Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/QbktcqANcgRUZ8VH0I-Ouq5fNxY.roa
File: QbktcqANcgRUZ8VH0I-Ouq5fNxY.roa (raw, json)
Hash identifier: /0KjKT6+FBNu9tp6tro3SEqCcpsuwbC5CXwkYrKeLUQ=
Subject key identifier: 41:B9:2D:72:A0:0D:72:04:54:67:C5:47:D0:8F:8E:BA:AE:5F:37:16
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 01821B749CC97F77CA1BF94AF48344D9C294
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/QbktcqANcgRUZ8VH0I-Ouq5fNxY.roa
Signing time: Wed 20 Jul 2022 11:53:23 +0000
ROA not before: Wed 20 Jul 2022 11:53:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 5.157.192.0/22 maxlen: 22
5.157.196.0/22 maxlen: 22
5.157.200.0/21 maxlen: 21
5.157.208.0/21 maxlen: 21
5.157.216.0/22 maxlen: 24
5.157.220.0/22 maxlen: 24
178.157.120.0/22 maxlen: 22
5.157.132.0/22 maxlen: 22
5.157.152.0/21 maxlen: 21
5.157.160.0/22 maxlen: 22
5.157.168.0/22 maxlen: 24
5.157.172.0/22 maxlen: 24
5.157.232.0/21 maxlen: 21
5.157.228.0/22 maxlen: 22
5.157.248.0/21 maxlen: 21
188.119.168.0/21 maxlen: 21
188.119.184.0/22 maxlen: 22
188.119.182.0/23 maxlen: 23
188.119.180.0/23 maxlen: 23
188.119.188.0/22 maxlen: 24
178.157.68.0/22 maxlen: 22
178.157.94.0/24 maxlen: 24
178.157.101.0/24 maxlen: 24
178.157.112.0/21 maxlen: 21
185.76.60.0/23 maxlen: 23
185.76.61.0/24 maxlen: 24
185.76.63.0/24 maxlen: 24
188.74.248.0/21 maxlen: 21
37.35.48.0/22 maxlen: 22
37.35.52.0/24 maxlen: 24
188.119.128.0/20 maxlen: 24
188.74.192.0/21 maxlen: 21
188.74.200.0/21 maxlen: 21
62.216.72.0/24 maxlen: 24
62.216.73.0/24 maxlen: 24
62.216.74.0/24 maxlen: 24
62.216.75.0/24 maxlen: 24
188.74.212.0/22 maxlen: 22
62.216.72.0/22 maxlen: 22
62.216.80.0/24 maxlen: 24
62.216.84.0/22 maxlen: 22
62.216.80.0/22 maxlen: 22
62.216.81.0/24 maxlen: 24
62.216.82.0/24 maxlen: 24
62.216.83.0/24 maxlen: 24
62.216.84.0/24 maxlen: 24
62.216.85.0/24 maxlen: 24
188.74.216.0/21 maxlen: 21
62.216.88.0/22 maxlen: 22
188.74.224.0/21 maxlen: 21
62.216.86.0/24 maxlen: 24
62.216.87.0/24 maxlen: 24
62.216.88.0/24 maxlen: 24
62.216.89.0/24 maxlen: 24
62.216.90.0/24 maxlen: 24
62.216.91.0/24 maxlen: 24
188.74.232.0/21 maxlen: 21
62.216.92.0/24 maxlen: 24
62.216.93.0/24 maxlen: 24
62.216.94.0/24 maxlen: 24
62.216.95.0/24 maxlen: 24
188.74.144.0/22 maxlen: 22
188.74.148.0/22 maxlen: 22
188.74.160.0/21 maxlen: 21
188.74.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1b:74:9c:c9:7f:77:ca:1b:f9:4a:f4:83:44:d9:c2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jul 20 11:53:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41b92d72a00d72045467c547d08f8ebaae5f3716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:ca:2c:d7:54:aa:1c:12:79:be:1d:f0:74:
23:55:7a:11:fb:c3:c2:07:4d:32:59:c7:61:8e:4c:
72:0b:f7:dd:e8:46:cd:1b:d9:ab:a7:5b:bb:76:e3:
b9:10:98:6c:01:29:5c:a7:f6:b7:f8:b9:f8:72:db:
eb:a3:de:0c:64:6a:60:47:92:4b:ef:66:03:6e:d3:
8d:44:69:ed:2a:f6:71:6b:e7:80:e1:ba:2c:f0:21:
d4:b5:94:00:71:db:75:33:48:a9:96:e7:da:f3:7e:
9d:bb:2c:ce:54:09:26:a5:4f:68:96:72:58:37:b4:
04:4f:04:44:18:8a:ed:7a:05:40:62:7c:38:e8:12:
84:76:ac:e0:29:eb:b1:79:09:6d:49:86:51:ba:2b:
f2:56:3d:f4:1e:63:31:86:85:34:d7:cc:20:c3:18:
ef:d3:f0:b9:c1:62:ca:25:b5:57:5f:5c:a9:f1:a1:
46:f0:87:42:d2:13:01:00:62:0f:79:60:e4:15:af:
82:c7:3f:04:9f:58:b5:ca:6d:a3:fb:cc:e4:18:6a:
5f:27:cd:11:e7:1d:b9:a4:7a:0c:aa:d0:df:6d:ec:
59:1b:b3:1a:b1:fe:16:f0:d6:ac:42:15:ac:85:28:
fd:38:85:7d:27:f8:14:60:60:60:66:f3:70:9c:27:
e9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B9:2D:72:A0:0D:72:04:54:67:C5:47:D0:8F:8E:BA:AE:5F:37:16
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/QbktcqANcgRUZ8VH0I-Ouq5fNxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.132.0/22
5.157.152.0-5.157.163.255
5.157.168.0/21
5.157.192.0/19
5.157.228.0-5.157.239.255
5.157.248.0/21
37.35.48.0-37.35.52.255
62.216.72.0/22
62.216.80.0/20
178.157.68.0/22
178.157.94.0/24
178.157.101.0/24
178.157.112.0-178.157.123.255
185.76.60.0/23
185.76.63.0/24
188.74.144.0/21
188.74.160.0/21
188.74.184.0/22
188.74.192.0/20
188.74.212.0-188.74.239.255
188.74.248.0/21
188.119.128.0/20
188.119.168.0/21
188.119.180.0-188.119.191.255
Signature Algorithm: sha256WithRSAEncryption
4b:58:4a:9f:2f:a6:bc:91:92:ac:7d:6c:8e:be:74:8a:93:a7:
82:3d:9f:6f:cf:a1:37:c8:57:5d:b2:58:a9:8e:75:86:e9:3b:
3c:7f:1e:8a:43:fb:80:7f:90:17:fc:d3:f8:42:44:b5:fa:65:
f5:51:f3:f5:d6:a2:ea:32:1d:c4:85:35:ea:a6:88:6b:68:2d:
3a:18:c8:0b:88:da:22:4c:6c:62:0c:aa:54:de:9d:49:32:2a:
27:81:bb:04:fa:ae:c4:fd:87:a3:01:a1:8a:d4:11:07:33:4c:
60:87:d7:1e:32:07:d9:d5:34:cc:13:fa:96:69:9c:ab:e6:d0:
7d:07:35:b4:31:b8:b2:3b:af:3b:a6:59:5e:17:e7:a0:8e:33:
57:f1:a4:c3:f8:e8:77:5d:9a:ce:02:18:35:c9:62:4b:22:18:
2c:43:bb:d0:dd:61:7c:08:05:98:90:6e:43:76:3e:07:20:d4:
9f:e8:47:8d:d2:6f:3d:94:c1:fe:bd:c2:aa:c2:a2:69:23:6a:
b3:11:e4:04:54:a3:8a:d7:24:61:ea:11:0a:36:d6:fa:fd:c0:
e0:f6:0a:00:15:dd:61:00:9f:db:a6:8e:64:f4:57:c1:0a:ce:
a4:aa:06:99:e8:12:cb:5b:0a:90:bb:c6:1b:12:30:73:8f:77:
80:87:aa:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:16 2024 by rpki-client on console-fra.rpki-client.org