Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/c4oOYgZzHTIUX_GqPuq_D7fLZ28.roa
File: c4oOYgZzHTIUX_GqPuq_D7fLZ28.roa (raw, json)
Hash identifier: /1zgZ40wLO+kUMovKuqK3DYJzME4H0rqlXjYXVEWKEM=
Subject key identifier: 73:8A:0E:62:06:73:1D:32:14:5F:F1:AA:3E:EA:BF:0F:B7:CB:67:6F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0182B7D3EE99210ED7F78DF8D9977CDC2E59
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/c4oOYgZzHTIUX_GqPuq_D7fLZ28.roa
Signing time: Fri 19 Aug 2022 20:38:15 +0000
ROA not before: Fri 19 Aug 2022 20:38:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201942
IP address blocks: 91.235.41.0/24 maxlen: 24
91.235.40.0/24 maxlen: 24
185.201.152.0/22 maxlen: 24
185.204.244.0/22 maxlen: 24
45.137.160.0/22 maxlen: 24
45.147.104.0/22 maxlen: 24
185.224.220.0/22 maxlen: 24
185.245.32.0/23 maxlen: 23
45.147.116.0/22 maxlen: 24
185.107.152.0/22 maxlen: 24
185.124.108.0/22 maxlen: 24
212.80.208.0/22 maxlen: 24
185.228.160.0/23 maxlen: 23
185.228.162.0/24 maxlen: 24
185.232.8.0/22 maxlen: 24
193.26.152.0/22 maxlen: 24
109.230.250.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
31.170.100.0/22 maxlen: 24
185.163.168.0/22 maxlen: 24
185.220.240.0/22 maxlen: 24
185.227.176.0/22 maxlen: 24
185.220.248.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.210.232.0/22 maxlen: 24
185.150.78.0/23 maxlen: 24
193.8.112.0/22 maxlen: 24
81.21.228.0/22 maxlen: 24
109.230.194.0/24 maxlen: 24
185.210.152.0/22 maxlen: 24
95.214.144.0/22 maxlen: 24
185.224.184.0/22 maxlen: 24
185.218.16.0/22 maxlen: 24
185.197.216.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.221.16.0/22 maxlen: 24
185.221.20.0/22 maxlen: 24
185.200.228.0/22 maxlen: 24
185.163.232.0/22 maxlen: 24
185.166.36.0/22 maxlen: 24
185.247.4.0/24 maxlen: 24
185.230.48.0/22 maxlen: 24
194.38.56.0/22 maxlen: 24
185.230.52.0/22 maxlen: 24
185.230.64.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
185.239.255.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
93.189.120.0/24 maxlen: 24
193.17.180.0/22 maxlen: 24
85.31.60.0/22 maxlen: 24
45.159.76.0/22 maxlen: 24
185.223.80.0/22 maxlen: 24
194.41.118.0/24 maxlen: 24
194.41.116.0/22 maxlen: 24
185.105.232.0/22 maxlen: 24
194.35.40.0/24 maxlen: 24
185.217.12.0/22 maxlen: 24
185.223.220.0/22 maxlen: 24
185.176.188.0/22 maxlen: 24
185.166.172.0/22 maxlen: 24
193.35.88.0/22 maxlen: 24
185.119.48.0/22 maxlen: 24
185.179.228.0/22 maxlen: 24
185.179.232.0/22 maxlen: 24
185.129.104.0/22 maxlen: 24
185.250.180.0/22 maxlen: 24
185.128.52.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.226.8.0/22 maxlen: 24
185.212.84.0/22 maxlen: 24
212.115.44.0/22 maxlen: 24
185.105.12.0/22 maxlen: 24
185.202.204.0/22 maxlen: 24
45.81.152.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.196.40.0/22 maxlen: 24
185.239.253.0/24 maxlen: 24
185.239.252.0/24 maxlen: 24
185.175.152.0/22 maxlen: 24
185.222.188.0/22 maxlen: 24
185.226.28.0/22 maxlen: 24
185.199.44.0/22 maxlen: 24
185.209.72.0/22 maxlen: 24
185.199.52.0/22 maxlen: 24
185.91.108.0/22 maxlen: 24
88.135.64.0/22 maxlen: 24
185.162.52.0/22 maxlen: 24
185.216.28.0/22 maxlen: 24
