Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/rhnnGUH-FdZblAKBH16EVobC-D8.roa
File: rhnnGUH-FdZblAKBH16EVobC-D8.roa (raw, json)
Hash identifier: CSAjKYj0kylVCs6y0qMDvHs7zcu9b3y/TIvm2UbcxJM=
Subject key identifier: AE:19:E7:19:41:FE:15:D6:5B:94:02:81:1F:5E:84:56:86:C2:F8:3F
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1C746911
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/rhnnGUH-FdZblAKBH16EVobC-D8.roa
Signing time: Thu 21 Apr 2022 11:47:52 +0000
ROA not before: Thu 21 Apr 2022 11:47:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5483
IP address blocks: 195.228.112.0/24 maxlen: 24
195.228.135.0/24 maxlen: 24
195.228.152.0/24 maxlen: 24
195.228.156.0/24 maxlen: 24
195.228.155.0/24 maxlen: 24
62.201.64.0/18 maxlen: 18
195.228.76.0/24 maxlen: 24
195.228.75.0/24 maxlen: 24
91.120.128.0/18 maxlen: 18
46.107.0.0/16 maxlen: 16
46.107.14.0/24 maxlen: 24
46.107.15.0/24 maxlen: 24
195.228.85.0/24 maxlen: 24
188.6.0.0/16 maxlen: 16
195.228.87.0/24 maxlen: 24
195.228.86.0/24 maxlen: 24
195.228.247.0/24 maxlen: 24
195.228.255.0/24 maxlen: 24
195.228.254.0/24 maxlen: 24
91.120.57.0/24 maxlen: 24
195.228.4.0/24 maxlen: 24
195.228.0.0/16 maxlen: 16
91.120.64.0/18 maxlen: 18
134.255.0.0/17 maxlen: 17
195.228.24.0/24 maxlen: 24
195.228.34.0/24 maxlen: 24
195.228.45.0/24 maxlen: 24
91.120.0.0/16 maxlen: 16
91.120.16.0/22 maxlen: 22
91.120.27.0/24 maxlen: 24
5.187.128.0/17 maxlen: 17
86.59.128.0/17 maxlen: 17
31.46.0.0/16 maxlen: 16
31.46.19.0/24 maxlen: 24
78.92.0.0/16 maxlen: 16
212.51.110.0/24 maxlen: 24
46.139.0.0/16 maxlen: 16
212.51.125.0/24 maxlen: 24
185.65.8.0/22 maxlen: 22
149.200.0.0/17 maxlen: 17
194.38.96.0/24 maxlen: 24
194.38.96.0/19 maxlen: 19
194.38.104.0/24 maxlen: 24
217.65.96.0/19 maxlen: 19
217.65.96.0/23 maxlen: 23
5.38.128.0/17 maxlen: 17
212.51.64.0/18 maxlen: 18
212.51.79.0/24 maxlen: 24
212.51.91.0/24 maxlen: 24
195.70.32.0/19 maxlen: 19
84.2.226.0/23 maxlen: 24
84.2.230.0/24 maxlen: 24
84.2.231.0/24 maxlen: 24
84.2.228.0/24 maxlen: 24
84.2.227.0/24 maxlen: 24
213.178.96.0/19 maxlen: 19
188.36.248.0/24 maxlen: 24
37.76.0.0/17 maxlen: 17
84.1.236.0/24 maxlen: 24
93.89.160.0/20 maxlen: 20
84.2.24.0/24 maxlen: 24
194.176.224.0/19 maxlen: 19
84.1.226.0/24 maxlen: 24
84.2.79.0/24 maxlen: 24
188.36.0.0/16 maxlen: 16
195.56.0.0/24 maxlen: 24
84.2.35.0/24 maxlen: 24
195.56.0.0/16 maxlen: 16
84.2.39.0/24 maxlen: 24
84.2.42.0/23 maxlen: 24
84.2.51.0/24 maxlen: 24
84.2.50.0/24 maxlen: 24
84.2.52.0/24 maxlen: 24
84.2.54.0/24 maxlen: 24
188.156.0.0/15 maxlen: 15
185.55.12.0/22 maxlen: 22
194.149.36.0/24 maxlen: 24
194.149.32.0/19 maxlen: 19
217.116.32.0/20 maxlen: 20
84.1.102.0/24 maxlen: 24
217.20.128.0/20 maxlen: 20
80.249.164.0/24 maxlen: 24
87.101.112.0/20 maxlen: 20
80.249.171.0/24 maxlen: 24
80.249.172.0/24 maxlen: 24
80.249.170.0/24 maxlen: 24
80.249.168.0/24 maxlen: 24
80.249.167.0/24 maxlen: 24
84.0.0.0/14 maxlen: 14
81.182.0.0/15 maxlen: 15
79.122.0.0/17 maxlen: 17
194.149.0.0/19 maxlen: 19
80.249.173.0/24 maxlen: 24
80.249.174.0/24 maxlen: 24
194.88.32.0/19 maxlen: 19
