Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/bDHRpgb-nVG57mlhc3TtE3dnVKY.roa
File: bDHRpgb-nVG57mlhc3TtE3dnVKY.roa (raw, json)
Hash identifier: HynJb9A0c5aYuJEPNEDNAnKk3s/37arhoKq5wZVXQi4=
Subject key identifier: 6C:31:D1:A6:06:FE:9D:51:B9:EE:69:61:73:74:ED:13:77:67:54:A6
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 1856C70A
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/bDHRpgb-nVG57mlhc3TtE3dnVKY.roa
Signing time: Fri 10 Jun 2022 14:16:02 +0000
ROA not before: Fri 10 Jun 2022 14:16:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197540
IP address blocks: 45.157.176.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
185.16.60.0/22 maxlen: 32
37.221.192.0/21 maxlen: 32
85.235.64.0/22 maxlen: 22
185.228.136.0/22 maxlen: 32
92.60.36.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
185.194.140.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
5.181.48.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
185.207.104.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
185.170.112.0/22 maxlen: 32
91.204.44.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
185.183.156.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
213.109.160.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
2.56.96.0/22 maxlen: 22
45.9.60.0/22 maxlen: 22
185.244.192.0/22 maxlen: 32
194.55.12.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
185.233.104.0/22 maxlen: 32
5.45.96.0/20 maxlen: 32
45.132.244.0/22 maxlen: 22
185.162.248.0/22 maxlen: 32
45.136.28.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
192.145.44.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
188.68.32.0/19 maxlen: 32
89.58.16.0/21 maxlen: 21
89.58.12.0/22 maxlen: 22
89.58.24.0/22 maxlen: 22
185.243.8.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
2a0a:4cc0::/40 maxlen: 40
2a03:4001::/32 maxlen: 48
2a03:4000::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408340234 (0x1856c70a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Jun 10 14:16:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c31d1a606fe9d51b9ee69617374ed13776754a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:73:23:f6:99:65:bd:0a:5a:40:0e:17:0c:77:
5c:a2:e0:6e:2c:c6:f4:0e:f3:0f:42:e9:98:8e:32:
64:b7:0a:28:29:49:77:e1:e4:51:31:23:df:de:59:
75:b3:c4:59:20:4c:f2:09:8c:bc:36:46:03:00:0a:
3f:dd:fb:fb:68:60:bd:ea:80:3f:fb:22:7d:c3:0b:
fa:f1:cd:92:8e:1b:7c:58:cb:3c:94:9c:6c:49:b8:
f9:d6:e4:48:0a:66:06:75:f2:57:8f:aa:ca:74:d1:
5f:89:98:7d:e0:8e:69:72:2e:7b:31:f6:43:5f:66:
06:60:83:41:16:a6:26:b8:e9:1a:a4:cf:ba:02:8c:
c6:a6:55:be:83:5d:6f:cf:94:24:d1:c7:90:41:b5:
ff:36:45:eb:a8:d4:d0:d1:5a:0a:fe:25:5c:e5:7c:
c1:be:e2:77:3c:82:a1:b5:de:38:9f:04:67:47:a6:
82:4f:6f:80:66:5f:d5:8b:a8:14:25:8b:39:a6:82:
a0:f4:24:9e:6c:c7:63:bb:3f:ba:b2:3a:1d:72:64:
03:ef:56:39:90:f4:a6:e8:9f:ce:d3:d1:7a:84:33:
96:57:ff:44:41:86:7c:22:e8:a6:e0:dc:97:ca:98:
a6:7c:cd:c2:69:08:62:31:ee:ab:32:f1:cd:05:8a:
e2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:31:D1:A6:06:FE:9D:51:B9:EE:69:61:73:74:ED:13:77:67:54:A6
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/bDHRpgb-nVG57mlhc3TtE3dnVKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0-89.58.55.255
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::/40
Signature Algorithm: sha256WithRSAEncryption
3d:73:f1:76:1f:45:19:e3:df:77:d6:26:b4:8e:3b:08:e3:60:
8f:1d:87:91:22:b6:32:0f:0c:6f:67:6d:20:c2:f1:fa:72:52:
e5:fd:35:15:78:03:08:0d:45:f9:84:13:d7:e7:fe:cb:e8:92:
07:f2:16:34:fe:97:a8:e4:94:33:56:42:fd:5e:bd:c3:a1:50:
f0:55:c1:76:34:6b:d1:47:83:21:60:9a:31:e0:fd:6d:38:62:
58:c5:fc:52:37:16:8e:c4:8b:84:25:ca:93:4b:49:58:e2:5f:
a1:75:2e:30:62:e9:1f:fe:b6:de:d9:ae:0d:5a:32:e8:7f:fe:
6c:15:39:4e:35:96:de:26:e6:a3:73:02:da:ce:84:28:a2:c0:
82:73:f2:a6:6d:ed:36:56:4d:80:2c:d6:29:05:4d:93:cc:f4:
91:08:d1:67:02:f3:c2:c4:aa:6a:c0:a9:5a:0a:7d:f1:7d:ad:
0a:9c:0a:43:bb:da:2b:48:33:85:36:0d:ad:99:91:80:10:81:
d6:01:9a:49:9a:f5:71:06:d4:d8:fa:d6:0a:f2:80:0c:49:08:
d4:0d:03:82:3c:e8:7b:e8:6a:75:97:cc:1b:15:af:62:aa:9e:
91:45:0b:25:76:40:31:1d:3a:a5:88:85:0a:e3:24:38:3d:20:
59:30:77:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:50 2023 by rpki-client on console-fra.rpki-client.org