Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/x8l-VONO4x6UoSbcf1cAH49yaWE.roa
File: x8l-VONO4x6UoSbcf1cAH49yaWE.roa (raw, json)
Hash identifier: HbNojtSCmQp7v5SltRAkD2bIGdXbuQxBkWsrS9sWMnI=
Subject key identifier: C7:C9:7E:54:E3:4E:E3:1E:94:A1:26:DC:7F:57:00:1F:8F:72:69:61
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01854F9BB23156C435D61475F135853664D6
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/x8l-VONO4x6UoSbcf1cAH49yaWE.roa
Signing time: Mon 26 Dec 2022 18:04:41 +0000
ROA not before: Mon 26 Dec 2022 18:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3214
IP address blocks: 80.66.196.0/22 maxlen: 24
92.60.40.0/23 maxlen: 23
92.60.41.0/24 maxlen: 24
92.60.42.0/24 maxlen: 24
92.60.40.0/24 maxlen: 24
185.255.55.0/24 maxlen: 24
185.255.53.0/24 maxlen: 24
185.255.52.0/22 maxlen: 24
45.80.188.0/22 maxlen: 24
62.133.35.0/24 maxlen: 24
62.133.33.0/24 maxlen: 24
62.133.32.0/24 maxlen: 24
62.133.32.0/22 maxlen: 24
45.147.48.0/22 maxlen: 24
45.153.244.0/22 maxlen: 24
95.214.164.0/22 maxlen: 24
185.248.84.0/22 maxlen: 24
185.194.52.0/22 maxlen: 24
91.200.241.0/24 maxlen: 24
45.11.45.0/24 maxlen: 24
141.98.196.0/22 maxlen: 24
147.78.179.0/24 maxlen: 24
147.78.177.0/24 maxlen: 24
147.78.178.0/24 maxlen: 24
147.78.176.0/24 maxlen: 24
147.78.176.0/22 maxlen: 24
185.200.64.0/22 maxlen: 24
45.139.192.0/22 maxlen: 24
185.254.75.0/24 maxlen: 24
185.254.73.0/24 maxlen: 24
45.92.157.0/24 maxlen: 24
185.254.74.0/24 maxlen: 24
185.213.151.0/24 maxlen: 24
185.213.149.0/24 maxlen: 24
185.213.148.0/22 maxlen: 24
185.213.148.0/24 maxlen: 24
194.124.216.0/24 maxlen: 24
45.131.152.0/22 maxlen: 24
194.124.228.0/24 maxlen: 24
194.124.227.0/24 maxlen: 24
195.245.241.0/24 maxlen: 24
195.245.242.0/24 maxlen: 24
194.104.152.0/22 maxlen: 24
194.124.213.0/24 maxlen: 24
193.111.90.0/23 maxlen: 24
193.177.220.0/22 maxlen: 24
194.36.222.0/23 maxlen: 24
94.124.116.0/22 maxlen: 24
45.90.210.0/24 maxlen: 24
193.111.30.0/23 maxlen: 24
195.245.219.0/24 maxlen: 24
185.49.32.0/22 maxlen: 24
45.130.23.0/24 maxlen: 24
45.130.21.0/24 maxlen: 24
79.143.140.0/22 maxlen: 24
45.130.22.0/24 maxlen: 24
45.130.20.0/24 maxlen: 24
45.130.20.0/22 maxlen: 24
194.36.24.0/24 maxlen: 24
45.143.233.0/24 maxlen: 24
194.36.25.0/24 maxlen: 24
45.143.232.0/22 maxlen: 24
45.143.235.0/24 maxlen: 24
45.143.234.0/24 maxlen: 24
149.62.44.0/22 maxlen: 24
78.142.192.0/22 maxlen: 24
194.169.180.0/23 maxlen: 24
45.13.199.0/24 maxlen: 24
45.13.198.0/24 maxlen: 24
109.94.168.0/22 maxlen: 24
194.169.54.0/24 maxlen: 24
194.169.54.0/23 maxlen: 24
185.222.216.0/22 maxlen: 24
185.222.216.0/21 maxlen: 24
185.222.220.0/24 maxlen: 24
2a06:4fc0::/29 maxlen: 48
2a07:e900::/29 maxlen: 48
2a09:0:7::/48 maxlen: 48
2a06:57c0::/29 maxlen: 48
2a09:0:4::/48 maxlen: 48
2a09::/29 maxlen: 48
2a0b:4080::/32 maxlen: 48
2a0d:3640::/29 maxlen: 48
2a0c:ed40::/29 maxlen: 48
2a09:0:1::/48 maxlen: 48
2a09:0:1337::/48 maxlen: 64
2a0d:de80::/29 maxlen: 48
2a09:0:6::/48 maxlen: 48
2a09:0:9::/48 maxlen: 48
2a07:fa00::/29 maxlen: 48
2a0d:7540::/29 maxlen: 48
2a03:d9c0::/29 maxlen: 48
2a09:0:3::/48 maxlen: 48
2a10:2600::/29 maxlen: 48
2a0c:59c0::/29 maxlen: 48
2a09:0:11::/48 maxlen: 48
2a0b:89c0::/29 maxlen: 48
2a09:0:8::/48 maxlen: 48
2a0d:4340::/29 maxlen: 48
2a09:0:5::/48 maxlen: 48
2a0e:6200::/29 maxlen: 48
2a07:fe00::/29 maxlen: 48
2a0d:1fc0::/29 maxlen: 48
2a03:d9c0:8000::/48 maxlen: 48
