Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/iYLXx4Tfm8Gk2sbA9p19RZMuKag.roa
File: iYLXx4Tfm8Gk2sbA9p19RZMuKag.roa (raw, json)
Hash identifier: r4+UPLhEmpXKlqnaxN3lfaoEWeCGUYha5TLHflh/7l8=
Subject key identifier: 89:82:D7:C7:84:DF:9B:C1:A4:DA:C6:C0:F6:9D:7D:45:93:2E:29:A8
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1BB05A61
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/iYLXx4Tfm8Gk2sbA9p19RZMuKag.roa
Signing time: Tue 25 Jan 2022 15:33:21 +0000
ROA not before: Tue 25 Jan 2022 15:33:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5483
IP address blocks: 195.228.112.0/24 maxlen: 24
195.228.135.0/24 maxlen: 24
195.228.152.0/24 maxlen: 24
195.228.156.0/24 maxlen: 24
195.228.155.0/24 maxlen: 24
62.201.64.0/18 maxlen: 18
195.228.76.0/24 maxlen: 24
195.228.75.0/24 maxlen: 24
91.120.128.0/18 maxlen: 18
46.107.0.0/16 maxlen: 16
46.107.14.0/24 maxlen: 24
46.107.15.0/24 maxlen: 24
195.228.85.0/24 maxlen: 24
188.6.0.0/16 maxlen: 16
195.228.87.0/24 maxlen: 24
195.228.86.0/24 maxlen: 24
195.228.247.0/24 maxlen: 24
195.228.255.0/24 maxlen: 24
195.228.254.0/24 maxlen: 24
91.120.57.0/24 maxlen: 24
195.228.4.0/24 maxlen: 24
195.228.0.0/16 maxlen: 16
91.120.64.0/18 maxlen: 18
134.255.0.0/17 maxlen: 17
195.228.24.0/24 maxlen: 24
195.228.34.0/24 maxlen: 24
195.228.45.0/24 maxlen: 24
91.120.0.0/16 maxlen: 16
91.120.16.0/22 maxlen: 22
91.120.27.0/24 maxlen: 24
5.187.128.0/17 maxlen: 17
86.59.128.0/17 maxlen: 17
31.46.0.0/16 maxlen: 16
31.46.19.0/24 maxlen: 24
78.92.0.0/16 maxlen: 16
212.51.110.0/24 maxlen: 24
46.139.0.0/16 maxlen: 16
212.51.125.0/24 maxlen: 24
185.65.8.0/22 maxlen: 22
149.200.0.0/17 maxlen: 17
194.38.96.0/24 maxlen: 24
194.38.96.0/19 maxlen: 19
194.38.104.0/24 maxlen: 24
217.65.96.0/19 maxlen: 19
217.65.96.0/23 maxlen: 23
5.38.128.0/17 maxlen: 17
212.51.64.0/18 maxlen: 18
212.51.79.0/24 maxlen: 24
212.51.91.0/24 maxlen: 24
195.70.32.0/19 maxlen: 19
84.2.230.0/24 maxlen: 24
84.2.231.0/24 maxlen: 24
84.2.228.0/24 maxlen: 24
84.2.227.0/24 maxlen: 24
213.178.96.0/19 maxlen: 19
188.36.248.0/24 maxlen: 24
37.76.0.0/17 maxlen: 17
84.1.236.0/24 maxlen: 24
93.89.160.0/20 maxlen: 20
84.2.24.0/24 maxlen: 24
194.176.224.0/19 maxlen: 19
84.1.226.0/24 maxlen: 24
84.2.79.0/24 maxlen: 24
188.36.0.0/16 maxlen: 16
195.56.0.0/24 maxlen: 24
84.2.35.0/24 maxlen: 24
195.56.0.0/16 maxlen: 16
84.2.39.0/24 maxlen: 24
84.2.51.0/24 maxlen: 24
84.2.50.0/24 maxlen: 24
84.2.52.0/24 maxlen: 24
84.2.54.0/24 maxlen: 24
188.156.0.0/15 maxlen: 15
185.55.12.0/22 maxlen: 22
194.149.36.0/24 maxlen: 24
194.149.32.0/19 maxlen: 19
217.116.32.0/20 maxlen: 20
84.1.102.0/24 maxlen: 24
217.20.128.0/20 maxlen: 20
80.249.164.0/24 maxlen: 24
87.101.112.0/20 maxlen: 20
80.249.171.0/24 maxlen: 24
80.249.172.0/24 maxlen: 24
80.249.170.0/24 maxlen: 24
80.249.168.0/24 maxlen: 24
80.249.167.0/24 maxlen: 24
84.0.0.0/14 maxlen: 14
81.182.0.0/15 maxlen: 15
79.122.0.0/17 maxlen: 17
194.149.0.0/19 maxlen: 19
80.249.173.0/24 maxlen: 24
80.249.174.0/24 maxlen: 24
194.88.32.0/19 maxlen: 19
