Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SBxkSIojRpHlAfIpePb9d9lOi94.roa
File: SBxkSIojRpHlAfIpePb9d9lOi94.roa (raw, json)
Hash identifier: NRU3cSw7K572yeyH7FS6pNwA2zLar5ldbWmfWbyXRFk=
Subject key identifier: 48:1C:64:48:8A:23:46:91:E5:01:F2:29:78:F6:FD:77:D9:4E:8B:DE
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 06F3DF23
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SBxkSIojRpHlAfIpePb9d9lOi94.roa
Signing time: Sun 20 Feb 2022 09:13:18 +0000
ROA not before: Sun 20 Feb 2022 09:13:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201942
IP address blocks: 91.235.41.0/24 maxlen: 24
91.235.40.0/24 maxlen: 24
185.201.152.0/22 maxlen: 22
185.204.244.0/22 maxlen: 22
45.137.160.0/22 maxlen: 22
45.147.104.0/22 maxlen: 22
185.224.220.0/22 maxlen: 22
185.245.32.0/23 maxlen: 23
45.147.116.0/22 maxlen: 22
185.107.152.0/22 maxlen: 22
185.124.108.0/22 maxlen: 22
212.80.208.0/22 maxlen: 22
185.228.160.0/23 maxlen: 23
185.228.162.0/24 maxlen: 24
185.232.8.0/22 maxlen: 22
193.26.152.0/22 maxlen: 22
109.230.250.0/24 maxlen: 24
93.92.228.0/22 maxlen: 22
31.170.100.0/22 maxlen: 22
185.163.168.0/22 maxlen: 22
185.220.240.0/22 maxlen: 22
185.227.176.0/22 maxlen: 22
185.220.248.0/22 maxlen: 22
185.106.124.0/22 maxlen: 22
185.210.232.0/22 maxlen: 22
185.150.78.0/23 maxlen: 24
81.21.228.0/22 maxlen: 22
109.230.194.0/24 maxlen: 24
185.210.152.0/22 maxlen: 22
95.214.144.0/22 maxlen: 22
185.224.184.0/22 maxlen: 22
185.218.16.0/22 maxlen: 22
185.197.216.0/22 maxlen: 22
185.227.204.0/24 maxlen: 24
185.221.16.0/22 maxlen: 22
185.221.20.0/22 maxlen: 22
185.200.228.0/22 maxlen: 22
185.163.232.0/22 maxlen: 22
185.166.36.0/22 maxlen: 22
185.247.4.0/24 maxlen: 24
185.230.48.0/22 maxlen: 22
194.38.56.0/22 maxlen: 22
185.230.52.0/22 maxlen: 22
185.230.64.0/22 maxlen: 22
85.115.192.0/22 maxlen: 22
185.239.255.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
93.189.120.0/24 maxlen: 24
193.17.180.0/22 maxlen: 22
85.31.60.0/22 maxlen: 22
45.159.76.0/22 maxlen: 22
185.223.80.0/22 maxlen: 22
194.41.118.0/24 maxlen: 24
185.105.232.0/22 maxlen: 22
194.35.40.0/24 maxlen: 24
185.217.12.0/22 maxlen: 22
185.223.220.0/22 maxlen: 22
185.176.188.0/22 maxlen: 22
185.166.172.0/22 maxlen: 22
193.35.88.0/22 maxlen: 22
185.119.48.0/22 maxlen: 22
185.179.228.0/22 maxlen: 22
185.179.232.0/22 maxlen: 22
185.129.104.0/22 maxlen: 22
185.250.180.0/22 maxlen: 22
185.128.52.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.226.8.0/22 maxlen: 22
185.212.84.0/22 maxlen: 22
212.115.44.0/22 maxlen: 22
185.105.12.0/22 maxlen: 22
185.202.204.0/22 maxlen: 22
45.81.152.0/22 maxlen: 22
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.196.40.0/22 maxlen: 22
185.239.253.0/24 maxlen: 24
185.239.252.0/24 maxlen: 24
185.175.152.0/22 maxlen: 22
185.222.188.0/22 maxlen: 22
185.226.28.0/22 maxlen: 22
185.199.44.0/22 maxlen: 22
185.209.72.0/22 maxlen: 22
185.199.52.0/22 maxlen: 22
185.91.108.0/22 maxlen: 22
88.135.64.0/22 maxlen: 22
185.162.52.0/22 maxlen: 22
185.216.28.0/22 maxlen: 22
