Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/Sc87hvcVce46KjGNwMgy2uTlxDQ.roa
File: Sc87hvcVce46KjGNwMgy2uTlxDQ.roa (raw, json)
Hash identifier: wuAlAWhiFiN0rtarJcQHvEkL2iUmFaMfKrJ7ZcXjOUc=
Subject key identifier: 49:CF:3B:86:F7:15:71:EE:3A:2A:31:8D:C0:C8:32:DA:E4:E5:C4:34
Certificate issuer: /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial: 331305F9
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/Sc87hvcVce46KjGNwMgy2uTlxDQ.roa
Signing time: Sat 01 Jan 2022 12:57:42 +0000
ROA not before: Sat 01 Jan 2022 12:57:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47883
IP address blocks: 94.79.93.0/24 maxlen: 24
94.79.92.0/24 maxlen: 24
94.79.98.0/24 maxlen: 24
94.79.96.0/24 maxlen: 24
94.79.97.0/24 maxlen: 24
94.79.94.0/24 maxlen: 24
94.79.95.0/24 maxlen: 24
94.79.100.0/24 maxlen: 24
94.79.99.0/24 maxlen: 24
94.79.105.0/24 maxlen: 24
94.79.103.0/24 maxlen: 24
94.79.104.0/24 maxlen: 24
94.79.101.0/24 maxlen: 24
94.79.102.0/24 maxlen: 24
94.79.112.0/24 maxlen: 24
94.79.110.0/24 maxlen: 24
94.79.111.0/24 maxlen: 24
94.79.108.0/24 maxlen: 24
94.79.109.0/24 maxlen: 24
94.79.107.0/24 maxlen: 24
94.79.106.0/24 maxlen: 24
94.79.114.0/24 maxlen: 24
94.79.113.0/24 maxlen: 24
94.79.117.0/24 maxlen: 24
94.79.118.0/24 maxlen: 24
94.79.115.0/24 maxlen: 24
94.79.116.0/24 maxlen: 24
94.79.124.0/24 maxlen: 24
94.79.125.0/24 maxlen: 24
94.79.122.0/24 maxlen: 24
94.79.123.0/24 maxlen: 24
94.79.121.0/24 maxlen: 24
94.79.119.0/24 maxlen: 24
94.79.120.0/24 maxlen: 24
94.79.127.0/24 maxlen: 24
94.79.126.0/24 maxlen: 24
94.79.64.0/24 maxlen: 24
94.79.70.0/24 maxlen: 24
94.79.71.0/24 maxlen: 24
94.79.68.0/24 maxlen: 24
94.79.69.0/24 maxlen: 24
94.79.67.0/24 maxlen: 24
94.79.65.0/24 maxlen: 24
94.79.66.0/24 maxlen: 24
94.79.64.0/18 maxlen: 18
94.79.72.0/24 maxlen: 24
94.79.73.0/24 maxlen: 24
94.79.77.0/24 maxlen: 24
94.79.78.0/24 maxlen: 24
94.79.75.0/24 maxlen: 24
94.79.76.0/24 maxlen: 24
94.79.74.0/24 maxlen: 24
94.79.84.0/24 maxlen: 24
94.79.85.0/24 maxlen: 24
94.79.82.0/24 maxlen: 24
94.79.83.0/24 maxlen: 24
94.79.81.0/24 maxlen: 24
94.79.79.0/24 maxlen: 24
94.79.80.0/24 maxlen: 24
94.79.86.0/24 maxlen: 24
94.79.91.0/24 maxlen: 24
94.79.89.0/24 maxlen: 24
94.79.90.0/24 maxlen: 24
94.79.87.0/24 maxlen: 24
94.79.88.0/24 maxlen: 24
5.104.0.0/24 maxlen: 24
5.104.1.0/24 maxlen: 24
5.104.0.0/20 maxlen: 20
5.104.4.0/24 maxlen: 24
5.104.2.0/24 maxlen: 24
5.104.3.0/24 maxlen: 24
5.104.11.0/24 maxlen: 24
5.104.9.0/24 maxlen: 24
5.104.10.0/24 maxlen: 24
5.104.7.0/24 maxlen: 24
5.104.8.0/24 maxlen: 24
5.104.5.0/24 maxlen: 24
5.104.6.0/24 maxlen: 24
5.104.14.0/24 maxlen: 24
5.104.15.0/24 maxlen: 24
5.104.12.0/24 maxlen: 24
5.104.13.0/24 maxlen: 24
37.34.4.0/24 maxlen: 24
37.34.3.0/24 maxlen: 24
37.34.0.0/19 maxlen: 19
37.34.1.0/24 maxlen: 24
37.34.2.0/24 maxlen: 24
37.34.0.0/24 maxlen: 24
37.34.6.0/24 maxlen: 24
37.34.7.0/24 maxlen: 24
37.34.5.0/24 maxlen: 24
