Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1fPN9t0Ii9UBXNxlv_LOmjjFep0.roa
File: 1fPN9t0Ii9UBXNxlv_LOmjjFep0.roa (raw, json)
Hash identifier: EErJNPMGQzg11uaLKirFlNIfd0gNXr5xyJ3ytYPPiJY=
Subject key identifier: D5:F3:CD:F6:DD:08:8B:D5:01:5C:DC:65:BF:F2:CE:9A:38:C5:7A:9D
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 03C8DC01
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1fPN9t0Ii9UBXNxlv_LOmjjFep0.roa
Signing time: Wed 18 May 2022 14:18:17 +0000
ROA not before: Wed 18 May 2022 14:18:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.134.40.0/22 maxlen: 24
212.63.118.0/24 maxlen: 24
212.63.117.0/24 maxlen: 24
212.63.116.0/24 maxlen: 24
212.63.121.0/24 maxlen: 24
212.63.123.0/24 maxlen: 24
212.63.122.0/24 maxlen: 24
193.32.236.0/22 maxlen: 24
185.94.48.0/22 maxlen: 24
91.245.200.0/21 maxlen: 24
185.131.12.0/22 maxlen: 22
85.217.132.0/24 maxlen: 24
85.217.129.0/24 maxlen: 24
85.217.139.0/24 maxlen: 24
85.217.138.0/24 maxlen: 24
85.217.137.0/24 maxlen: 24
85.217.136.0/24 maxlen: 24
85.217.135.0/24 maxlen: 24
85.217.134.0/24 maxlen: 24
85.217.133.0/24 maxlen: 24
85.217.141.0/24 maxlen: 24
85.217.143.0/24 maxlen: 24
85.217.152.0/24 maxlen: 24
85.217.151.0/24 maxlen: 24
85.217.150.0/24 maxlen: 24
85.217.147.0/24 maxlen: 24
85.217.146.0/24 maxlen: 24
85.217.155.0/24 maxlen: 24
85.217.154.0/24 maxlen: 24
85.217.153.0/24 maxlen: 24
85.217.159.0/24 maxlen: 24
85.217.158.0/24 maxlen: 24
85.217.157.0/24 maxlen: 24
85.217.156.0/24 maxlen: 24
185.130.24.0/23 maxlen: 24
185.130.26.0/23 maxlen: 24
188.241.96.0/21 maxlen: 24
45.157.56.0/22 maxlen: 24
185.234.184.0/24 maxlen: 24
185.234.186.0/23 maxlen: 23
185.234.185.0/24 maxlen: 24
185.44.233.0/24 maxlen: 24
185.44.234.0/23 maxlen: 24
185.176.84.0/22 maxlen: 24
185.51.108.0/22 maxlen: 24
185.162.172.0/23 maxlen: 24
185.162.175.0/24 maxlen: 24
185.162.174.0/24 maxlen: 24
195.82.105.0/24 maxlen: 24
195.82.104.0/24 maxlen: 24
195.82.106.0/24 maxlen: 24
195.82.124.0/24 maxlen: 24
185.216.216.0/22 maxlen: 22
185.216.218.0/23 maxlen: 23
185.216.217.0/24 maxlen: 24
139.28.76.0/22 maxlen: 22
185.196.203.0/24 maxlen: 24
185.196.202.0/24 maxlen: 24
185.196.200.0/23 maxlen: 24
5.226.16.0/20 maxlen: 24
88.98.98.0/24 maxlen: 24
88.98.96.0/20 maxlen: 24
88.98.96.0/23 maxlen: 23
88.98.104.0/23 maxlen: 24
88.98.100.0/22 maxlen: 24
88.98.99.0/24 maxlen: 24
88.98.110.0/24 maxlen: 24
88.98.108.0/22 maxlen: 24
88.98.106.0/23 maxlen: 24
88.98.112.0/20 maxlen: 24
