Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/aaDAy--e38ncOH5NuNr8UM5j0ws.roa
File: aaDAy--e38ncOH5NuNr8UM5j0ws.roa (raw, json)
Hash identifier: sbBEdQSKPIQK6BZdSlb92OMl6y1qhZ0c488e4uCedL8=
Subject key identifier: 69:A0:C0:CB:EF:9E:DF:C9:DC:38:7E:4D:B8:DA:FC:50:CE:63:D3:0B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 07DFD9F1
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/aaDAy--e38ncOH5NuNr8UM5j0ws.roa
Signing time: Mon 09 May 2022 11:34:26 +0000
ROA not before: Mon 09 May 2022 11:34:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201942
IP address blocks: 91.235.41.0/24 maxlen: 24
91.235.40.0/24 maxlen: 24
185.201.152.0/22 maxlen: 22
185.204.244.0/22 maxlen: 22
45.137.160.0/22 maxlen: 22
45.147.104.0/22 maxlen: 22
185.224.220.0/22 maxlen: 22
185.245.32.0/23 maxlen: 23
45.147.116.0/22 maxlen: 24
185.107.152.0/22 maxlen: 22
185.124.108.0/22 maxlen: 22
212.80.208.0/22 maxlen: 22
185.228.160.0/23 maxlen: 23
185.228.162.0/24 maxlen: 24
185.232.8.0/22 maxlen: 22
193.26.152.0/22 maxlen: 22
109.230.250.0/24 maxlen: 24
93.92.228.0/22 maxlen: 22
31.170.100.0/22 maxlen: 22
185.163.168.0/22 maxlen: 22
185.220.240.0/22 maxlen: 22
185.227.176.0/22 maxlen: 22
185.220.248.0/22 maxlen: 22
185.106.124.0/22 maxlen: 22
185.210.232.0/22 maxlen: 22
185.150.78.0/23 maxlen: 24
193.8.112.0/22 maxlen: 24
81.21.228.0/22 maxlen: 22
109.230.194.0/24 maxlen: 24
185.210.152.0/22 maxlen: 22
95.214.144.0/22 maxlen: 22
185.224.184.0/22 maxlen: 22
185.218.16.0/22 maxlen: 22
185.197.216.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.221.16.0/22 maxlen: 22
185.221.20.0/22 maxlen: 22
185.200.228.0/22 maxlen: 22
185.163.232.0/22 maxlen: 22
185.166.36.0/22 maxlen: 22
185.247.4.0/24 maxlen: 24
185.230.48.0/22 maxlen: 22
194.38.56.0/22 maxlen: 22
185.230.52.0/22 maxlen: 22
185.230.64.0/22 maxlen: 22
85.115.192.0/22 maxlen: 22
185.239.255.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
93.189.120.0/24 maxlen: 24
193.17.180.0/22 maxlen: 22
85.31.60.0/22 maxlen: 22
45.159.76.0/22 maxlen: 24
185.223.80.0/22 maxlen: 22
194.41.118.0/24 maxlen: 24
185.105.232.0/22 maxlen: 22
194.35.40.0/24 maxlen: 24
185.217.12.0/22 maxlen: 22
185.223.220.0/22 maxlen: 22
185.176.188.0/22 maxlen: 22
185.166.172.0/22 maxlen: 22
193.35.88.0/22 maxlen: 22
185.119.48.0/22 maxlen: 22
185.179.228.0/22 maxlen: 22
185.179.232.0/22 maxlen: 22
185.129.104.0/22 maxlen: 22
185.250.180.0/22 maxlen: 22
185.128.52.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.226.8.0/22 maxlen: 22
185.212.84.0/22 maxlen: 22
212.115.44.0/22 maxlen: 22
185.105.12.0/22 maxlen: 22
185.202.204.0/22 maxlen: 22
45.81.152.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.196.40.0/22 maxlen: 22
185.239.253.0/24 maxlen: 24
185.239.252.0/24 maxlen: 24
185.175.152.0/22 maxlen: 22
185.222.188.0/22 maxlen: 22
185.226.28.0/22 maxlen: 22
185.199.44.0/22 maxlen: 22
185.209.72.0/22 maxlen: 22
185.199.52.0/22 maxlen: 22
185.91.108.0/22 maxlen: 22
88.135.64.0/22 maxlen: 22
185.162.52.0/22 maxlen: 22
185.216.28.0/22 maxlen: 22
