Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/Sl9nlk24xc8m5ab1Augz3KVB80U.roa
File: Sl9nlk24xc8m5ab1Augz3KVB80U.roa (raw, json)
Hash identifier: 6kXT4y2wo3GjEjnm8mnwnF0iIGuiJZAZ/tnF9X+AMH8=
Subject key identifier: 4A:5F:67:96:4D:B8:C5:CF:26:E5:A6:F5:02:E8:33:DC:A5:41:F3:45
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 0181D29856BADAEFE6EEC49B15BAD0D50B9E
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/Sl9nlk24xc8m5ab1Augz3KVB80U.roa
Signing time: Wed 06 Jul 2022 08:20:07 +0000
ROA not before: Wed 06 Jul 2022 08:20:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 89.46.152.0/21 maxlen: 32
84.39.224.0/21 maxlen: 32
93.114.0.0/20 maxlen: 32
93.114.11.0/24 maxlen: 24
93.114.10.0/24 maxlen: 24
92.43.84.0/22 maxlen: 32
95.215.36.0/22 maxlen: 32
185.221.221.0/24 maxlen: 32
202.181.20.0/22 maxlen: 32
91.197.252.0/22 maxlen: 32
103.204.212.0/22 maxlen: 32
58.97.128.0/21 maxlen: 32
78.138.1.0/24 maxlen: 32
78.138.2.0/24 maxlen: 32
89.249.51.0/24 maxlen: 32
138.124.144.0/22 maxlen: 32
78.138.16.0/24 maxlen: 32
89.249.56.0/22 maxlen: 32
185.225.104.0/22 maxlen: 32
94.177.56.0/23 maxlen: 32
94.177.52.0/22 maxlen: 32
94.176.216.0/22 maxlen: 32
185.240.252.0/24 maxlen: 32
185.240.255.0/24 maxlen: 32
89.19.42.0/23 maxlen: 24
93.113.124.0/23 maxlen: 32
89.19.40.0/22 maxlen: 32
188.241.146.0/24 maxlen: 32
45.116.168.0/22 maxlen: 32
188.214.93.0/24 maxlen: 32
89.32.129.0/24 maxlen: 32
185.125.192.0/22 maxlen: 32
77.95.116.0/22 maxlen: 32
176.119.8.0/21 maxlen: 32
89.44.245.0/24 maxlen: 32
45.95.48.0/22 maxlen: 32
45.142.92.0/22 maxlen: 32
185.243.108.0/22 maxlen: 32
45.142.96.0/22 maxlen: 32
185.223.56.0/24 maxlen: 32
185.223.58.0/23 maxlen: 32
94.176.163.0/24 maxlen: 32
203.166.156.0/23 maxlen: 32
188.119.116.0/22 maxlen: 32
188.95.152.0/21 maxlen: 32
94.176.112.0/20 maxlen: 32
91.132.184.0/22 maxlen: 32
185.38.102.0/24 maxlen: 32
31.14.219.0/24 maxlen: 32
150.129.92.0/22 maxlen: 32
45.149.148.0/22 maxlen: 32
203.109.52.0/22 maxlen: 32
89.38.132.0/23 maxlen: 32
203.109.60.0/22 maxlen: 32
31.14.236.0/23 maxlen: 32
58.97.232.0/21 maxlen: 32
83.229.76.0/22 maxlen: 24
119.13.192.0/19 maxlen: 32
58.97.240.0/20 maxlen: 32
89.34.7.0/24 maxlen: 32
83.229.104.0/22 maxlen: 32
121.91.80.0/21 maxlen: 32
78.138.25.0/24 maxlen: 32
185.90.243.0/24 maxlen: 32
78.138.30.0/24 maxlen: 32
91.245.235.0/24 maxlen: 32
78.138.40.0/24 maxlen: 32
78.138.47.0/24 maxlen: 32
78.138.48.0/24 maxlen: 32
78.138.50.0/24 maxlen: 32
45.94.244.0/22 maxlen: 32
89.44.115.0/24 maxlen: 32
45.138.232.0/22 maxlen: 32
89.41.62.0/24 maxlen: 32
209.20.160.0/19 maxlen: 32
185.131.220.0/24 maxlen: 32
93.115.12.0/23 maxlen: 32
77.81.104.0/21 maxlen: 32
89.34.78.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d2:98:56:ba:da:ef:e6:ee:c4:9b:15:ba:d0:d5:0b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jul 6 08:20:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a5f67964db8c5cf26e5a6f502e833dca541f345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:53:1d:dd:ed:89:d5:3b:20:b5:3a:5c:25:6a:
28:10:18:29:88:6b:b3:e4:d5:fe:f0:87:1e:2c:92:
15:11:ba:8a:40:f7:75:7c:74:00:10:38:40:e9:f3:
e0:a1:be:cd:ff:14:50:d1:3d:e6:20:e4:1e:82:88:
db:5d:3e:a1:ec:95:5b:f2:27:ff:df:66:a6:51:25:
99:2e:03:b7:be:10:06:4c:59:cb:2d:a7:00:54:9f:
ba:93:b0:a6:94:84:69:4f:96:4d:73:18:28:9d:eb:
88:53:73:04:8c:7b:b0:34:33:98:55:ea:56:e2:77:
bc:b8:0f:36:f3:7e:ce:f8:7d:dc:77:6c:88:48:a0:
aa:e7:84:b1:f3:27:40:fb:1f:21:89:27:70:9d:be:
c3:8e:54:d9:5f:0f:7d:16:18:19:30:11:ff:ce:17:
3a:38:d2:e1:0c:b7:b0:fd:0a:b7:28:e1:3d:81:70:
7f:3b:97:9f:1e:6c:87:b2:91:fc:7a:56:d7:e2:61:
4a:89:7a:20:99:78:76:a7:dd:c2:9d:a6:38:6a:11:
a0:6a:30:e2:bd:c2:35:0c:79:33:b4:a6:3f:ec:cb:
af:77:a2:c1:74:1d:7b:1d:8c:ad:52:39:1a:01:a1:
3e:7a:77:7c:a5:ef:a9:3e:f7:d0:97:16:df:64:61:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5F:67:96:4D:B8:C5:CF:26:E5:A6:F5:02:E8:33:DC:A5:41:F3:45
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/Sl9nlk24xc8m5ab1Augz3KVB80U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.219.0/24
31.14.236.0/23
45.94.244.0/22
45.95.48.0/22
45.116.168.0/22
45.138.232.0/22
45.142.92.0-45.142.99.255
45.149.148.0/22
58.97.128.0/21
58.97.232.0-58.97.255.255
77.81.104.0/21
77.95.116.0/22
78.138.1.0-78.138.2.255
78.138.16.0/24
78.138.25.0/24
78.138.30.0/24
78.138.40.0/24
78.138.47.0-78.138.48.255
78.138.50.0/24
83.229.76.0/22
83.229.104.0/22
84.39.224.0/21
89.19.40.0/22
89.32.129.0/24
89.34.7.0/24
89.34.78.0/23
89.38.132.0/23
89.41.62.0/24
89.44.115.0/24
89.44.245.0/24
89.46.152.0/21
89.249.51.0/24
89.249.56.0/22
91.132.184.0/22
91.197.252.0/22
91.245.235.0/24
92.43.84.0/22
93.113.124.0/23
93.114.0.0/20
93.115.12.0/23
94.176.112.0/20
94.176.163.0/24
94.176.216.0/22
94.177.52.0-94.177.57.255
95.215.36.0/22
103.204.212.0/22
119.13.192.0/19
121.91.80.0/21
138.124.144.0/22
150.129.92.0/22
176.119.8.0/21
185.38.102.0/24
185.90.243.0/24
185.125.192.0/22
185.131.220.0/24
185.221.221.0/24
185.223.56.0/24
185.223.58.0/23
185.225.104.0/22
185.240.252.0/24
185.240.255.0/24
185.243.108.0/22
188.95.152.0/21
188.119.116.0/22
188.214.93.0/24
188.241.146.0/24
202.181.20.0/22
203.109.52.0/22
203.109.60.0/22
203.166.156.0/23
209.20.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a8:14:d9:1a:f3:2f:b4:d9:8b:eb:2a:38:5c:65:e7:d9:40:8c:
65:01:eb:ce:08:82:cf:bb:86:92:25:69:b6:1a:5d:28:10:54:
62:b9:ec:62:b9:54:fd:66:8b:68:90:91:fc:e6:f9:90:4a:df:
6f:63:11:1f:37:f2:41:56:e7:1f:0f:72:ae:a1:25:ac:f3:aa:
8c:99:b0:b6:05:e3:cf:2c:f7:78:c6:ee:64:a2:7d:b5:98:1b:
d8:5e:4d:f8:d2:3c:eb:4d:6e:f5:b7:a4:00:07:91:4d:d1:9d:
1f:80:b4:ca:74:3b:f8:3e:f5:7f:00:b1:15:77:86:c1:98:68:
31:8d:43:bc:e6:3b:59:97:0c:8a:28:de:a1:01:4c:c7:d3:af:
49:0d:34:4d:a6:b6:21:76:9b:ff:98:5c:ac:90:bb:f7:74:1c:
fe:1b:46:0e:bb:33:7c:c2:a3:64:c3:5a:e9:99:b6:ac:bc:42:
ec:12:81:ab:f3:66:dd:9b:a5:1f:5b:10:67:ca:91:fc:1e:35:
9f:5a:46:a9:cb:43:d4:06:eb:f5:a8:14:00:74:fc:c8:2c:ca:
00:c4:d3:b2:bd:ad:c1:cd:60:b7:c5:cb:10:5c:b4:59:36:54:
1a:1a:21:68:c6:8a:c1:b2:72:e9:c9:10:01:62:53:1c:d4:7c:
ab:c6:3d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org