Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/OxiwaZQPXkFOzviE5OJ7jRrPtGw.roa
File: OxiwaZQPXkFOzviE5OJ7jRrPtGw.roa (raw, json)
Hash identifier: lhDrQ0cuwiQHqIBqWusnDgZybsgkIJw39G+zaeScrwM=
Subject key identifier: 3B:18:B0:69:94:0F:5E:41:4E:CE:F8:84:E4:E2:7B:8D:1A:CF:B4:6C
Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial: 37B9DEA3
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/OxiwaZQPXkFOzviE5OJ7jRrPtGw.roa
Signing time: Sat 01 Jan 2022 10:56:22 +0000
ROA not before: Sat 01 Jan 2022 10:56:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12859
IP address blocks: 212.114.97.0/24 maxlen: 24
212.114.96.0/19 maxlen: 24
212.114.98.0/24 maxlen: 24
212.114.96.0/24 maxlen: 24
212.114.100.0/24 maxlen: 24
212.114.101.0/24 maxlen: 24
212.114.99.0/24 maxlen: 24
212.114.104.0/24 maxlen: 24
212.114.105.0/24 maxlen: 24
212.114.102.0/24 maxlen: 24
212.114.103.0/24 maxlen: 24
212.114.107.0/24 maxlen: 24
212.114.108.0/24 maxlen: 24
212.114.106.0/24 maxlen: 24
212.114.111.0/24 maxlen: 24
212.114.112.0/24 maxlen: 24
212.114.109.0/24 maxlen: 24
212.114.110.0/24 maxlen: 24
212.114.114.0/24 maxlen: 24
212.114.115.0/24 maxlen: 24
212.114.113.0/24 maxlen: 24
212.114.118.0/24 maxlen: 24
213.154.226.0/24 maxlen: 24
213.154.225.0/24 maxlen: 24
213.154.224.0/24 maxlen: 24
212.114.116.0/24 maxlen: 24
212.114.117.0/24 maxlen: 24
213.154.224.0/19 maxlen: 24
213.154.228.0/24 maxlen: 24
212.114.121.0/24 maxlen: 24
212.114.119.0/24 maxlen: 24
213.154.229.0/24 maxlen: 24
213.154.230.0/24 maxlen: 24
212.114.122.0/24 maxlen: 24
213.154.233.0/24 maxlen: 24
213.154.232.0/24 maxlen: 24
213.154.231.0/24 maxlen: 24
213.154.227.0/24 maxlen: 24
212.114.120.0/24 maxlen: 24
212.114.125.0/24 maxlen: 24
212.114.123.0/24 maxlen: 24
212.114.124.0/24 maxlen: 24
213.154.237.0/24 maxlen: 24
212.114.126.0/24 maxlen: 24
213.154.236.0/24 maxlen: 24
213.154.234.0/24 maxlen: 24
212.114.127.0/24 maxlen: 24
213.154.235.0/24 maxlen: 24
213.154.240.0/24 maxlen: 24
213.154.238.0/24 maxlen: 24
213.154.239.0/24 maxlen: 24
212.72.233.0/24 maxlen: 24
212.72.232.0/24 maxlen: 24
212.72.232.0/21 maxlen: 24
212.72.234.0/24 maxlen: 24
212.72.237.0/24 maxlen: 24
212.72.238.0/24 maxlen: 24
212.72.235.0/24 maxlen: 24
212.72.236.0/24 maxlen: 24
212.72.240.0/24 maxlen: 24
212.72.239.0/24 maxlen: 24
212.72.240.0/20 maxlen: 24
212.72.241.0/24 maxlen: 24
212.72.244.0/24 maxlen: 24
212.72.245.0/24 maxlen: 24
212.72.242.0/24 maxlen: 24
212.72.243.0/24 maxlen: 24
212.72.246.0/24 maxlen: 24
212.72.247.0/24 maxlen: 24
