Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/pIteCmdExmpNRBCfyKaD4y9bOPk.roa
File: pIteCmdExmpNRBCfyKaD4y9bOPk.roa (raw, json)
Hash identifier: vOINZLHt+PsXPEMUltntNYFFWbNq+aZ7YyVkhtKx4RE=
Subject key identifier: A4:8B:5E:0A:67:44:C6:6A:4D:44:10:9F:C8:A6:83:E3:2F:5B:38:F9
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 03EB017F
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/pIteCmdExmpNRBCfyKaD4y9bOPk.roa
Signing time: Mon 30 May 2022 12:00:13 +0000
ROA not before: Mon 30 May 2022 12:00:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.134.40.0/22 maxlen: 24
212.63.118.0/24 maxlen: 24
212.63.117.0/24 maxlen: 24
212.63.116.0/24 maxlen: 24
212.63.121.0/24 maxlen: 24
212.63.123.0/24 maxlen: 24
212.63.122.0/24 maxlen: 24
193.32.236.0/22 maxlen: 24
45.90.52.0/22 maxlen: 24
185.94.48.0/22 maxlen: 24
91.245.200.0/21 maxlen: 24
185.93.232.0/22 maxlen: 24
185.131.12.0/22 maxlen: 22
85.217.132.0/24 maxlen: 24
85.217.129.0/24 maxlen: 24
85.217.139.0/24 maxlen: 24
85.217.138.0/24 maxlen: 24
85.217.137.0/24 maxlen: 24
85.217.136.0/24 maxlen: 24
85.217.135.0/24 maxlen: 24
85.217.134.0/24 maxlen: 24
85.217.133.0/24 maxlen: 24
85.217.141.0/24 maxlen: 24
85.217.143.0/24 maxlen: 24
85.217.152.0/24 maxlen: 24
85.217.151.0/24 maxlen: 24
85.217.150.0/24 maxlen: 24
85.217.147.0/24 maxlen: 24
85.217.146.0/24 maxlen: 24
85.217.155.0/24 maxlen: 24
85.217.154.0/24 maxlen: 24
85.217.153.0/24 maxlen: 24
85.217.159.0/24 maxlen: 24
85.217.158.0/24 maxlen: 24
85.217.157.0/24 maxlen: 24
85.217.156.0/24 maxlen: 24
185.130.24.0/23 maxlen: 24
194.49.0.0/22 maxlen: 24
185.130.26.0/23 maxlen: 24
188.241.96.0/21 maxlen: 24
45.157.56.0/22 maxlen: 24
185.234.184.0/24 maxlen: 24
185.234.186.0/23 maxlen: 23
185.234.185.0/24 maxlen: 24
185.44.233.0/24 maxlen: 24
185.44.234.0/23 maxlen: 24
185.176.84.0/22 maxlen: 24
79.142.184.0/22 maxlen: 24
185.51.108.0/22 maxlen: 24
185.162.172.0/23 maxlen: 24
185.162.175.0/24 maxlen: 24
185.162.174.0/24 maxlen: 24
195.82.105.0/24 maxlen: 24
195.82.104.0/24 maxlen: 24
195.82.106.0/24 maxlen: 24
195.82.124.0/24 maxlen: 24
185.216.216.0/22 maxlen: 22
185.216.218.0/23 maxlen: 23
185.216.217.0/24 maxlen: 24
139.28.76.0/22 maxlen: 22
185.196.203.0/24 maxlen: 24
185.196.202.0/24 maxlen: 24
185.196.200.0/23 maxlen: 24
5.226.16.0/20 maxlen: 24
91.242.144.0/22 maxlen: 24
185.202.188.0/22 maxlen: 24
88.98.98.0/24 maxlen: 24
88.98.96.0/20 maxlen: 24
88.98.96.0/23 maxlen: 23
88.98.104.0/23 maxlen: 24
88.98.100.0/22 maxlen: 24
88.98.99.0/24 maxlen: 24
88.98.110.0/24 maxlen: 24
88.98.108.0/22 maxlen: 24
88.98.106.0/23 maxlen: 24
88.98.112.0/20 maxlen: 24