185.189.64.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132110833 (0x7dfd9f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 9 11:34:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69a0c0cbef9edfc9dc387e4db8dafc50ce63d30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:a6:5f:ff:b4:48:32:7e:8d:1a:42:83:8b:
fe:6e:0d:87:2d:4d:9e:9d:c9:56:89:14:e1:f9:34:
ca:b6:ef:4c:c1:b4:8e:84:45:e2:9b:54:aa:ac:4f:
cc:72:7f:f4:49:4c:a2:0a:e1:6b:a8:6e:cf:23:b7:
93:47:f5:30:29:83:96:d3:cc:90:40:c6:b7:af:e0:
d6:5a:c0:2f:8a:f3:ac:34:fa:8b:15:9e:4f:d6:50:
09:84:eb:d3:f7:44:ac:cb:8a:d7:af:c0:3f:89:78:
68:d1:f2:01:ab:ce:74:7b:8b:77:42:ed:9a:71:53:
43:2b:78:52:f6:35:53:3a:ca:4a:82:a2:52:c9:6f:
c1:95:c0:55:7e:8f:92:62:67:bb:f1:dd:76:83:37:
af:78:a5:52:38:1a:a0:21:93:cd:b2:6b:2b:53:01:
a3:70:e4:1c:17:9e:db:b2:5d:94:81:35:09:50:81:
75:df:a4:83:de:4d:20:c0:44:cc:c6:26:e9:05:55:
d5:61:0a:b9:ba:4e:e3:ec:f5:86:bb:6a:c5:e3:16:
b4:a8:fc:50:ba:49:6c:51:a8:16:e2:87:a2:23:82:
2b:25:22:d4:88:62:39:e9:76:5c:35:1e:1a:3a:a8:
26:f8:66:a6:6a:42:5a:f5:11:02:70:63:55:d2:8f:
8c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A0:C0:CB:EF:9E:DF:C9:DC:38:7E:4D:B8:DA:FC:50:CE:63:D3:0B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/aaDAy--e38ncOH5NuNr8UM5j0ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
45.81.152.0/22
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
81.21.228.0/22
85.31.60.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.124.108.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.162.52.0/22
185.163.168.0/22
185.163.232.0/22
185.166.36.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.52.0/22
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.244.0/22
185.209.72.0/22
185.210.152.0/22
185.210.232.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.220.248.0/22
185.221.16.0/21
185.222.188.0/22
185.223.80.0/22
185.223.220.0/22
185.224.184.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.228.160.0-185.228.162.255
185.230.48.0/21
185.230.64.0/22
185.232.8.0/22
185.239.252.0/23
185.239.255.0/24
185.245.32.0/23
185.247.4.0/24
185.250.180.0/22
193.8.112.0/22
193.17.180.0/22
193.26.152.0/22
193.35.88.0/22
194.35.40.0/24
194.38.56.0/22
194.41.118.0/24
212.80.208.0/22
212.115.44.0/22
Signature Algorithm: sha256WithRSAEncryption
73:6f:1d:2b:08:b0:eb:ae:07:39:49:a5:b2:0f:5e:17:d0:da:
66:6b:1e:3a:1f:76:9b:32:32:8b:9d:6c:3c:cf:cc:a7:02:74:
26:56:89:47:bf:0d:92:22:88:0e:b6:87:8e:f0:8e:e9:a2:e8:
b1:3e:4a:04:5b:5c:8e:fb:4c:34:51:54:45:9f:f6:e2:a6:23:
b8:ac:6a:b4:6d:d5:40:5b:04:6d:53:82:1d:58:5c:24:e2:ea:
fe:69:1b:62:d3:e2:d7:7e:f0:e5:14:43:f2:ce:8d:09:98:34:
a6:25:13:4a:f3:11:29:3c:dc:c0:3c:15:b3:ed:14:18:cb:ad:
b0:b8:df:b1:45:80:d4:61:e5:37:d4:8a:a6:ed:d7:0c:0c:b1:
ed:16:ae:ce:25:de:fc:b8:16:45:6e:02:0c:3a:35:8d:61:9d:
ca:56:12:bf:a0:3f:50:8d:77:96:ac:5d:9e:7c:df:4d:27:63:
23:41:54:b6:1d:75:4f:57:81:1d:35:ae:46:74:c3:6f:45:52:
67:a7:7b:ca:cf:d6:73:f8:84:fb:f9:ef:b6:e5:ae:a7:73:8d:
98:7f:1a:9c:2c:aa:d2:1a:fa:f0:bc:9d:2b:2e:a4:94:4e:ae:
52:d0:64:18:79:56:e1:2b:f5:25:49:58:8b:62:83:01:50:58:
d1:98:60:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org