2a03:d9c0:c0de::/48 maxlen: 64
2a0d:4bc0::/29 maxlen: 48
2a09:0:2::/48 maxlen: 48
2a10:480::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4f:9b:b2:31:56:c4:35:d6:14:75:f1:35:85:36:64:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Dec 26 18:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7c97e54e34ee31e94a126dc7f57001f8f726961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:6c:14:35:52:4e:ec:b4:f2:5b:3f:ff:b5:
49:b4:1b:fb:a2:ac:ec:68:0e:e5:b9:2a:ed:ce:4a:
f5:b7:35:18:37:34:9c:76:8c:cb:ef:a8:f0:83:d6:
ee:37:41:2a:34:ea:d2:a3:e7:bf:4d:65:0e:f2:7a:
db:36:58:49:d2:64:9f:81:cd:82:b6:9c:12:ad:82:
34:e6:4a:5c:8c:3e:0e:68:ff:8f:ed:13:8d:d9:81:
34:67:09:8e:4a:b6:6c:1c:ca:cb:33:38:1b:7c:c8:
bc:31:24:fd:20:8e:8f:45:2f:d8:5a:6c:7c:57:0b:
9e:ac:1f:58:80:e1:74:b4:aa:4f:2b:17:a5:34:5c:
37:96:4e:72:3a:06:25:c5:34:f8:03:7a:19:82:5a:
0f:1e:6b:14:56:91:21:1e:ba:bb:b7:7e:45:56:df:
9a:00:fb:e2:15:b5:9b:39:a4:29:e4:7b:1f:1f:bf:
67:62:fb:ef:20:88:5c:bd:24:23:99:c3:dc:30:7b:
63:41:25:37:62:4d:52:49:26:f0:f7:a3:e8:ca:b0:
ca:4e:65:e2:6b:fc:0e:24:16:ee:45:2b:a2:bf:a5:
0e:2d:66:a6:d0:8b:71:72:1a:f9:56:31:d8:7a:a7:
4d:c3:5a:46:cc:5b:cf:6c:6f:13:d3:f8:b3:78:30:
d8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C9:7E:54:E3:4E:E3:1E:94:A1:26:DC:7F:57:00:1F:8F:72:69:61
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/x8l-VONO4x6UoSbcf1cAH49yaWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.45.0/24
45.13.198.0/23
45.80.188.0/22
45.90.210.0/24
45.92.157.0/24
45.130.20.0/22
45.131.152.0/22
45.139.192.0/22
45.143.232.0/22
45.147.48.0/22
45.153.244.0/22
62.133.32.0/22
78.142.192.0/22
79.143.140.0/22
80.66.196.0/22
91.200.241.0/24
92.60.40.0-92.60.42.255
94.124.116.0/22
95.214.164.0/22
109.94.168.0/22
141.98.196.0/22
147.78.176.0/22
149.62.44.0/22
185.49.32.0/22
185.194.52.0/22
185.200.64.0/22
185.213.148.0/22
185.222.216.0/21
185.248.84.0/22
185.254.73.0-185.254.75.255
185.255.52.0/22
193.111.30.0/23
193.111.90.0/23
193.177.220.0/22
194.36.24.0/23
194.36.222.0/23
194.104.152.0/22
194.124.213.0/24
194.124.216.0/24
194.124.227.0-194.124.228.255
194.169.54.0/23
194.169.180.0/23
195.245.219.0/24
195.245.241.0-195.245.242.255
IPv6:
2a03:d9c0::/29
2a06:4fc0::/29
2a06:57c0::/29
2a07:e900::/29
2a07:fa00::/29
2a07:fe00::/29
2a09::/29
2a0b:4080::/32
2a0b:89c0::/29
2a0c:59c0::/29
2a0c:ed40::/29
2a0d:1fc0::/29
2a0d:3640::/29
2a0d:4340::/29
2a0d:4bc0::/29
2a0d:7540::/29
2a0d:de80::/29
2a0e:6200::/29
2a10:480::/29
2a10:2600::/29
Signature Algorithm: sha256WithRSAEncryption
4e:41:1a:36:f3:e3:f2:43:f0:a8:f6:55:4d:3f:3b:c0:7c:17:
69:2a:95:6d:8d:f6:b0:73:c3:24:35:db:75:04:96:7f:cc:36:
d5:a2:b2:13:cd:13:50:67:c3:2a:4c:8b:4b:85:0e:37:14:2a:
43:e0:da:03:6b:2d:5c:0e:bc:1d:56:c7:07:4d:1f:a1:b7:3c:
9e:4c:1c:77:58:b9:f4:71:9e:2c:cc:3a:db:71:a1:ce:8d:b5:
08:13:92:7e:06:1d:ad:71:15:d8:0f:14:02:e7:ed:da:42:b1:
a4:ef:2f:8d:96:ae:07:0d:b9:36:4f:02:7a:1c:fe:d6:41:bd:
fd:38:a4:74:8a:64:e7:ec:68:36:40:6d:ed:0d:7a:0e:4e:7d:
77:68:10:14:03:74:7f:1e:82:bf:6f:51:40:67:0c:78:44:ae:
d5:7f:a9:36:e6:6a:cb:35:f5:5b:f4:16:36:24:3e:cf:60:64:
7a:71:03:1f:17:9f:f3:aa:ef:ee:c1:bc:40:46:a0:6f:83:f1:
87:8a:7d:24:2c:c5:a1:c7:77:16:f3:32:95:aa:a2:29:30:69:
b8:08:57:0e:56:be:4f:f8:c0:c1:14:c9:96:e1:16:4e:be:88:
e3:2d:bb:b0:8f:d1:b2:ec:95:d5:d1:2e:0e:fa:c0:0f:4f:f7:
36:b6:d2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-ams.rpki-client.org