Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/mJKnNgPlBF4K5DKzdj-qT_v-Mq8.roa
File: mJKnNgPlBF4K5DKzdj-qT_v-Mq8.roa (raw, json)
Hash identifier: 7q7z5mI6cPZBpz4YhiqLU2oD3PVNEqon5GZVEHgGTX4=
Subject key identifier: 98:92:A7:36:03:E5:04:5E:0A:E4:32:B3:76:3F:AA:4F:FB:FE:32:AF
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 454A7F08
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/mJKnNgPlBF4K5DKzdj-qT_v-Mq8.roa
Signing time: Sat 02 Jul 2022 05:14:25 +0000
ROA not before: Sat 02 Jul 2022 05:14:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43754
IP address blocks: 46.245.64.0/18 maxlen: 32
46.245.68.0/22 maxlen: 32
46.245.72.0/22 maxlen: 32
46.245.76.0/22 maxlen: 32
46.245.80.0/22 maxlen: 32
46.245.84.0/22 maxlen: 32
185.147.160.0/24 maxlen: 32
185.147.161.0/24 maxlen: 32
185.147.162.0/24 maxlen: 32
185.147.163.0/24 maxlen: 32
46.245.88.0/22 maxlen: 32
46.245.92.0/22 maxlen: 32
46.245.96.0/22 maxlen: 32
46.245.100.0/22 maxlen: 32
46.245.104.0/22 maxlen: 32
46.245.108.0/22 maxlen: 32
46.245.112.0/22 maxlen: 32
46.245.116.0/22 maxlen: 32
77.238.104.0/22 maxlen: 32
77.238.104.0/21 maxlen: 32
77.238.110.0/24 maxlen: 24
77.238.111.0/24 maxlen: 24
77.238.108.0/24 maxlen: 24
77.238.109.0/24 maxlen: 24
77.238.120.0/22 maxlen: 32
46.245.64.0/22 maxlen: 32
46.245.120.0/22 maxlen: 32
46.245.124.0/22 maxlen: 32
89.235.96.0/22 maxlen: 32
185.120.220.0/22 maxlen: 32
185.120.248.0/22 maxlen: 32
31.25.128.0/21 maxlen: 32
176.65.240.0/22 maxlen: 32
176.65.252.0/23 maxlen: 32
176.65.254.0/23 maxlen: 32
176.65.255.0/24 maxlen: 32
128.65.176.0/20 maxlen: 32
79.127.0.0/17 maxlen: 32
185.99.212.0/22 maxlen: 32
185.109.244.0/22 maxlen: 32
185.49.84.0/22 maxlen: 32
185.109.248.0/22 maxlen: 32
178.22.120.0/21 maxlen: 32
37.156.8.0/21 maxlen: 32
37.156.8.0/22 maxlen: 32
37.156.15.0/24 maxlen: 24
37.156.13.0/24 maxlen: 24
37.156.14.0/24 maxlen: 24
37.156.12.0/24 maxlen: 24
188.0.240.0/23 maxlen: 32
185.112.32.0/21 maxlen: 32
185.112.32.0/22 maxlen: 32
185.112.36.0/22 maxlen: 32
93.115.144.0/21 maxlen: 32
46.143.0.0/17 maxlen: 32
109.122.224.0/20 maxlen: 32
37.156.144.0/22 maxlen: 32
178.216.251.0/24 maxlen: 32
178.216.248.0/22 maxlen: 32
178.216.248.0/24 maxlen: 32
178.216.249.0/24 maxlen: 32
178.216.250.0/24 maxlen: 32
185.141.212.0/24 maxlen: 32
185.141.213.0/24 maxlen: 32
185.141.214.0/24 maxlen: 32
185.141.215.0/24 maxlen: 32
5.134.192.0/21 maxlen: 32
212.33.192.0/22 maxlen: 32
212.33.196.0/22 maxlen: 32
212.33.204.0/22 maxlen: 32
212.33.200.0/22 maxlen: 32
185.141.168.0/24 maxlen: 32