94.27.128.0/17 maxlen: 17
2001:4c48::/29 maxlen: 29
2a00:10d0::/32 maxlen: 32
2a02:738::/32 maxlen: 32
2001:4c48::/32 maxlen: 32
2a00:1110::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464542305 (0x1bb05a61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 25 15:33:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8982d7c784df9bc1a4dac6c0f69d7d45932e29a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:07:82:71:1d:dd:7b:80:1f:97:ce:5b:34:62:
b2:1b:80:f2:b9:fa:df:d9:3a:b3:63:8a:72:0c:79:
7f:25:4b:7e:39:07:d6:05:59:50:39:0e:4b:c2:18:
70:38:89:3c:ef:4d:48:bf:78:1c:ce:d4:30:16:88:
68:4a:80:fc:bd:2b:dc:7f:41:19:10:58:c9:11:53:
87:a5:43:89:7b:4c:a0:ad:7d:a7:65:7f:b9:52:04:
65:e1:ec:5e:a8:9e:da:ef:7a:42:55:62:22:2a:40:
3a:0c:65:0a:47:77:1a:85:7f:9d:f4:02:d0:93:d5:
05:ea:da:ff:35:1b:60:d0:4d:ec:c2:48:00:77:96:
1e:2c:0a:85:42:3d:f0:87:86:11:e0:ab:fc:0c:2c:
c5:8a:17:3e:74:c4:6a:84:02:22:86:91:de:9d:b9:
1c:00:01:2d:8c:5d:8e:54:97:61:e9:4c:57:f7:1a:
d5:54:3e:98:1c:ac:4d:2e:38:52:63:39:9b:96:ac:
02:a5:df:47:c0:72:a1:df:13:f4:2b:82:79:9c:a9:
d3:4b:71:f1:93:f3:8f:d7:d9:ca:ce:25:8d:b7:0e:
af:ac:38:d1:5b:43:8c:fd:35:4b:bf:cd:44:7d:2e:
3b:18:f5:12:a9:5f:a4:b3:b9:13:c5:51:16:af:0e:
24:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:82:D7:C7:84:DF:9B:C1:A4:DA:C6:C0:F6:9D:7D:45:93:2E:29:A8
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/iYLXx4Tfm8Gk2sbA9p19RZMuKag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.38.128.0/17
5.187.128.0/17
31.46.0.0/16
37.76.0.0/17
46.107.0.0/16
46.139.0.0/16
62.201.64.0/18
78.92.0.0/16
79.122.0.0/17
80.249.164.0/24
80.249.167.0-80.249.168.255
80.249.170.0-80.249.174.255
81.182.0.0/15
84.0.0.0/14
86.59.128.0/17
87.101.112.0/20
91.120.0.0/16
93.89.160.0/20
94.27.128.0/17
134.255.0.0/17
149.200.0.0/17
185.55.12.0/22
185.65.8.0/22
188.6.0.0/16
188.36.0.0/16
188.156.0.0/15
194.38.96.0/19
194.88.32.0/19
194.149.0.0/18
194.176.224.0/19
195.56.0.0/16
195.70.32.0/19
195.228.0.0/16
212.51.64.0/18
213.178.96.0/19
217.20.128.0/20
217.65.96.0/19
217.116.32.0/20
IPv6:
2001:4c48::/29
2a00:10d0::/32
2a00:1110::/29
2a02:738::/32
Signature Algorithm: sha256WithRSAEncryption
3c:e6:ff:fd:f7:33:ee:59:43:a3:2f:28:83:6e:23:06:d5:02:
4c:cd:dd:87:d7:35:91:93:f0:21:c7:6b:d3:d5:36:a6:05:36:
f8:df:24:af:c1:4b:1d:b7:96:83:b3:b4:05:60:b6:ba:31:80:
6c:be:f1:65:32:88:18:b8:00:c4:24:07:38:66:da:e6:1e:02:
cf:ed:a7:6d:12:27:3e:73:59:59:dc:c7:b1:8a:33:9f:b1:c2:
6c:53:07:81:19:1c:9f:49:a4:77:5d:da:7c:3d:cd:05:f7:71:
3b:5e:35:2c:7a:4e:2c:46:e3:57:f0:da:49:16:14:a7:35:e8:
4d:e4:3c:24:73:cc:02:98:5b:b4:46:c1:00:03:00:ae:f8:ff:
f2:7d:bd:16:8a:a2:ae:d7:45:e3:e7:67:6a:47:24:b3:c3:f2:
4c:81:2c:b2:ed:d6:72:d4:37:27:2a:07:61:87:05:1c:85:03:
fe:08:25:7b:bb:2c:64:57:ea:26:68:e7:b6:47:4e:71:d1:1e:
5f:e0:92:d5:f9:be:5c:51:76:0a:37:75:6e:77:08:0e:b3:3d:
a2:99:ad:91:18:7c:bd:57:aa:87:ba:36:55:62:d2:d2:99:56:
d6:38:1a:68:49:30:02:30:ee:2c:ae:99:3e:2a:69:9c:56:4e:
c0:9c:2c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-ams.rpki-client.org