212.72.248.0/24 maxlen: 24
212.72.251.0/24 maxlen: 24
212.72.252.0/24 maxlen: 24
212.72.249.0/24 maxlen: 24
212.72.250.0/24 maxlen: 24
212.72.253.0/24 maxlen: 24
212.72.254.0/24 maxlen: 24
212.72.255.0/24 maxlen: 24
87.251.39.0/24 maxlen: 24
87.251.40.0/24 maxlen: 24
87.251.43.0/24 maxlen: 24
87.251.41.0/24 maxlen: 24
87.251.42.0/24 maxlen: 24
87.251.44.0/24 maxlen: 24
87.251.46.0/24 maxlen: 24
87.251.47.0/24 maxlen: 24
87.251.45.0/24 maxlen: 24
87.251.50.0/24 maxlen: 24
87.251.48.0/24 maxlen: 24
87.251.49.0/24 maxlen: 24
87.251.51.0/24 maxlen: 24
87.251.53.0/24 maxlen: 24
87.251.54.0/24 maxlen: 24
87.251.52.0/24 maxlen: 24
87.251.57.0/24 maxlen: 24
87.251.55.0/24 maxlen: 24
87.251.56.0/24 maxlen: 24
87.251.58.0/24 maxlen: 24
87.251.60.0/24 maxlen: 24
87.251.61.0/24 maxlen: 24
87.251.59.0/24 maxlen: 24
87.251.63.0/24 maxlen: 24
87.251.62.0/24 maxlen: 24
193.109.122.0/24 maxlen: 24
87.251.32.0/24 maxlen: 24
87.251.32.0/19 maxlen: 24
87.251.33.0/24 maxlen: 24
87.251.36.0/24 maxlen: 24
87.251.34.0/24 maxlen: 24
87.251.35.0/24 maxlen: 24
87.251.37.0/24 maxlen: 24
87.251.38.0/24 maxlen: 24
213.136.0.0/19 maxlen: 24
213.136.0.0/24 maxlen: 24
213.136.1.0/24 maxlen: 24
213.136.4.0/24 maxlen: 24
213.136.2.0/24 maxlen: 24
213.136.3.0/24 maxlen: 24
213.136.5.0/24 maxlen: 24
213.136.7.0/24 maxlen: 24
213.136.8.0/24 maxlen: 24
213.136.6.0/24 maxlen: 24
213.136.11.0/24 maxlen: 24
213.136.9.0/24 maxlen: 24
213.136.10.0/24 maxlen: 24
213.136.12.0/24 maxlen: 24
213.136.14.0/24 maxlen: 24
213.136.15.0/24 maxlen: 24
213.136.13.0/24 maxlen: 24
213.136.16.0/24 maxlen: 24
213.136.17.0/24 maxlen: 24
213.136.23.0/24 maxlen: 24
213.136.24.0/24 maxlen: 24
213.136.18.0/24 maxlen: 24
213.136.19.0/24 maxlen: 24
213.136.21.0/24 maxlen: 24
213.136.22.0/24 maxlen: 24
213.136.20.0/24 maxlen: 24
213.136.25.0/24 maxlen: 24
213.136.26.0/24 maxlen: 24
213.136.28.0/24 maxlen: 24
213.136.29.0/24 maxlen: 24
213.136.27.0/24 maxlen: 24
213.136.30.0/24 maxlen: 24
213.136.31.0/24 maxlen: 24
185.62.16.0/22 maxlen: 24
185.62.16.0/24 maxlen: 24
185.62.17.0/24 maxlen: 24
185.62.19.0/24 maxlen: 24
185.62.18.0/24 maxlen: 24
213.154.243.0/24 maxlen: 24
213.154.244.0/24 maxlen: 24
213.154.241.0/24 maxlen: 24
213.154.242.0/24 maxlen: 24
213.154.246.0/24 maxlen: 24
213.154.245.0/24 maxlen: 24
213.154.247.0/24 maxlen: 24
213.154.250.0/24 maxlen: 24
213.154.251.0/24 maxlen: 24
213.154.248.0/24 maxlen: 24
213.154.249.0/24 maxlen: 24
213.154.253.0/24 maxlen: 24
213.154.252.0/24 maxlen: 24
213.154.255.0/24 maxlen: 24
