Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QUUL-umC2DZQH6JqMG-OUw_rOCI.roa
File: QUUL-umC2DZQH6JqMG-OUw_rOCI.roa (raw, json)
Hash identifier: HjZjCMq9Ora0BUYUpqyuy5W7DVwMoui8hsuxRStVtuI=
Subject key identifier: 41:45:0B:FA:E9:82:D8:36:50:1F:A2:6A:30:6F:8E:53:0F:EB:38:22
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 076BC5B9
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QUUL-umC2DZQH6JqMG-OUw_rOCI.roa
Signing time: Tue 05 Apr 2022 08:02:18 +0000
ROA not before: Tue 05 Apr 2022 08:02:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201942
IP address blocks: 91.235.41.0/24 maxlen: 24
91.235.40.0/24 maxlen: 24
185.201.152.0/22 maxlen: 22
185.204.244.0/22 maxlen: 22
45.137.160.0/22 maxlen: 22
45.147.104.0/22 maxlen: 22
185.224.220.0/22 maxlen: 22
185.245.32.0/23 maxlen: 23
45.147.116.0/22 maxlen: 22
185.107.152.0/22 maxlen: 22
185.124.108.0/22 maxlen: 22
212.80.208.0/22 maxlen: 22
185.228.160.0/23 maxlen: 23
185.228.162.0/24 maxlen: 24
185.232.8.0/22 maxlen: 22
193.26.152.0/22 maxlen: 22
109.230.250.0/24 maxlen: 24
93.92.228.0/22 maxlen: 22
31.170.100.0/22 maxlen: 22
185.163.168.0/22 maxlen: 22
185.220.240.0/22 maxlen: 22
185.227.176.0/22 maxlen: 22
185.220.248.0/22 maxlen: 22
185.106.124.0/22 maxlen: 22
185.210.232.0/22 maxlen: 22
185.150.78.0/23 maxlen: 24
81.21.228.0/22 maxlen: 22
109.230.194.0/24 maxlen: 24
185.210.152.0/22 maxlen: 22
95.214.144.0/22 maxlen: 22
185.224.184.0/22 maxlen: 22
185.218.16.0/22 maxlen: 22
185.197.216.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.221.16.0/22 maxlen: 22
185.221.20.0/22 maxlen: 22
185.200.228.0/22 maxlen: 22
185.163.232.0/22 maxlen: 22
185.166.36.0/22 maxlen: 22
185.247.4.0/24 maxlen: 24
185.230.48.0/22 maxlen: 22
194.38.56.0/22 maxlen: 22
185.230.52.0/22 maxlen: 22
185.230.64.0/22 maxlen: 22
85.115.192.0/22 maxlen: 22
185.239.255.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
93.189.120.0/24 maxlen: 24
193.17.180.0/22 maxlen: 22
85.31.60.0/22 maxlen: 22
45.159.76.0/22 maxlen: 22
185.223.80.0/22 maxlen: 22
194.41.118.0/24 maxlen: 24
185.105.232.0/22 maxlen: 22
194.35.40.0/24 maxlen: 24
185.217.12.0/22 maxlen: 22
185.223.220.0/22 maxlen: 22
185.176.188.0/22 maxlen: 22
185.166.172.0/22 maxlen: 22
193.35.88.0/22 maxlen: 22
185.119.48.0/22 maxlen: 22
185.179.228.0/22 maxlen: 22
185.179.232.0/22 maxlen: 22
185.129.104.0/22 maxlen: 22
185.250.180.0/22 maxlen: 22
185.128.52.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.226.8.0/22 maxlen: 22
185.212.84.0/22 maxlen: 22
212.115.44.0/22 maxlen: 22
185.105.12.0/22 maxlen: 22
185.202.204.0/22 maxlen: 22
45.81.152.0/22 maxlen: 22
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.196.40.0/22 maxlen: 22
185.239.253.0/24 maxlen: 24
185.239.252.0/24 maxlen: 24
185.175.152.0/22 maxlen: 22
185.222.188.0/22 maxlen: 22
185.226.28.0/22 maxlen: 22
185.199.44.0/22 maxlen: 22
185.209.72.0/22 maxlen: 22
185.199.52.0/22 maxlen: 22
185.91.108.0/22 maxlen: 22
88.135.64.0/22 maxlen: 22
185.162.52.0/22 maxlen: 22
185.216.28.0/22 maxlen: 22
