Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/NrFDkoM8k-Vfuho3BpZ1phEJkrQ.roa
File: NrFDkoM8k-Vfuho3BpZ1phEJkrQ.roa (raw, json)
Hash identifier: bHQ7Een8URBieOnTJV37iIEdBNsV/nNat2av3ZTRLIo=
Subject key identifier: 36:B1:43:92:83:3C:93:E5:5F:BA:1A:37:06:96:75:A6:11:09:92:B4
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 028C567F
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/NrFDkoM8k-Vfuho3BpZ1phEJkrQ.roa
Signing time: Mon 09 May 2022 13:58:10 +0000
ROA not before: Mon 09 May 2022 13:58:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 88.202.0.0/17 maxlen: 17
88.202.0.0/18 maxlen: 18
88.202.4.0/24 maxlen: 24
88.202.8.0/24 maxlen: 24
88.202.5.0/24 maxlen: 24
88.202.7.0/24 maxlen: 24
88.202.6.0/24 maxlen: 24
88.202.18.0/24 maxlen: 24
84.254.139.0/24 maxlen: 24
84.254.138.0/24 maxlen: 24
84.254.135.0/24 maxlen: 24
84.254.133.0/24 maxlen: 24
84.254.143.0/24 maxlen: 24
84.254.141.0/24 maxlen: 24
84.254.152.0/24 maxlen: 24
84.254.150.0/24 maxlen: 24
84.254.149.0/24 maxlen: 24
84.254.151.0/24 maxlen: 24
84.254.148.0/24 maxlen: 24
84.254.159.0/24 maxlen: 24
84.254.157.0/24 maxlen: 24
84.254.156.0/24 maxlen: 24
84.254.158.0/24 maxlen: 24
84.254.153.0/24 maxlen: 24
84.254.155.0/24 maxlen: 24
84.254.154.0/24 maxlen: 24
84.254.164.0/23 maxlen: 23
84.254.163.0/24 maxlen: 24
84.254.160.0/24 maxlen: 24
84.254.162.0/24 maxlen: 24
84.254.161.0/24 maxlen: 24
84.254.166.0/24 maxlen: 24
84.254.171.0/24 maxlen: 24
84.254.170.0/24 maxlen: 24
84.254.172.0/24 maxlen: 24
84.254.167.0/24 maxlen: 24
84.254.169.0/24 maxlen: 24
84.254.168.0/24 maxlen: 24
84.254.174.0/24 maxlen: 24
84.254.173.0/24 maxlen: 24
84.254.176.0/21 maxlen: 21
84.254.175.0/24 maxlen: 24
84.254.184.0/22 maxlen: 22
176.227.128.0/20 maxlen: 20
84.254.132.0/24 maxlen: 24
84.254.129.0/24 maxlen: 24
84.254.128.0/24 maxlen: 24
84.254.131.0/24 maxlen: 24
84.254.128.0/18 maxlen: 18
84.254.188.0/23 maxlen: 23
84.254.190.0/24 maxlen: 24
95.210.192.0/20 maxlen: 20
95.210.192.0/19 maxlen: 19
95.210.224.0/20 maxlen: 20
95.210.136.0/24 maxlen: 24
95.210.138.0/24 maxlen: 24
95.210.140.0/24 maxlen: 24
95.210.143.0/24 maxlen: 24
95.210.142.0/24 maxlen: 24
95.210.152.0/24 maxlen: 24
95.210.157.0/24 maxlen: 24
95.210.156.0/24 maxlen: 24
95.210.160.0/19 maxlen: 19
95.210.240.0/21 maxlen: 21
95.210.252.0/23 maxlen: 23
95.210.248.0/22 maxlen: 22
95.210.255.0/24 maxlen: 24
5.61.192.0/21 maxlen: 21
5.61.197.0/24 maxlen: 24