213.154.254.0/24 maxlen: 24
2001:7b8::/29 maxlen: 48
2001:7bf::/48 maxlen: 48
2001:7be::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 934928035 (0x37b9dea3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
Validity
Not Before: Jan 1 10:56:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b18b069940f5e414ecef884e4e27b8d1acfb46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:73:20:b5:a6:46:c5:7d:4b:30:50:d9:ec:de:
76:0b:e4:a4:c6:f2:42:53:b4:3b:93:15:3f:4a:45:
fa:88:6e:31:64:80:8f:0c:a4:fb:b9:c5:ac:16:d3:
29:b1:26:47:c3:00:09:36:fe:3e:df:25:9a:be:8a:
a9:f3:b0:f5:3b:ae:89:b1:24:92:ab:72:45:1c:3d:
50:50:cb:a0:6e:6c:ef:d2:8b:83:a7:2d:8a:e6:26:
79:8c:2d:89:45:e3:d1:24:16:95:9f:d1:dc:bf:ec:
34:e6:7a:2a:5a:a1:0a:6a:63:c4:03:83:25:3f:44:
42:54:e9:3f:93:05:fd:90:ab:97:26:2e:38:ad:ab:
b7:72:1d:93:be:eb:7b:f2:fe:83:40:b3:71:cb:d9:
20:aa:c0:2b:5b:4f:73:4f:16:1f:66:61:ea:af:55:
84:d9:65:14:0d:e7:f6:bb:f5:db:f5:f0:6e:34:87:
7f:c6:0c:12:6c:fb:de:ff:cd:57:af:ba:56:8c:f8:
5f:40:77:38:98:b0:90:bc:cb:96:23:ce:60:cb:2f:
e2:63:eb:95:67:f4:5c:c3:c8:6a:c8:50:c3:85:5e:
82:f9:52:9e:00:49:08:f0:bb:70:99:12:b3:e4:20:
fb:51:2b:1b:ff:12:a7:8e:ed:c6:7b:85:0b:90:c2:
b1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:18:B0:69:94:0F:5E:41:4E:CE:F8:84:E4:E2:7B:8D:1A:CF:B4:6C
X509v3 Authority Key Identifier:
keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/OxiwaZQPXkFOzviE5OJ7jRrPtGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.32.0/19
185.62.16.0/22
193.109.122.0/24
212.72.232.0-212.72.255.255
212.114.96.0/19
213.136.0.0/19
213.154.224.0/19
IPv6:
2001:7b8::/29
Signature Algorithm: sha256WithRSAEncryption
74:b6:f6:59:4a:16:0e:96:34:2d:61:76:01:d3:b3:8a:75:e0:
c0:b0:a3:74:26:ba:ce:15:88:5f:7f:43:6c:46:cc:90:b6:2f:
6c:20:ee:87:07:2b:03:01:4f:19:a0:2a:67:7b:85:19:13:9c:
cf:1d:fe:4e:31:4f:74:29:00:69:d6:1b:e5:9a:2f:53:d5:01:
e0:3b:36:78:87:10:81:ba:92:fd:c4:15:1c:a5:4c:87:eb:16:
1d:46:34:d5:b0:96:1c:22:0b:d5:3d:5d:56:9b:4f:7a:70:1f:
0c:a4:ee:cc:e2:28:5c:fe:10:e5:df:b5:8a:ad:4a:3e:1a:99:
01:cb:65:ce:1e:5e:83:61:57:fe:46:67:72:88:47:1d:1d:2e:
96:fa:fd:8e:0d:61:cc:24:52:82:ac:18:bd:27:98:c0:79:b9:
53:a6:c0:7d:02:76:26:2f:1a:a4:a9:00:55:61:23:89:f1:96:
54:a4:f7:78:8b:d8:ca:1e:70:22:bb:3e:e9:e6:31:7a:62:a7:
e0:28:1f:4c:b5:1f:bb:da:11:77:3d:5b:56:a7:7f:74:f9:76:
c1:d1:c6:a5:39:84:31:7f:5f:9a:63:c2:f2:2a:24:3f:d4:3f:
db:b8:37:6d:c8:42:cd:0b:ec:12:53:80:16:63:3a:c2:22:73:
48:9d:1d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:14 2024 by rpki-client on console-fra.rpki-client.org