Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/RPMMbfGSbTPs9ascfJYpWRD1DKg.roa
File: RPMMbfGSbTPs9ascfJYpWRD1DKg.roa (raw, json)
Hash identifier: Xqd3mYs08tNK07x5naLWtGvFyZpvyatBasu+tRSf32Y=
Subject key identifier: 44:F3:0C:6D:F1:92:6D:33:EC:F5:AB:1C:7C:96:29:59:10:F5:0C:A8
Certificate issuer: /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial: 0183313489A8275CB842B1F8C56E82FE2747
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/RPMMbfGSbTPs9ascfJYpWRD1DKg.roa
Signing time: Mon 12 Sep 2022 10:17:49 +0000
ROA not before: Mon 12 Sep 2022 10:17:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49063
IP address blocks: 91.107.64.0/21 maxlen: 21
91.107.64.0/24 maxlen: 24
91.107.69.0/24 maxlen: 24
91.107.68.0/24 maxlen: 24
91.107.71.0/24 maxlen: 24
91.107.70.0/24 maxlen: 24
91.107.65.0/24 maxlen: 24
91.107.67.0/24 maxlen: 24
91.107.66.0/24 maxlen: 24
176.107.166.0/24 maxlen: 24
95.181.192.0/22 maxlen: 22
176.107.165.0/24 maxlen: 24
176.107.163.0/24 maxlen: 24
176.107.162.0/24 maxlen: 24
176.107.164.0/24 maxlen: 24
176.107.161.0/24 maxlen: 24
176.107.160.0/24 maxlen: 24
95.181.199.0/24 maxlen: 24
95.181.197.0/24 maxlen: 24
95.181.196.0/24 maxlen: 24
95.181.196.0/23 maxlen: 23
95.181.193.0/24 maxlen: 24
95.181.195.0/24 maxlen: 24
95.181.194.0/24 maxlen: 24
176.107.167.0/24 maxlen: 24
95.181.204.0/24 maxlen: 24
95.181.203.0/24 maxlen: 24
95.181.205.0/24 maxlen: 24
95.181.200.0/24 maxlen: 24
95.181.200.0/21 maxlen: 21
95.181.201.0/24 maxlen: 24
185.242.120.0/24 maxlen: 24
185.127.151.0/24 maxlen: 24
185.127.150.0/24 maxlen: 24
185.127.149.0/24 maxlen: 24
185.127.148.0/24 maxlen: 24
185.127.148.0/22 maxlen: 22
92.242.36.0/24 maxlen: 24
92.242.35.0/24 maxlen: 24
92.242.38.0/24 maxlen: 24
92.242.37.0/24 maxlen: 24
92.242.32.0/21 maxlen: 21
92.242.33.0/24 maxlen: 24
92.242.32.0/24 maxlen: 24
92.242.34.0/24 maxlen: 24
92.242.43.0/24 maxlen: 24
92.242.42.0/24 maxlen: 24
92.242.39.0/24 maxlen: 24
92.242.41.0/24 maxlen: 24
92.242.47.0/24 maxlen: 24
92.242.46.0/24 maxlen: 24
185.247.186.0/24 maxlen: 24
185.99.140.0/23 maxlen: 23
185.99.140.0/24 maxlen: 24
130.193.64.0/24 maxlen: 24
130.193.64.0/21 maxlen: 21
130.193.70.0/24 maxlen: 24
130.193.71.0/24 maxlen: 24
130.193.66.0/24 maxlen: 24
130.193.65.0/24 maxlen: 24
130.193.68.0/24 maxlen: 24
130.193.67.0/24 maxlen: 24
85.193.73.0/24 maxlen: 24
85.193.72.0/24 maxlen: 24
85.193.75.0/24 maxlen: 24
85.193.74.0/24 maxlen: 24
185.99.10.0/24 maxlen: 24
185.99.9.0/24 maxlen: 24
185.99.11.0/24 maxlen: 24
185.99.8.0/24 maxlen: 24
185.99.8.0/21 maxlen: 21
185.232.107.0/24 maxlen: 24
193.23.147.0/24 maxlen: 24
185.232.106.0/24 maxlen: 24
193.23.146.0/24 maxlen: 24
178.57.72.0/21 maxlen: 21
178.57.73.0/24 maxlen: 24
178.57.72.0/24 maxlen: 24
178.57.75.0/24 maxlen: 24
178.57.74.0/24 maxlen: 24
178.57.77.0/24 maxlen: 24
178.57.76.0/24 maxlen: 24
178.57.78.0/24 maxlen: 24
178.57.79.0/24 maxlen: 24
185.3.142.0/24 maxlen: 24
185.3.141.0/24 maxlen: 24
185.3.143.0/24 maxlen: 24
185.3.140.0/22 maxlen: 22
185.3.140.0/24 maxlen: 24
185.98.85.0/24 maxlen: 24
185.98.84.0/23 maxlen: 23
185.98.84.0/24 maxlen: 24
185.98.81.0/24 maxlen: 24
185.98.83.0/24 maxlen: 24
185.98.82.0/24 maxlen: 24
185.98.80.0/24 maxlen: 24
185.98.80.0/22 maxlen: 22
193.23.144.0/24 maxlen: 24
185.232.105.0/24 maxlen: 24
193.23.145.0/24 maxlen: 24
193.23.144.0/22 maxlen: 22
185.232.104.0/22 maxlen: 22
185.232.104.0/24 maxlen: 24
95.131.24.0/24 maxlen: 24