185.141.169.0/24 maxlen: 32
185.141.170.0/24 maxlen: 32
185.141.171.0/24 maxlen: 32
185.98.112.0/22 maxlen: 32
89.41.40.0/22 maxlen: 32
93.118.180.0/24 maxlen: 24
93.118.180.0/22 maxlen: 32
31.7.64.0/20 maxlen: 32
31.7.64.0/21 maxlen: 32
31.7.72.0/21 maxlen: 32
2a06:5484::/30 maxlen: 128
2a05:1a00::/26 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1162510088 (0x454a7f08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jul 2 05:14:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9892a73603e5045e0ae432b3763faa4ffbfe32af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:e4:b1:84:88:8d:8c:f4:13:ea:e9:04:41:
1a:7f:dc:f7:a8:cf:2b:39:2d:91:c7:7a:6f:e7:b0:
e6:19:a9:5a:b6:02:97:b2:86:6b:3c:65:16:e4:98:
56:16:82:e8:7d:5c:b4:6e:54:10:70:c1:2b:4c:22:
69:2e:e9:9e:99:fd:c7:e9:43:70:0b:eb:47:bd:64:
9d:e7:6d:fe:e5:19:87:ba:a8:5d:5c:88:2f:02:fb:
6c:72:1a:66:32:a9:52:36:a7:d5:bf:ce:ba:61:2d:
1b:68:85:6f:b7:35:46:fd:09:f3:ff:0a:58:b6:7f:
8a:e4:cb:f7:4d:7d:b3:75:a6:ce:d1:ff:e5:c4:6e:
9d:6d:8e:0b:46:b4:bc:ad:73:1f:ab:01:77:06:d0:
b1:06:5c:e8:8a:5a:99:11:98:49:60:12:f4:d6:33:
3d:9d:cf:4c:7c:c2:32:98:43:b5:6d:71:b9:15:b2:
f1:c5:52:76:56:14:1f:a0:4a:42:04:28:49:b0:fa:
09:cc:ad:46:d7:44:82:b8:2f:ba:77:1a:ba:55:d0:
10:eb:70:20:b6:8d:a8:f6:a2:ba:7d:60:de:08:0b:
e0:62:a7:6e:01:74:9a:0a:50:c1:d7:d6:46:be:f4:
42:75:8a:1b:72:d9:6f:05:81:40:dc:2a:83:fe:f7:
16:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:92:A7:36:03:E5:04:5E:0A:E4:32:B3:76:3F:AA:4F:FB:FE:32:AF
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/mJKnNgPlBF4K5DKzdj-qT_v-Mq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.192.0/21
31.7.64.0/20
31.25.128.0/21
37.156.8.0/21
37.156.144.0/22
46.143.0.0/17
46.245.64.0/18
77.238.104.0/21
77.238.120.0/22
79.127.0.0/17
89.41.40.0/22
89.235.96.0/22
93.115.144.0/21
93.118.180.0/22
109.122.224.0/20
128.65.176.0/20
176.65.240.0/22
176.65.252.0/22
178.22.120.0/21
178.216.248.0/22
185.49.84.0/22
185.98.112.0/22
185.99.212.0/22
185.109.244.0-185.109.251.255
185.112.32.0/21
185.120.220.0/22
185.120.248.0/22
185.141.168.0/22
185.141.212.0/22
185.147.160.0/22
188.0.240.0/23
212.33.192.0/20
IPv6:
2a05:1a00::/26
2a06:5484::/30
Signature Algorithm: sha256WithRSAEncryption
1b:74:9d:cb:d3:06:b9:ee:ac:95:cf:7c:85:63:62:40:07:55:
f8:6f:9c:a7:84:91:22:be:6e:91:65:11:f1:04:42:ab:4a:89:
31:e6:49:62:22:48:17:d5:f2:4b:fc:11:29:53:39:e1:f2:d2:
df:22:38:3f:76:7a:b5:95:c1:76:ed:cf:25:d7:43:71:5c:68:
16:ca:66:29:bf:88:f9:a5:49:d9:23:73:b0:5e:e3:ae:df:6d:
89:7a:63:f2:95:26:ce:01:89:6a:fd:63:8f:14:1d:5f:cd:d4:
0c:64:38:50:e8:b9:49:fa:d5:8d:d2:41:f8:5f:08:c4:e5:0f:
ab:0c:5b:f1:1f:16:ee:7b:5e:89:c0:82:96:dd:79:90:65:99:
f0:a9:fc:72:a7:c7:03:e6:00:50:f3:d0:f7:e8:8d:4c:8f:c4:
bb:80:a5:d1:d7:1e:df:4e:44:eb:a5:c9:0e:93:c3:30:98:70:
1e:ef:eb:9e:85:fa:46:de:79:d1:93:50:19:61:88:9b:d3:8e:
fb:ac:80:9b:5d:81:bc:ae:58:a4:00:7f:86:b8:97:5b:d9:0d:
77:29:6a:d9:48:d9:a4:e3:26:ad:1c:0a:12:37:61:5a:15:8d:
27:0e:45:4f:ad:09:8e:01:0d:56:17:0b:6d:75:cd:29:8e:ee:
1b:45:34:be
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIERUp/CDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YjUyNjM0YTJlYjAzZjg1NjViNWUzM2RjMmI5ZjQ5MDQxZjdjZmIwMB4XDTIyMDcw
MjA1MTQyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTg5MmE3MzYwM2U1
MDQ1ZTBhZTQzMmIzNzYzZmFhNGZmYmZlMzJhZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKYP5LGEiI2M9BPq6QRBGn/c96jPKzktkcd6b+ew5hmpWrYC
l7KGazxlFuSYVhaC6H1ctG5UEHDBK0wiaS7pnpn9x+lDcAvrR71knedt/uUZh7qo
XVyILwL7bHIaZjKpUjan1b/OumEtG2iFb7c1Rv0J8/8KWLZ/iuTL9019s3WmztH/
5cRunW2OC0a0vK1zH6sBdwbQsQZc6IpamRGYSWAS9NYzPZ3PTHzCMphDtW1xuRWy
8cVSdlYUH6BKQgQoSbD6CcytRtdEgrgvuncaulXQEOtwILaNqPaiun1g3ggL4GKn
bgF0mgpQwdfWRr70QnWKG3LZbwWBQNwqg/73FjkCAwEAAaOCAuYwggLiMB0GA1Ud
DgQWBBSYkqc2A+UEXgrkMrN2P6pP+/4yrzAfBgNVHSMEGDAWgBRbUmNKLrA/hWW1
4z3CufSQQffPsDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1cxSmpTaTZ3UDRWbHRlTTl3cm4wa0VIM3o3QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvN2E1YjQ0LTZiMTgtNDJkMy1hOGQ1LWRjNjU1NGZkMTIzNS8x
L21KS25OZ1BsQkY0SzVES3pkai1xVF92LU1xOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
N2E1YjQ0LTZiMTgtNDJkMy1hOGQ1LWRjNjU1NGZkMTIzNS8xL1cxSmpTaTZ3UDRW
bHRlTTl3cm4wa0VIM3o3QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
+wYIKwYBBQUHAQcBAf8Egeswgegwgc8EAgABMIHIAwQDBYbAAwQEHwdAAwQDHxmA
AwQDJZwIAwQCJZyQAwQHLo8AAwQGLvVAAwQDTe5oAwQCTe54AwQHT38AAwQCWSko
AwQCWetgAwQDXXOQAwQCXXa0AwQEbXrgAwQEgEGwAwQCsEHwAwQCsEH8AwQDshZ4
AwQCstj4AwQCuTFUAwQCuWJwAwQCuWPUMAwDBAK5bfQDBAK5bfgDBAO5cCADBAK5
eNwDBAK5ePgDBAK5jagDBAK5jdQDBAK5k6ADBAG8APADBATUIcAwFAQCAAIwDgMF
BioFGgADBQIqBlSEMA0GCSqGSIb3DQEBCwUAA4IBAQAbdJ3L0wa57qyVz3yFY2JA
B1X4b5ynhJEivm6RZRHxBEKrSokx5kliIkgX1fJL/BEpUznh8tLfIjg/dnq1lcF2
7c8l10NxXGgWymYpv4j5pUnZI3OwXuOu322JemPylSbOAYlq/WOPFB1fzdQMZDhQ
6LlJ+tWN0kH4XwjE5Q+rDFvxHxbue16JwIKW3XmQZZnwqfxyp8cD5gBQ89D36I1M
j8S7gKXR1x7fTkTrpckOk8MwmHAe7+uehfpG3nnRk1AZYYib0477rICbXYG8rlik
AH+GuJdb2Q13KWrZSNmk4yatHAoSN2FaFY0nDkVPrQmOAQ1WFwttdc0pju4bRTS+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:57 2024 by rpki-client on console-ams.rpki-client.org