Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/YosduZKnl3u8hISKwJ4xwVjq_aM.roa
File: YosduZKnl3u8hISKwJ4xwVjq_aM.roa (raw, json)
Hash identifier: 2KWAiDBKV2fy4A+tU2tV8iZn8H6uVpFAkrsVCVDPhoY=
Subject key identifier: 62:8B:1D:B9:92:A7:97:7B:BC:84:84:8A:C0:9E:31:C1:58:EA:FD:A3
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 043DB3ED
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/YosduZKnl3u8hISKwJ4xwVjq_aM.roa
Signing time: Mon 20 Jun 2022 11:37:45 +0000
ROA not before: Mon 20 Jun 2022 11:37:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 89.46.152.0/21 maxlen: 32
84.39.224.0/21 maxlen: 32
93.114.0.0/20 maxlen: 32
93.114.11.0/24 maxlen: 24
93.114.10.0/24 maxlen: 24
92.43.84.0/22 maxlen: 32
95.215.36.0/22 maxlen: 32
185.221.221.0/24 maxlen: 32
202.181.20.0/22 maxlen: 32
91.197.252.0/22 maxlen: 32
103.204.212.0/22 maxlen: 32
58.97.128.0/21 maxlen: 32
78.138.1.0/24 maxlen: 32
78.138.2.0/24 maxlen: 32
89.249.51.0/24 maxlen: 32
138.124.144.0/22 maxlen: 32
78.138.16.0/24 maxlen: 32
89.249.56.0/22 maxlen: 32
185.225.104.0/22 maxlen: 32
94.177.56.0/23 maxlen: 32
94.177.52.0/22 maxlen: 32
94.176.216.0/22 maxlen: 32
185.240.252.0/24 maxlen: 32
185.240.255.0/24 maxlen: 32
89.19.42.0/23 maxlen: 24
93.113.124.0/23 maxlen: 32
89.19.40.0/22 maxlen: 32
188.241.146.0/24 maxlen: 32
45.116.168.0/22 maxlen: 32
188.214.93.0/24 maxlen: 32
89.32.129.0/24 maxlen: 32
185.125.192.0/22 maxlen: 32
77.95.116.0/22 maxlen: 32
89.44.245.0/24 maxlen: 32
45.95.48.0/22 maxlen: 32
45.142.92.0/22 maxlen: 32
185.243.108.0/22 maxlen: 32
45.142.96.0/22 maxlen: 32
185.223.56.0/24 maxlen: 32
185.223.58.0/23 maxlen: 32
94.176.163.0/24 maxlen: 32
203.166.156.0/23 maxlen: 32
188.119.116.0/22 maxlen: 32
188.95.152.0/21 maxlen: 32
94.176.112.0/20 maxlen: 32
91.132.184.0/22 maxlen: 32
185.38.102.0/24 maxlen: 32
31.14.219.0/24 maxlen: 32
150.129.92.0/22 maxlen: 32
45.149.148.0/22 maxlen: 32
203.109.52.0/22 maxlen: 32
89.38.132.0/23 maxlen: 32
203.109.60.0/22 maxlen: 32
31.14.236.0/23 maxlen: 32
58.97.232.0/21 maxlen: 32
83.229.76.0/22 maxlen: 24
119.13.192.0/19 maxlen: 32
58.97.240.0/20 maxlen: 32
89.34.7.0/24 maxlen: 32
83.229.104.0/22 maxlen: 32
121.91.80.0/21 maxlen: 32
78.138.25.0/24 maxlen: 32
185.90.243.0/24 maxlen: 32
78.138.30.0/24 maxlen: 32
91.245.235.0/24 maxlen: 32
78.138.40.0/24 maxlen: 32
78.138.47.0/24 maxlen: 32
78.138.48.0/24 maxlen: 32
78.138.50.0/24 maxlen: 32
45.94.244.0/22 maxlen: 32
89.44.115.0/24 maxlen: 32
45.138.232.0/22 maxlen: 32
89.41.62.0/24 maxlen: 32
209.20.160.0/19 maxlen: 32
185.131.220.0/24 maxlen: 32
93.115.12.0/23 maxlen: 32
77.81.104.0/21 maxlen: 32
89.34.78.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71152621 (0x43db3ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jun 20 11:37:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=628b1db992a7977bbc84848ac09e31c158eafda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a8:dd:93:f9:75:47:64:09:63:54:b8:5c:ec:
9d:41:55:f0:1d:a3:70:18:70:fc:4d:2a:3e:4f:a2:
16:fc:b6:c5:f9:6f:49:3f:30:aa:29:1a:ca:f6:9a:
b7:71:f5:23:e8:07:55:16:c3:5c:29:29:1c:88:c0:
77:8d:bd:fc:eb:58:dd:fa:fe:07:ae:9b:99:13:3c:
ba:e8:3a:e8:38:e2:6f:a6:01:f5:ef:d4:c4:aa:28:
b4:0e:71:10:d6:99:92:62:0d:29:b0:5f:f5:d8:da:
47:37:a8:24:ec:27:d8:a1:86:9d:f7:6d:61:a5:b4:
d8:f2:92:62:c0:19:c1:e9:32:56:60:d5:e5:01:d7:
ea:c2:e5:08:42:91:89:d6:aa:05:9e:30:ef:bf:62:
a3:8b:2c:e3:47:e7:47:6d:1e:20:b4:ce:27:bb:bf:
86:16:c6:c2:43:33:3a:bf:98:0e:7f:dc:d6:53:78:
87:54:8d:09:93:d4:97:ab:b0:9b:eb:64:d3:ec:6e:
02:23:8e:1e:d3:98:d4:35:cc:90:93:52:f1:4f:74:
0b:37:e2:98:1a:7a:69:d7:8f:c4:2a:b4:9a:8b:f6:
b6:81:48:f4:01:64:8b:5a:84:a5:3c:ab:60:7a:f9:
80:7d:6e:16:90:52:76:7d:ef:02:b6:73:37:66:de:
fa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8B:1D:B9:92:A7:97:7B:BC:84:84:8A:C0:9E:31:C1:58:EA:FD:A3
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/YosduZKnl3u8hISKwJ4xwVjq_aM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.219.0/24
31.14.236.0/23
45.94.244.0/22
45.95.48.0/22
45.116.168.0/22
45.138.232.0/22
45.142.92.0-45.142.99.255
45.149.148.0/22
58.97.128.0/21
58.97.232.0-58.97.255.255
77.81.104.0/21
77.95.116.0/22
78.138.1.0-78.138.2.255
78.138.16.0/24
78.138.25.0/24
78.138.30.0/24
78.138.40.0/24
78.138.47.0-78.138.48.255
78.138.50.0/24
83.229.76.0/22
83.229.104.0/22
84.39.224.0/21
89.19.40.0/22
89.32.129.0/24
89.34.7.0/24
89.34.78.0/23
89.38.132.0/23
89.41.62.0/24
89.44.115.0/24
89.44.245.0/24
89.46.152.0/21
89.249.51.0/24
89.249.56.0/22
91.132.184.0/22
91.197.252.0/22
91.245.235.0/24
92.43.84.0/22
93.113.124.0/23
93.114.0.0/20
93.115.12.0/23
94.176.112.0/20
94.176.163.0/24
94.176.216.0/22
94.177.52.0-94.177.57.255
95.215.36.0/22
103.204.212.0/22
119.13.192.0/19
121.91.80.0/21
138.124.144.0/22
150.129.92.0/22
185.38.102.0/24
185.90.243.0/24
185.125.192.0/22
185.131.220.0/24
185.221.221.0/24
185.223.56.0/24
185.223.58.0/23
185.225.104.0/22
185.240.252.0/24
185.240.255.0/24
185.243.108.0/22
188.95.152.0/21
188.119.116.0/22
188.214.93.0/24
188.241.146.0/24
202.181.20.0/22
203.109.52.0/22
203.109.60.0/22
203.166.156.0/23
209.20.160.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:52:a5:e5:8f:c0:9f:e8:79:d7:a4:ad:c1:b8:5e:47:75:03:
4f:72:18:dd:54:ab:41:60:55:69:17:3f:aa:79:05:42:52:e3:
3b:87:89:cf:ff:a5:2d:a0:f9:49:5a:ea:ed:d4:1a:a5:d3:aa:
0d:72:82:30:a7:37:2f:e2:70:98:1c:c7:e0:d8:51:8a:d7:94:
5b:15:9d:0f:23:60:77:35:8b:15:a0:23:78:f8:ad:20:57:64:
39:a5:ea:41:2f:a7:ca:80:be:8b:5f:5f:71:9f:aa:3b:61:87:
0e:24:07:27:59:cc:3c:a9:d8:33:d6:88:bb:29:40:44:03:fe:
64:73:c8:3b:98:70:bc:81:4c:ef:c0:1a:a2:16:c0:a3:c0:4d:
ee:a4:25:5e:9d:2b:45:35:4f:fa:17:0a:ff:52:5f:77:e4:79:
41:12:31:3f:00:62:d5:96:02:97:d5:fb:a0:45:f6:75:29:79:
79:8a:e1:54:69:2f:56:ef:bc:ed:5f:30:5c:e5:ac:70:25:63:
cb:d4:75:72:40:3e:ca:87:b6:6a:42:dc:76:77:28:44:c5:df:
f3:cc:b3:b9:48:a3:2e:d2:00:be:75:9b:78:85:80:3f:07:82:
ef:6c:90:15:8f:9f:ef:58:93:50:bc:3b:77:0e:59:a4:f8:68:
23:a7:62:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:17 2023 by rpki-client on console-ams.rpki-client.org