5.61.193.0/24 maxlen: 24
5.61.195.0/24 maxlen: 24
95.210.0.0/22 maxlen: 22
95.210.8.0/21 maxlen: 21
95.210.0.0/16 maxlen: 16
95.210.11.0/24 maxlen: 24
95.210.10.0/24 maxlen: 24
95.210.7.0/24 maxlen: 24
95.210.12.0/24 maxlen: 24
213.209.176.0/20 maxlen: 24
213.209.184.0/22 maxlen: 22
95.210.94.0/24 maxlen: 24
95.210.105.0/24 maxlen: 24
95.210.104.0/24 maxlen: 24
95.210.112.0/22 maxlen: 22
95.210.110.0/24 maxlen: 24
95.210.109.0/24 maxlen: 24
95.210.108.0/24 maxlen: 24
95.210.107.0/24 maxlen: 24
95.210.116.0/22 maxlen: 22
95.210.128.0/24 maxlen: 24
95.210.37.0/24 maxlen: 24
95.210.36.0/24 maxlen: 24
95.210.32.0/23 maxlen: 23
95.210.34.0/24 maxlen: 24
95.210.44.0/23 maxlen: 23
95.210.43.0/24 maxlen: 24
95.210.42.0/24 maxlen: 24
95.210.46.0/23 maxlen: 23
95.210.48.0/22 maxlen: 22
95.210.55.0/24 maxlen: 24
95.210.64.0/20 maxlen: 20
95.210.61.0/24 maxlen: 24
95.210.63.0/24 maxlen: 24
95.210.71.0/24 maxlen: 24
95.210.68.0/24 maxlen: 24
95.210.70.0/24 maxlen: 24
95.210.69.0/24 maxlen: 24
95.210.78.0/24 maxlen: 24
95.210.75.0/24 maxlen: 24
95.210.77.0/24 maxlen: 24
95.210.76.0/24 maxlen: 24
95.210.73.0/24 maxlen: 24
95.210.72.0/24 maxlen: 24
88.202.85.0/24 maxlen: 24
88.202.81.0/24 maxlen: 24
88.202.84.0/24 maxlen: 24
88.202.79.0/24 maxlen: 24
88.202.88.0/24 maxlen: 24
88.202.90.0/24 maxlen: 24
88.202.87.0/24 maxlen: 24
88.202.86.0/24 maxlen: 24
88.202.96.0/24 maxlen: 24
88.202.95.0/24 maxlen: 24
88.202.98.0/24 maxlen: 24
88.202.97.0/24 maxlen: 24
88.202.93.0/24 maxlen: 24
88.202.105.0/24 maxlen: 24
88.202.103.0/24 maxlen: 24
88.202.102.0/24 maxlen: 24
88.202.104.0/24 maxlen: 24
88.202.99.0/24 maxlen: 24
88.202.101.0/24 maxlen: 24
88.202.100.0/24 maxlen: 24
88.202.112.0/24 maxlen: 24
88.202.106.0/24 maxlen: 24
88.202.107.0/24 maxlen: 24
88.202.116.0/22 maxlen: 22
88.202.121.0/24 maxlen: 24
88.202.30.0/24 maxlen: 24
88.202.32.0/24 maxlen: 24
5.175.64.0/20 maxlen: 20
88.202.47.0/24 maxlen: 24
88.202.46.0/24 maxlen: 24
88.202.48.0/24 maxlen: 24
88.202.55.0/24 maxlen: 24
5.175.77.0/24 maxlen: 24
88.202.64.0/24 maxlen: 24
5.175.76.0/24 maxlen: 24
88.202.63.0/24 maxlen: 24
88.202.68.0/23 maxlen: 23
88.202.70.0/23 maxlen: 23
88.202.66.0/24 maxlen: 24
88.202.76.0/23 maxlen: 23
88.202.72.0/22 maxlen: 22
213.209.164.0/24 maxlen: 24
213.209.163.0/24 maxlen: 24
213.209.161.0/24 maxlen: 24
213.209.160.0/19 maxlen: 19
213.209.162.0/24 maxlen: 24
213.209.169.0/24 maxlen: 24
