Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/JAKqpLav7eV5GkIjG_NcLZHY9ok.roa
File: JAKqpLav7eV5GkIjG_NcLZHY9ok.roa (raw, json)
Hash identifier: 5ze+KBKMKWhKrTboD3pH/KsDm8vZa0SJlVTn11B0+ns=
Subject key identifier: 24:02:AA:A4:B6:AF:ED:E5:79:1A:42:23:1B:F3:5C:2D:91:D8:F6:89
Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial: 0184E968F596312CE2D06A1FFC4BC10E8E60
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/JAKqpLav7eV5GkIjG_NcLZHY9ok.roa
Signing time: Tue 06 Dec 2022 21:48:00 +0000
ROA not before: Tue 06 Dec 2022 21:48:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49453
IP address blocks: 134.19.177.0/24 maxlen: 24
134.19.176.0/24 maxlen: 24
134.19.179.0/24 maxlen: 24
134.19.178.0/24 maxlen: 24
134.19.186.0/24 maxlen: 24
134.19.185.0/24 maxlen: 24
134.19.184.0/24 maxlen: 24
134.19.183.0/24 maxlen: 24
134.19.182.0/24 maxlen: 24
134.19.181.0/24 maxlen: 24
134.19.180.0/24 maxlen: 24
134.19.190.0/23 maxlen: 23
134.19.189.0/24 maxlen: 24
134.19.188.0/24 maxlen: 24
134.19.187.0/24 maxlen: 24
37.123.210.0/24 maxlen: 24
45.133.250.0/24 maxlen: 24
213.152.166.0/24 maxlen: 24
213.152.165.0/24 maxlen: 24
213.152.164.0/24 maxlen: 24
213.152.163.0/24 maxlen: 24
213.152.162.0/24 maxlen: 24
213.152.161.0/24 maxlen: 24
213.152.160.0/24 maxlen: 24
213.152.172.0/24 maxlen: 24
213.152.171.0/24 maxlen: 24
213.152.170.0/24 maxlen: 24
213.152.169.0/24 maxlen: 24
213.152.168.0/24 maxlen: 24
213.152.167.0/24 maxlen: 24
213.152.177.0/24 maxlen: 24
213.152.176.0/24 maxlen: 24
213.152.174.0/24 maxlen: 24
213.152.173.0/24 maxlen: 24
213.152.186.0/24 maxlen: 24
213.152.185.0/24 maxlen: 24
213.152.184.0/24 maxlen: 24
213.152.183.0/24 maxlen: 24
213.152.181.0/24 maxlen: 24
213.152.180.0/24 maxlen: 24
213.152.188.0/22 maxlen: 22
213.152.189.0/24 maxlen: 24
213.152.188.0/24 maxlen: 24
213.152.187.0/24 maxlen: 24
188.95.51.0/24 maxlen: 24
188.95.49.0/24 maxlen: 24
188.95.53.0/24 maxlen: 24
188.95.52.0/24 maxlen: 24
185.23.212.0/22 maxlen: 22
109.202.98.0/24 maxlen: 24
185.23.214.0/24 maxlen: 24
109.202.104.0/24 maxlen: 24
109.202.103.0/24 maxlen: 24
109.202.102.0/24 maxlen: 24
109.202.101.0/24 maxlen: 24
109.202.100.0/24 maxlen: 24
109.202.99.0/24 maxlen: 24
109.202.111.0/24 maxlen: 24
109.202.110.0/24 maxlen: 24
109.202.109.0/24 maxlen: 24
109.202.108.0/24 maxlen: 24
109.202.107.0/24 maxlen: 24
109.202.106.0/24 maxlen: 24
109.232.225.0/24 maxlen: 24
109.232.224.0/24 maxlen: 24
