Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hb072R9cVpiF4Rnw8sdc7Ja6dK0.roa
File: hb072R9cVpiF4Rnw8sdc7Ja6dK0.roa (raw, json)
Hash identifier: As9z1m87f7pPpvjdVNc+X0bQ0MgN1QviOqCFiJxCTQY=
Subject key identifier: 85:BD:3B:D9:1F:5C:56:98:85:E1:19:F0:F2:C7:5C:EC:96:BA:74:AD
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 08201C20
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hb072R9cVpiF4Rnw8sdc7Ja6dK0.roa
Signing time: Fri 13 May 2022 09:38:41 +0000
ROA not before: Fri 13 May 2022 09:38:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51490
IP address blocks: 89.36.138.0/24 maxlen: 24
89.36.139.0/24 maxlen: 24
89.33.47.0/24 maxlen: 24
89.33.46.0/24 maxlen: 24
89.33.134.0/24 maxlen: 24
86.107.193.0/24 maxlen: 24
86.104.0.0/23 maxlen: 24
91.235.130.0/23 maxlen: 23
89.33.116.0/24 maxlen: 24
86.106.94.0/24 maxlen: 24
193.32.67.0/24 maxlen: 24
193.32.66.0/24 maxlen: 24
86.106.110.0/23 maxlen: 23
86.106.116.0/23 maxlen: 23
86.106.114.0/23 maxlen: 24
89.32.170.0/24 maxlen: 24
94.177.126.0/24 maxlen: 24
89.36.38.0/24 maxlen: 24
89.36.39.0/24 maxlen: 24
176.126.194.0/24 maxlen: 24
89.42.152.0/23 maxlen: 24
176.223.116.0/23 maxlen: 23
176.223.118.0/24 maxlen: 24
89.35.54.0/24 maxlen: 24
86.105.242.0/24 maxlen: 24
86.105.243.0/24 maxlen: 24
89.45.82.0/24 maxlen: 24
193.254.48.0/21 maxlen: 24
93.119.125.0/24 maxlen: 24
188.213.206.0/24 maxlen: 24
193.254.56.0/21 maxlen: 24
93.119.124.0/24 maxlen: 24
188.213.207.0/24 maxlen: 24
46.102.179.0/24 maxlen: 24
46.102.177.0/24 maxlen: 24
46.102.178.0/24 maxlen: 24
188.213.214.0/24 maxlen: 24
188.213.215.0/24 maxlen: 24
86.106.13.0/24 maxlen: 24
89.35.89.0/24 maxlen: 24
86.105.185.0/24 maxlen: 24
37.156.64.0/24 maxlen: 24
37.156.65.0/24 maxlen: 24
176.223.160.0/24 maxlen: 24
176.223.161.0/24 maxlen: 24
89.33.255.0/24 maxlen: 24
89.37.92.0/23 maxlen: 23
86.104.213.0/24 maxlen: 24
89.40.209.0/24 maxlen: 24
188.208.220.0/23 maxlen: 23
188.208.222.0/23 maxlen: 23
89.33.198.0/23 maxlen: 24
89.33.200.0/23 maxlen: 24
89.33.206.0/24 maxlen: 24
89.40.140.0/24 maxlen: 24
89.40.141.0/24 maxlen: 24
188.209.124.0/23 maxlen: 23
188.209.122.0/23 maxlen: 23
188.209.126.0/23 maxlen: 23
89.41.28.0/23 maxlen: 24
193.30.254.0/24 maxlen: 24
89.34.104.0/24 maxlen: 24
89.34.105.0/24 maxlen: 24
89.41.49.0/24 maxlen: 24
31.14.66.0/24 maxlen: 24
31.14.67.0/24 maxlen: 24
89.37.132.0/23 maxlen: 23
89.37.129.0/24 maxlen: 24
77.81.84.0/23 maxlen: 23
2a05:7b85::/32 maxlen: 32
2a05:7b81::/32 maxlen: 32
2a05:76c0::/29 maxlen: 29
2a05:7b87::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136322080 (0x8201c20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: May 13 09:38:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85bd3bd91f5c569885e119f0f2c75cec96ba74ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:10:72:9e:21:24:8b:7c:91:e2:70:3f:00:70:
a7:d7:87:f2:06:52:f8:a5:69:84:f5:d6:d1:6a:8c:
9e:71:c9:60:1f:e5:ab:c4:a7:24:e0:db:7b:c9:66:
8f:b1:36:6d:bd:83:43:df:dc:28:0c:1b:06:eb:ef:
67:2a:a3:6d:0c:1f:72:ab:84:9e:c6:f8:cc:7d:1a:
06:0f:f1:65:a2:5c:22:cc:f9:b9:ae:38:33:45:38:
4f:c3:e6:f3:16:73:4d:89:16:a7:8b:a6:9c:74:4e:
09:01:e9:86:a6:89:fd:92:3c:20:60:df:73:95:28:
77:92:be:0e:e5:dd:dd:ab:45:2a:e6:00:97:44:ea:
12:8a:ad:ba:14:b4:55:20:08:0c:c6:08:5e:cf:1c:
f9:d9:25:6a:e3:63:7c:4d:77:51:b5:10:66:d9:4b:
8d:86:cb:a9:2c:db:a0:cf:bd:17:30:5f:a9:5f:79:
78:af:47:db:4d:1a:21:96:c0:13:58:48:5a:44:66:
77:08:73:b7:ad:39:2d:ec:3b:63:84:51:72:fe:43:
b3:b2:70:a6:83:3b:3f:1f:14:a9:11:29:b6:23:03:
e1:60:7e:85:19:44:01:43:51:a3:c4:90:83:ee:7a:
32:2c:d2:ae:f9:22:52:06:41:73:46:b6:7d:25:83:
7a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BD:3B:D9:1F:5C:56:98:85:E1:19:F0:F2:C7:5C:EC:96:BA:74:AD
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hb072R9cVpiF4Rnw8sdc7Ja6dK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.66.0/23
37.156.64.0/23
46.102.177.0-46.102.179.255
77.81.84.0/23
86.104.0.0/23
86.104.213.0/24
86.105.185.0/24
86.105.242.0/23
86.106.13.0/24
86.106.94.0/24
86.106.110.0/23
86.106.114.0-86.106.117.255
86.107.193.0/24
89.32.170.0/24
89.33.46.0/23
89.33.116.0/24
89.33.134.0/24
89.33.198.0-89.33.201.255
89.33.206.0/24
89.33.255.0/24
89.34.104.0/23
89.35.54.0/24
89.35.89.0/24
89.36.38.0/23
89.36.138.0/23
89.37.92.0/23
89.37.129.0/24
89.37.132.0/23
89.40.140.0/23
89.40.209.0/24
89.41.28.0/23
89.41.49.0/24
89.42.152.0/23
89.45.82.0/24
91.235.130.0/23
93.119.124.0/23
94.177.126.0/24
176.126.194.0/24
176.223.116.0-176.223.118.255
176.223.160.0/23
188.208.220.0/22
188.209.122.0-188.209.127.255
188.213.206.0/23
188.213.214.0/23
193.30.254.0/24
193.32.66.0/23
193.254.48.0/20
IPv6:
2a05:76c0::/29
2a05:7b81::/32
2a05:7b85::/32
2a05:7b87::/32
Signature Algorithm: sha256WithRSAEncryption
74:47:6f:e8:b8:ea:e7:c4:4e:d2:06:ae:49:00:2d:79:69:ae:
21:cf:53:7c:ac:03:24:c4:a8:8a:a3:af:89:9e:84:03:50:99:
25:88:5e:ec:c1:e9:d2:e6:95:a1:19:aa:6f:1f:9d:ed:f5:be:
3f:c0:2f:15:1e:fc:a6:ad:b4:7e:e3:c5:be:94:46:81:c4:01:
01:70:8d:82:c6:f4:b8:97:89:2d:19:42:7a:6b:9e:69:d7:19:
1c:da:c8:79:61:25:08:eb:6c:75:c7:9e:d6:49:40:db:c4:cd:
16:f0:7f:5d:df:8c:fe:0d:25:8f:da:c1:73:07:9b:ae:ce:41:
55:21:70:44:eb:c0:68:17:8c:58:c8:db:9a:da:e9:42:0e:a7:
85:35:3b:71:a9:c0:bd:87:de:54:7f:6c:79:0b:59:89:49:83:
e6:55:60:94:a8:3d:42:5d:8c:0b:14:63:4b:dc:39:0b:75:89:
3b:42:4d:de:e7:fe:43:11:ae:3d:33:36:00:a4:22:b0:e6:28:
59:86:b8:8a:bd:f8:e2:71:ed:ac:97:d5:df:aa:ff:8f:5f:75:
81:cf:a9:9f:dc:75:d0:f0:c3:c4:b6:22:88:4e:29:3d:0a:2b:
28:56:d2:35:ac:4c:f9:55:05:e6:56:66:ee:66:ed:e2:91:be:
93:28:ab:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:27 2023 by rpki-client on console-ams.rpki-client.org