Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/QsU2BqkwOkAKcxYsvYlzEOuxIN4.roa
File: QsU2BqkwOkAKcxYsvYlzEOuxIN4.roa (raw, json)
Hash identifier: PEgBc3uijPbV8PcQlalEv6mzKmTZ8DtswSKeZ87eZWw=
Subject key identifier: 42:C5:36:06:A9:30:3A:40:0A:73:16:2C:BD:89:73:10:EB:B1:20:DE
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01852EE2B210889998A9A617A65F176ACF47
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/QsU2BqkwOkAKcxYsvYlzEOuxIN4.roa
Signing time: Tue 20 Dec 2022 09:34:46 +0000
ROA not before: Tue 20 Dec 2022 09:34:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.228.120.0/24 maxlen: 24
185.228.123.0/24 maxlen: 24
185.228.122.0/24 maxlen: 24
185.228.121.0/24 maxlen: 24
185.228.120.0/22 maxlen: 24
185.134.40.0/22 maxlen: 24
5.181.100.0/22 maxlen: 24
45.141.4.0/22 maxlen: 24
185.93.120.0/22 maxlen: 24
185.113.186.0/24 maxlen: 24
185.113.185.0/24 maxlen: 24
185.113.184.0/24 maxlen: 24
185.113.187.0/24 maxlen: 24
188.208.24.0/22 maxlen: 24
188.208.20.0/22 maxlen: 24
193.32.236.0/22 maxlen: 24
188.208.21.0/24 maxlen: 24
89.47.4.0/22 maxlen: 24
185.94.48.0/22 maxlen: 24
185.93.232.0/22 maxlen: 24
176.32.54.0/24 maxlen: 24
93.92.224.0/22 maxlen: 24
185.119.236.0/22 maxlen: 24
188.247.168.0/22 maxlen: 24
176.32.50.0/24 maxlen: 24
91.221.76.0/23 maxlen: 24
91.221.86.0/23 maxlen: 24
89.32.194.0/23 maxlen: 24
185.248.96.0/22 maxlen: 24
188.241.96.0/21 maxlen: 24
185.120.44.0/22 maxlen: 24
185.234.186.0/23 maxlen: 23
185.234.184.0/24 maxlen: 24
86.106.184.0/22 maxlen: 24
185.234.185.0/24 maxlen: 24
185.44.233.0/24 maxlen: 24
185.44.234.0/23 maxlen: 24
185.51.108.0/22 maxlen: 24
185.240.44.0/22 maxlen: 24
185.72.52.0/22 maxlen: 24
86.105.234.0/24 maxlen: 24
188.240.204.0/22 maxlen: 24
212.104.160.0/19 maxlen: 24
89.37.80.0/22 maxlen: 24
5.226.16.0/20 maxlen: 24
185.131.188.0/22 maxlen: 24
85.117.245.0/24 maxlen: 24
193.91.0.0/24 maxlen: 24
85.117.244.0/22 maxlen: 24
193.91.10.0/24 maxlen: 24
185.43.252.0/22 maxlen: 24
185.77.168.0/22 maxlen: 24
88.98.98.0/24 maxlen: 24
86.105.28.0/22 maxlen: 24
88.98.96.0/20 maxlen: 24
88.98.96.0/23 maxlen: 23
88.98.99.0/24 maxlen: 24
88.98.104.0/23 maxlen: 24
88.98.100.0/22 maxlen: 24
88.98.111.0/24 maxlen: 24
88.98.110.0/24 maxlen: 24
88.98.108.0/23 maxlen: 24
88.98.108.0/22 maxlen: 24
88.98.106.0/23 maxlen: 24
88.98.112.0/20 maxlen: 24
141.98.52.0/22 maxlen: 24
188.239.184.0/22 maxlen: 24
212.63.116.0/22 maxlen: 24
212.63.118.0/24 maxlen: 24
212.63.117.0/24 maxlen: 24
212.63.116.0/24 maxlen: 24
212.63.121.0/24 maxlen: 24
212.63.119.0/24 maxlen: 24
212.63.123.0/24 maxlen: 24
212.63.122.0/24 maxlen: 24
185.83.104.0/22 maxlen: 24
45.144.12.0/22 maxlen: 24
45.90.52.0/22 maxlen: 24
185.158.52.0/22 maxlen: 24