185.189.64.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b7:d3:ee:99:21:0e:d7:f7:8d:f8:d9:97:7c:dc:2e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 19 20:38:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=738a0e6206731d32145ff1aa3eeabf0fb7cb676f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9e:49:7c:8f:bc:b4:92:ca:ed:bf:f1:e3:92:
fc:2f:ea:bd:0c:65:f7:30:75:24:0e:a7:1f:ca:e8:
c6:59:f6:e1:e3:d2:4d:66:91:bb:10:a5:9f:40:61:
19:dc:51:fa:38:23:70:75:01:51:4f:5c:37:bb:ec:
4a:2e:1c:bb:4a:1d:a9:6d:43:9c:48:ea:1b:fd:8b:
0e:53:8e:97:40:8f:81:83:a4:3f:d7:28:93:1c:ce:
30:9d:96:26:95:59:ad:55:fc:4f:9c:df:68:d1:56:
01:13:83:49:f1:76:ea:92:ee:33:71:a0:f3:54:0d:
bd:e6:a5:fb:a8:b9:e0:f8:17:6d:2d:c0:bb:e9:1f:
c7:70:09:ef:39:7f:53:11:d3:79:7c:af:5c:6b:42:
c9:4e:45:77:89:0e:3c:9c:1e:b8:d5:47:ad:b1:c8:
37:0d:3c:9f:6e:48:13:e3:ea:bb:eb:c2:4f:db:73:
87:6e:6a:38:f4:ff:02:33:0b:5c:b4:ab:ae:11:7e:
a2:db:f8:49:36:de:2b:0f:f1:a8:35:9a:da:c9:27:
0b:c3:d1:fc:ef:d0:36:a4:2d:f6:48:ab:ea:23:5b:
c3:22:e2:a5:46:91:f6:57:63:72:db:f3:d0:8d:9b:
b2:54:0c:c0:fb:09:40:e9:9c:c3:33:ef:b9:f0:32:
35:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8A:0E:62:06:73:1D:32:14:5F:F1:AA:3E:EA:BF:0F:B7:CB:67:6F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/c4oOYgZzHTIUX_GqPuq_D7fLZ28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
45.81.152.0/22
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
81.21.228.0/22
85.31.60.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.124.108.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.162.52.0/22
185.163.168.0/22
185.163.232.0/22
185.166.36.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.52.0/22
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.244.0/22
185.209.72.0/22
185.210.152.0/22
185.210.232.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.220.248.0/22
185.221.16.0/21
185.222.188.0/22
185.223.80.0/22
185.223.220.0/22
185.224.184.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.228.160.0-185.228.162.255
185.230.48.0/21
185.230.64.0/22
185.232.8.0/22
185.239.252.0/23
185.239.255.0/24
185.245.32.0/23
185.247.4.0/24
185.250.180.0/22
193.8.112.0/22
193.17.180.0/22
193.26.152.0/22
193.35.88.0/22
194.35.40.0/24
194.38.56.0/22
194.41.116.0/22
212.80.208.0/22
212.115.44.0/22
Signature Algorithm: sha256WithRSAEncryption
56:79:1b:70:40:27:10:50:45:99:7a:92:7a:94:a0:10:cb:f0:
16:70:a0:21:b2:b4:89:a7:61:db:f1:0c:f4:2d:7a:ca:9a:f6:
8a:f9:91:f9:e2:3f:0c:ff:be:46:78:d4:60:6b:68:78:98:03:
56:bb:a7:5b:21:c4:ac:96:9d:e9:cc:9a:05:dd:eb:e1:07:79:
56:2c:32:a4:d2:69:9f:ee:78:60:5b:89:49:12:ac:a6:64:7b:
be:d4:a1:45:17:dc:dc:0d:9b:61:22:a4:b8:cf:6b:b4:75:c8:
c7:eb:d7:64:81:36:9b:7f:7d:2e:5f:a5:e2:b1:76:20:1b:cb:
c8:28:0a:51:fb:24:75:b0:ab:4a:01:aa:03:ff:c4:7e:e8:12:
3b:2d:7a:36:25:e4:c1:24:e8:c5:ea:99:30:8b:90:e7:5d:ea:
30:3d:95:50:1b:73:0c:ed:04:f8:a0:b5:5a:e9:cc:d0:c8:26:
30:b4:64:9d:6f:58:5c:01:f7:4b:a1:0b:ce:24:f6:e4:28:21:
44:45:dc:e2:ee:78:90:2f:2b:32:5f:3f:d2:d1:bb:3d:7a:55:
cc:48:78:1e:91:ac:e2:99:06:ac:0a:de:ea:b8:23:a7:1c:cf:
43:02:f6:82:7d:1f:94:f6:18:6d:d7:cf:71:ec:56:5b:1c:19:
6b:86:ee:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org