Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/dSl9MObokZ26IVbgSZtIHNgNAqg.roa
File: dSl9MObokZ26IVbgSZtIHNgNAqg.roa (raw, json)
Hash identifier: /H+ZFY07G+VB1N+PbpxQYTkRfuZ4kLqoFA/oWxukVYw=
Subject key identifier: 75:29:7D:30:E6:E8:91:9D:BA:21:56:E0:49:9B:48:1C:D8:0D:02:A8
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 03E6ED1D
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/dSl9MObokZ26IVbgSZtIHNgNAqg.roa
Signing time: Fri 13 May 2022 13:36:41 +0000
ROA not before: Fri 13 May 2022 13:36:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 89.46.152.0/21 maxlen: 32
84.39.224.0/21 maxlen: 32
93.114.0.0/20 maxlen: 32
93.114.11.0/24 maxlen: 24
93.114.10.0/24 maxlen: 24
92.43.84.0/22 maxlen: 32
95.215.36.0/22 maxlen: 32
185.221.221.0/24 maxlen: 32
202.181.20.0/22 maxlen: 32
91.197.252.0/22 maxlen: 32
103.204.212.0/22 maxlen: 32
58.97.128.0/21 maxlen: 32
78.138.1.0/24 maxlen: 32
78.138.2.0/24 maxlen: 32
89.249.51.0/24 maxlen: 32
138.124.144.0/22 maxlen: 32
78.138.16.0/24 maxlen: 32
89.249.56.0/22 maxlen: 32
185.225.104.0/22 maxlen: 32
94.177.56.0/23 maxlen: 32
94.177.52.0/22 maxlen: 32
94.176.216.0/22 maxlen: 32
185.240.252.0/24 maxlen: 32
185.240.255.0/24 maxlen: 32
89.19.42.0/23 maxlen: 24
93.113.124.0/23 maxlen: 32
89.19.40.0/22 maxlen: 32
188.241.146.0/24 maxlen: 32
188.214.93.0/24 maxlen: 32
89.32.129.0/24 maxlen: 32
185.125.192.0/22 maxlen: 32
77.95.116.0/22 maxlen: 32
89.44.245.0/24 maxlen: 32
45.95.48.0/22 maxlen: 32
45.142.92.0/22 maxlen: 32
185.243.108.0/22 maxlen: 32
45.142.96.0/22 maxlen: 32
185.223.56.0/24 maxlen: 32
185.223.58.0/23 maxlen: 32
94.176.163.0/24 maxlen: 32
203.166.156.0/23 maxlen: 32
188.119.116.0/22 maxlen: 32
188.95.152.0/21 maxlen: 32
94.176.112.0/20 maxlen: 32
91.132.184.0/22 maxlen: 32
185.38.102.0/24 maxlen: 32
31.14.219.0/24 maxlen: 32
150.129.92.0/22 maxlen: 32
45.149.148.0/22 maxlen: 32
203.109.52.0/22 maxlen: 32
89.38.132.0/23 maxlen: 32
203.109.60.0/22 maxlen: 32
31.14.236.0/23 maxlen: 32
58.97.232.0/21 maxlen: 32
83.229.76.0/22 maxlen: 24
119.13.192.0/19 maxlen: 32
58.97.240.0/20 maxlen: 32
89.34.7.0/24 maxlen: 32
83.229.104.0/22 maxlen: 32
121.91.80.0/21 maxlen: 32
78.138.25.0/24 maxlen: 32
185.90.243.0/24 maxlen: 32
78.138.30.0/24 maxlen: 32
91.245.235.0/24 maxlen: 32
78.138.40.0/24 maxlen: 32
78.138.47.0/24 maxlen: 32
78.138.48.0/24 maxlen: 32
78.138.50.0/24 maxlen: 32
45.94.244.0/22 maxlen: 32
89.44.115.0/24 maxlen: 32
45.138.232.0/22 maxlen: 32
89.41.62.0/24 maxlen: 32
209.20.160.0/19 maxlen: 32
185.131.220.0/24 maxlen: 32
93.115.12.0/23 maxlen: 32
77.81.104.0/21 maxlen: 32
89.34.78.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65465629 (0x3e6ed1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: May 13 13:36:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75297d30e6e8919dba2156e0499b481cd80d02a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:73:ee:ec:09:d7:5c:58:df:25:81:82:44:0b:
96:cf:ad:90:08:ca:77:50:9b:6e:76:bd:17:24:29:
30:e8:98:cf:31:3b:6a:70:9c:a6:00:0b:15:bf:bc:
13:52:b6:e1:80:95:76:5d:c1:96:d3:39:db:06:d1:
d1:95:af:7d:1e:26:ce:b9:a6:be:bc:40:91:76:0a:
18:f4:bb:ca:07:dc:87:0f:0c:4c:cc:bc:e6:2c:51:
fa:f2:e1:32:0c:fd:2f:13:19:c0:62:ad:2f:0e:53:
f5:0b:7f:31:63:26:20:4e:49:10:e3:be:d2:ba:c7:
af:c6:d0:8a:32:17:14:76:ea:5a:00:f8:0d:e4:4d:
6b:6a:cc:01:4c:56:d4:21:01:b3:95:60:c5:27:6c:
f6:01:be:76:22:d9:03:1f:42:e6:b4:4d:0d:ec:02:
89:3f:82:ee:c2:3c:b1:b5:cf:88:06:5e:71:e0:57:
43:00:9c:9d:16:01:98:e6:79:57:dc:9f:de:94:8f:
e2:bd:e5:d1:a6:c1:f4:d6:e1:7a:46:1a:21:98:29:
42:b0:c0:2e:ab:c1:a3:12:d5:e7:46:bc:ae:27:28:
6b:5a:76:7b:88:ff:45:c6:0e:1a:e9:2c:d0:6b:b4:
e1:72:2c:fa:43:75:36:d9:81:83:03:d1:a7:ad:b4:
09:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:29:7D:30:E6:E8:91:9D:BA:21:56:E0:49:9B:48:1C:D8:0D:02:A8
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/dSl9MObokZ26IVbgSZtIHNgNAqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.219.0/24
31.14.236.0/23
45.94.244.0/22
45.95.48.0/22
45.138.232.0/22
45.142.92.0-45.142.99.255
45.149.148.0/22
58.97.128.0/21
58.97.232.0-58.97.255.255
77.81.104.0/21
77.95.116.0/22
78.138.1.0-78.138.2.255
78.138.16.0/24
78.138.25.0/24
78.138.30.0/24
78.138.40.0/24
78.138.47.0-78.138.48.255
78.138.50.0/24
83.229.76.0/22
83.229.104.0/22
84.39.224.0/21
89.19.40.0/22
89.32.129.0/24
89.34.7.0/24
89.34.78.0/23
89.38.132.0/23
89.41.62.0/24
89.44.115.0/24
89.44.245.0/24
89.46.152.0/21
89.249.51.0/24
89.249.56.0/22
91.132.184.0/22
91.197.252.0/22
91.245.235.0/24
92.43.84.0/22
93.113.124.0/23
93.114.0.0/20
93.115.12.0/23
94.176.112.0/20
94.176.163.0/24
94.176.216.0/22
94.177.52.0-94.177.57.255
95.215.36.0/22
103.204.212.0/22
119.13.192.0/19
121.91.80.0/21
138.124.144.0/22
150.129.92.0/22
185.38.102.0/24
185.90.243.0/24
185.125.192.0/22
185.131.220.0/24
185.221.221.0/24
185.223.56.0/24
185.223.58.0/23
185.225.104.0/22
185.240.252.0/24
185.240.255.0/24
185.243.108.0/22
188.95.152.0/21
188.119.116.0/22
188.214.93.0/24
188.241.146.0/24
202.181.20.0/22
203.109.52.0/22
203.109.60.0/22
203.166.156.0/23
209.20.160.0/19
Signature Algorithm: sha256WithRSAEncryption
49:43:55:d3:45:cd:44:1f:c7:a5:b1:64:3a:48:db:4f:4f:65:
62:94:99:79:45:c7:e9:5a:29:b4:2e:7b:64:99:b5:bf:9b:63:
42:60:f2:6d:29:28:b8:78:cd:2b:58:fa:2e:7a:38:bf:8f:23:
f7:86:d8:4a:ca:ea:47:4f:38:6b:78:a5:2e:1e:a3:0c:14:73:
81:74:bd:ee:b4:4b:55:e7:44:60:be:7c:61:e7:20:67:d7:24:
5d:ba:3c:64:26:4e:52:41:66:c5:2c:b7:85:30:f3:20:75:ff:
0d:60:f7:33:ed:dc:19:7d:27:cf:b2:a3:6b:bb:c2:c1:18:f4:
49:84:08:64:a4:45:ec:4a:69:b1:cd:fc:8e:11:30:4c:af:1d:
12:3e:04:6f:80:6e:78:25:0c:a2:03:69:cb:74:76:f5:56:9e:
7f:a1:22:0f:ca:08:f7:bf:02:5a:81:ea:20:1a:40:15:ee:fa:
87:16:b5:5b:1f:e2:35:2a:ad:30:36:ca:47:f4:ff:04:21:8b:
2b:c8:3b:b4:e8:b0:57:6c:d3:99:3a:77:b1:6b:fc:9a:fa:e9:
3b:f6:96:3b:14:bd:d4:8f:5a:1d:d0:e4:b1:4c:b9:0e:af:31:
08:ea:2e:88:15:73:23:97:8c:35:01:54:7a:85:26:a0:ea:83:
eb:6e:11:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:17 2023 by rpki-client on console-ams.rpki-client.org