37.34.11.0/24 maxlen: 24
37.34.10.0/24 maxlen: 24
37.34.8.0/24 maxlen: 24
37.34.9.0/24 maxlen: 24
37.34.17.0/24 maxlen: 24
37.34.15.0/24 maxlen: 24
37.34.16.0/24 maxlen: 24
37.34.13.0/24 maxlen: 24
37.34.14.0/24 maxlen: 24
37.34.12.0/24 maxlen: 24
37.34.20.0/24 maxlen: 24
37.34.21.0/24 maxlen: 24
37.34.18.0/24 maxlen: 24
37.34.19.0/24 maxlen: 24
37.34.24.0/24 maxlen: 24
37.34.22.0/24 maxlen: 24
37.34.23.0/24 maxlen: 24
37.34.31.0/24 maxlen: 24
37.34.29.0/24 maxlen: 24
37.34.30.0/24 maxlen: 24
37.34.27.0/24 maxlen: 24
37.34.28.0/24 maxlen: 24
37.34.25.0/24 maxlen: 24
37.34.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 856884729 (0x331305f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Validity
Not Before: Jan 1 12:57:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49cf3b86f71571ee3a2a318dc0c832dae4e5c434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:30:de:8b:1e:c7:63:1b:f5:bd:2e:a1:5d:0f:
69:84:01:4e:a9:27:fe:18:3e:43:4b:98:36:82:57:
e1:a6:6f:a1:ec:d1:f1:ea:71:f9:e2:10:5f:d1:96:
6a:d0:fa:2f:19:f6:2d:52:18:b5:59:24:ec:f9:70:
e4:d9:58:13:54:88:e1:db:51:b2:3b:36:14:48:4a:
02:37:32:7d:df:a2:fa:30:f0:47:95:4a:1a:01:5c:
1d:0f:e5:f8:33:d7:5c:bc:86:0e:81:36:f6:01:5c:
48:70:f0:c2:a7:83:1e:8b:76:d1:3a:f5:42:29:cc:
c1:17:51:0a:35:4d:57:61:13:f5:86:7d:ce:72:90:
a3:11:ca:36:bc:74:82:27:c4:b4:60:35:1a:3d:4b:
c5:08:4c:a6:27:65:55:c2:38:b8:2d:ec:b9:0a:39:
59:62:f1:33:d7:86:26:ef:18:dd:79:01:36:23:98:
f0:d9:8b:e9:b4:f7:a4:98:85:e2:51:51:67:a5:45:
38:0b:7f:d5:a7:95:85:96:5f:02:bb:70:6e:44:a0:
63:d3:9d:d5:bf:4d:04:fc:b2:dc:c3:f8:6a:c3:82:
9c:29:b3:b9:52:80:91:2d:af:c3:92:06:72:a3:ed:
8c:0d:65:6c:7c:ee:0b:65:e6:54:fe:a1:d8:3e:3a:
a6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CF:3B:86:F7:15:71:EE:3A:2A:31:8D:C0:C8:32:DA:E4:E5:C4:34
X509v3 Authority Key Identifier:
keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/Sc87hvcVce46KjGNwMgy2uTlxDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.0.0/20
37.34.0.0/19
94.79.64.0/18
Signature Algorithm: sha256WithRSAEncryption
08:7c:18:35:56:a7:52:6e:e5:ba:fb:d8:f7:39:cb:41:d0:d6:
44:55:d8:64:3f:79:e7:c6:b0:4c:ef:33:23:46:fe:c2:68:fe:
d3:74:62:c0:37:14:e4:ec:9c:8d:37:71:d5:1d:e8:65:ba:70:
30:09:32:66:f3:46:2c:7b:6e:a2:a3:3d:34:4d:8b:08:d2:52:
0b:ba:05:0c:0c:5a:61:27:03:da:06:b5:35:f7:c6:4c:63:72:
c0:dd:46:98:73:c4:1b:e1:d1:43:6c:1c:a2:7e:08:cd:89:8b:
71:75:97:36:9e:9f:36:f9:e4:19:d5:51:f1:38:94:7e:4d:c6:
59:bb:29:84:10:00:9e:26:89:5d:04:0c:31:9e:05:56:19:09:
ae:3d:4f:5b:fc:bf:38:1b:0d:e6:92:36:ab:47:59:ce:1a:19:
a9:ba:72:45:6a:d2:47:d4:25:fd:96:85:67:71:90:20:f8:1c:
81:c0:f6:b3:bf:7d:a7:0f:8b:25:8e:cf:29:bb:0c:6d:6c:8c:
fc:1a:c4:f5:96:64:d4:3c:91:28:2a:b1:fe:cd:46:1d:3f:ce:
13:72:9e:08:ff:c7:cb:c8:0c:e3:69:2b:64:49:1e:0f:53:58:
53:22:6d:04:9a:9b:06:32:e3:0a:c6:a1:46:ae:ab:23:ca:d0:
a6:36:5e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:58 2024 by rpki-client on console-fra.rpki-client.org