185.189.64.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116645667 (0x6f3df23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 20 09:13:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=481c64488a234691e501f22978f6fd77d94e8bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a0:d3:b2:16:9b:7b:1e:5c:ce:5c:91:ad:c4:
70:49:ed:81:54:16:99:98:53:02:2c:bb:81:6f:e0:
a5:e4:2b:fd:fc:65:68:80:80:33:be:77:2a:fc:f5:
e3:5b:30:6b:a1:2f:c2:12:29:26:ae:0f:d8:fd:37:
ab:2c:ea:0d:32:92:f4:d4:a2:b8:2d:c3:46:e1:2c:
ec:5d:23:b7:9f:1a:11:9b:63:c4:49:8f:9c:b2:25:
fe:e8:79:20:7f:9e:11:ef:0d:cd:a2:fc:43:15:c1:
f2:87:e5:93:e4:d9:3c:26:28:69:c9:4d:4c:98:04:
41:00:72:82:c7:44:50:88:01:81:41:93:bc:a3:2f:
eb:3e:f3:77:66:2e:c6:a3:b8:ef:60:1e:6d:c5:2b:
2c:e2:d8:62:1b:b9:80:78:d2:53:43:a0:51:09:5c:
97:77:e4:c3:5e:bd:6e:88:4d:8a:00:f6:97:13:c2:
e5:e4:08:59:34:e8:e7:77:11:0b:a1:82:2f:ec:c6:
56:b8:2c:36:e2:77:a6:68:b6:29:b1:21:76:36:31:
e8:e9:96:21:25:43:96:3c:e3:fc:4c:0f:41:95:14:
a0:e6:61:62:06:11:5d:6e:d7:71:9a:2c:8b:8d:1a:
be:b4:88:c3:2d:47:1a:4b:c8:10:ae:02:64:c0:37:
2d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1C:64:48:8A:23:46:91:E5:01:F2:29:78:F6:FD:77:D9:4E:8B:DE
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SBxkSIojRpHlAfIpePb9d9lOi94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
45.81.152.0/22
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
81.21.228.0/22
85.31.60.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.124.108.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.162.52.0/22
185.163.168.0/22
185.163.232.0/22
185.166.36.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.52.0/22
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.244.0/22
185.209.72.0/22
185.210.152.0/22
185.210.232.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.220.248.0/22
185.221.16.0/21
185.222.188.0/22
185.223.80.0/22
185.223.220.0/22
185.224.184.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.228.160.0-185.228.162.255
185.230.48.0/21
185.230.64.0/22
185.232.8.0/22
185.239.252.0/23
185.239.255.0/24
185.245.32.0/23
185.247.4.0/24
185.250.180.0/22
193.17.180.0/22
193.26.152.0/22
193.35.88.0/22
194.35.40.0/24
194.38.56.0/22
194.41.118.0/24
212.80.208.0/22
212.115.44.0/22
Signature Algorithm: sha256WithRSAEncryption
24:e8:6a:10:3e:16:c1:ad:14:3a:9d:54:a3:71:c5:81:92:f7:
88:c1:24:35:0a:8f:c6:9e:54:dc:75:42:e1:1f:56:c6:92:9e:
e6:8b:f1:57:f1:cf:2b:a8:0d:a3:25:8f:37:65:c8:05:9a:33:
15:68:25:72:a2:43:f9:11:3c:29:c9:f6:9d:f5:1c:0f:1e:8a:
c8:61:f9:82:35:ef:57:f7:03:ea:e4:c1:89:91:62:a1:d9:a7:
49:a4:ea:4d:67:c5:19:56:c0:d9:09:90:7a:e9:c2:aa:ad:21:
fa:99:9b:64:f7:58:19:ef:59:e2:d0:a9:8b:bf:90:70:7e:65:
77:06:20:34:4e:3a:32:3e:34:7b:0f:d6:2d:e5:d7:20:63:ed:
24:a0:25:ed:44:d9:d9:6d:97:e8:ef:15:f0:bc:76:96:3e:e1:
09:2a:0b:af:da:94:f8:a2:d2:e7:69:74:a0:91:9f:c8:39:11:
f0:89:95:99:f6:73:60:dd:6d:43:f8:c8:3d:45:4d:8f:9d:4d:
0d:b0:8f:45:47:0a:e0:30:98:fa:8c:31:70:bb:35:3b:bd:5d:
fa:be:ab:bf:88:93:dc:87:1a:a6:5c:9f:e0:09:d9:99:fb:a6:
5d:93:ce:96:05:59:15:7c:14:71:45:78:ee:56:cc:08:15:33:
e7:50:d3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:26 2024 by rpki-client on console-ams.rpki-client.org