Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/aECgMZ1ic7jmlt6M4iIWoUwGVDc.roa
File: aECgMZ1ic7jmlt6M4iIWoUwGVDc.roa (raw, json)
Hash identifier: tUJGtxqc+DBxF8HXpiXGNC0di0RBHAFEIdylRNkMJMA=
Subject key identifier: 68:40:A0:31:9D:62:73:B8:E6:96:DE:8C:E2:22:16:A1:4C:06:54:37
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 055AEFD8
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/aECgMZ1ic7jmlt6M4iIWoUwGVDc.roa
Signing time: Tue 07 Jun 2022 18:44:02 +0000
ROA not before: Tue 07 Jun 2022 18:44:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 5.157.192.0/22 maxlen: 22
5.157.196.0/22 maxlen: 22
5.157.200.0/21 maxlen: 21
5.157.208.0/21 maxlen: 21
5.157.216.0/22 maxlen: 24
5.157.220.0/22 maxlen: 24
178.157.120.0/22 maxlen: 22
5.157.132.0/22 maxlen: 22
5.157.152.0/21 maxlen: 21
5.157.160.0/22 maxlen: 22
5.157.168.0/22 maxlen: 24
5.157.172.0/22 maxlen: 24
5.157.232.0/21 maxlen: 21
5.157.228.0/22 maxlen: 22
5.157.248.0/21 maxlen: 21
188.119.168.0/21 maxlen: 21
188.119.184.0/22 maxlen: 22
188.119.182.0/23 maxlen: 23
188.119.180.0/23 maxlen: 23
188.119.188.0/22 maxlen: 24
178.157.68.0/22 maxlen: 22
178.157.94.0/24 maxlen: 24
178.157.101.0/24 maxlen: 24
178.157.112.0/21 maxlen: 21
185.76.62.0/23 maxlen: 23
185.76.60.0/23 maxlen: 23
188.74.248.0/21 maxlen: 21
37.35.48.0/22 maxlen: 22
37.35.52.0/24 maxlen: 24
188.119.128.0/20 maxlen: 24
188.74.192.0/21 maxlen: 21
188.74.200.0/21 maxlen: 21
62.216.72.0/24 maxlen: 24
62.216.73.0/24 maxlen: 24
62.216.74.0/24 maxlen: 24
62.216.75.0/24 maxlen: 24
188.74.212.0/22 maxlen: 22
62.216.72.0/22 maxlen: 22
62.216.80.0/24 maxlen: 24
62.216.84.0/22 maxlen: 22
62.216.80.0/22 maxlen: 22
62.216.81.0/24 maxlen: 24
62.216.82.0/24 maxlen: 24
62.216.83.0/24 maxlen: 24
62.216.84.0/24 maxlen: 24
62.216.85.0/24 maxlen: 24
188.74.216.0/21 maxlen: 21
62.216.88.0/22 maxlen: 22
188.74.224.0/21 maxlen: 21
62.216.86.0/24 maxlen: 24
62.216.87.0/24 maxlen: 24
62.216.88.0/24 maxlen: 24
62.216.89.0/24 maxlen: 24
62.216.90.0/24 maxlen: 24
62.216.91.0/24 maxlen: 24
188.74.232.0/21 maxlen: 21
62.216.92.0/24 maxlen: 24
62.216.93.0/24 maxlen: 24
62.216.94.0/24 maxlen: 24
62.216.95.0/24 maxlen: 24
188.74.144.0/22 maxlen: 22
188.74.148.0/22 maxlen: 22
188.74.160.0/21 maxlen: 21
188.74.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89845720 (0x55aefd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jun 7 18:44:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6840a0319d6273b8e696de8ce22216a14c065437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:49:66:61:a1:3b:26:ba:97:a6:bc:40:b4:
14:21:bc:a5:5d:b5:6c:8e:7b:71:88:91:34:a8:35:
56:e9:7f:8e:bd:66:ed:c0:a9:33:59:1d:37:7f:c5:
fa:88:bb:1e:07:1f:81:ee:1e:5a:31:2f:c7:8a:34:
99:43:6a:d3:6c:56:1a:06:fe:a7:c7:66:08:9f:e0:
45:4a:9a:fa:bc:93:04:5c:32:1a:7f:16:0e:90:ea:
a5:a9:ad:19:ef:84:01:1a:11:48:c0:df:2c:84:ef:
28:0b:9c:29:cc:ac:a3:ab:1b:6f:37:10:17:fe:2e:
28:32:92:a9:07:f0:c1:c5:b4:ba:df:b9:c8:5a:d6:
6d:bf:36:2a:3e:16:e8:f8:41:4b:65:c2:eb:39:7f:
02:2b:59:45:67:c9:7e:98:84:13:06:b4:5c:b0:8c:
dc:e8:44:a2:8a:50:b8:31:55:e2:8e:b9:24:5c:de:
18:ae:67:03:f7:04:1f:a8:a2:26:ff:93:d5:ce:95:
40:f2:b3:65:23:70:f0:96:da:17:33:e6:f6:3f:99:
f6:d7:7e:cc:0a:ef:e5:de:5b:82:b3:9e:7a:b4:3a:
4c:60:27:4b:75:92:22:73:b1:b3:33:61:f6:08:6a:
10:20:42:62:2c:ae:90:6c:58:b9:d3:05:af:c9:62:
1b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:40:A0:31:9D:62:73:B8:E6:96:DE:8C:E2:22:16:A1:4C:06:54:37
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/aECgMZ1ic7jmlt6M4iIWoUwGVDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.132.0/22
5.157.152.0-5.157.163.255
5.157.168.0/21
5.157.192.0/19
5.157.228.0-5.157.239.255
5.157.248.0/21
37.35.48.0-37.35.52.255
62.216.72.0/22
62.216.80.0/20
178.157.68.0/22
178.157.94.0/24
178.157.101.0/24
178.157.112.0-178.157.123.255
185.76.60.0/22
188.74.144.0/21
188.74.160.0/21
188.74.184.0/22
188.74.192.0/20
188.74.212.0-188.74.239.255
188.74.248.0/21
188.119.128.0/20
188.119.168.0/21
188.119.180.0-188.119.191.255
Signature Algorithm: sha256WithRSAEncryption
1c:c9:d1:47:8e:ad:ee:57:ce:2e:67:8f:11:e1:fd:f0:20:32:
8f:82:5f:05:fe:98:30:ab:aa:e6:5d:5d:e6:1c:1e:e0:5c:d8:
3b:a0:25:fa:bd:6c:7c:f5:d9:65:34:9f:ad:cd:ea:e7:76:e9:
d1:56:8d:b1:d8:07:16:47:d3:43:8a:aa:c4:1f:a3:32:54:2a:
88:a3:78:ab:7f:d6:2a:e8:14:6f:77:19:0a:b6:5f:20:70:1f:
bc:84:d2:0f:06:13:7a:d5:63:ea:ed:c2:6e:5e:77:d3:c0:0f:
79:ff:41:4b:4f:73:d6:7b:09:db:d7:ae:8a:ff:42:a0:da:e9:
7e:0e:89:60:2a:00:a0:5a:e3:62:dc:0c:66:40:57:bc:ab:a3:
ff:04:92:6f:d2:d0:ea:7d:60:01:b1:43:db:cf:c7:4a:d9:ca:
1b:98:48:9e:f9:cb:5a:88:18:23:1b:b4:29:29:69:2a:b8:e9:
a6:45:76:26:21:53:af:be:90:58:9f:42:9a:75:73:75:b4:b7:
45:63:fe:b8:5f:f4:4f:81:ec:86:4d:48:da:55:a0:a1:ec:dc:
b1:a7:23:f6:a4:db:b2:08:fe:38:7b:d5:57:86:ef:c4:e4:53:
40:0b:90:8d:af:de:d4:60:d2:56:87:39:b4:86:15:93:4a:67:
ff:9e:87:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:50 2024 by rpki-client on console-ams.rpki-client.org