109.232.231.0/24 maxlen: 24
109.232.230.0/24 maxlen: 24
109.232.229.0/24 maxlen: 24
109.232.228.0/24 maxlen: 24
109.232.227.0/24 maxlen: 24
2a00:1678:1337::/48 maxlen: 48
2a00:1678:2470::/48 maxlen: 48
2a00:1678:b00b::/48 maxlen: 48
2a00:1678:baba::/48 maxlen: 48
2a00:1678:da7a::/48 maxlen: 48
2a00:1678:3cc0::/48 maxlen: 48
2a00:1678:dea1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e9:68:f5:96:31:2c:e2:d0:6a:1f:fc:4b:c1:0e:8e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
Validity
Not Before: Dec 6 21:48:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2402aaa4b6afede5791a42231bf35c2d91d8f689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:51:ee:a7:02:61:b8:dd:a4:1c:cd:65:84:5d:
fe:d9:54:eb:9f:9a:09:93:78:22:a4:16:c2:97:95:
80:41:8a:82:eb:d8:20:e9:bc:4f:74:e6:a7:e2:86:
1f:5d:a2:f1:43:35:75:71:85:83:0e:ae:2b:b5:8b:
ed:7a:15:9a:d0:4b:ef:44:0d:6e:d3:f8:9a:13:25:
17:86:a9:17:4c:fd:43:6e:ae:3f:ae:6e:db:57:f9:
ea:d9:2f:01:45:9a:9a:9c:c6:6f:27:9a:ca:26:b1:
26:71:1c:d0:43:d5:ef:2a:0b:b6:66:bc:6b:59:e7:
cf:03:2b:f8:4b:4c:16:40:56:c8:35:d0:77:c8:ee:
4c:13:96:d4:71:39:2a:7b:15:6b:51:05:ce:91:9b:
27:40:43:05:86:15:2d:a9:5b:ac:d1:43:5b:a3:01:
df:d3:51:04:db:d0:07:1d:6b:39:13:f3:ce:e3:8a:
dc:82:f3:69:02:db:49:c5:a8:0b:90:aa:69:4b:b3:
10:c6:70:38:51:68:23:90:47:48:a1:19:6c:01:c7:
ce:ba:36:36:0d:09:03:c2:69:8c:be:08:b0:e9:9c:
3d:71:fa:07:f7:8f:08:c9:1a:59:81:30:9d:de:8a:
2d:77:19:f3:65:71:e9:12:3c:34:06:9c:45:30:bb:
b5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:02:AA:A4:B6:AF:ED:E5:79:1A:42:23:1B:F3:5C:2D:91:D8:F6:89
X509v3 Authority Key Identifier:
keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/JAKqpLav7eV5GkIjG_NcLZHY9ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.210.0/24
45.133.250.0/24
109.202.98.0-109.202.104.255
109.202.106.0-109.202.111.255
109.232.224.0/23
109.232.227.0-109.232.231.255
134.19.176.0/20
185.23.212.0/22
188.95.49.0/24
188.95.51.0-188.95.53.255
213.152.160.0-213.152.174.255
213.152.176.0/23
213.152.180.0/23
213.152.183.0-213.152.191.255
IPv6:
2a00:1678:1337::/48
2a00:1678:2470::/48
2a00:1678:3cc0::/48
2a00:1678:b00b::/48
2a00:1678:baba::/48
2a00:1678:da7a::/48
2a00:1678:dea1::/48
Signature Algorithm: sha256WithRSAEncryption
2a:7f:58:84:8e:a7:00:7c:bd:fe:96:1f:ae:14:47:72:4b:ab:
3b:57:a3:32:86:1c:e4:ad:14:5e:3a:0e:35:f1:cd:08:a9:e8:
eb:2e:43:2d:ce:ba:1b:a3:ce:e3:b0:cd:95:42:1a:8b:35:44:
6b:61:ba:3a:cd:10:77:13:de:69:24:57:81:70:a0:af:4f:47:
0f:dc:73:b5:51:ba:08:c7:0f:b8:49:5c:75:13:3f:6b:83:49:
e7:9c:4d:71:63:1b:ce:8c:86:99:b5:57:bc:ea:76:5c:5e:27:
08:da:24:92:18:1b:0c:50:86:70:ec:9e:ba:90:a6:f4:14:fe:
a7:ad:69:f8:cf:08:c2:b7:29:7c:68:b5:3e:dd:6c:de:90:a9:
07:8b:1d:b0:6d:ba:99:ad:7c:b3:c2:46:22:4a:0f:ab:cc:13:
83:a0:ca:8b:7f:3c:44:20:59:2c:5d:7b:e5:3e:27:f6:21:68:
94:ac:2f:70:b6:3c:28:93:1e:7a:83:4c:54:5b:31:db:4c:e2:
e8:88:14:41:e2:bd:a8:16:95:e1:23:69:53:df:70:ae:a3:45:
40:f6:e6:e5:af:a2:18:6e:25:b4:69:b0:84:9d:44:54:0c:9f:
24:7a:78:99:73:5f:29:40:7d:3d:a5:60:87:62:c6:20:92:70:
1d:95:09:fa
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgISAYTpaPWWMSzi0Gof/EvBDo5gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MjZiMDNjNzE3MTg0YzM2ODA4MTdlNTVlMjQ1NWY4NWQ3
M2E0MTMwHhcNMjIxMjA2MjE0ODAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDAyYWFhNGI2YWZlZGU1NzkxYTQyMjMxYmYzNWMyZDkxZDhmNjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFHupwJhuN2kHM1lhF3+2VTrn5oJ
k3gipBbCl5WAQYqC69gg6bxPdOan4oYfXaLxQzV1cYWDDq4rtYvtehWa0EvvRA1u
0/iaEyUXhqkXTP1Dbq4/rm7bV/nq2S8BRZqanMZvJ5rKJrEmcRzQQ9XvKgu2Zrxr
WefPAyv4S0wWQFbINdB3yO5ME5bUcTkqexVrUQXOkZsnQEMFhhUtqVus0UNbowHf
01EE29AHHWs5E/PO44rcgvNpAttJxagLkKppS7MQxnA4UWgjkEdIoRlsAcfOujY2
DQkDwmmMvgiw6Zw9cfoH948IyRpZgTCd3ootdxnzZXHpEjw0BpxFMLu1aQIDAQAB
o4IC0zCCAs8wHQYDVR0OBBYEFCQCqqS2r+3leRpCIxvzXC2R2PaJMB8GA1UdIwQY
MBaAFAUmsDxxcYTDaAgX5V4kVfhdc6QTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMt
M2JmMDRhMmE5M2Q4LzEvSkFLcXBMYXY3ZVY1R2tJakdfTmNMWkhZOW9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMtM2JmMDRhMmE5M2Q4
LzEvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHoBggrBgEFBQcBBwEB/wSB2DCB1TCBiwQCAAEwgYQDBAAl
e9IDBAAthfowDAMEAW3KYgMEAG3KaDAMAwQBbcpqAwQEbcpgAwQBbejgMAwDBABt
6OMDBANt6OADBASGE7ADBAK5F9QDBAC8XzEwDAMEALxfMwMEAbxfNDAMAwQF1Zig
AwQA1ZiuAwQB1ZiwAwQB1Zi0MAwDBADVmLcDBAbVmIAwRQQCAAIwPwMHACoAFngT
NwMHACoAFngkcAMHACoAFng8wAMHACoAFniwCwMHACoAFni6ugMHACoAFnjaegMH
ACoAFnjeoTANBgkqhkiG9w0BAQsFAAOCAQEAKn9YhI6nAHy9/pYfrhRHckurO1ej
MoYc5K0UXjoONfHNCKno6y5DLc66G6PO47DNlUIaizVEa2G6Os0QdxPeaSRXgXCg
r09HD9xztVG6CMcPuElcdRM/a4NJ55xNcWMbzoyGmbVXvOp2XF4nCNokkhgbDFCG
cOyeupCm9BT+p61p+M8IwrcpfGi1Pt1s3pCpB4sdsG26ma18s8JGIkoPq8wTg6DK
i388RCBZLF175T4n9iFolKwvcLY8KJMeeoNMVFsx20zi6IgUQeK9qBaV4SNpU99w
rqNFQPbm5a+iGG4ltGmwhJ1EVAyfJHp4mXNfKUB9PaVgh2LGIJJwHZUJ+g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:46 2024 by rpki-client on console-ams.rpki-client.org