Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/MJa5uEbGNuwSZkJgGxdcYQYO5c8.roa
File: MJa5uEbGNuwSZkJgGxdcYQYO5c8.roa (raw, json)
Hash identifier: 4gUAnX/kfpj6wm+R8qN0O++q2wWCg97TThIsoJ6f+N0=
Subject key identifier: 30:96:B9:B8:46:C6:36:EC:12:66:42:60:1B:17:5C:61:06:0E:E5:CF
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 0184E6F6BC4F2080C05A32B8FB2A1F2B236E
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/MJa5uEbGNuwSZkJgGxdcYQYO5c8.roa
Signing time: Tue 06 Dec 2022 10:24:00 +0000
ROA not before: Tue 06 Dec 2022 10:24:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197540
IP address blocks: 45.157.176.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
185.16.60.0/22 maxlen: 32
37.221.192.0/21 maxlen: 32
85.235.64.0/22 maxlen: 22
185.228.136.0/22 maxlen: 32
92.60.36.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
185.194.140.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
5.181.48.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
185.207.104.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
185.170.112.0/22 maxlen: 32
91.204.44.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
185.183.156.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
213.109.160.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
2.56.96.0/22 maxlen: 22
45.9.60.0/22 maxlen: 22
185.244.192.0/22 maxlen: 32
194.55.12.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
185.233.104.0/22 maxlen: 32
89.58.60.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
45.132.244.0/22 maxlen: 22
185.162.248.0/22 maxlen: 32
45.136.28.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
192.145.44.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
188.68.32.0/19 maxlen: 32
89.58.16.0/21 maxlen: 21
89.58.12.0/22 maxlen: 22
89.58.24.0/22 maxlen: 22
185.243.8.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
2a0a:4cc0::/40 maxlen: 40
2a03:4001::/32 maxlen: 48
2a03:4000::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:f6:bc:4f:20:80:c0:5a:32:b8:fb:2a:1f:2b:23:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Dec 6 10:24:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3096b9b846c636ec126642601b175c61060ee5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:8a:81:da:f3:41:a4:73:76:a7:c5:03:50:
81:27:6d:fe:64:65:c0:df:35:3d:0c:20:a1:92:ba:
71:f5:8e:35:a3:fc:e6:65:8b:2f:6c:25:54:79:df:
4a:b8:da:f5:4a:85:21:3a:90:0d:24:ed:b4:b2:86:
7a:8f:4e:5f:e0:df:aa:04:6b:1c:43:26:ef:5f:ea:
a7:c2:e8:82:a8:ca:fa:af:06:2a:88:58:d9:b2:11:
75:27:c2:ff:d4:8c:4f:bf:a7:2c:eb:dc:73:90:c1:
7b:81:7c:ce:47:33:59:3a:8c:9b:37:ed:59:5b:6d:
55:19:01:02:79:25:b3:48:04:56:e6:ea:90:61:70:
62:fa:fa:60:51:e7:ef:ce:32:85:1c:f7:fd:51:72:
82:a4:71:9d:fe:6a:f9:26:21:0e:6f:ca:6d:3b:04:
fb:35:84:1b:8c:74:4a:6e:a5:0f:81:d2:3b:ae:84:
8b:a9:79:d4:2f:ab:ed:ea:3f:12:30:10:26:6d:b7:
49:0c:23:b3:9c:fe:ad:f9:9d:af:bd:85:e2:b3:76:
6d:c3:01:b6:ef:a5:fb:2b:22:6e:16:0a:1b:ae:85:
94:b1:d4:24:61:e8:97:8b:13:a3:1b:10:ea:31:bb:
59:0d:a0:d5:83:60:9a:9b:9f:fe:f2:59:e2:de:94:
b7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:96:B9:B8:46:C6:36:EC:12:66:42:60:1B:17:5C:61:06:0E:E5:CF
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/MJa5uEbGNuwSZkJgGxdcYQYO5c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::/40
Signature Algorithm: sha256WithRSAEncryption
71:40:f7:f1:05:e0:75:47:8f:33:fd:07:55:5f:a6:1a:44:fe:
df:cf:4c:db:84:1d:91:fe:70:b3:ad:c8:ba:73:06:b3:cc:01:
97:75:a0:58:a9:5b:aa:6d:d5:4e:37:d1:b5:fd:a1:d4:a3:83:
38:09:ea:a2:7d:36:95:13:dd:61:29:82:9c:89:e3:07:49:cd:
48:51:1b:82:f1:b9:ab:73:65:84:e7:ac:bd:cb:24:0a:b7:e7:
54:38:f2:5b:55:16:a6:b5:12:d5:33:5a:36:95:8f:0d:f1:b4:
5a:7d:d2:db:fa:2d:5e:3c:31:30:cc:59:67:e4:49:f3:ed:3a:
d4:13:97:24:50:79:68:a3:09:e2:70:ce:64:eb:55:78:20:1a:
6d:24:50:d9:f2:ee:9f:a2:b9:ac:a2:ef:64:c9:80:e9:15:66:
fc:e2:1c:0d:de:ca:9c:bf:d1:48:60:f9:e6:09:bc:74:bb:a8:
ce:72:61:99:15:96:3a:bd:fc:2e:5b:24:ba:8e:bf:6e:c6:92:
57:b8:e7:92:b9:44:05:23:33:7b:96:3f:64:29:2c:b7:dc:5a:
38:d4:80:8f:a7:96:9e:6f:27:9a:48:5d:df:18:5e:e0:dd:89:
eb:71:27:28:70:a2:73:19:ed:39:aa:cb:7e:aa:6b:ba:dd:e7:
be:f7:48:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:50 2023 by rpki-client on console-fra.rpki-client.org