Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/5FsfP3LA-W5WnUWYXxA_JrQ7eHU.roa
File: 5FsfP3LA-W5WnUWYXxA_JrQ7eHU.roa (raw, json)
Hash identifier: PgVomKuVd+RbAHmvUamf7S4FJZdMLfgWGkP9tExssvc=
Subject key identifier: E4:5B:1F:3F:72:C0:F9:6E:56:9D:45:98:5F:10:3F:26:B4:3B:78:75
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 09091802
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/5FsfP3LA-W5WnUWYXxA_JrQ7eHU.roa
Signing time: Wed 11 May 2022 18:42:02 +0000
ROA not before: Wed 11 May 2022 18:42:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59504
IP address blocks: 194.113.104.114/32 maxlen: 32
95.215.110.0/23 maxlen: 23
95.215.108.0/24 maxlen: 24
95.215.108.0/23 maxlen: 23
185.197.73.0/24 maxlen: 24
185.197.72.0/24 maxlen: 24
80.76.40.0/24 maxlen: 24
185.156.179.0/24 maxlen: 24
185.156.178.0/24 maxlen: 24
185.156.178.0/23 maxlen: 23
185.156.177.0/24 maxlen: 24
185.156.176.0/24 maxlen: 24
185.156.176.0/22 maxlen: 22
193.38.232.0/23 maxlen: 23
193.38.234.0/24 maxlen: 24
185.254.190.0/24 maxlen: 24
185.254.189.0/24 maxlen: 24
185.254.188.0/24 maxlen: 24
194.113.104.0/24 maxlen: 24
194.113.107.0/24 maxlen: 24
185.177.115.0/24 maxlen: 24
185.177.113.0/24 maxlen: 24
185.220.35.0/24 maxlen: 24
185.220.34.0/24 maxlen: 24
185.220.33.0/24 maxlen: 24
185.220.32.0/24 maxlen: 24
185.230.142.0/24 maxlen: 24
185.230.140.0/23 maxlen: 23
45.142.208.0/24 maxlen: 24
84.54.39.0/24 maxlen: 24
185.118.64.0/24 maxlen: 24
185.118.64.0/22 maxlen: 22
185.118.66.0/24 maxlen: 24
185.118.66.0/23 maxlen: 23
185.118.65.0/24 maxlen: 24
185.246.117.0/24 maxlen: 24
185.246.116.0/24 maxlen: 24
185.246.119.0/24 maxlen: 24
2a05:fb41::/32 maxlen: 32
2a07:14c0:1::/48 maxlen: 48
2a0d:60c1::/32 maxlen: 32
2a0a:4782::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a0d:7747::/32 maxlen: 32
2a05:fb42::/32 maxlen: 32
2a0a:4780::/32 maxlen: 32
2a0d:60c3::/32 maxlen: 32
2a07:14c1::/32 maxlen: 32
2a0d:60c0::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a07:14c7::/32 maxlen: 32
2a05:fb44::/32 maxlen: 32
2a07:14c6::/32 maxlen: 32
2a07:14c0:d000::/36 maxlen: 36
2a07:14c0:6000::/36 maxlen: 36
2a07:14c0:1000::/36 maxlen: 36
2a07:14c0:5000::/36 maxlen: 36
2a07:14c0:4000::/36 maxlen: 36
2a07:14c0:3000::/36 maxlen: 36
2a0c:5241::/32 maxlen: 32
2a0d:7740::/32 maxlen: 32
2a0c:5247:7000::/36 maxlen: 36
2a0c:5247:c000::/36 maxlen: 36
2a0c:5247:d000::/36 maxlen: 36
2a0c:5247:e000::/36 maxlen: 36
2a0c:5247:f000::/36 maxlen: 36
2a0c:5245::/32 maxlen: 32
2a0a:4785::/32 maxlen: 32
2a07:14c0::/48 maxlen: 48
2a05:fb45::/32 maxlen: 32
2a07:14c2::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151590914 (0x9091802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: May 11 18:42:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e45b1f3f72c0f96e569d45985f103f26b43b7875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1f:cb:25:5f:72:fa:ee:70:4f:e5:6e:5c:42:
b3:db:7f:de:9f:6f:a4:f3:4d:50:08:8e:e9:3c:11:
c6:59:90:9d:e4:c4:d6:fe:b1:a8:4d:67:71:71:df:
d8:0b:e3:3d:4b:66:c0:2a:8f:c3:0e:19:cd:2d:44:
44:46:e8:24:c8:7a:51:76:78:a5:3d:2a:ad:00:31:
3e:8e:d0:ed:b3:3a:5e:6d:25:a0:f6:cb:98:23:12:
bb:34:6c:cf:d3:68:f4:2b:49:d7:d3:e2:7e:f1:29:
3c:57:4d:27:6e:e7:94:d9:03:f3:05:b5:23:bc:f3:
bf:18:2e:05:8f:1a:92:89:1f:e5:e4:75:fe:2a:72:
f4:32:da:d8:3c:5a:7a:e6:15:3f:32:bb:90:97:e6:
42:5a:4f:b8:51:92:6f:06:ee:f5:c9:16:73:2f:46:
af:13:3b:74:65:31:e9:85:f4:10:34:ba:96:40:6c:
11:86:98:9c:fa:d5:ba:ca:e0:ca:26:2e:80:1f:43:
0d:c2:1a:84:1d:91:a4:8b:93:2e:5d:c5:c6:1f:28:
57:e0:84:0b:e3:aa:2f:eb:36:50:93:1a:ad:52:7d:
4e:1c:90:17:27:fb:cb:6a:73:77:25:93:85:31:60:
54:32:a0:ab:c9:c7:f1:50:be:7d:e6:93:c3:ca:4e:
10:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5B:1F:3F:72:C0:F9:6E:56:9D:45:98:5F:10:3F:26:B4:3B:78:75
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/5FsfP3LA-W5WnUWYXxA_JrQ7eHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.208.0/24
80.76.40.0/24
84.54.39.0/24
95.215.108.0/22
185.118.64.0/22
185.156.176.0/22
185.177.113.0/24
185.177.115.0/24
185.197.72.0/23
185.220.32.0/22
185.230.140.0-185.230.142.255
185.246.116.0/23
185.246.119.0/24
185.254.188.0-185.254.190.255
193.38.232.0-193.38.234.255
194.113.104.0/24
194.113.107.0/24
IPv6:
2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
2a05:fb44::/31
2a07:14c0::/47
2a07:14c0:1000::/36
2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
2a07:14c0:d000::/36
2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
2a07:14c6::/31
2a0a:4780::/30
2a0a:4785::/32
2a0c:5241::/32
2a0c:5245::/32
2a0c:5247:7000::/36
2a0c:5247:c000::/34
2a0d:60c0::/31
2a0d:60c3::/32
2a0d:7740::/32
2a0d:7747::/32
Signature Algorithm: sha256WithRSAEncryption
61:89:51:05:fe:f9:69:13:23:7c:f5:0e:cc:15:cc:94:22:7f:
d2:7f:9c:47:53:cb:da:74:b4:6d:ad:7e:4d:3a:9b:2a:15:2a:
27:ee:99:03:54:1b:9b:3e:a4:12:01:ca:bf:21:ce:73:aa:cf:
3d:eb:ec:8e:10:28:c0:2d:c7:e2:ca:f1:5b:2a:4e:3f:35:ad:
3a:95:5a:f3:15:cd:3c:bb:ee:cf:20:1b:58:2e:fe:0e:d2:d6:
d1:2e:37:11:5c:28:e4:42:cc:bc:80:fc:ae:de:ba:ad:b4:07:
08:fd:32:5b:9f:d0:8f:a3:79:8c:ab:81:e0:9e:c0:7a:be:d1:
b7:5e:37:40:91:20:48:1c:e4:bf:17:e1:c2:11:71:f1:d6:4c:
5b:8d:89:bf:c8:96:b9:32:0a:76:e7:c2:0c:c3:94:b8:e2:c3:
cf:b5:cd:aa:45:76:11:a3:31:2c:12:66:eb:61:d0:46:67:fb:
11:fb:48:b8:a3:ba:9f:c0:f3:90:7e:13:9f:2d:4c:97:80:b5:
0d:78:6e:3c:7a:10:5f:5b:67:64:53:22:24:db:24:63:54:ff:
de:8a:a2:fd:fe:35:ce:df:76:74:f3:6b:f9:2b:af:66:f3:52:
fe:09:4a:66:8a:14:51:8c:55:b7:25:c7:25:56:6c:69:87:ed:
cc:b4:78:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org