141.98.52.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65732991 (0x3eb017f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: May 30 12:00:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a48b5e0a6744c66a4d44109fc8a683e32f5b38f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:3b:d0:f6:4e:3d:41:94:0f:6c:cc:83:84:
00:9b:60:09:e3:9a:7d:86:2b:03:d9:e0:62:72:c4:
51:40:ac:35:74:dd:20:33:26:11:ce:87:c5:18:d4:
74:7f:e3:20:d9:24:07:50:ae:f3:7d:32:61:dc:99:
b3:48:d9:46:b2:63:d3:09:6a:d1:5d:f4:f1:f0:5d:
c4:b3:4d:68:df:21:85:e7:a0:63:83:9f:b5:fc:9c:
d3:f4:e2:8a:75:aa:9e:f7:0d:e7:56:e3:a3:2d:ed:
db:f0:f4:39:6e:85:ed:c0:e2:4b:cd:93:c5:25:99:
52:2f:cd:85:7a:34:f1:a6:e1:ab:7d:c3:91:c9:ea:
ee:de:89:e9:09:31:73:e3:8e:1f:d2:45:8d:40:ae:
86:fd:a8:6d:e9:f9:ab:06:11:d2:7c:0c:17:61:9a:
4c:96:9f:c3:68:fb:81:49:d0:36:02:cb:9b:36:e8:
10:2f:7e:e6:2a:c8:72:e8:3f:00:b8:4e:b5:f9:86:
51:6a:f2:fb:9f:5a:2e:eb:09:ba:a1:97:3c:e4:ad:
ba:4a:19:4e:49:ce:08:99:28:ce:ae:5a:99:a7:b5:
af:8f:b6:bc:64:2c:68:4e:dc:a4:69:7a:29:66:05:
7f:31:16:37:2f:66:45:e6:cf:01:d6:fc:ac:36:a4:
69:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8B:5E:0A:67:44:C6:6A:4D:44:10:9F:C8:A6:83:E3:2F:5B:38:F9
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/pIteCmdExmpNRBCfyKaD4y9bOPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.16.0/20
45.90.52.0/22
45.157.56.0/22
79.142.184.0/22
85.217.129.0/24
85.217.132.0-85.217.139.255
85.217.141.0/24
85.217.143.0/24
85.217.146.0/23
85.217.150.0-85.217.159.255
88.98.96.0/19
91.242.144.0/22
91.245.200.0/21
139.28.76.0/22
141.98.52.0/22
185.44.233.0-185.44.235.255
185.51.108.0/22
185.93.232.0/22
185.94.48.0/22
185.130.24.0/22
185.131.12.0/22
185.134.40.0/22
185.162.172.0/22
185.176.84.0/22
185.196.200.0/22
185.202.188.0/22
185.216.216.0/22
185.234.184.0/22
188.241.96.0/21
193.32.236.0/22
194.49.0.0/22
195.82.104.0-195.82.106.255
195.82.124.0/24
212.63.116.0-212.63.118.255
212.63.121.0-212.63.123.255
Signature Algorithm: sha256WithRSAEncryption
7a:15:b1:1e:f2:2f:5d:99:6b:a8:ff:df:16:fa:88:8b:d0:23:
5a:44:ad:a1:91:de:28:d3:d4:d7:c1:05:5b:bd:50:d0:f1:93:
a8:e5:ff:42:ae:23:bb:ea:b6:15:ed:63:54:2a:e5:81:b4:d5:
f1:82:af:ef:e9:41:b7:b6:8e:c3:6f:97:8c:11:07:f8:c7:0a:
64:c1:63:07:d8:de:6d:6a:58:c4:92:eb:60:70:d4:b7:6d:c0:
5f:4b:dd:5b:b5:c9:84:ad:5f:0e:fd:c6:dc:ad:c2:0d:46:86:
31:f6:d9:57:20:91:14:fc:7c:c0:3c:35:28:be:82:de:d6:67:
79:ba:de:43:3d:33:b3:01:46:4d:b1:81:5f:6b:83:65:71:b9:
fd:51:1f:7d:ca:8b:2c:7a:4a:11:81:49:68:3b:15:6b:a3:b3:
69:3e:68:cc:ab:6a:87:5d:ee:e4:61:e1:24:51:e9:6c:23:b1:
85:90:51:66:6e:bc:81:fe:b5:e1:af:f0:c6:f4:4d:e4:98:d0:
f9:c1:7a:ed:06:59:82:b6:02:aa:bc:6c:3b:e4:cd:cb:76:57:
d7:60:fc:82:70:a4:21:60:9e:54:29:35:b5:66:99:40:67:48:
e7:51:60:cd:5d:8c:e6:10:c2:b0:09:69:30:f9:00:19:c1:2c:
38:37:b4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:51 2024 by rpki-client on console-ams.rpki-client.org