Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/K1fVsSHHSByh9VqZ-qPL_cqjAJ4.roa
File: K1fVsSHHSByh9VqZ-qPL_cqjAJ4.roa (raw, json)
Hash identifier: zPJNzG2sP3txPrbaaCVkq4H2SZ5fqrTyhz8eSWW/6OU=
Subject key identifier: 2B:57:D5:B1:21:C7:48:1C:A1:F5:5A:99:FA:A3:CB:FD:CA:A3:00:9E
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 0183C74FC3B8E14A3AC02C9E13FA30F00DF9
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/K1fVsSHHSByh9VqZ-qPL_cqjAJ4.roa
Signing time: Tue 11 Oct 2022 13:50:36 +0000
ROA not before: Tue 11 Oct 2022 13:50:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51490
IP address blocks: 89.39.212.0/24 maxlen: 24
89.39.215.0/24 maxlen: 24
188.211.167.0/24 maxlen: 24
89.36.138.0/24 maxlen: 24
89.36.139.0/24 maxlen: 24
89.36.141.0/24 maxlen: 24
89.33.47.0/24 maxlen: 24
89.33.46.0/24 maxlen: 24
89.39.241.0/24 maxlen: 24
188.241.211.0/24 maxlen: 24
89.33.134.0/24 maxlen: 24
86.107.193.0/24 maxlen: 24
86.104.2.0/24 maxlen: 24
91.235.130.0/23 maxlen: 23
86.106.94.0/24 maxlen: 24
193.32.67.0/24 maxlen: 24
86.106.95.0/24 maxlen: 24
193.32.66.0/24 maxlen: 24
86.106.110.0/23 maxlen: 23
86.106.118.0/24 maxlen: 24
37.156.173.0/24 maxlen: 24
89.32.170.0/24 maxlen: 24
94.177.126.0/24 maxlen: 24
89.36.38.0/24 maxlen: 24
89.36.39.0/24 maxlen: 24
176.126.194.0/24 maxlen: 24
89.42.154.0/24 maxlen: 24
176.223.116.0/23 maxlen: 23
176.223.118.0/24 maxlen: 24
89.35.54.0/24 maxlen: 24
86.105.242.0/24 maxlen: 24
86.105.243.0/24 maxlen: 24
89.45.82.0/24 maxlen: 24
193.254.48.0/21 maxlen: 24
93.119.125.0/24 maxlen: 24
188.213.206.0/24 maxlen: 24
193.254.56.0/21 maxlen: 24
93.119.124.0/24 maxlen: 24
89.42.10.0/24 maxlen: 24
188.213.207.0/24 maxlen: 24
188.213.214.0/24 maxlen: 24
188.213.215.0/24 maxlen: 24
86.106.13.0/24 maxlen: 24
89.35.89.0/24 maxlen: 24
86.105.178.0/24 maxlen: 24
86.105.185.0/24 maxlen: 24
37.156.64.0/24 maxlen: 24
37.156.65.0/24 maxlen: 24
176.223.161.0/24 maxlen: 24
89.41.189.0/24 maxlen: 24
89.33.255.0/24 maxlen: 24
89.37.94.0/24 maxlen: 24
89.37.92.0/23 maxlen: 23
89.40.209.0/24 maxlen: 24
188.208.222.0/23 maxlen: 23
89.33.206.0/24 maxlen: 24
89.40.140.0/24 maxlen: 24
89.40.141.0/24 maxlen: 24
188.209.124.0/23 maxlen: 23
188.209.122.0/23 maxlen: 23
188.209.126.0/23 maxlen: 23
89.41.27.0/24 maxlen: 24
193.30.255.0/24 maxlen: 24
193.30.254.0/24 maxlen: 24
89.34.104.0/24 maxlen: 24
89.34.105.0/24 maxlen: 24
89.41.49.0/24 maxlen: 24
188.212.254.0/24 maxlen: 24
89.37.129.0/24 maxlen: 24
77.81.84.0/23 maxlen: 23
2a05:7b85::/32 maxlen: 32
2a05:7b81::/32 maxlen: 32
2a05:76c0::/29 maxlen: 29
2a05:7b87::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c7:4f:c3:b8:e1:4a:3a:c0:2c:9e:13:fa:30:f0:0d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Oct 11 13:50:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b57d5b121c7481ca1f55a99faa3cbfdcaa3009e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8b:e5:10:91:73:99:dd:12:2d:89:02:43:5e:
e7:9a:05:be:b1:9c:7c:26:49:57:f5:22:3e:9d:f8:
f7:cd:4c:d5:3b:4a:47:43:9c:5a:0f:65:1f:b9:26:
d3:a8:3b:e3:8c:73:33:dd:18:17:ba:13:97:52:7b:
6e:1d:9f:89:75:e3:a2:d2:6f:99:c7:f9:df:59:55:
7f:32:6c:e4:0e:e3:f6:33:ab:c1:17:86:96:f4:0a:
55:9f:d6:8d:a4:7b:41:4d:d1:41:f1:a4:41:98:dc:
db:58:93:4e:8b:fa:39:59:8a:d7:7d:9b:bd:4d:ba:
a7:fc:b1:cf:d7:8e:34:2e:21:9b:e1:f9:be:f6:84:
82:1a:8e:ab:b1:b8:03:8b:24:92:e5:b9:f5:4d:3f:
8c:ba:95:15:cd:3f:83:67:4a:5b:c2:cb:00:8b:6b:
55:9e:dc:05:07:e9:18:f7:42:0b:7d:46:b5:2d:de:
fa:a2:13:a1:e8:e4:c0:78:5c:d8:77:5b:96:16:3c:
9e:d4:27:5c:0e:45:aa:df:c2:f6:fe:a8:43:cc:bf:
f6:71:89:a8:51:68:32:8d:4a:e4:44:4e:23:a9:7e:
f5:e1:a8:84:fa:02:68:8e:1c:66:12:0a:ae:a0:21:
6d:f1:34:62:ea:bf:ca:39:95:9a:d2:17:a6:27:79:
3e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:57:D5:B1:21:C7:48:1C:A1:F5:5A:99:FA:A3:CB:FD:CA:A3:00:9E
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/K1fVsSHHSByh9VqZ-qPL_cqjAJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.64.0/23
37.156.173.0/24
77.81.84.0/23
86.104.2.0/24
86.105.178.0/24
86.105.185.0/24
86.105.242.0/23
86.106.13.0/24
86.106.94.0/23
86.106.110.0/23
86.106.118.0/24
86.107.193.0/24
89.32.170.0/24
89.33.46.0/23
89.33.134.0/24
89.33.206.0/24
89.33.255.0/24
89.34.104.0/23
89.35.54.0/24
89.35.89.0/24
89.36.38.0/23
89.36.138.0/23
89.36.141.0/24
89.37.92.0-89.37.94.255
89.37.129.0/24
89.39.212.0/24
89.39.215.0/24
89.39.241.0/24
89.40.140.0/23
89.40.209.0/24
89.41.27.0/24
89.41.49.0/24
89.41.189.0/24
89.42.10.0/24
89.42.154.0/24
89.45.82.0/24
91.235.130.0/23
93.119.124.0/23
94.177.126.0/24
176.126.194.0/24
176.223.116.0-176.223.118.255
176.223.161.0/24
188.208.222.0/23
188.209.122.0-188.209.127.255
188.211.167.0/24
188.212.254.0/24
188.213.206.0/23
188.213.214.0/23
188.241.211.0/24
193.30.254.0/23
193.32.66.0/23
193.254.48.0/20
IPv6:
2a05:76c0::/29
2a05:7b81::/32
2a05:7b85::/32
2a05:7b87::/32
Signature Algorithm: sha256WithRSAEncryption
79:42:fd:17:d1:88:e4:95:8e:eb:25:81:26:a8:3c:2c:f6:82:
7f:63:12:81:9a:76:c1:4e:a0:be:4e:27:cd:89:fc:94:09:81:
1f:bf:40:f4:13:03:a4:dd:1c:9e:74:d5:43:54:09:a2:95:b8:
26:d9:0e:f3:6a:af:c3:20:35:90:cc:41:63:c8:c9:ab:ac:d9:
d4:92:b2:61:3b:3e:d8:20:cf:da:3b:3a:c6:23:3f:8d:26:64:
d4:3c:9e:b2:c8:66:1c:f4:8d:ff:2a:d4:c8:85:d0:f1:c8:15:
8c:11:bb:34:94:ea:99:d0:ce:f8:b6:8e:f8:0b:fc:e6:81:91:
88:cc:78:8e:ab:cd:79:c9:0e:75:87:6d:aa:5a:a3:73:c0:57:
07:34:e9:8f:32:e4:16:b3:83:40:4a:b8:93:a2:3e:78:a4:c6:
a7:54:05:9d:5a:66:1b:4e:4d:b5:2d:b3:04:eb:ca:5c:f9:ae:
b8:b0:a9:58:c5:c7:62:22:36:fb:3f:ad:43:35:59:21:b3:d5:
d1:e5:0a:4c:58:fd:06:3d:20:aa:1f:29:a4:59:16:4e:e7:8f:
84:c8:f2:64:05:eb:ad:70:29:7e:b8:9a:34:c8:aa:e4:a0:92:
78:49:36:85:f2:a3:23:8f:00:07:d5:f5:23:a9:d6:1c:83:cd:
88:78:d1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:57 2024 by rpki-client on console-fra.rpki-client.org