Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/mVn4e_5zAB1spum0PIWR1n54MRA.roa
File: mVn4e_5zAB1spum0PIWR1n54MRA.roa (raw, json)
Hash identifier: lfvulPj9Wj1a1TVLDjHDrIcH+JfoW8tavpOTSkp9h0A=
Subject key identifier: 99:59:F8:7B:FE:73:00:1D:6C:A6:E9:B4:3C:85:91:D6:7E:78:31:10
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 02E402E3
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/mVn4e_5zAB1spum0PIWR1n54MRA.roa
Signing time: Sat 01 Jan 2022 12:54:51 +0000
ROA not before: Sat 01 Jan 2022 12:54:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15704
IP address blocks: 119.12.224.0/23 maxlen: 23
119.12.226.0/23 maxlen: 23
119.12.228.0/23 maxlen: 23
119.12.230.0/23 maxlen: 23
119.12.232.0/23 maxlen: 23
217.113.240.0/20 maxlen: 20
119.12.236.0/23 maxlen: 23
119.12.238.0/23 maxlen: 23
119.12.240.0/23 maxlen: 23
119.12.234.0/23 maxlen: 23
119.12.242.0/23 maxlen: 23
119.12.244.0/23 maxlen: 23
119.12.246.0/23 maxlen: 23
119.12.250.0/23 maxlen: 23
119.12.248.0/23 maxlen: 23
185.228.152.0/23 maxlen: 23
185.228.154.0/23 maxlen: 23
195.160.224.0/22 maxlen: 22
207.188.130.0/24 maxlen: 24
213.94.0.0/18 maxlen: 23
193.53.160.0/22 maxlen: 22
137.59.58.0/24 maxlen: 24
185.153.164.0/23 maxlen: 23
185.153.166.0/23 maxlen: 23
89.39.32.0/19 maxlen: 19
94.73.32.0/19 maxlen: 19
185.227.212.0/23 maxlen: 23
89.39.52.0/24 maxlen: 24
185.227.214.0/23 maxlen: 23
91.194.62.0/23 maxlen: 23
91.106.16.0/21 maxlen: 21
170.253.0.0/20 maxlen: 20
185.145.64.0/22 maxlen: 22
170.253.16.0/20 maxlen: 20
170.253.32.0/20 maxlen: 20
170.253.48.0/20 maxlen: 20
185.252.12.0/22 maxlen: 22
185.197.240.0/23 maxlen: 23
213.177.192.0/19 maxlen: 21
185.197.242.0/23 maxlen: 23
188.212.23.0/24 maxlen: 24
93.177.120.0/22 maxlen: 23
93.115.152.0/24 maxlen: 24
181.41.128.0/21 maxlen: 21
212.14.96.0/19 maxlen: 23
93.115.128.0/22 maxlen: 22
93.115.132.0/22 maxlen: 22
93.176.160.0/20 maxlen: 20
93.176.176.0/20 maxlen: 20
89.35.62.0/23 maxlen: 23
93.115.202.0/24 maxlen: 24
93.176.128.0/18 maxlen: 18
93.176.128.0/21 maxlen: 21
93.176.136.0/21 maxlen: 21
93.176.144.0/21 maxlen: 21
93.176.152.0/21 maxlen: 21
93.115.242.0/24 maxlen: 24
207.188.160.0/21 maxlen: 21
188.208.219.0/24 maxlen: 24
207.188.168.0/21 maxlen: 21
91.242.152.0/21 maxlen: 21
93.115.37.0/24 maxlen: 24
2a00:d100:4000::/37 maxlen: 37
2a00:d100:3000::/37 maxlen: 37
2a00:d100:6000::/37 maxlen: 37
2a00:d100:3800::/37 maxlen: 37
2a00:d100:6800::/37 maxlen: 37
2a00:d100:1000::/37 maxlen: 37
2a00:d100:800::/37 maxlen: 37
2a00:d100:1800::/37 maxlen: 37
2a00:d100:2800::/37 maxlen: 37
2a00:d100:4800::/37 maxlen: 37
2a00:d100:5000::/37 maxlen: 37
2a00:d100:2000::/37 maxlen: 37
2a00:d100::/37 maxlen: 37
2a00:d100:5800::/37 maxlen: 37
2a01:8480:2004::/48 maxlen: 48
2a00:d103::/37 maxlen: 37
2a00:d103:800::/37 maxlen: 37
2a00:d103:1000::/37 maxlen: 37
2a00:d103:1800::/37 maxlen: 37
2a00:d103:2000::/37 maxlen: 37
2a00:d103:2800::/37 maxlen: 37
2a00:d102::/37 maxlen: 37
2a00:d102:800::/37 maxlen: 37
2a00:d102:1000::/37 maxlen: 37
2a00:d102:1800::/37 maxlen: 37
2a00:d102:2000::/37 maxlen: 37
2a00:d102:2800::/37 maxlen: 37
2a00:d101:1800::/37 maxlen: 37
2a00:d101:800::/37 maxlen: 37
2a00:d101:1000::/37 maxlen: 37
