Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/HUCygTNpEjiTKrWngsqwW2-U2Wk.roa
File: HUCygTNpEjiTKrWngsqwW2-U2Wk.roa (raw, json)
Hash identifier: 4aNKTL6Hp7SaKvFoGAL9/OROo11lGTsx6feW243onWE=
Subject key identifier: 1D:40:B2:81:33:69:12:38:93:2A:B5:A7:82:CA:B0:5B:6F:94:D9:69
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 08E11DAE
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/HUCygTNpEjiTKrWngsqwW2-U2Wk.roa
Signing time: Sun 24 Apr 2022 06:41:05 +0000
ROA not before: Sun 24 Apr 2022 06:41:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59504
IP address blocks: 194.113.104.114/32 maxlen: 32
95.215.110.0/23 maxlen: 23
95.215.108.0/24 maxlen: 24
95.215.108.0/23 maxlen: 23
185.197.73.0/24 maxlen: 24
185.197.72.0/24 maxlen: 24
80.76.40.0/24 maxlen: 24
185.156.179.0/24 maxlen: 24
185.156.178.0/24 maxlen: 24
185.156.178.0/23 maxlen: 23
185.156.177.0/24 maxlen: 24
185.156.176.0/24 maxlen: 24
185.156.176.0/22 maxlen: 22
193.38.232.0/23 maxlen: 23
193.38.234.0/24 maxlen: 24
185.254.190.0/24 maxlen: 24
185.254.189.0/24 maxlen: 24
185.254.188.0/24 maxlen: 24
194.113.104.0/24 maxlen: 24
194.113.107.0/24 maxlen: 24
185.177.115.0/24 maxlen: 24
185.177.113.0/24 maxlen: 24
185.220.35.0/24 maxlen: 24
185.220.34.0/24 maxlen: 24
185.220.33.0/24 maxlen: 24
185.220.32.0/24 maxlen: 24
185.230.142.0/24 maxlen: 24
185.230.140.0/23 maxlen: 23
45.142.208.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
84.54.39.0/24 maxlen: 24
185.118.64.0/24 maxlen: 24
185.118.64.0/22 maxlen: 22
185.118.66.0/24 maxlen: 24
185.118.66.0/23 maxlen: 23
185.118.65.0/24 maxlen: 24
185.246.117.0/24 maxlen: 24
185.246.116.0/24 maxlen: 24
185.246.119.0/24 maxlen: 24
2a05:fb41::/32 maxlen: 32
2a07:14c0:1::/48 maxlen: 48
2a0d:60c1::/32 maxlen: 32
2a0a:4782::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a0d:7747::/32 maxlen: 32
2a05:fb42::/32 maxlen: 32
2a0a:4780::/32 maxlen: 32
2a0d:60c3::/32 maxlen: 32
2a07:14c1::/32 maxlen: 32
2a0d:60c0::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a07:14c7::/32 maxlen: 32
2a05:fb44::/32 maxlen: 32
2a07:14c6::/32 maxlen: 32
2a07:14c0:d000::/36 maxlen: 36
2a07:14c0:6000::/36 maxlen: 36
2a07:14c0:1000::/36 maxlen: 36
2a07:14c0:5000::/36 maxlen: 36
2a07:14c0:4000::/36 maxlen: 36
2a07:14c0:3000::/36 maxlen: 36
2a0c:5241::/32 maxlen: 32
2a0d:7740::/32 maxlen: 32
2a0c:5247:7000::/36 maxlen: 36
2a0c:5247:c000::/36 maxlen: 36
2a0c:5247:d000::/36 maxlen: 36
2a0c:5247:e000::/36 maxlen: 36
2a0c:5247:f000::/36 maxlen: 36
2a0c:5245::/32 maxlen: 32
2a0a:4785::/32 maxlen: 32
2a07:14c0::/48 maxlen: 48
2a05:fb45::/32 maxlen: 32
2a07:14c2::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148970926 (0x8e11dae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Apr 24 06:41:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d40b28133691238932ab5a782cab05b6f94d969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:6f:7e:78:02:07:5c:f5:b2:c5:7a:92:96:
94:bf:2f:15:75:c4:a9:39:b3:26:9f:4b:e6:c1:28:
1c:51:3a:c9:16:6f:58:14:06:cb:bc:58:d7:0f:7d:
d3:17:c7:06:d8:b2:46:74:22:17:80:92:b5:62:a5:
cb:1a:6e:0d:18:d1:23:df:8b:ab:9d:e2:04:ad:4a:
1f:b8:99:89:6b:94:46:75:ad:26:e3:70:19:9b:87:
a7:79:0f:52:d7:65:cb:0b:5a:4b:51:24:bb:ff:15:
e9:2c:56:51:1a:47:f1:c9:cd:34:f0:13:59:9a:ea:
2a:12:9f:12:b9:f1:d7:f6:77:5a:80:93:fa:5d:34:
87:85:d5:8b:b8:56:cc:93:b7:c7:50:1d:46:4f:d0:
14:83:75:ad:a0:24:03:c7:6a:5b:06:62:39:2d:5c:
cc:9c:59:d2:6e:a6:5b:c4:a7:db:81:4d:66:db:76:
4c:53:30:fc:80:1a:c3:19:48:d0:2d:c9:c1:a1:2f:
4b:76:6f:09:20:d9:6e:f9:2a:52:05:e0:69:00:c5:
78:51:7d:80:73:f5:69:99:16:b2:ee:bc:b7:a6:27:
f9:59:1d:61:40:88:d7:c4:08:bf:b9:3f:68:88:ca:
77:57:dd:f0:04:12:49:be:f6:27:57:bc:bd:3d:45:
a6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:40:B2:81:33:69:12:38:93:2A:B5:A7:82:CA:B0:5B:6F:94:D9:69
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/HUCygTNpEjiTKrWngsqwW2-U2Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.208.0/24
80.76.40.0/24
84.54.36.0/24
84.54.39.0/24
95.215.108.0/22
185.118.64.0/22
185.156.176.0/22
185.177.113.0/24
185.177.115.0/24
185.197.72.0/23
185.220.32.0/22
185.230.140.0-185.230.142.255
185.246.116.0/23
185.246.119.0/24
185.254.188.0-185.254.190.255
193.38.232.0-193.38.234.255
194.113.104.0/24
194.113.107.0/24
IPv6:
2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
2a05:fb44::/31
2a07:14c0::/47
2a07:14c0:1000::/36
2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
2a07:14c0:d000::/36
2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
2a07:14c6::/31
2a0a:4780::/30
2a0a:4785::/32
2a0c:5241::/32
2a0c:5245::/32
2a0c:5247:7000::/36
2a0c:5247:c000::/34
2a0d:60c0::/31
2a0d:60c3::/32
2a0d:7740::/32
2a0d:7747::/32
Signature Algorithm: sha256WithRSAEncryption
34:65:2f:c2:47:04:85:3b:49:30:af:e2:63:b7:ed:9c:36:29:
bc:ff:56:92:88:85:91:d7:47:25:e2:54:50:75:19:8e:f5:32:
fe:0d:31:7c:63:c7:f5:10:35:27:a8:a2:e6:8a:94:9d:4d:36:
13:b4:36:d1:67:76:24:db:b4:e9:cd:0e:bb:21:db:b9:9f:e6:
4f:b0:62:9d:0f:51:6b:55:be:12:81:89:fd:4a:eb:86:b1:b7:
06:97:cb:55:5f:75:5b:3c:c1:07:83:d4:55:13:96:8c:7f:cd:
e9:3e:c8:97:a0:a6:ad:36:45:fc:e5:97:ed:ae:fb:f1:46:d0:
b6:7f:88:35:bf:a3:7d:89:fd:4b:aa:a0:b1:61:04:c2:e0:b5:
64:53:c5:83:a5:dc:4e:d7:eb:45:4a:e8:76:bd:27:a2:63:52:
40:d0:f2:80:cc:02:c3:7f:7a:b2:39:cf:a9:7a:96:ae:d7:66:
15:65:f0:6a:3f:6d:4e:7a:cb:84:fe:01:eb:da:d6:fe:1c:c3:
6b:5e:51:56:a8:25:c7:72:00:98:b4:10:c4:e2:79:0f:90:8d:
b1:b6:c1:25:78:53:5e:73:0d:f0:e0:0f:46:56:fc:5f:ba:ca:
21:22:30:7f:cb:42:54:85:d6:5d:0c:6a:46:2b:00:c8:b8:24:
91:49:0f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org