Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/J4yi92TFY97YMMX5GliCKkTHEfo.roa
File: J4yi92TFY97YMMX5GliCKkTHEfo.roa (raw, json)
Hash identifier: zoHARaMWExuonDCEtN+HZmv2VoopeOQZLSt6OhA4FpU=
Subject key identifier: 27:8C:A2:F7:64:C5:63:DE:D8:30:C5:F9:1A:58:82:2A:44:C7:11:FA
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0184858658B130749EA9DE218182AAF5A093
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/J4yi92TFY97YMMX5GliCKkTHEfo.roa
Signing time: Thu 17 Nov 2022 12:18:05 +0000
ROA not before: Thu 17 Nov 2022 12:18:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59504
IP address blocks: 194.113.104.114/32 maxlen: 32
95.215.110.0/23 maxlen: 23
95.215.108.0/23 maxlen: 23
45.151.139.0/24 maxlen: 24
45.151.138.0/24 maxlen: 24
45.151.137.0/24 maxlen: 24
45.151.136.0/22 maxlen: 22
45.151.136.0/24 maxlen: 24
185.197.73.0/24 maxlen: 24
185.197.72.0/24 maxlen: 24
80.76.40.0/24 maxlen: 24
185.156.179.0/24 maxlen: 24
185.156.178.0/24 maxlen: 24
185.156.178.0/23 maxlen: 23
185.156.177.0/24 maxlen: 24
185.156.176.0/24 maxlen: 24
185.156.176.0/22 maxlen: 22
193.38.232.0/23 maxlen: 23
193.38.234.0/24 maxlen: 24
185.254.190.0/24 maxlen: 24
185.254.189.0/24 maxlen: 24
185.254.188.0/24 maxlen: 24
194.113.104.0/24 maxlen: 24
194.113.107.0/24 maxlen: 24
185.177.115.0/24 maxlen: 24
185.177.113.0/24 maxlen: 24
185.220.35.0/24 maxlen: 24
185.220.34.0/24 maxlen: 24
185.220.33.0/24 maxlen: 24
185.220.32.0/24 maxlen: 24
185.230.142.0/24 maxlen: 24
185.230.140.0/23 maxlen: 23
45.142.208.0/24 maxlen: 24
84.54.37.0/24 maxlen: 24
84.54.39.0/24 maxlen: 24
185.118.64.0/24 maxlen: 24
185.118.64.0/22 maxlen: 22
185.118.66.0/24 maxlen: 24
185.118.66.0/23 maxlen: 23
185.118.65.0/24 maxlen: 24
185.246.117.0/24 maxlen: 24
185.246.116.0/24 maxlen: 24
185.246.119.0/24 maxlen: 24
2a05:fb41::/32 maxlen: 32
2a07:14c0:1::/48 maxlen: 48
2a0d:60c1::/32 maxlen: 32
2a0a:4782::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a0d:7747::/32 maxlen: 32
2a05:fb42::/32 maxlen: 32
2a0a:4780::/32 maxlen: 32
2a0d:60c3::/32 maxlen: 32
2a07:14c1::/32 maxlen: 32
2a0d:60c0::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a07:14c7::/32 maxlen: 32
2a05:fb44::/32 maxlen: 32
2a07:14c6::/32 maxlen: 32
2a07:14c0:d000::/36 maxlen: 36
2a07:14c0:6000::/36 maxlen: 36
2a07:14c0:1000::/36 maxlen: 36
2a07:14c0:5000::/36 maxlen: 36
2a07:14c0:4000::/36 maxlen: 36
2a07:14c0:3000::/36 maxlen: 36
2a0c:5241::/32 maxlen: 32
2a0d:7740::/32 maxlen: 32
2a0c:5247:7000::/36 maxlen: 36
2a0c:5247:c000::/36 maxlen: 36
2a0c:5247:d000::/36 maxlen: 36
2a0c:5247:e000::/36 maxlen: 36
2a0c:5247:f000::/36 maxlen: 36
2a0c:5245::/32 maxlen: 32
2a0a:4785::/32 maxlen: 32
2a07:14c0::/48 maxlen: 48
2a05:fb45::/32 maxlen: 32
