Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/75XaG5BjnmK_j7zTACH6FRZfsPU.roa
File: 75XaG5BjnmK_j7zTACH6FRZfsPU.roa (raw, json)
Hash identifier: 89cZ4/RAMgo1G1vZCciA07J8a/PVxR8aVGfOfK7Zisg=
Subject key identifier: EF:95:DA:1B:90:63:9E:62:BF:8F:BC:D3:00:21:FA:15:16:5F:B0:F5
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 03367D04
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/75XaG5BjnmK_j7zTACH6FRZfsPU.roa
Signing time: Mon 07 Feb 2022 09:19:43 +0000
ROA not before: Mon 07 Feb 2022 09:19:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15704
IP address blocks: 119.12.224.0/23 maxlen: 23
119.12.226.0/23 maxlen: 23
119.12.228.0/23 maxlen: 23
119.12.230.0/23 maxlen: 23
119.12.232.0/23 maxlen: 23
217.113.240.0/20 maxlen: 20
119.12.236.0/23 maxlen: 23
119.12.238.0/23 maxlen: 23
119.12.240.0/23 maxlen: 23
119.12.234.0/23 maxlen: 23
119.12.242.0/23 maxlen: 23
119.12.244.0/23 maxlen: 23
119.12.246.0/23 maxlen: 23
119.12.250.0/23 maxlen: 23
119.12.248.0/23 maxlen: 23
185.228.152.0/23 maxlen: 23
185.228.154.0/23 maxlen: 23
195.160.224.0/22 maxlen: 22
207.188.130.0/24 maxlen: 24
213.94.0.0/18 maxlen: 23
193.53.160.0/22 maxlen: 22
137.59.58.0/24 maxlen: 24
185.153.164.0/23 maxlen: 23
185.153.166.0/23 maxlen: 23
89.39.32.0/19 maxlen: 24
94.73.32.0/19 maxlen: 19
185.227.212.0/23 maxlen: 23
89.39.52.0/24 maxlen: 24
185.227.214.0/23 maxlen: 23
91.194.62.0/23 maxlen: 23
91.106.16.0/21 maxlen: 21
170.253.0.0/20 maxlen: 20
185.145.64.0/22 maxlen: 22
170.253.16.0/20 maxlen: 20
170.253.32.0/20 maxlen: 20
170.253.48.0/20 maxlen: 20
185.252.12.0/22 maxlen: 22
185.197.240.0/23 maxlen: 23
213.177.192.0/19 maxlen: 21
185.197.242.0/23 maxlen: 23
188.212.23.0/24 maxlen: 24
93.177.120.0/22 maxlen: 23
93.115.152.0/24 maxlen: 24
181.41.128.0/21 maxlen: 21
212.14.96.0/19 maxlen: 23
93.115.128.0/22 maxlen: 22
93.115.132.0/22 maxlen: 22
93.176.160.0/20 maxlen: 20
93.176.176.0/20 maxlen: 20
89.35.62.0/23 maxlen: 23
93.115.202.0/24 maxlen: 24
93.176.128.0/18 maxlen: 18
93.176.128.0/21 maxlen: 21
93.176.136.0/21 maxlen: 21
93.176.144.0/21 maxlen: 21
93.176.152.0/21 maxlen: 21
93.115.242.0/24 maxlen: 24
207.188.160.0/21 maxlen: 21
188.208.219.0/24 maxlen: 24
207.188.168.0/21 maxlen: 21
91.242.152.0/21 maxlen: 21
93.115.37.0/24 maxlen: 24
2a00:d100:3000::/37 maxlen: 37
2a00:d100:6000::/37 maxlen: 37
2a00:d100:3800::/37 maxlen: 37
2a00:d100:800::/37 maxlen: 37
2a00:d100:6800::/37 maxlen: 37
2a00:d100:1000::/37 maxlen: 37
2a00:d100:4800::/37 maxlen: 37
2a00:d100:5000::/37 maxlen: 37
2a00:d100::/37 maxlen: 37
2a00:d100:5800::/37 maxlen: 37
2a01:8480:2004::/48 maxlen: 48
2a00:d100:2000::/37 maxlen: 37
2a00:d100:2800::/37 maxlen: 37
2a00:d100:1800::/37 maxlen: 37
2a00:d100:4000::/37 maxlen: 37
2a00:d103:2800::/37 maxlen: 37
2a00:d103:2000::/37 maxlen: 37
2a00:d103:1800::/37 maxlen: 37
2a00:d103:1000::/37 maxlen: 37
2a00:d103:800::/37 maxlen: 37
2a00:d103::/37 maxlen: 37
2a00:d102:2800::/37 maxlen: 37
2a00:d102:2000::/37 maxlen: 37
2a00:d102:1800::/37 maxlen: 37
2a00:d102:1000::/37 maxlen: 37
2a00:d102:800::/37 maxlen: 37
2a00:d102::/37 maxlen: 37
2a00:d101:4800::/37 maxlen: 37
2a00:d101:4000::/37 maxlen: 37
2a00:d101::/37 maxlen: 37
2a00:d101:2800::/37 maxlen: 37