185.189.64.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124503481 (0x76bc5b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 5 08:02:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41450bfae982d836501fa26a306f8e530feb3822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:dc:b6:9b:42:05:50:0f:31:36:bf:01:5e:
30:5b:95:eb:2b:aa:a8:44:a3:20:51:bd:1f:b2:65:
4f:96:49:01:d5:fd:fc:49:b6:ce:e6:66:37:b6:1c:
2f:83:a9:02:36:23:38:67:fc:7c:97:a5:ac:40:d8:
c2:03:22:67:98:6c:59:9b:39:c5:65:ea:bc:43:18:
da:b7:9d:66:87:0e:4e:e9:3f:94:e8:a4:03:d2:54:
32:f3:a3:47:db:b8:96:b0:51:c7:5c:43:13:36:e2:
e7:7d:01:55:eb:81:d7:d4:49:35:22:f9:f1:a1:55:
f5:3f:83:ac:34:05:f4:60:8f:a6:87:ae:44:9d:d5:
ce:a9:d3:0c:6e:dc:9c:d5:8a:63:7b:7f:70:94:67:
99:13:1d:ed:e2:52:bf:79:14:2e:42:08:cb:8d:0d:
90:55:3f:14:b2:59:9a:f2:e7:4c:7a:0d:1d:a8:ad:
04:0d:c5:24:a2:f2:0c:75:cc:d8:05:dc:c7:c0:08:
10:c5:07:c6:58:1f:85:ae:a2:fd:a7:da:1b:5f:3e:
b7:1c:73:fd:dd:75:34:f5:fe:5a:9c:b9:5d:b0:10:
9b:cc:30:34:dc:91:d1:f6:5d:25:0c:46:88:da:42:
dc:19:33:4c:13:b2:33:37:cb:31:9d:f1:94:0f:d9:
fd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:45:0B:FA:E9:82:D8:36:50:1F:A2:6A:30:6F:8E:53:0F:EB:38:22
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QUUL-umC2DZQH6JqMG-OUw_rOCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
45.81.152.0/22
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
81.21.228.0/22
85.31.60.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.124.108.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.162.52.0/22
185.163.168.0/22
185.163.232.0/22
185.166.36.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.52.0/22
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.244.0/22
185.209.72.0/22
185.210.152.0/22
185.210.232.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.220.248.0/22
185.221.16.0/21
185.222.188.0/22
185.223.80.0/22
185.223.220.0/22
185.224.184.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.228.160.0-185.228.162.255
185.230.48.0/21
185.230.64.0/22
185.232.8.0/22
185.239.252.0/23
185.239.255.0/24
185.245.32.0/23
185.247.4.0/24
185.250.180.0/22
193.17.180.0/22
193.26.152.0/22
193.35.88.0/22
194.35.40.0/24
194.38.56.0/22
194.41.118.0/24
212.80.208.0/22
212.115.44.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:09:91:e1:e2:43:30:f0:60:93:78:81:39:47:c3:fb:b7:ee:
e7:b4:ef:08:a6:10:93:5a:fe:ab:79:ea:ca:da:4e:71:c1:f2:
d3:82:a2:a7:f5:33:b0:5c:42:3e:cf:6a:39:bc:7b:20:67:37:
22:66:33:8a:14:4a:dc:0c:44:f2:a0:09:00:b6:d9:ae:e3:9e:
9f:82:79:45:c6:0d:b2:ae:27:79:f1:4f:b5:81:1a:1b:57:bc:
ce:3f:fe:12:66:d4:d6:42:75:29:43:40:b5:7d:cd:31:5d:cb:
4c:80:a8:3b:6c:98:7a:7f:8e:d3:57:47:f1:fe:d7:dc:f5:39:
2f:10:70:a8:4c:9f:1b:15:93:1d:a2:6d:2f:06:2c:d9:be:5b:
a2:7e:dc:c1:44:91:cf:98:24:e8:90:e1:1b:b4:3a:30:11:29:
d6:7f:b9:38:d2:22:3e:21:52:59:2b:73:7e:3a:4c:a1:13:00:
1b:9d:12:62:7e:67:bc:08:67:3f:f5:39:64:cd:1b:50:eb:bf:
1f:56:b3:fa:65:c1:cf:d9:d9:f3:67:f1:25:02:bd:db:32:03:
05:b2:3a:e8:20:fc:a6:44:91:be:ed:95:bb:ca:0f:ca:bd:be:
3d:d9:bf:79:56:ba:0c:75:aa:cc:28:05:c1:7f:98:52:2f:d2:
51:cd:73:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org