2a00:d101:3000::/37 maxlen: 37
2a00:d101:4800::/37 maxlen: 37
2a00:d101:2000::/37 maxlen: 37
2a00:d101:2800::/37 maxlen: 37
2a00:d101::/37 maxlen: 37
2a00:d101:4000::/37 maxlen: 37
2a01:8480::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48497379 (0x2e402e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Jan 1 12:54:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9959f87bfe73001d6ca6e9b43c8591d67e783110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:9a:b9:67:4a:a9:4e:48:7d:c6:20:68:35:
24:c4:49:84:30:6c:6b:5c:ee:2f:1d:20:09:90:fc:
0e:4e:b2:b8:c9:9c:15:d6:81:2d:a3:ad:af:38:fd:
d0:55:70:9a:9f:33:95:64:c7:cc:aa:89:46:d4:3f:
f0:40:e9:f7:60:2a:2f:06:b1:ad:29:35:5d:e7:60:
9a:1a:ca:cd:6d:28:23:65:0f:4b:37:a1:5d:92:17:
6b:d8:76:21:f6:0c:c2:3c:57:a8:1e:53:50:b5:2e:
00:a3:c3:a4:94:c9:45:94:f8:1f:f4:6e:b2:ce:4d:
2d:dd:d0:70:f5:0b:16:83:09:5a:7c:ad:ef:9f:69:
09:e0:22:38:dd:8e:e5:50:2a:96:a0:cb:e7:ac:f8:
22:8a:45:39:ff:56:82:78:a5:32:e4:29:f7:1d:f3:
3f:ef:fe:58:4c:d9:97:88:d1:66:29:53:af:0d:67:
6c:0a:8b:36:e5:72:de:c5:f2:b8:35:b6:c0:23:1e:
35:ac:ca:6a:a6:be:ad:42:e8:f2:19:8b:5c:25:0a:
6f:b7:2d:16:42:cc:17:c9:4c:91:98:5c:66:20:92:
ec:e3:06:ab:b6:be:68:b7:73:d5:af:9d:ba:7b:b4:
fa:c6:1a:1f:09:dc:0f:fa:34:6f:fc:f1:8f:f4:50:
c3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:59:F8:7B:FE:73:00:1D:6C:A6:E9:B4:3C:85:91:D6:7E:78:31:10
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/mVn4e_5zAB1spum0PIWR1n54MRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.62.0/23
89.39.32.0/19
91.106.16.0/21
91.194.62.0/23
91.242.152.0/21
93.115.37.0/24
93.115.128.0/21
93.115.152.0/24
93.115.202.0/24
93.115.242.0/24
93.176.128.0/18
93.177.120.0/22
94.73.32.0/19
119.12.224.0-119.12.251.255
137.59.58.0/24
170.253.0.0/18
181.41.128.0/21
185.145.64.0/22
185.153.164.0/22
185.197.240.0/22
185.227.212.0/22
185.228.152.0/22
185.252.12.0/22
188.208.219.0/24
188.212.23.0/24
193.53.160.0/22
195.160.224.0/22
207.188.130.0/24
207.188.160.0/20
212.14.96.0/19
213.94.0.0/18
213.177.192.0/19
217.113.240.0/20
IPv6:
2a00:d100::-2a00:d100:6fff:ffff:ffff:ffff:ffff:ffff
2a00:d101::-2a00:d101:37ff:ffff:ffff:ffff:ffff:ffff
2a00:d101:4000::/36
2a00:d102::-2a00:d102:2fff:ffff:ffff:ffff:ffff:ffff
2a00:d103::-2a00:d103:2fff:ffff:ffff:ffff:ffff:ffff
2a01:8480::/32
Signature Algorithm: sha256WithRSAEncryption
87:05:23:6c:20:ab:dc:f3:42:d9:96:30:85:ce:a6:6a:50:c6:
26:7f:a5:65:a2:61:33:ec:4a:79:56:3a:d6:7d:0d:d2:d6:3b:
bf:7a:86:b9:00:17:5d:4b:19:26:9c:26:bc:85:da:a2:98:85:
55:f2:61:aa:f6:e6:ff:72:91:2b:8d:97:8e:53:21:32:d5:54:
54:b5:77:ca:c1:a2:61:d6:75:19:20:b5:a1:28:c4:13:39:1e:
4f:29:8f:41:85:77:35:ab:f8:a5:13:f8:1c:59:81:d9:86:cb:
dd:3b:f6:b5:95:f0:bf:87:89:03:6e:10:f9:e5:f1:d6:4d:20:
51:f6:54:69:6d:07:0e:fc:eb:c0:52:3f:57:d3:1f:c8:d1:e5:
5e:2b:00:15:a0:04:cc:7b:2c:58:20:31:19:a7:4b:86:dd:fa:
b8:d7:53:81:77:bd:3f:ea:6d:0f:a5:e2:52:95:8b:b5:7f:af:
a8:8c:1c:15:04:e5:e1:ae:94:e9:ef:33:33:82:37:fc:3a:a0:
71:94:d7:87:c8:b3:0f:da:f5:3e:33:56:80:fe:bf:43:17:d4:
f4:83:0d:e2:a6:f4:d3:2d:9d:9c:69:ca:fd:f7:4c:f9:12:e3:
b0:cc:f0:71:3d:2b:63:9b:66:6d:49:36:6f:83:ad:b2:8a:62:
5b:c2:48:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:11 2024 by rpki-client on console-fra.rpki-client.org