2a07:14c2::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:85:86:58:b1:30:74:9e:a9:de:21:81:82:aa:f5:a0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Nov 17 12:18:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=278ca2f764c563ded830c5f91a58822a44c711fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:8f:11:44:3f:af:ec:3f:d6:f5:09:aa:5d:
9e:a6:a4:d8:d4:d9:90:71:d2:78:35:eb:c9:d2:24:
f9:97:1d:51:c2:62:ae:da:49:fe:5d:77:b8:ac:a3:
ba:55:79:b6:00:00:04:39:97:74:f6:0f:64:53:f4:
17:cb:8c:92:e1:4a:b3:fd:f7:36:41:3a:a6:b6:4a:
ed:81:50:0b:c8:05:5c:7b:91:9f:55:24:4b:22:43:
8a:51:31:e5:d2:50:d4:1b:f6:5c:92:e6:36:3c:4a:
3d:a1:74:96:3a:62:3f:48:da:44:bd:b2:e8:74:8d:
9a:fa:6e:71:8e:72:2f:b8:96:8b:c2:0c:35:0a:c7:
47:a2:4d:1e:83:9b:e8:e2:54:7a:89:1a:5d:f6:31:
f3:77:3f:c4:00:7e:50:6d:0d:43:d9:43:dc:a6:a2:
b9:17:5b:21:bf:9b:80:f8:89:b2:a3:ba:f0:07:1a:
91:bd:fa:4f:eb:80:3a:97:33:08:f7:29:24:11:48:
d2:18:57:f8:75:18:21:25:51:78:6c:d4:48:58:a6:
2c:08:19:96:30:a6:df:60:fe:04:5c:e1:09:a1:1b:
b1:27:e4:90:e4:9a:cd:6f:dc:4b:a7:71:6e:a2:f2:
87:ee:2c:af:11:91:43:89:d4:12:1d:50:ea:1d:e7:
9f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8C:A2:F7:64:C5:63:DE:D8:30:C5:F9:1A:58:82:2A:44:C7:11:FA
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/J4yi92TFY97YMMX5GliCKkTHEfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.208.0/24
45.151.136.0/22
80.76.40.0/24
84.54.37.0/24
84.54.39.0/24
95.215.108.0/22
185.118.64.0/22
185.156.176.0/22
185.177.113.0/24
185.177.115.0/24
185.197.72.0/23
185.220.32.0/22
185.230.140.0-185.230.142.255
185.246.116.0/23
185.246.119.0/24
185.254.188.0-185.254.190.255
193.38.232.0-193.38.234.255
194.113.104.0/24
194.113.107.0/24
IPv6:
2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
2a05:fb44::/31
2a07:14c0::/47
2a07:14c0:1000::/36
2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
2a07:14c0:d000::/36
2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
2a07:14c6::/31
2a0a:4780::/30
2a0a:4785::/32
2a0c:5241::/32
2a0c:5245::/32
2a0c:5247:7000::/36
2a0c:5247:c000::/34
2a0d:60c0::/31
2a0d:60c3::/32
2a0d:7740::/32
2a0d:7747::/32
Signature Algorithm: sha256WithRSAEncryption
90:97:ff:e1:74:13:21:3b:e4:b8:a9:43:a0:ba:16:ee:31:85:
43:8f:37:93:05:9b:d5:3e:52:65:48:8b:65:67:b4:21:fd:49:
6c:ee:40:61:ee:94:53:e0:b7:d1:0d:3a:a9:63:fc:9a:21:94:
39:a8:96:73:cd:49:0c:8a:d1:1a:a1:88:46:26:ad:f5:b2:b6:
6c:e5:36:16:de:40:1d:5f:5a:ed:f6:31:cf:29:5a:e1:dd:5a:
4f:24:08:9a:0f:39:62:25:91:91:15:52:74:27:79:b0:4e:3d:
46:46:29:3d:cc:3d:0f:f6:02:dc:83:d4:82:ea:a6:b3:c3:30:
3d:8f:e0:fb:bd:ab:b8:e5:89:c1:4f:8e:d4:e4:81:a8:20:c5:
bb:0a:de:84:94:22:d4:82:6c:75:04:1e:3a:f2:73:20:f3:7e:
99:57:91:76:80:3b:38:43:00:0f:20:db:8c:45:09:6c:6b:86:
79:16:97:67:7f:df:f5:8a:83:e7:ed:6f:3a:48:6d:45:10:c2:
0f:dd:88:47:67:b4:8a:ca:01:85:25:2f:50:3e:18:e9:18:1c:
7e:f3:3d:09:b9:34:d1:5f:10:22:9a:b6:2d:f4:9c:2d:c4:98:
6b:57:8f:57:3f:a4:47:c3:7f:2c:f1:d4:9a:8b:92:f0:bd:80:
d2:bd:bb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org