Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/Liz5stASnM9mICM0Z9SrrUOErZ4.roa
File: Liz5stASnM9mICM0Z9SrrUOErZ4.roa (raw, json)
Hash identifier: /h/HL95hOT40Vr+uyjyFc4BOGQq/iWHKnCGChYRZpH8=
Subject key identifier: 2E:2C:F9:B2:D0:12:9C:CF:66:20:23:34:67:D4:AB:AD:43:84:AD:9E
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 0183A91D4E1892EC0B63EE60E85D75CDDC0A
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/Liz5stASnM9mICM0Z9SrrUOErZ4.roa
Signing time: Wed 05 Oct 2022 17:06:53 +0000
ROA not before: Wed 05 Oct 2022 17:06:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51490
IP address blocks: 89.39.212.0/24 maxlen: 24
89.39.215.0/24 maxlen: 24
188.211.167.0/24 maxlen: 24
89.36.138.0/24 maxlen: 24
89.36.139.0/24 maxlen: 24
89.36.141.0/24 maxlen: 24
89.33.47.0/24 maxlen: 24
89.33.46.0/24 maxlen: 24
89.39.241.0/24 maxlen: 24
188.241.211.0/24 maxlen: 24
89.33.134.0/24 maxlen: 24
86.107.193.0/24 maxlen: 24
86.104.2.0/24 maxlen: 24
91.235.130.0/23 maxlen: 23
89.33.116.0/24 maxlen: 24
86.106.94.0/24 maxlen: 24
193.32.67.0/24 maxlen: 24
86.106.95.0/24 maxlen: 24
193.32.66.0/24 maxlen: 24
86.106.110.0/23 maxlen: 23
86.106.118.0/24 maxlen: 24
37.156.173.0/24 maxlen: 24
89.32.170.0/24 maxlen: 24
94.177.126.0/24 maxlen: 24
89.36.38.0/24 maxlen: 24
89.36.39.0/24 maxlen: 24
176.126.194.0/24 maxlen: 24
89.42.154.0/24 maxlen: 24
176.223.116.0/23 maxlen: 23
176.223.118.0/24 maxlen: 24
89.35.54.0/24 maxlen: 24
86.105.242.0/24 maxlen: 24
86.105.243.0/24 maxlen: 24
89.45.82.0/24 maxlen: 24
193.254.48.0/21 maxlen: 24
93.119.125.0/24 maxlen: 24
188.213.206.0/24 maxlen: 24
193.254.56.0/21 maxlen: 24
93.119.124.0/24 maxlen: 24
89.42.10.0/24 maxlen: 24
188.213.207.0/24 maxlen: 24
188.213.214.0/24 maxlen: 24
188.213.215.0/24 maxlen: 24
86.106.13.0/24 maxlen: 24
89.35.89.0/24 maxlen: 24
86.105.178.0/24 maxlen: 24
86.105.185.0/24 maxlen: 24
37.156.64.0/24 maxlen: 24
37.156.65.0/24 maxlen: 24
176.223.161.0/24 maxlen: 24
89.41.189.0/24 maxlen: 24
89.33.255.0/24 maxlen: 24
89.37.94.0/24 maxlen: 24
89.37.92.0/23 maxlen: 23
89.40.209.0/24 maxlen: 24
188.208.222.0/23 maxlen: 23
89.33.206.0/24 maxlen: 24
89.40.140.0/24 maxlen: 24
89.40.141.0/24 maxlen: 24
188.209.124.0/23 maxlen: 23
188.209.122.0/23 maxlen: 23
188.209.126.0/23 maxlen: 23
89.41.27.0/24 maxlen: 24
193.30.255.0/24 maxlen: 24
193.30.254.0/24 maxlen: 24
89.34.104.0/24 maxlen: 24
89.34.105.0/24 maxlen: 24
89.41.49.0/24 maxlen: 24
188.212.254.0/24 maxlen: 24
89.37.129.0/24 maxlen: 24
77.81.84.0/23 maxlen: 23
2a05:7b85::/32 maxlen: 32
2a05:7b81::/32 maxlen: 32
2a05:76c0::/29 maxlen: 29
2a05:7b87::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a9:1d:4e:18:92:ec:0b:63:ee:60:e8:5d:75:cd:dc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Oct 5 17:06:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e2cf9b2d0129ccf6620233467d4abad4384ad9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:55:48:4f:d0:a8:a8:20:78:af:19:bb:85:6d:
b3:1d:99:17:20:d0:74:69:b0:f7:44:c2:22:4a:72:
e5:c7:03:0d:8b:b5:02:b7:14:d7:e2:db:83:09:74:
c5:59:17:59:3e:46:3d:00:40:63:5e:78:30:6e:6e:
0e:bc:01:1f:6e:40:f5:33:6c:ea:20:e3:6d:c6:08:
6e:77:c0:f3:51:d3:0d:fe:2b:13:7e:5c:a5:d6:3a:
45:42:3a:14:77:8d:7e:7f:91:20:7f:0a:50:61:f2:
33:b3:a3:a1:cd:ec:67:d9:be:93:b1:18:e2:67:23:
6d:e8:f8:c6:d1:d4:1e:b0:3b:07:62:18:dd:ce:e2:
e7:e8:b9:e3:6e:81:a5:43:d0:eb:d8:e7:87:af:53:
85:3b:0b:89:56:55:a9:d5:e3:64:b0:00:be:fd:dc:
5c:36:94:63:a6:6b:71:fc:bf:2b:47:32:d0:c4:79:
bd:99:56:bf:74:53:13:69:83:6f:35:ce:66:b8:47:
23:db:2c:ad:ae:72:ac:2a:7d:ec:06:5a:ee:53:de:
b8:99:cd:c1:92:f7:fe:41:94:fc:cd:0c:d5:c4:1d:
e9:0c:7b:c9:d5:b8:bf:ce:ae:b0:33:f9:f8:60:c8:
39:14:3d:08:e1:37:46:39:fa:45:70:dc:70:e1:a9:
fe:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2C:F9:B2:D0:12:9C:CF:66:20:23:34:67:D4:AB:AD:43:84:AD:9E
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/Liz5stASnM9mICM0Z9SrrUOErZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.64.0/23
37.156.173.0/24
77.81.84.0/23
86.104.2.0/24
86.105.178.0/24
86.105.185.0/24
86.105.242.0/23
86.106.13.0/24
86.106.94.0/23
86.106.110.0/23
86.106.118.0/24
86.107.193.0/24
89.32.170.0/24
89.33.46.0/23
89.33.116.0/24
89.33.134.0/24
89.33.206.0/24
89.33.255.0/24
89.34.104.0/23
89.35.54.0/24
89.35.89.0/24
89.36.38.0/23
89.36.138.0/23
89.36.141.0/24
89.37.92.0-89.37.94.255
89.37.129.0/24
89.39.212.0/24
89.39.215.0/24
89.39.241.0/24
89.40.140.0/23
89.40.209.0/24
89.41.27.0/24
89.41.49.0/24
89.41.189.0/24
89.42.10.0/24
89.42.154.0/24
89.45.82.0/24
91.235.130.0/23
93.119.124.0/23
94.177.126.0/24
176.126.194.0/24
176.223.116.0-176.223.118.255
176.223.161.0/24
188.208.222.0/23
188.209.122.0-188.209.127.255
188.211.167.0/24
188.212.254.0/24
188.213.206.0/23
188.213.214.0/23
188.241.211.0/24
193.30.254.0/23
193.32.66.0/23
193.254.48.0/20
IPv6:
2a05:76c0::/29
2a05:7b81::/32
2a05:7b85::/32
2a05:7b87::/32
Signature Algorithm: sha256WithRSAEncryption
66:cc:bc:50:f4:6f:31:e4:ab:91:38:e9:e5:31:54:b7:d0:47:
4e:83:fb:c8:46:de:7c:55:5e:ef:0c:b7:7c:b8:a8:2f:5a:11:
88:aa:0c:6b:ef:e6:50:c7:ca:c7:50:e9:3d:62:c1:32:bd:a7:
15:48:52:1e:96:c4:9b:4a:7e:14:56:e5:0c:28:99:ee:24:ee:
e2:e0:23:ef:e2:db:ff:97:39:16:26:aa:58:ea:ff:53:11:c6:
62:91:b1:80:2b:78:1d:be:d7:c5:1d:b9:ce:7a:37:5d:ee:ea:
47:c2:21:4b:dc:cd:94:39:a8:13:75:a8:06:8d:1a:fe:bb:4d:
3c:5c:62:88:80:6d:1d:b7:69:87:8e:10:bf:bc:60:7f:bf:a5:
a1:2b:44:9f:5d:59:de:e7:3b:07:2d:64:bd:25:d8:30:2b:24:
f9:17:4e:58:c4:47:06:b9:3f:48:bf:85:f0:28:0f:74:3d:2c:
30:53:ac:75:4e:c9:a3:61:9b:b2:4b:d2:8c:48:5b:55:69:cb:
5e:46:ab:80:65:4c:71:85:25:3f:1b:91:6f:9b:c4:28:9a:4e:
8b:a2:cb:2c:a3:a5:b1:ad:b6:2e:2d:94:08:a2:21:da:61:ff:
07:cb:01:3d:b2:1d:27:2c:5b:32:94:1f:2b:fb:71:a8:56:68:
03:3b:e3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org