213.209.170.0/24 maxlen: 24
213.209.172.0/22 maxlen: 24
2a00:ca0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42751615 (0x28c567f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: May 9 13:58:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36b14392833c93e55fba1a37069675a6110992b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:0d:fa:e2:43:c7:2c:fc:06:44:91:09:22:
62:46:90:20:f0:f4:71:98:6d:09:34:c3:e4:4c:e2:
f6:26:11:f6:ea:2f:6e:12:ea:8c:ca:ea:1d:59:59:
33:b5:45:01:ca:a3:99:45:d9:f5:d9:52:f5:33:90:
84:22:2e:18:48:7b:a6:54:78:15:de:fc:3e:5f:43:
ee:1f:31:50:cf:fa:d0:28:aa:39:60:06:27:28:9e:
40:12:c9:6a:fb:43:2c:b1:40:ef:6c:61:a3:3d:07:
35:27:41:07:0f:ec:3e:6b:af:d5:12:68:c1:9e:49:
9b:40:62:9b:c2:e6:a7:bd:a4:25:42:66:61:41:8b:
85:d4:d1:3d:00:3b:74:70:4c:e2:f8:51:24:0c:e6:
6b:f5:79:95:9f:58:44:95:c0:f2:cd:b4:52:08:6e:
b0:da:a4:a3:c9:e1:b8:68:b0:c0:a8:de:84:11:f4:
f5:ac:6b:fc:5d:8e:d8:ac:b1:54:8a:5c:1f:cb:cf:
05:af:58:ba:fd:f5:54:06:a5:37:75:cc:96:1e:6c:
13:9d:13:5c:13:cb:0f:e9:f1:b8:00:05:3f:e2:5b:
62:41:2a:fa:e2:75:b9:c8:6c:54:f3:6f:34:2b:4e:
5b:69:59:5f:57:19:0c:b5:73:ba:23:3d:a0:c1:81:
42:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B1:43:92:83:3C:93:E5:5F:BA:1A:37:06:96:75:A6:11:09:92:B4
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/NrFDkoM8k-Vfuho3BpZ1phEJkrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.192.0/21
5.175.64.0/20
84.254.128.0/18
88.202.0.0/17
95.210.0.0/16
176.227.128.0/20
213.209.160.0/19
IPv6:
2a00:ca0::/32
Signature Algorithm: sha256WithRSAEncryption
5c:cc:48:d1:6f:69:96:20:a5:87:e0:39:c4:2c:21:6c:32:9d:
35:b3:a4:4b:aa:94:1f:b4:c7:64:95:f9:f8:96:42:e2:b7:e9:
a9:70:7f:30:8b:94:92:5b:32:1f:11:81:79:22:17:10:06:52:
0c:ec:c2:f2:02:41:44:14:09:21:a0:bb:6e:30:9b:13:75:04:
42:06:9f:94:98:cf:b0:fa:96:eb:5f:2c:32:2f:ff:98:65:b4:
ac:8c:41:fe:f8:a5:c7:5d:b3:19:f3:ad:40:87:f6:5d:24:bc:
b9:18:72:ce:3f:06:55:83:3c:0a:01:8c:22:1e:f8:cb:02:02:
ae:39:f9:64:f4:de:39:1e:89:0e:04:e3:b3:02:e9:de:f4:13:
99:ef:53:d2:e3:58:f0:90:9d:ce:38:a3:75:17:43:c3:12:d0:
cb:8c:45:1a:11:e2:1b:e2:c9:55:a5:28:35:05:9a:bc:28:5f:
a8:f0:85:b6:77:d4:ff:48:05:27:00:4b:1b:99:2f:af:c2:74:
af:ba:99:7e:be:ff:70:95:2e:48:eb:81:c3:54:61:9b:c0:f2:
2a:75:29:cf:28:f8:db:11:42:46:64:bc:45:6f:82:f4:c6:e5:
fb:e3:fd:d6:e3:e6:20:a0:ca:01:27:5a:9f:4d:11:b4:26:24:
df:d1:49:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:19 2024 by rpki-client on console-fra.rpki-client.org