91.245.200.0/21 maxlen: 24
185.185.52.0/22 maxlen: 24
185.16.120.0/22 maxlen: 24
185.131.13.0/24 maxlen: 24
185.131.12.0/22 maxlen: 24
85.217.132.0/24 maxlen: 24
85.217.129.0/24 maxlen: 24
85.217.139.0/24 maxlen: 24
85.217.138.0/24 maxlen: 24
85.217.137.0/24 maxlen: 24
85.217.136.0/24 maxlen: 24
85.217.135.0/24 maxlen: 24
85.217.134.0/24 maxlen: 24
85.217.133.0/24 maxlen: 24
85.217.141.0/24 maxlen: 24
85.217.143.0/24 maxlen: 24
85.217.142.0/24 maxlen: 24
85.217.152.0/24 maxlen: 24
85.217.151.0/24 maxlen: 24
85.217.150.0/24 maxlen: 24
85.217.147.0/24 maxlen: 24
85.217.146.0/24 maxlen: 24
85.217.159.0/24 maxlen: 24
85.217.155.0/24 maxlen: 24
185.156.248.0/22 maxlen: 24
85.217.154.0/24 maxlen: 24
85.217.153.0/24 maxlen: 24
85.217.158.0/24 maxlen: 24
85.217.157.0/24 maxlen: 24
85.217.156.0/24 maxlen: 24
185.130.24.0/23 maxlen: 24
185.75.200.0/22 maxlen: 24
194.8.140.0/22 maxlen: 24
194.49.0.0/22 maxlen: 24
89.36.40.0/22 maxlen: 24
89.42.236.0/23 maxlen: 24
185.130.26.0/23 maxlen: 24
185.123.136.0/22 maxlen: 24
45.157.56.0/22 maxlen: 24
185.48.84.0/22 maxlen: 24
185.176.84.0/22 maxlen: 24
185.210.16.0/22 maxlen: 24
79.142.184.0/22 maxlen: 24
185.162.172.0/23 maxlen: 24
185.162.175.0/24 maxlen: 24
185.162.174.0/24 maxlen: 24
195.82.105.0/24 maxlen: 24
195.82.104.0/24 maxlen: 24
195.82.106.0/24 maxlen: 24
195.82.124.0/24 maxlen: 24
195.82.123.0/24 maxlen: 24
195.82.122.0/24 maxlen: 24
195.82.121.0/24 maxlen: 24
195.82.120.0/24 maxlen: 24
185.216.216.0/22 maxlen: 22
185.216.218.0/23 maxlen: 23
185.216.217.0/24 maxlen: 24
139.28.76.0/22 maxlen: 22
185.196.200.0/23 maxlen: 24
185.196.203.0/24 maxlen: 24
185.196.202.0/24 maxlen: 24
185.229.96.0/22 maxlen: 24
91.242.144.0/22 maxlen: 24
185.229.44.0/22 maxlen: 24
185.202.188.0/22 maxlen: 24
2a06:8840::/29 maxlen: 29
2a06:8f40::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2e:e2:b2:10:88:99:98:a9:a6:17:a6:5f:17:6a:cf:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 20 09:34:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42c53606a9303a400a73162cbd897310ebb120de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:04:28:21:fe:b3:8e:38:56:b6:83:89:d0:0e:
24:1b:fa:3c:b3:2a:26:ca:32:df:e1:3a:5b:9a:84:
7d:5a:f9:4b:3e:d1:f7:54:49:70:a9:57:03:4b:26:
05:a7:24:9b:1f:7e:66:7e:dd:39:68:ee:e8:ad:51:
e5:30:b7:6d:7f:a5:09:ca:93:b1:93:2b:be:26:04:
22:8a:8c:d9:92:24:06:cb:69:1b:01:30:b4:03:44:
06:49:ae:c8:af:91:52:09:6a:4a:bb:2a:cb:12:e9:
d9:f6:9d:3f:99:e9:40:d0:f8:df:a9:1e:ed:47:b0:
39:35:63:2d:36:2d:ba:ab:63:59:39:34:f4:3f:6e:
6b:54:7c:59:38:fd:93:7c:ef:a4:8d:68:87:28:7e:
a6:ac:30:36:6b:35:41:34:1e:15:fe:ff:52:72:2a:
09:57:0b:65:4b:25:61:0b:1e:5c:77:88:37:d8:d2:
af:cf:be:ae:4b:81:8e:ad:f3:16:77:9a:ed:19:12:
63:d6:1c:89:4b:13:c3:35:3e:ce:87:70:64:c1:04:
12:bd:0b:0e:dd:7b:e1:e7:3e:d6:24:1b:1e:93:19:
73:39:23:40:04:59:52:61:d4:63:95:11:67:67:24:
1c:74:47:44:9b:b2:b9:1c:e9:12:43:1c:3c:13:96:
c8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C5:36:06:A9:30:3A:40:0A:73:16:2C:BD:89:73:10:EB:B1:20:DE
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/QsU2BqkwOkAKcxYsvYlzEOuxIN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.100.0/22
5.226.16.0/20
45.90.52.0/22
45.141.4.0/22
45.144.12.0/22
45.157.56.0/22
79.142.184.0/22
85.117.244.0/22
85.217.129.0/24
85.217.132.0-85.217.139.255
85.217.141.0-85.217.143.255
85.217.146.0/23
85.217.150.0-85.217.159.255
86.105.28.0/22
86.105.234.0/24
86.106.184.0/22
88.98.96.0/19
89.32.194.0/23
89.36.40.0/22
89.37.80.0/22
89.42.236.0/23
89.47.4.0/22
91.221.76.0/23
91.221.86.0/23
91.242.144.0/22
91.245.200.0/21
93.92.224.0/22
139.28.76.0/22
141.98.52.0/22
176.32.50.0/24
176.32.54.0/24
185.16.120.0/22
185.43.252.0/22
185.44.233.0-185.44.235.255
185.48.84.0/22
185.51.108.0/22
185.72.52.0/22
185.75.200.0/22
185.77.168.0/22
185.83.104.0/22
185.93.120.0/22
185.93.232.0/22
185.94.48.0/22
185.113.184.0/22
185.119.236.0/22
185.120.44.0/22
185.123.136.0/22
185.130.24.0/22
185.131.12.0/22
185.131.188.0/22
185.134.40.0/22
185.156.248.0/22
185.158.52.0/22
185.162.172.0/22
185.176.84.0/22
185.185.52.0/22
185.196.200.0/22
185.202.188.0/22
185.210.16.0/22
185.216.216.0/22
185.228.120.0/22
185.229.44.0/22
185.229.96.0/22
185.234.184.0/22
185.240.44.0/22
185.248.96.0/22
188.208.20.0-188.208.27.255
188.239.184.0/22
188.240.204.0/22
188.241.96.0/21
188.247.168.0/22
193.32.236.0/22
193.91.0.0/24
193.91.10.0/24
194.8.140.0/22
194.49.0.0/22
195.82.104.0-195.82.106.255
195.82.120.0-195.82.124.255
212.63.116.0/22
212.63.121.0-212.63.123.255
212.104.160.0/19
IPv6:
2a06:8840::/29
2a06:8f40::/29
Signature Algorithm: sha256WithRSAEncryption
40:14:76:92:3f:d0:6e:3d:93:94:49:9d:aa:f9:56:8a:20:20:
6c:55:c3:93:65:ee:4d:07:14:5b:e7:4e:da:a4:54:87:09:6a:
47:1e:6b:7d:85:c1:a6:91:90:3d:e4:9e:64:76:4c:93:63:42:
31:57:a7:09:a1:91:e1:36:37:44:72:e3:e4:b9:e5:12:64:11:
e2:e1:02:3e:cb:91:34:b2:60:08:71:d2:7c:6e:10:f6:15:65:
7a:6d:9d:dc:31:7c:57:4c:40:62:6a:a1:21:21:70:0d:3e:7b:
24:11:09:f6:2f:0b:55:47:8c:6a:3c:ad:17:a4:db:4f:da:e0:
fd:2a:47:ec:d3:cc:55:ab:3b:3a:2d:4d:8b:b0:df:7c:9c:55:
fc:94:72:c0:eb:f7:27:81:b7:78:11:ce:4e:a6:c9:1c:7a:94:
38:a6:5b:aa:70:f6:f9:38:62:b3:c7:8a:ad:f2:43:28:8a:e5:
85:c7:52:d6:66:e9:cd:84:b7:f8:dd:81:30:10:8c:83:51:a0:
a6:eb:6e:7a:33:a1:7a:ed:c3:7e:9f:3a:37:b2:ca:99:04:29:
38:19:31:6d:4d:4d:51:7b:54:69:a0:42:aa:9b:49:79:df:f9:
15:89:b5:b6:2b:58:42:f6:a8:04:15:23:e6:e8:7e:ec:47:27:
71:b0:4f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org