95.131.24.0/21 maxlen: 21
95.131.31.0/24 maxlen: 24
95.131.30.0/24 maxlen: 24
95.131.26.0/24 maxlen: 24
95.131.29.0/24 maxlen: 24
95.131.25.0/24 maxlen: 24
87.251.90.0/23 maxlen: 23
87.251.91.0/24 maxlen: 24
195.14.101.0/24 maxlen: 24
195.14.100.0/24 maxlen: 24
185.195.169.0/24 maxlen: 24
185.148.83.0/24 maxlen: 24
185.148.81.0/24 maxlen: 24
185.148.80.0/24 maxlen: 24
185.148.82.0/24 maxlen: 24
178.20.233.0/24 maxlen: 24
178.20.232.0/24 maxlen: 24
178.20.232.0/21 maxlen: 21
178.20.237.0/24 maxlen: 24
178.20.236.0/24 maxlen: 24
178.20.239.0/24 maxlen: 24
178.20.238.0/24 maxlen: 24
178.20.234.0/24 maxlen: 24
178.20.235.0/24 maxlen: 24
2a01:ba80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:31:34:89:a8:27:5c:b8:42:b1:f8:c5:6e:82:fe:27:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Validity
Not Before: Sep 12 10:17:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44f30c6df1926d33ecf5ab1c7c96295910f50ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:41:e9:59:fe:43:d0:0a:c3:b9:06:05:d3:
ea:cc:de:5d:3d:ed:9e:ca:ea:f6:8a:83:ff:01:45:
c2:ce:3b:ca:ee:de:06:11:c8:dd:c9:30:ee:cb:a6:
6e:00:0f:94:94:d5:e8:c3:44:25:b1:17:91:6c:ce:
cf:a9:13:53:44:cc:07:af:76:7f:8d:76:6c:f2:ff:
a0:cb:0b:dd:5b:90:c7:b4:70:a3:7f:a3:1f:c2:d3:
e5:e3:16:4b:e2:f6:42:3c:11:df:6e:82:87:2e:03:
4b:fb:72:0c:d6:f8:30:58:4c:df:34:ac:4d:20:ea:
ee:66:ff:ed:8b:7b:a4:5b:07:48:ae:e2:4f:ed:2e:
78:b0:23:83:e9:d4:bb:0e:72:8b:a8:eb:bf:73:49:
80:2e:27:ce:45:bf:04:b5:f1:bd:27:d5:ba:8c:e3:
63:7a:a9:49:81:f1:ff:dc:9a:e4:c1:c3:da:3d:e1:
a3:c2:b9:9e:e0:5b:2a:af:92:e9:80:c2:63:1b:bb:
1e:f6:c1:0e:ff:f8:23:85:11:99:32:0e:d0:ab:f0:
ea:7e:6d:f5:0a:55:a8:89:36:9d:51:3a:9b:77:ab:
f4:9e:c1:b5:50:11:56:e0:c7:dc:97:e2:8b:45:d9:
21:fc:7b:52:2f:2d:68:a2:25:ae:2c:88:c3:c5:bc:
d8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F3:0C:6D:F1:92:6D:33:EC:F5:AB:1C:7C:96:29:59:10:F5:0C:A8
X509v3 Authority Key Identifier:
keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/RPMMbfGSbTPs9ascfJYpWRD1DKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.193.72.0/22
87.251.90.0/23
91.107.64.0/21
92.242.32.0/21
92.242.41.0-92.242.43.255
92.242.46.0/23
95.131.24.0/21
95.181.192.0-95.181.197.255
95.181.199.0-95.181.207.255
130.193.64.0/21
176.107.160.0/21
178.20.232.0/21
178.57.72.0/21
185.3.140.0/22
185.98.80.0-185.98.85.255
185.99.8.0/21
185.99.140.0/23
185.127.148.0/22
185.148.80.0/22
185.195.169.0/24
185.232.104.0/22
185.242.120.0/24
185.247.186.0/24
193.23.144.0/22
195.14.100.0/23
IPv6:
2a01:ba80::/32
Signature Algorithm: sha256WithRSAEncryption
c3:f1:2a:dc:91:f1:3a:27:0f:ab:a7:a6:bb:5c:ea:72:d1:67:
a3:9b:2b:40:e3:5d:86:43:61:a0:7c:e2:b7:c1:ae:d4:27:07:
cc:58:c0:c3:0c:98:aa:03:9f:b0:9d:01:4b:68:38:c6:1c:e0:
a3:55:15:83:ab:bc:a2:15:31:c6:bd:a4:21:32:5b:71:71:c0:
75:41:d0:46:1e:0e:c5:25:61:75:4f:7c:71:f5:71:94:aa:1a:
3c:ab:06:e9:c6:de:ee:c8:d2:5a:ed:c1:99:6b:94:4f:c0:b4:
e4:4c:48:d4:39:43:b6:78:dc:40:fd:6f:c5:42:7e:57:fb:94:
75:6f:5c:da:f7:25:80:a7:42:6f:11:dc:61:b9:06:22:68:c6:
1d:39:62:ba:07:96:a9:da:5a:14:eb:6a:ce:e6:df:1d:b6:48:
55:40:8d:ef:b9:0f:50:dd:1f:6a:ac:4f:00:3d:24:19:cc:1f:
15:d1:25:4f:22:e5:0b:56:89:33:b8:a2:d6:d1:b6:dd:94:b2:
b9:7c:de:e0:d4:a6:eb:1f:14:21:9a:7c:5e:d1:8a:79:14:6c:
5a:4f:e1:c0:1a:b8:ad:c7:bf:34:cb:99:9a:7c:31:d9:59:0e:
b3:ad:9d:e9:ce:2b:8e:54:7f:d8:00:08:60:0d:f8:2f:6b:6e:
e0:46:9a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:35 2023 by rpki-client on console-ams.rpki-client.org