Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/6VD3J5RVxUXlaWscjmk1HAPvcN8.roa
File: 6VD3J5RVxUXlaWscjmk1HAPvcN8.roa (raw, json)
Hash identifier: X213J7MMYDbEYZzW73RJZhkIUDu3pMLWDNpWWzZ1XEo=
Subject key identifier: E9:50:F7:27:94:55:C5:45:E5:69:6B:1C:8E:69:35:1C:03:EF:70:DF
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 05274B41
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/6VD3J5RVxUXlaWscjmk1HAPvcN8.roa
Signing time: Thu 19 May 2022 17:35:29 +0000
ROA not before: Thu 19 May 2022 17:35:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 5.157.192.0/22 maxlen: 22
5.157.196.0/22 maxlen: 22
5.157.200.0/21 maxlen: 21
5.157.208.0/21 maxlen: 21
5.157.216.0/22 maxlen: 24
5.157.220.0/22 maxlen: 24
178.157.120.0/22 maxlen: 22
5.157.132.0/22 maxlen: 22
5.157.152.0/21 maxlen: 21
5.157.160.0/22 maxlen: 22
5.157.168.0/22 maxlen: 24
5.157.172.0/22 maxlen: 24
5.157.232.0/21 maxlen: 21
5.157.228.0/22 maxlen: 22
5.157.248.0/21 maxlen: 21
188.119.168.0/21 maxlen: 21
188.119.184.0/22 maxlen: 22
188.119.182.0/23 maxlen: 23
188.119.180.0/23 maxlen: 23
178.157.68.0/22 maxlen: 22
178.157.94.0/24 maxlen: 24
178.157.112.0/21 maxlen: 21
185.76.62.0/23 maxlen: 23
185.76.60.0/23 maxlen: 23
188.74.248.0/21 maxlen: 21
37.35.48.0/22 maxlen: 22
37.35.52.0/24 maxlen: 24
188.119.128.0/20 maxlen: 24
188.74.192.0/21 maxlen: 21
188.74.200.0/21 maxlen: 21
62.216.72.0/24 maxlen: 24
62.216.73.0/24 maxlen: 24
62.216.74.0/24 maxlen: 24
62.216.75.0/24 maxlen: 24
188.74.212.0/22 maxlen: 22
62.216.72.0/22 maxlen: 22
62.216.80.0/24 maxlen: 24
62.216.84.0/22 maxlen: 22
62.216.80.0/22 maxlen: 22
62.216.81.0/24 maxlen: 24
62.216.82.0/24 maxlen: 24
62.216.83.0/24 maxlen: 24
62.216.84.0/24 maxlen: 24
62.216.85.0/24 maxlen: 24
188.74.216.0/21 maxlen: 21
188.74.224.0/21 maxlen: 21
62.216.88.0/22 maxlen: 22
62.216.86.0/24 maxlen: 24
62.216.87.0/24 maxlen: 24
62.216.88.0/24 maxlen: 24
62.216.89.0/24 maxlen: 24
62.216.90.0/24 maxlen: 24
62.216.91.0/24 maxlen: 24
188.74.232.0/21 maxlen: 21
62.216.92.0/24 maxlen: 24
62.216.93.0/24 maxlen: 24
62.216.94.0/24 maxlen: 24
62.216.95.0/24 maxlen: 24
188.74.144.0/22 maxlen: 22
188.74.148.0/22 maxlen: 22
188.74.160.0/21 maxlen: 21
188.74.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86461249 (0x5274b41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: May 19 17:35:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e950f7279455c545e5696b1c8e69351c03ef70df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c6:cf:07:36:90:1c:46:49:08:a2:9b:2d:2e:
fd:5d:e3:9e:24:b5:9b:8d:35:32:89:e6:8f:cc:78:
b5:7d:16:9a:1e:76:0d:42:01:3e:fa:b2:30:13:2a:
10:9a:1c:17:2a:d0:27:9d:ff:2a:9e:48:ee:bf:ad:
28:83:99:1f:ec:e1:6f:9a:c0:d6:b4:d1:cc:9b:5c:
8e:59:30:c5:8c:73:5f:50:fd:e4:7f:04:17:ab:ee:
24:db:80:3f:b1:c7:d3:1c:9c:a9:84:38:8c:08:f8:
60:14:de:54:a5:76:8f:c5:95:3c:9c:b6:a7:cc:49:
d6:1e:77:7a:3c:90:fb:d7:34:39:60:24:0b:e6:b3:
ad:3f:9f:3c:32:5f:ba:fd:71:17:eb:77:80:83:4b:
19:f1:0c:b1:a4:d8:0d:4e:3f:9b:f1:5a:6c:c3:b9:
e1:1c:80:7e:7d:df:21:0d:1b:30:7f:0b:85:76:6d:
ba:6c:65:51:9e:cc:f1:99:0a:54:1f:85:af:e2:b0:
f5:b1:65:4e:97:63:b4:9c:fe:7b:c0:2c:6c:85:e7:
2a:5c:fa:42:3c:c0:49:7c:9e:b3:a1:88:f5:5e:80:
d5:c3:b1:a6:26:45:37:08:a9:9b:49:34:19:8b:d8:
f7:e9:be:22:2e:59:c3:1b:c7:08:96:68:8b:7b:f5:
f1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:50:F7:27:94:55:C5:45:E5:69:6B:1C:8E:69:35:1C:03:EF:70:DF
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/6VD3J5RVxUXlaWscjmk1HAPvcN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.132.0/22
5.157.152.0-5.157.163.255
5.157.168.0/21
5.157.192.0/19
5.157.228.0-5.157.239.255
5.157.248.0/21
37.35.48.0-37.35.52.255
62.216.72.0/22
62.216.80.0/20
178.157.68.0/22
178.157.94.0/24
178.157.112.0-178.157.123.255
185.76.60.0/22
188.74.144.0/21
188.74.160.0/21
188.74.184.0/22
188.74.192.0/20
188.74.212.0-188.74.239.255
188.74.248.0/21
188.119.128.0/20
188.119.168.0/21
188.119.180.0-188.119.187.255
Signature Algorithm: sha256WithRSAEncryption
98:a2:98:1f:26:bd:3f:b4:fa:17:85:06:a9:16:03:51:c8:ad:
6a:cc:d6:97:0d:04:b3:20:07:4f:22:6f:e7:5a:8d:02:d6:8d:
30:aa:80:9d:a2:7a:69:cd:b2:fd:61:01:03:0b:6a:4b:6c:8e:
38:39:2e:81:fd:c1:5f:30:75:2e:95:d5:21:97:ec:af:79:45:
6d:cf:c8:a8:8c:17:a5:2d:dc:0a:58:9a:6f:a1:2e:67:72:a4:
3b:1f:ba:53:96:6f:86:8d:30:0b:b5:30:33:22:e1:58:0e:76:
19:c8:2b:77:36:21:78:ce:c6:91:bd:7b:30:96:29:e6:e3:95:
3a:05:fa:fc:35:5f:2b:7d:d4:8d:0f:0f:44:01:68:17:e4:a6:
f4:1b:cb:ff:33:8f:af:c8:ce:61:7e:f5:39:63:40:91:8f:cf:
ec:dc:70:0b:ed:87:b3:36:06:65:c0:86:58:e9:99:f8:18:4e:
ec:e1:95:f3:1a:61:93:3c:c8:45:99:ef:a2:82:32:c4:2c:99:
56:bb:b5:e9:5e:4e:4a:89:63:82:b8:0b:1c:e3:6b:56:b0:9c:
f3:b1:21:d4:03:bb:4e:5e:e7:09:e3:1e:33:77:74:98:26:5c:
02:95:19:f5:32:ad:66:6b:e4:da:4e:9b:60:05:89:f3:5a:31:
32:bb:f1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:16 2024 by rpki-client on console-fra.rpki-client.org