Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/FyNEoeGRGaIVKcNf_fg4knVXkCE.roa
File: FyNEoeGRGaIVKcNf_fg4knVXkCE.roa (raw, json)
Hash identifier: dgD/S542S0FTHUH6U2RYuArIHfnESFBuIh4tdNnv1ao=
Subject key identifier: 17:23:44:A1:E1:91:19:A2:15:29:C3:5F:FD:F8:38:92:75:57:90:21
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 01845C54102A40E6563B788DB7BF5472045D
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/FyNEoeGRGaIVKcNf_fg4knVXkCE.roa
Signing time: Wed 09 Nov 2022 12:18:43 +0000
ROA not before: Wed 09 Nov 2022 12:18:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197540
IP address blocks: 45.157.176.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
185.16.60.0/22 maxlen: 32
37.221.192.0/21 maxlen: 32
85.235.64.0/22 maxlen: 22
185.228.136.0/22 maxlen: 32
92.60.36.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
185.194.140.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
5.181.48.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
185.207.104.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
185.170.112.0/22 maxlen: 32
91.204.44.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
185.183.156.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
213.109.160.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
2.56.96.0/22 maxlen: 22
45.9.60.0/22 maxlen: 22
185.244.192.0/22 maxlen: 32
194.55.12.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
185.233.104.0/22 maxlen: 32
5.45.96.0/20 maxlen: 32
45.132.244.0/22 maxlen: 22
185.162.248.0/22 maxlen: 32
45.136.28.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
192.145.44.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
188.68.32.0/19 maxlen: 32
89.58.16.0/21 maxlen: 21
89.58.12.0/22 maxlen: 22
89.58.24.0/22 maxlen: 22
185.243.8.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
2a0a:4cc0::/40 maxlen: 40
2a03:4001::/32 maxlen: 48
2a03:4000::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5c:54:10:2a:40:e6:56:3b:78:8d:b7:bf:54:72:04:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Nov 9 12:18:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=172344a1e19119a21529c35ffdf8389275579021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e4:b3:ab:2f:1e:a3:e7:36:0f:74:a2:83:03:
b3:7c:ca:ae:fe:4c:e3:ff:b2:a7:d6:4d:dc:75:b3:
f9:5b:9f:97:9f:e5:97:5d:e7:bf:50:55:84:35:0e:
a7:0c:60:bb:b6:4e:c7:93:c4:39:7c:7b:6c:70:20:
28:8b:f0:7d:b6:45:74:4d:e1:48:ff:47:29:9f:aa:
5d:37:51:ee:ad:77:a2:2e:6f:77:3a:0c:54:e7:13:
89:10:46:3d:5f:a1:47:58:02:8e:03:0b:33:6a:6d:
25:88:f8:27:bb:c9:d6:28:10:2b:69:03:cf:ab:19:
2d:bf:b5:4a:04:3b:c2:a1:cc:db:e3:7d:a0:cc:2e:
95:21:f1:9c:13:64:a0:88:60:5e:75:cd:95:1a:91:
6d:4f:f4:cf:95:b3:23:fe:89:c5:b7:b3:20:39:ea:
44:84:98:da:55:10:ca:70:25:2b:5a:5d:92:fa:19:
d7:db:31:a5:65:06:24:32:34:1b:d6:91:7f:95:21:
ab:95:e4:a2:3a:a2:5e:1d:22:cc:a8:e3:91:ff:f7:
cc:d2:bd:bf:83:19:67:68:e9:12:0f:d1:a7:c7:c5:
35:18:50:40:7e:d4:15:e1:80:b8:44:c5:6e:fb:f0:
80:12:f1:8b:d5:04:d1:f2:5d:16:29:e2:05:b2:1f:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:23:44:A1:E1:91:19:A2:15:29:C3:5F:FD:F8:38:92:75:57:90:21
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/FyNEoeGRGaIVKcNf_fg4knVXkCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0-89.58.59.255
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::/40
Signature Algorithm: sha256WithRSAEncryption
0e:55:b8:60:e1:7e:4e:87:97:cd:38:aa:e2:7f:19:be:af:a2:
96:8e:93:6c:a7:07:6d:23:3f:fc:b6:36:a6:03:36:28:9c:d4:
d6:a1:8d:68:74:5c:24:10:23:20:9a:1b:e1:f5:78:c6:36:2b:
7e:59:0a:1e:4a:13:11:d6:8e:d8:c7:76:79:ca:2c:a3:20:b9:
29:42:ff:fa:f3:72:36:11:ca:35:b5:c8:c4:7c:2e:90:a5:0d:
f8:aa:7b:5d:32:21:eb:26:5f:76:fb:fa:f1:c4:54:75:95:d6:
e9:4c:c2:33:96:8b:e1:26:20:6e:b3:5e:01:d2:e3:f0:12:b0:
34:ce:b7:41:7c:75:89:63:59:8c:e7:08:ef:64:ca:79:f7:10:
f4:65:8a:6c:56:fa:1e:03:e4:41:0f:59:96:d1:7e:3c:b7:dc:
96:2f:a9:07:74:63:e7:90:90:89:ec:3e:aa:0d:49:12:a1:b6:
72:4d:64:91:e8:d5:ca:7f:65:9a:2f:99:cc:d5:18:b5:9d:7f:
c3:30:5d:0c:d1:33:4c:a6:39:2b:36:66:9a:55:b0:64:f3:73:
4d:6f:73:95:3b:ee:c3:dc:10:bd:50:36:35:7f:2a:22:e7:43:
d8:8b:d8:0e:b9:13:b7:96:fc:af:40:18:03:be:80:7c:3e:c8:
91:8c:76:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:17 2024 by rpki-client on console-ams.rpki-client.org