxlen: 24
46.243.232.0/24 maxlen: 24
46.243.233.0/24 maxlen: 24
37.18.63.0/24 maxlen: 24
46.243.240.0/24 maxlen: 24
46.243.236.0/24 maxlen: 24
46.243.235.0/24 maxlen: 24
46.243.234.0/24 maxlen: 24
46.243.238.0/24 maxlen: 24
46.243.237.0/24 maxlen: 24
46.243.243.0/24 maxlen: 24
46.243.242.0/24 maxlen: 24
46.243.241.0/24 maxlen: 24
46.243.246.0/24 maxlen: 24
37.18.78.0/24 maxlen: 24
46.243.250.0/24 maxlen: 24
46.243.249.0/24 maxlen: 24
46.243.248.0/24 maxlen: 24
46.243.247.0/24 maxlen: 24
37.230.131.0/24 maxlen: 24
46.243.251.0/24 maxlen: 24
128.0.71.0/24 maxlen: 24
141.101.179.0/24 maxlen: 24
141.101.191.0/24 maxlen: 24
141.101.132.0/24 maxlen: 24
141.101.133.0/24 maxlen: 24
141.101.135.0/24 maxlen: 24
141.101.145.0/24 maxlen: 24
141.101.143.0/24 maxlen: 24
141.101.148.0/24 maxlen: 24
141.101.147.0/24 maxlen: 24
141.101.150.0/24 maxlen: 24
141.101.149.0/24 maxlen: 24
141.101.155.0/24 maxlen: 24
141.101.154.0/24 maxlen: 24
141.101.153.0/24 maxlen: 24
141.101.159.0/24 maxlen: 24
141.101.158.0/24 maxlen: 24
141.101.156.0/24 maxlen: 24
141.101.162.0/24 maxlen: 24
141.101.161.0/24 maxlen: 24
141.101.160.0/24 maxlen: 24
141.101.166.0/24 maxlen: 24
141.101.165.0/24 maxlen: 24
141.101.164.0/24 maxlen: 24
141.101.168.0/24 maxlen: 24
141.101.167.0/24 maxlen: 24
141.101.171.0/24 maxlen: 24
141.101.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cb:53:62:c6:42:0a:c9:7d:e4:88:43:30:92:ec:1c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Aug 23 15:30:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dbc960a4e80b5acd9ccabbf0b40195eab49e6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d3:f5:e8:56:7f:59:84:a2:21:e4:46:12:76:
d3:37:f9:5c:09:b7:59:0d:dc:2c:ec:72:ca:23:fc:
75:64:ff:5d:7e:8b:53:e6:60:a8:ff:ab:c8:5f:dd:
ba:8a:54:3c:a6:cc:67:1a:11:e6:14:59:ba:7d:48:
97:b3:75:37:cd:83:c4:66:6b:9f:9d:6e:e9:49:a2:
52:18:e5:d8:ac:93:1e:37:56:86:e1:02:55:48:0e:
a6:2b:3b:4e:9b:d6:de:6d:03:ae:b2:73:59:9e:03:
73:26:f8:85:2f:77:21:e8:59:fb:bb:63:4f:26:20:
60:6b:65:f1:39:16:b3:f7:2d:50:f6:92:78:9e:5a:
c0:13:10:90:33:e4:cd:b0:ae:a9:f0:d0:a7:aa:cc:
c7:a2:db:b8:d5:32:bb:53:8d:3f:27:a6:fd:97:d9:
2d:c5:07:de:62:8d:e0:16:ac:e9:9d:25:72:20:c2:
6c:a6:0b:9b:13:c4:95:3c:bb:00:44:14:01:80:96:
c6:14:45:52:92:4d:2b:5b:bc:67:2f:d0:3e:75:58:
de:c0:f1:a3:82:b0:32:22:fc:34:23:e4:5f:9a:91:
71:97:31:bd:c1:9d:c0:0e:eb:c1:ca:d9:9b:25:a9:
03:58:3a:72:4e:c3:23:9b:45:68:4f:94:d1:48:55:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BC:96:0A:4E:80:B5:AC:D9:CC:AB:BF:0B:40:19:5E:AB:49:E6:A8
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/XbyWCk6AtazZzKu_C0AZXqtJ5qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.0.0/24
37.18.15.0/24
37.18.63.0/24
37.18.78.0/24
37.230.131.0/24
37.230.134.0/24
37.230.151.0/24
37.230.163.0/24
37.230.170.0/23
37.230.176.0/24
37.230.182.0/23
37.230.187.0/24
46.243.138.0/23
46.243.149.0/24
46.243.204.0/24
46.243.214.0/24
46.243.221.0-46.243.223.255
46.243.225.0/24
46.243.232.0-46.243.238.255
46.243.240.0/22
46.243.246.0-46.243.251.255
128.0.71.0/24
141.101.132.0/23
141.101.135.0/24
141.101.143.0/24
141.101.145.0/24
141.101.147.0-141.101.150.255
141.101.153.0-141.101.156.255
141.101.158.0-141.101.162.255
141.101.164.0-141.101.168.255
141.101.170.0/23
141.101.179.0/24
141.101.191.0/24
141.101.255.0/24
178.170.137.0/24
178.170.139.0-178.170.140.255
178.170.231.0/24
185.4.148.0/22
188.72.80.0/23
188.72.83.0-188.72.86.255
188.72.119.0/24
217.150.88.0/21
Signature Algorithm: sha256WithRSAEncryption
cd:94:80:82:e8:40:8a:a4:04:8f:e4:ba:57:4d:81:5b:70:db:
db:cb:a8:c3:85:6b:a5:27:96:60:d0:57:2f:0b:7e:23:88:2f:
6b:5f:0b:c0:12:1d:54:8f:91:91:4b:25:cb:7c:d7:7a:15:37:
00:b2:78:d5:f0:ce:1f:b3:48:8f:7c:37:da:79:2b:8e:77:07:
d1:e2:7c:e6:74:e5:d7:04:22:01:c2:e4:1d:b3:2f:ff:bf:0e:
26:9b:50:c1:52:8c:d7:9b:ce:d0:4e:62:06:99:6a:4f:7b:c6:
cd:9f:80:f8:27:d3:23:5b:a2:67:36:b4:33:76:c5:8e:ea:ed:
40:08:1a:bf:5b:2b:ad:82:5a:ba:51:98:7d:42:e7:b3:bd:48:
e4:b0:59:eb:ca:f5:5e:a1:52:d9:70:23:22:21:bf:2d:80:ee:
91:51:bf:0c:d5:a3:5f:07:4e:1b:26:39:c2:b0:b3:d6:cb:cf:
ef:68:15:0c:cf:82:0d:d7:e1:47:30:40:ca:08:19:e2:25:67:
c9:4d:51:41:dc:35:fb:c2:b5:34:b6:03:26:99:36:61:ca:eb:
e2:9c:5c:c5:c6:9d:46:f1:f0:ba:f6:fb:9d:34:01:55:cf:47:
98:87:7d:86:da:4a:f0:60:cd:b3:91:9b:88:03:6e:43:8e:ad:
fd:6e:98:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org