2a00:d101:2000::/37 maxlen: 37
2a00:d101:1800::/37 maxlen: 37
2a00:d101:3000::/37 maxlen: 37
2a00:d101:1000::/37 maxlen: 37
2a00:d101:800::/37 maxlen: 37
2a01:8480::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53902596 (0x3367d04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Feb 7 09:19:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef95da1b90639e62bf8fbcd30021fa15165fb0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:61:34:c3:f6:db:e3:80:54:76:c0:6c:0c:
07:99:97:4b:82:18:41:5c:8a:3c:2e:de:a2:87:1f:
38:82:5c:06:ef:fb:94:c8:6a:7e:3d:79:94:bb:95:
2c:a0:d1:a6:c5:6e:67:9c:74:63:80:2a:15:48:68:
5f:4e:8d:fc:1d:34:e7:d5:b9:9f:af:cb:c7:47:c9:
6c:7c:c3:e4:2e:13:ef:7a:e5:39:6a:a5:cf:e6:bc:
71:dc:f6:d4:58:2d:d1:26:16:f8:e5:7b:d0:c1:f5:
b1:d4:dc:77:ba:22:99:b0:de:3d:79:0f:f7:84:a0:
be:15:b4:15:8a:66:1b:ac:96:a2:95:9b:18:bf:de:
d7:87:fa:5f:c4:80:d8:03:a0:bf:1e:24:c3:fa:e1:
0d:37:95:6f:5b:df:76:d8:70:bb:50:29:10:04:84:
09:06:bc:f7:3b:52:c3:ab:45:e1:78:ee:bb:4a:d1:
8e:a1:3f:a2:7b:9b:a7:ef:a1:2c:7f:7c:d8:6f:76:
7d:88:ab:b8:9e:03:55:03:95:7e:b8:6c:77:96:40:
36:41:20:c6:14:a2:7e:65:aa:d9:3e:71:70:0d:99:
50:f1:6c:5c:ed:31:91:ed:90:a7:bd:51:db:f4:a8:
67:98:e6:99:82:29:14:0c:de:b9:13:be:1a:dd:02:
c7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:95:DA:1B:90:63:9E:62:BF:8F:BC:D3:00:21:FA:15:16:5F:B0:F5
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/75XaG5BjnmK_j7zTACH6FRZfsPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.62.0/23
89.39.32.0/19
91.106.16.0/21
91.194.62.0/23
91.242.152.0/21
93.115.37.0/24
93.115.128.0/21
93.115.152.0/24
93.115.202.0/24
93.115.242.0/24
93.176.128.0/18
93.177.120.0/22
94.73.32.0/19
119.12.224.0-119.12.251.255
137.59.58.0/24
170.253.0.0/18
181.41.128.0/21
185.145.64.0/22
185.153.164.0/22
185.197.240.0/22
185.227.212.0/22
185.228.152.0/22
185.252.12.0/22
188.208.219.0/24
188.212.23.0/24
193.53.160.0/22
195.160.224.0/22
207.188.130.0/24
207.188.160.0/20
212.14.96.0/19
213.94.0.0/18
213.177.192.0/19
217.113.240.0/20
IPv6:
2a00:d100::-2a00:d100:6fff:ffff:ffff:ffff:ffff:ffff
2a00:d101::-2a00:d101:37ff:ffff:ffff:ffff:ffff:ffff
2a00:d101:4000::/36
2a00:d102::-2a00:d102:2fff:ffff:ffff:ffff:ffff:ffff
2a00:d103::-2a00:d103:2fff:ffff:ffff:ffff:ffff:ffff
2a01:8480::/32
Signature Algorithm: sha256WithRSAEncryption
56:b1:ec:22:30:ab:7a:14:b1:a9:26:79:11:9f:b0:53:ce:a0:
b2:d6:c0:35:76:19:0a:18:d6:e8:b7:ed:d8:01:80:5a:f6:0c:
03:06:0e:36:49:87:e4:f2:a4:ed:3a:7d:59:75:90:2e:98:23:
ff:31:2d:90:b2:d9:fc:87:f7:f7:db:b6:78:45:8a:f1:e6:47:
4a:89:ba:12:7d:73:cd:8c:86:b8:9f:41:5f:49:b2:db:67:ca:
fc:f4:a6:a4:a6:2f:30:1c:05:20:af:bf:13:52:f2:d2:a2:f9:
ff:bd:40:61:90:71:13:80:9a:d5:40:1c:5c:da:78:19:d3:8d:
31:9c:ab:2e:1d:8b:c4:64:6f:a9:ed:f9:3d:89:34:a6:92:1f:
5b:f8:5f:86:1a:c9:c6:f9:ab:6a:98:0a:8c:46:c3:59:ae:6d:
dd:01:18:5a:5e:6d:f2:ad:c3:db:f1:a4:4d:72:81:05:66:5b:
35:d2:80:f2:21:5f:da:79:ad:97:26:e1:bc:e4:7d:c6:33:83:
9c:ad:cd:1f:85:62:10:5e:c6:93:95:3f:9e:d6:93:40:ab:96:
ff:97:a0:29:54:5d:2b:3e:cb:12:be:5b:0f:56:6f:76:60:64:
eb:d0:7a:51:6a:25:c8:c5:d1:3b:19:b8:99:a5:40:e7:0f:ee:
03:36:a2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:48 2024 by rpki-client on console-ams.rpki-client.org