141.98.52.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63495169 (0x3c8dc01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: May 18 14:18:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5f3cdf6dd088bd5015cdc65bff2ce9a38c57a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:f2:1b:0c:98:e3:b7:1c:49:6d:e6:8d:c7:
5d:90:68:80:11:8e:e0:84:9c:d5:6d:80:ef:8d:ad:
4e:57:07:69:f2:e9:7c:10:cd:53:1a:cf:83:ce:28:
ff:b5:6c:25:64:b2:84:b3:28:8c:e9:b5:be:c5:a8:
f8:d8:73:4d:e4:ba:c4:ac:13:6e:48:90:8a:7d:04:
2c:33:61:b9:2a:24:31:5e:2d:b9:4b:a2:43:98:48:
8a:10:12:eb:6b:da:c5:b6:d1:2f:7c:01:45:4a:f4:
08:d0:b0:7b:dd:f5:33:d2:69:49:17:9c:3b:9f:03:
ca:60:77:3d:92:4b:cf:3c:52:44:d9:ad:da:38:50:
ec:c4:7b:c5:3c:9a:14:1b:0e:18:31:ff:d6:90:ef:
45:86:08:5c:97:36:4e:8a:ce:40:be:d1:35:6f:be:
3b:58:ea:e1:4b:4d:68:e5:9b:db:58:e6:8a:98:86:
37:d3:47:58:01:09:a1:4a:ea:81:bf:68:38:16:07:
72:57:63:55:f4:84:78:18:78:2f:a3:d7:0b:1b:78:
8d:57:89:64:71:66:bf:a7:66:18:71:37:56:2c:ef:
9c:e6:db:83:98:70:d5:a8:5e:64:ea:41:80:a4:6c:
9c:5a:0a:91:4a:8f:64:f6:62:bf:6c:65:80:08:21:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F3:CD:F6:DD:08:8B:D5:01:5C:DC:65:BF:F2:CE:9A:38:C5:7A:9D
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1fPN9t0Ii9UBXNxlv_LOmjjFep0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.16.0/20
45.157.56.0/22
85.217.129.0/24
85.217.132.0-85.217.139.255
85.217.141.0/24
85.217.143.0/24
85.217.146.0/23
85.217.150.0-85.217.159.255
88.98.96.0/19
91.245.200.0/21
139.28.76.0/22
141.98.52.0/22
185.44.233.0-185.44.235.255
185.51.108.0/22
185.94.48.0/22
185.130.24.0/22
185.131.12.0/22
185.134.40.0/22
185.162.172.0/22
185.176.84.0/22
185.196.200.0/22
185.216.216.0/22
185.234.184.0/22
188.241.96.0/21
193.32.236.0/22
195.82.104.0-195.82.106.255
195.82.124.0/24
212.63.116.0-212.63.118.255
212.63.121.0-212.63.123.255
Signature Algorithm: sha256WithRSAEncryption
1b:d2:aa:77:40:d4:e4:89:ec:d9:a1:a1:e0:fd:35:89:f4:f7:
86:ec:df:93:1a:93:62:92:4e:da:6c:bb:78:d7:1a:ba:81:a2:
a4:b5:85:0b:b2:48:5b:05:2c:78:d6:05:cc:1e:e9:6c:fc:4b:
37:7b:51:62:ca:b0:f0:ab:d5:90:99:3f:15:9d:c1:ef:d9:32:
98:c9:08:e4:36:4e:ab:6e:c0:62:14:2d:75:32:ce:d1:96:de:
86:84:2a:6a:10:9d:ef:d4:3f:ad:66:88:b7:8f:d0:1f:05:16:
fd:23:25:18:04:41:3a:1a:8a:e6:ad:79:97:58:50:12:92:91:
7f:fc:f0:31:72:ae:57:dc:69:2f:cb:60:9d:dc:88:cf:cb:9c:
0c:5a:d8:6a:34:30:23:54:60:9e:a7:25:62:bc:38:99:88:98:
70:0c:ac:7d:8e:9e:b8:0d:a5:75:0d:cb:d5:4c:c6:b6:c0:1d:
8d:69:e0:76:36:75:95:7d:a9:ef:04:cc:3a:6f:70:99:56:b2:
e2:f0:d7:0a:9b:9b:9c:8c:7b:43:5b:46:8b:4f:14:5b:08:33:
ed:67:61:30:8a:75:32:f9:e8:ba:7c:ac:99:8c:ba:81:f6:76:
38:28:7f:6b:d0:b8:79:cc:30:05:ad:df:36:b9:a7:cf:7f:d6:
8f:9b:ec:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org