Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/vnf5i1v7oZ7PcWt2T4C6JEB1q-E.roa
File: vnf5i1v7oZ7PcWt2T4C6JEB1q-E.roa (raw, json)
Hash identifier: Q8HilB8EdgDzBor/zz2yjhkh40JXwWiVEEOHR36DGXM=
Subject key identifier: BE:77:F9:8B:5B:FB:A1:9E:CF:71:6B:76:4F:80:BA:24:40:75:AB:E1
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 018361B50ADFBC1F253F90D34E333A94E4BE
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/vnf5i1v7oZ7PcWt2T4C6JEB1q-E.roa
Signing time: Wed 21 Sep 2022 20:19:58 +0000
ROA not before: Wed 21 Sep 2022 20:19:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57218
IP address blocks: 5.73.128.0/19 maxlen: 19
188.208.64.0/19 maxlen: 19
188.208.64.0/20 maxlen: 20
188.208.80.0/20 maxlen: 20
188.215.24.0/23 maxlen: 23
188.215.24.0/22 maxlen: 22
5.73.160.0/19 maxlen: 19
188.215.26.0/23 maxlen: 23
93.114.16.0/21 maxlen: 21
93.114.16.0/20 maxlen: 20
93.114.24.0/21 maxlen: 21
5.73.96.0/19 maxlen: 19
213.195.40.0/21 maxlen: 21
188.208.160.0/20 maxlen: 20
188.208.160.0/19 maxlen: 19
5.134.144.0/20 maxlen: 22
213.195.50.0/23 maxlen: 23
213.195.48.0/23 maxlen: 23
213.195.48.0/22 maxlen: 22
188.208.176.0/20 maxlen: 20
5.134.160.0/22 maxlen: 22
5.134.160.0/20 maxlen: 20
5.134.164.0/22 maxlen: 22
5.134.168.0/22 maxlen: 22
5.134.172.0/22 maxlen: 22
5.134.176.0/22 maxlen: 22
5.134.176.0/20 maxlen: 20
5.134.180.0/22 maxlen: 22
5.134.184.0/22 maxlen: 22
5.73.192.0/19 maxlen: 19
92.114.64.0/21 maxlen: 21
92.114.64.0/20 maxlen: 20
188.208.144.0/21 maxlen: 21
188.208.144.0/20 maxlen: 24
188.208.152.0/21 maxlen: 24
5.134.128.0/22 maxlen: 22
188.215.88.0/23 maxlen: 23
188.215.90.0/23 maxlen: 23
188.215.88.0/22 maxlen: 22
5.134.128.0/20 maxlen: 22
188.208.156.0/24 maxlen: 24
213.195.32.0/20 maxlen: 20
213.195.32.0/21 maxlen: 21
5.73.224.0/19 maxlen: 19
92.114.72.0/21 maxlen: 21
5.134.132.0/22 maxlen: 22
5.134.128.0/18 maxlen: 18
5.72.160.0/19 maxlen: 19
5.72.192.0/19 maxlen: 19
89.32.96.0/21 maxlen: 21
89.32.96.0/20 maxlen: 20
89.32.104.0/21 maxlen: 21
89.32.0.0/20 maxlen: 20
89.32.0.0/19 maxlen: 19
5.200.112.0/20 maxlen: 20
89.32.16.0/20 maxlen: 20
5.72.128.0/19 maxlen: 19
188.214.4.0/22 maxlen: 22
188.214.4.0/23 maxlen: 23
188.214.6.0/23 maxlen: 23
5.73.32.0/19 maxlen: 19
5.73.64.0/19 maxlen: 19
188.214.84.0/23 maxlen: 23
37.153.176.0/20 maxlen: 20
37.153.176.0/21 maxlen: 21
188.214.84.0/22 maxlen: 22
188.214.86.0/23 maxlen: 23
5.72.224.0/19 maxlen: 19
37.153.184.0/21 maxlen: 21
5.73.0.0/19 maxlen: 19
5.73.0.0/16 maxlen: 16
185.24.136.0/23 maxlen: 23
185.24.136.0/24 maxlen: 24
185.24.137.0/24 maxlen: 24
5.72.64.0/19 maxlen: 19
5.200.96.0/20 maxlen: 20
5.200.96.0/19 maxlen: 19
5.72.96.0/19 maxlen: 19
5.72.0.0/19 maxlen: 19
5.72.0.0/16 maxlen: 16