94.27.128.0/17 maxlen: 17
2001:4c48::/29 maxlen: 29
2a00:10d0::/32 maxlen: 32
2a02:738::/32 maxlen: 32
2001:4c48::/46 maxlen: 48
2001:4c48::/32 maxlen: 32
2a00:1110::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477391121 (0x1c746911)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Apr 21 11:47:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae19e71941fe15d65b9402811f5e845686c2f83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:b9:aa:10:68:c7:5f:f6:2d:34:c5:8d:ef:
90:f1:d2:7c:69:f4:a2:0e:aa:ef:5a:96:cc:5d:5e:
e2:dc:e3:1c:d7:ab:80:f6:64:4f:0e:c3:04:e5:a7:
92:32:23:56:00:92:8c:79:47:db:26:b4:8a:ba:12:
be:ec:e7:10:da:00:26:e2:bc:22:59:cd:74:05:05:
07:fe:80:66:f0:b8:54:6c:16:76:69:8e:d6:48:fe:
76:68:b1:38:a6:d5:06:7a:54:8b:c1:c1:ce:27:85:
fa:20:9f:65:36:a9:76:44:ea:58:75:de:72:6f:83:
fc:f6:19:05:5a:72:15:c2:cf:9c:24:45:e2:3d:18:
cd:ea:85:cb:12:cf:48:4f:1c:7e:d9:7d:23:a8:bd:
c4:07:3c:e6:7d:66:c0:b0:6d:07:75:c1:d7:31:96:
34:30:f8:0c:c3:f2:8e:99:5f:13:f8:dd:1b:96:b7:
1d:e7:cd:fd:c9:ae:29:64:fb:9c:34:e0:03:08:b3:
8c:90:ba:10:f4:6a:d1:85:26:84:af:ac:2e:ac:62:
3c:a3:a7:97:b0:4c:dc:c6:50:04:2f:7c:8c:80:08:
6d:94:ed:17:92:e3:46:67:d1:da:ca:b9:bd:1c:ad:
40:a3:b2:60:c4:69:e2:5d:b7:31:16:d7:2d:e5:a8:
0c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:19:E7:19:41:FE:15:D6:5B:94:02:81:1F:5E:84:56:86:C2:F8:3F
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/rhnnGUH-FdZblAKBH16EVobC-D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.38.128.0/17
5.187.128.0/17
31.46.0.0/16
37.76.0.0/17
46.107.0.0/16
46.139.0.0/16
62.201.64.0/18
78.92.0.0/16
79.122.0.0/17
80.249.164.0/24
80.249.167.0-80.249.168.255
80.249.170.0-80.249.174.255
81.182.0.0/15
84.0.0.0/14
86.59.128.0/17
87.101.112.0/20
91.120.0.0/16
93.89.160.0/20
94.27.128.0/17
134.255.0.0/17
149.200.0.0/17
185.55.12.0/22
185.65.8.0/22
188.6.0.0/16
188.36.0.0/16
188.156.0.0/15
194.38.96.0/19
194.88.32.0/19
194.149.0.0/18
194.176.224.0/19
195.56.0.0/16
195.70.32.0/19
195.228.0.0/16
212.51.64.0/18
213.178.96.0/19
217.20.128.0/20
217.65.96.0/19
217.116.32.0/20
IPv6:
2001:4c48::/29
2a00:10d0::/32
2a00:1110::/29
2a02:738::/32
Signature Algorithm: sha256WithRSAEncryption
7b:a0:9c:02:a0:0f:72:87:81:d0:4b:3b:c2:fa:85:9c:50:45:
84:94:45:98:36:13:fc:f4:e2:0e:b0:2d:91:02:5a:50:fe:d2:
a3:4a:20:1c:7a:41:5d:46:e0:4e:35:4b:b3:11:a4:10:47:06:
8f:f8:b5:07:d6:2b:f9:56:c6:47:d9:89:5b:d0:62:e3:e8:10:
8a:f6:90:50:74:b2:f2:f2:84:a5:06:dd:29:9b:52:39:2b:ee:
28:4e:2f:96:bf:19:fa:4f:5a:21:83:8d:50:3b:e1:5f:f8:f7:
95:21:f6:7b:7c:d4:f7:7f:73:7f:de:d6:2b:60:06:38:84:36:
d8:55:02:bd:f4:a2:eb:68:d5:35:dc:c3:61:fd:d7:d8:4d:ab:
f8:21:0d:f0:8f:e9:5b:4e:60:63:9b:6c:54:e6:c9:ef:21:ac:
6b:09:f9:bf:42:40:3c:b1:e0:f2:ba:ed:42:41:43:ac:33:8b:
70:c6:34:f5:b7:6d:fa:a9:84:2c:05:46:b3:32:dc:b0:05:3a:
5f:f8:f0:f7:c5:86:f0:4a:e8:ee:43:c2:1b:53:af:e8:2a:8b:
26:7f:52:d9:0f:fa:e8:45:1d:39:75:d1:9a:72:2e:6f:5d:f4:
23:0f:b4:7d:92:d1:d3:ad:01:bc:29:7e:4e:7f:de:d0:ae:7d:
07:98:1b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:47 2024 by rpki-client on console-fra.rpki-client.org