Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/MFxQynaXlNjfJ9cdNVwr0_g8so0.roa
File: MFxQynaXlNjfJ9cdNVwr0_g8so0.roa (raw, json)
Hash identifier: Hh6+uHNJgh5g11LbnC7Ge7H3gZWo0E4x5JEyj6Eii1w=
Subject key identifier: 30:5C:50:CA:76:97:94:D8:DF:27:D7:1D:35:5C:2B:D3:F8:3C:B2:8D
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 01831CE723DC459E4069BD0A3E6109B8B09C
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/MFxQynaXlNjfJ9cdNVwr0_g8so0.roa
Signing time: Thu 08 Sep 2022 11:40:53 +0000
ROA not before: Thu 08 Sep 2022 11:40:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 5.157.192.0/22 maxlen: 22
5.157.196.0/22 maxlen: 22
5.157.200.0/21 maxlen: 21
5.157.208.0/21 maxlen: 21
5.157.216.0/22 maxlen: 24
5.157.220.0/22 maxlen: 24
178.157.120.0/22 maxlen: 22
5.157.132.0/22 maxlen: 22
5.157.152.0/21 maxlen: 21
5.157.160.0/22 maxlen: 22
5.157.168.0/22 maxlen: 24
5.157.172.0/22 maxlen: 24
5.157.232.0/21 maxlen: 21
5.157.228.0/22 maxlen: 22
5.157.248.0/21 maxlen: 21
188.119.168.0/21 maxlen: 21
188.119.184.0/22 maxlen: 22
188.119.182.0/23 maxlen: 23
188.119.180.0/24 maxlen: 24
188.119.188.0/22 maxlen: 24
178.157.68.0/22 maxlen: 22
178.157.94.0/24 maxlen: 24
178.157.101.0/24 maxlen: 24
178.157.112.0/21 maxlen: 21
185.76.61.0/24 maxlen: 24
185.76.63.0/24 maxlen: 24
188.74.248.0/21 maxlen: 21
37.35.48.0/22 maxlen: 22
37.35.52.0/24 maxlen: 24
188.119.128.0/20 maxlen: 24
188.74.192.0/21 maxlen: 21
188.74.200.0/21 maxlen: 21
62.216.72.0/24 maxlen: 24
62.216.73.0/24 maxlen: 24
62.216.74.0/24 maxlen: 24
62.216.75.0/24 maxlen: 24
188.74.212.0/22 maxlen: 22
62.216.72.0/22 maxlen: 22
62.216.80.0/24 maxlen: 24
62.216.84.0/22 maxlen: 22
62.216.80.0/22 maxlen: 22
62.216.81.0/24 maxlen: 24
62.216.82.0/24 maxlen: 24
62.216.83.0/24 maxlen: 24
62.216.84.0/24 maxlen: 24
62.216.85.0/24 maxlen: 24
188.74.216.0/21 maxlen: 21
62.216.88.0/22 maxlen: 22
188.74.224.0/21 maxlen: 21
62.216.86.0/24 maxlen: 24
62.216.87.0/24 maxlen: 24
62.216.88.0/24 maxlen: 24
62.216.89.0/24 maxlen: 24
62.216.90.0/24 maxlen: 24
62.216.91.0/24 maxlen: 24
188.74.232.0/21 maxlen: 21
62.216.92.0/24 maxlen: 24
62.216.93.0/24 maxlen: 24
62.216.94.0/24 maxlen: 24
62.216.95.0/24 maxlen: 24
188.74.144.0/22 maxlen: 22
188.74.148.0/22 maxlen: 22
188.74.160.0/21 maxlen: 21
188.74.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:e7:23:dc:45:9e:40:69:bd:0a:3e:61:09:b8:b0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Sep 8 11:40:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=305c50ca769794d8df27d71d355c2bd3f83cb28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:28:47:b3:d4:d8:c7:d8:a3:82:a6:98:98:cf:
3b:c8:be:29:ee:67:0c:b7:49:b9:02:1a:9e:bc:f8:
16:20:80:05:39:b8:7b:81:ea:43:79:da:a8:c1:89:
84:ca:09:62:b4:be:97:72:94:02:79:3e:5c:f6:24:
f8:77:4d:b7:e7:ab:22:fa:cf:a5:bd:64:d7:c6:b7:
b1:a0:6b:f8:34:1f:d2:5b:11:07:b5:3a:10:e5:ae:
76:91:7c:62:4a:4d:d5:bd:6d:29:54:1e:80:5f:ba:
1e:b1:a8:57:8e:6c:7d:10:ca:70:4f:2b:fe:2a:86:
f7:e7:a2:2d:d1:2f:1f:51:3a:04:a9:2d:47:e7:15:
66:48:88:d2:7f:b5:0c:ea:f2:05:5d:59:4e:a4:aa:
09:5b:2a:de:5a:a6:59:d8:ed:c8:ed:38:f1:e2:63:
f9:6c:76:00:23:3d:e4:d5:1d:80:0a:7e:ff:b4:a6:
3c:b2:3a:ab:62:39:38:bf:bd:bc:83:a2:a4:af:bb:
64:3e:09:2b:68:f7:ec:fe:d5:50:50:41:dd:96:2b:
4c:11:30:23:32:fb:49:4a:0d:5c:07:e4:09:80:2c:
ed:df:0d:0f:81:9d:f4:d6:57:81:e5:b4:54:a2:af:
20:e5:f8:dd:45:41:91:fd:ff:18:7f:6a:ab:8c:c3:
27:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5C:50:CA:76:97:94:D8:DF:27:D7:1D:35:5C:2B:D3:F8:3C:B2:8D
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/MFxQynaXlNjfJ9cdNVwr0_g8so0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.132.0/22
5.157.152.0-5.157.163.255
5.157.168.0/21
5.157.192.0/19
5.157.228.0-5.157.239.255
5.157.248.0/21
37.35.48.0-37.35.52.255
62.216.72.0/22
62.216.80.0/20
178.157.68.0/22
178.157.94.0/24
178.157.101.0/24
178.157.112.0-178.157.123.255
185.76.61.0/24
185.76.63.0/24
188.74.144.0/21
188.74.160.0/21
188.74.184.0/22
188.74.192.0/20
188.74.212.0-188.74.239.255
188.74.248.0/21
188.119.128.0/20
188.119.168.0/21
188.119.180.0/24
188.119.182.0-188.119.191.255
Signature Algorithm: sha256WithRSAEncryption
4d:36:0c:a9:b8:c1:6b:0b:4f:0d:12:5d:0e:57:74:18:d9:d4:
b9:b0:61:b5:d7:55:b5:ab:a8:d7:f7:9b:73:8e:bd:2b:39:a4:
87:b6:6d:5c:05:2f:ba:01:52:c2:55:94:62:30:e2:6a:7d:a7:
6f:14:b7:6d:b7:05:b3:67:86:91:85:c5:f1:93:06:3d:63:a6:
c3:ac:a8:c4:80:d0:63:6d:50:e0:1e:a7:97:e9:f1:df:69:e7:
47:31:7b:35:36:57:aa:15:8e:a7:20:6d:c1:29:aa:b8:e2:d0:
4e:18:e1:60:92:64:4d:25:59:b1:60:b9:2b:4c:09:40:a7:3e:
c5:a5:b9:37:3d:8c:3d:9f:f1:2a:fa:e1:e4:89:fd:75:39:67:
e0:0e:02:1c:53:c1:ec:35:68:0f:c9:80:94:0d:06:7d:7a:68:
b1:fe:14:93:5d:61:87:a0:2c:d2:c6:22:a8:7d:14:d5:8d:90:
20:e2:db:b4:09:f6:c6:e3:5f:be:26:07:17:10:e1:14:d3:ef:
35:22:97:6e:18:61:ae:58:26:11:7d:43:a6:e5:d9:b6:fe:ca:
9f:87:b3:c8:c3:0f:52:47:7f:11:37:e0:db:7a:7c:5e:c5:d4:
c2:5f:4f:8f:d3:8a:2b:d3:19:87:3e:f2:2a:93:e4:44:5e:d9:
82:20:e8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:25 2023 by rpki-client on console-fra.rpki-client.org