185.24.228.0/23 maxlen: 23
185.24.228.0/22 maxlen: 23
5.72.32.0/19 maxlen: 19
94.24.80.0/20 maxlen: 20
94.24.80.0/21 maxlen: 21
94.24.88.0/21 maxlen: 21
94.24.96.0/22 maxlen: 22
94.24.96.0/21 maxlen: 21
94.24.100.0/22 maxlen: 22
37.44.56.0/22 maxlen: 22
37.44.56.0/21 maxlen: 21
94.24.0.0/20 maxlen: 20
94.24.0.0/21 maxlen: 21
37.44.60.0/22 maxlen: 22
94.24.8.0/21 maxlen: 21
94.24.16.0/22 maxlen: 22
94.24.16.0/21 maxlen: 21
94.24.20.0/22 maxlen: 22
37.137.128.0/17 maxlen: 17
37.137.128.0/18 maxlen: 18
37.137.64.0/18 maxlen: 18
37.137.192.0/18 maxlen: 18
37.137.32.0/22 maxlen: 22
37.137.36.0/24 maxlen: 24
5.62.192.0/19 maxlen: 19
5.62.192.0/18 maxlen: 18
5.62.224.0/19 maxlen: 19
37.137.0.0/17 maxlen: 21
37.137.0.0/18 maxlen: 21
37.137.0.0/19 maxlen: 19
95.162.192.0/19 maxlen: 19
95.162.192.0/20 maxlen: 20
95.162.208.0/20 maxlen: 20
95.162.224.0/19 maxlen: 24
95.162.224.0/20 maxlen: 20
37.156.48.0/20 maxlen: 20
37.156.48.0/21 maxlen: 21
95.162.144.0/20 maxlen: 21
89.34.144.0/20 maxlen: 20
95.162.152.0/21 maxlen: 21
77.81.192.0/20 maxlen: 20
77.81.192.0/19 maxlen: 19
95.162.160.0/19 maxlen: 21
95.162.160.0/20 maxlen: 21
95.162.160.0/21 maxlen: 21
77.81.208.0/20 maxlen: 20
95.162.176.0/20 maxlen: 21
37.156.152.0/21 maxlen: 21
37.156.152.0/22 maxlen: 22
37.156.156.0/22 maxlen: 22
95.162.240.0/20 maxlen: 20
37.156.56.0/21 maxlen: 21
95.162.248.0/24 maxlen: 24
89.41.192.0/20 maxlen: 20
89.41.192.0/19 maxlen: 19
89.41.208.0/20 maxlen: 20
95.162.0.0/20 maxlen: 20
95.162.0.0/19 maxlen: 19
89.47.128.0/19 maxlen: 19
89.47.128.0/20 maxlen: 20
95.162.0.0/16 maxlen: 17
95.162.16.0/20 maxlen: 20
89.47.144.0/20 maxlen: 20
188.208.224.0/19 maxlen: 19
188.208.224.0/20 maxlen: 20
89.47.64.0/21 maxlen: 21
89.47.64.0/20 maxlen: 20
188.208.243.0/24 maxlen: 24
188.208.240.0/20 maxlen: 20
89.47.72.0/21 maxlen: 21
95.162.80.0/20 maxlen: 20
95.162.96.0/19 maxlen: 19
95.162.96.0/20 maxlen: 20
95.162.112.0/20 maxlen: 20
91.229.214.0/23 maxlen: 24
89.34.128.0/20 maxlen: 20
95.162.128.0/19 maxlen: 21
95.162.128.0/21 maxlen: 21
89.34.128.0/19 maxlen: 19
95.162.128.0/20 maxlen: 21
95.162.128.0/17 maxlen: 17
95.162.32.0/19 maxlen: 19
89.34.32.0/19 maxlen: 19
89.34.32.0/20 maxlen: 20
95.162.32.0/20 maxlen: 20
89.34.48.0/20 maxlen: 20
95.162.48.0/20 maxlen: 20
95.162.64.0/20 maxlen: 20
95.162.64.0/19 maxlen: 19
2a03:ef42::/34 maxlen: 34
2a03:ef42:4000::/34 maxlen: 34
2a03:ef42:c000::/34 maxlen: 34
2a03:ef43::/34 maxlen: 34
2a03:ef42:c000::1/128 maxlen: 128
2a03:ef42:c000::/128 maxlen: 128
2a03:ef43:c000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:61:b5:0a:df:bc:1f:25:3f:90:d3:4e:33:3a:94:e4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Sep 21 20:19:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be77f98b5bfba19ecf716b764f80ba244075abe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0e:68:1d:41:9c:b9:99:c5:db:fd:e0:c0:b9:
84:c5:33:d8:8b:4b:b7:fc:de:34:91:2e:80:d2:57:
62:9b:f8:84:be:93:1f:52:9b:a8:93:ec:5e:22:2f:
40:eb:ae:00:36:ab:27:b3:7b:86:b5:95:0f:3f:e1:
36:b2:be:9b:f3:aa:44:aa:4a:22:32:1f:1d:bd:8f:
67:58:86:dc:e6:b7:81:c9:7b:6d:13:34:0a:89:a0:
83:65:99:cd:2d:3d:7f:5c:de:d2:b8:fb:a9:76:33:
0f:c4:cb:31:85:01:91:31:2a:a0:8a:bb:0b:9e:9c:
0d:c9:cd:57:a9:14:06:4f:04:05:01:7b:63:54:9d:
de:ab:29:39:f3:1b:90:b1:aa:dc:e6:30:fe:03:4f:
8f:c2:b3:c5:e1:94:32:30:ad:a8:57:46:ee:9f:ed:
c6:5c:a4:0d:9f:cf:a3:27:1e:9f:11:9a:3b:45:ee:
74:9d:a9:23:5e:cb:2a:49:78:a7:dc:c3:01:83:4a:
35:6f:85:45:48:84:c0:28:0b:f0:bc:4f:d9:17:fe:
75:93:16:bb:94:b3:f0:04:de:33:90:f1:07:f2:eb:
85:f9:b6:5e:27:75:9e:14:fc:04:38:cc:7e:a0:19:
cb:35:82:03:26:1b:8b:5f:90:a9:d4:f8:39:c3:9d:
bc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:77:F9:8B:5B:FB:A1:9E:CF:71:6B:76:4F:80:BA:24:40:75:AB:E1
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/vnf5i1v7oZ7PcWt2T4C6JEB1q-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.192.0/18
5.72.0.0/15
5.134.128.0/18
5.200.96.0/19
37.44.56.0/21
37.137.0.0/16
37.153.176.0/20
37.156.48.0/20
37.156.152.0/21
77.81.192.0/19
89.32.0.0/19
89.32.96.0/20
89.34.32.0/19
89.34.128.0/19
89.41.192.0/19
89.47.64.0/20
89.47.128.0/19
91.229.214.0/23
92.114.64.0/20
93.114.16.0/20
94.24.0.0-94.24.23.255
94.24.80.0-94.24.103.255
95.162.0.0/16
185.24.136.0/23
185.24.228.0/22
188.208.64.0/19
188.208.144.0-188.208.191.255
188.208.224.0/19
188.214.4.0/22
188.214.84.0/22
188.215.24.0/22
188.215.88.0/22
213.195.32.0-213.195.51.255
IPv6:
2a03:ef42::/33
2a03:ef42:c000::-2a03:ef43:3fff:ffff:ffff:ffff:ffff:ffff
2a03:ef43:c000::/48
Signature Algorithm: sha256WithRSAEncryption
6b:6a:d8:69:0a:1f:a2:c0:6d:43:b3:26:a2:d5:20:46:2b:6d:
bb:79:4c:25:59:67:17:91:b6:20:c1:02:ea:66:7a:e2:00:a3:
45:7a:af:9f:31:8f:78:2c:22:b4:9b:6e:28:17:9c:a2:db:b2:
63:fb:5f:82:0f:2b:fd:25:bd:7b:73:11:c1:d7:bc:21:5b:9f:
74:95:e2:1f:01:d6:61:da:c8:a6:97:21:f8:e6:96:bc:39:be:
d5:c8:4f:b9:72:21:54:f3:5f:c5:ed:9b:61:db:b2:44:f4:98:
cc:ca:be:3a:25:06:71:81:d4:73:7f:e9:b1:49:12:47:46:1b:
5e:b1:48:42:22:bd:90:d6:b4:d5:8b:37:9c:01:47:ba:81:e8:
17:b5:34:f4:ce:35:f2:e0:98:7f:e4:41:dd:14:a1:c2:d4:fe:
58:e3:1b:b7:9e:65:b5:80:ce:f7:9d:88:e6:35:7c:bc:1e:0d:
e5:10:ce:48:9f:43:a5:9d:05:04:15:13:84:1d:f0:d2:4c:8d:
63:04:a0:28:aa:8a:a9:f2:20:b8:04:16:0d:bd:b7:c9:1e:1b:
54:cf:7c:0f:ca:50:b2:1a:39:a8:9f:b5:69:8e:1b:65:02:d7:
fb:7d:c1:36:46:d3:4f:ec:1b:af:ea:f9:f5:12:11:fb:54:74:
c3:18:58:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:53 2024 by rpki-client on console-fra.rpki-client.org