Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/8sHP64lUhvE6ZKYw3n0wV4SiJNM.roa
File: 8sHP64lUhvE6ZKYw3n0wV4SiJNM.roa (raw, json)
Hash identifier: e8Y/dvjq++gTwyGN/VY7/M3qOc+oM/7REXuJaHqDQ04=
Subject key identifier: F2:C1:CF:EB:89:54:86:F1:3A:64:A6:30:DE:7D:30:57:84:A2:24:D3
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 0182FB0B5EAA846DDEE49277DFD286DE6AD0
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/8sHP64lUhvE6ZKYw3n0wV4SiJNM.roa
Signing time: Thu 01 Sep 2022 21:53:22 +0000
ROA not before: Thu 01 Sep 2022 21:53:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206067
IP address blocks: 188.29.184.0/21 maxlen: 21
188.29.192.0/20 maxlen: 20
188.29.208.0/20 maxlen: 20
188.29.128.0/19 maxlen: 19
188.30.64.0/22 maxlen: 22
188.30.76.0/22 maxlen: 22
188.29.240.0/21 maxlen: 21
188.29.248.0/22 maxlen: 22
188.30.0.0/21 maxlen: 21
92.40.48.0/20 maxlen: 20
94.197.104.0/21 maxlen: 21
188.29.0.0/20 maxlen: 20
94.197.112.0/21 maxlen: 21
188.28.192.0/18 maxlen: 18
188.29.80.0/20 maxlen: 20
188.29.96.0/20 maxlen: 20
188.29.112.0/20 maxlen: 20
188.29.16.0/20 maxlen: 20
188.29.32.0/20 maxlen: 20
188.29.64.0/20 maxlen: 20
188.31.96.0/20 maxlen: 20
188.28.16.0/20 maxlen: 20
92.41.144.0/21 maxlen: 21
92.41.156.0/22 maxlen: 22
94.196.144.0/20 maxlen: 20
92.41.160.0/21 maxlen: 21
188.31.208.0/21 maxlen: 21
94.196.224.0/19 maxlen: 19
188.31.224.0/20 maxlen: 20
188.28.64.0/20 maxlen: 20
188.31.176.0/20 maxlen: 20
188.28.80.0/20 maxlen: 20
92.41.208.0/20 maxlen: 20
92.41.224.0/20 maxlen: 20
94.196.208.0/20 maxlen: 20
188.30.136.0/21 maxlen: 21
92.40.160.0/21 maxlen: 21
92.40.168.0/23 maxlen: 23
92.40.170.0/23 maxlen: 23
92.40.172.0/23 maxlen: 23
92.40.174.0/23 maxlen: 23
92.40.186.0/23 maxlen: 23
92.40.182.0/23 maxlen: 23
188.30.160.0/19 maxlen: 19
92.40.196.0/23 maxlen: 23
92.40.198.0/23 maxlen: 23
92.40.200.0/23 maxlen: 23
92.40.202.0/23 maxlen: 23
92.40.204.0/23 maxlen: 23
92.40.208.0/23 maxlen: 23
92.40.210.0/23 maxlen: 23
92.40.212.0/23 maxlen: 23
188.30.80.0/22 maxlen: 22
92.40.112.0/20 maxlen: 20
188.30.96.0/19 maxlen: 19
92.41.16.0/20 maxlen: 20
94.196.0.0/18 maxlen: 18
188.31.8.0/21 maxlen: 21
188.31.24.0/21 maxlen: 21
92.40.248.0/24 maxlen: 24
92.41.0.0/20 maxlen: 20
2a04:4a45:a::/48 maxlen: 48
2a04:4a45:b::/48 maxlen: 48
2a04:4a43:5600::/40 maxlen: 40
2a04:4a43:5800::/40 maxlen: 40
2a04:4a43:4200::/39 maxlen: 39
2a04:4a43:4000::/39 maxlen: 39
2a04:4a43:5200::/40 maxlen: 40
2a04:4a43:4900::/40 maxlen: 40
2a04:4a43:9600::/40 maxlen: 40
2a04:4a43:4400::/40 maxlen: 40
2a04:4a43:5700::/40 maxlen: 40
2a04:4a43:4600::/40 maxlen: 40
2a04:4a43:5400::/40 maxlen: 40
2a04:4a43:4d00::/40 maxlen: 40
2a04:4a43:9700::/40 maxlen: 40
2a04:4a43:5300::/40 maxlen: 40
2a04:4a43:5000::/40 maxlen: 40
2a04:4a43:4700::/40 maxlen: 40
2a04:4a43:4b00::/40 maxlen: 40
2a04:4a43:9500::/40 maxlen: 40
2a04:4a43:4500::/40 maxlen: 40
2a04:4a43:9800::/40 maxlen: 40
2a04:4a43:4e00::/40 maxlen: 40
2a04:4a43:5500::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fb:0b:5e:aa:84:6d:de:e4:92:77:df:d2:86:de:6a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Sep 1 21:53:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2c1cfeb895486f13a64a630de7d305784a224d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:f6:06:8e:ef:cd:62:03:dd:3a:3b:cf:ac:
d3:ee:46:2f:a9:72:c3:cf:47:44:c3:2d:45:71:06:
32:61:d8:45:7e:8c:ce:9b:b9:f2:22:6a:7c:fa:46:
de:0a:c0:61:5c:48:78:a3:49:2e:6f:66:f1:78:a0:
33:37:53:e6:84:25:44:a2:4f:a7:f7:8b:d7:4d:e3:
bc:37:19:69:0e:1c:25:d0:11:d7:7b:53:54:08:04:
68:80:be:cc:0f:5e:b4:42:37:96:f2:4e:98:66:59:
76:c6:49:da:95:7e:b0:cd:a9:2a:b6:a2:5f:db:20:
82:ae:11:90:c0:e8:b6:9e:18:36:f5:46:3a:ae:c6:
52:15:9c:da:87:86:0f:5a:9a:24:3b:e1:62:b5:55:
9e:bc:1d:09:49:47:17:b3:64:06:97:ba:f2:8e:f3:
bc:97:81:29:9d:5a:6b:64:5c:2c:2d:fc:bb:1d:17:
73:73:3f:a7:ef:0c:69:0f:be:35:a2:e2:ae:93:7a:
b9:0c:d4:c2:a4:86:9d:14:63:dd:e5:36:e9:ff:4a:
13:09:9e:4e:d8:03:d3:a3:d5:e7:96:fc:7a:15:0d:
2d:46:23:10:14:9c:c3:2b:65:15:bc:7d:40:19:43:
20:b8:a0:6f:81:cb:8c:61:57:8d:6c:f2:7a:61:05:
98:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C1:CF:EB:89:54:86:F1:3A:64:A6:30:DE:7D:30:57:84:A2:24:D3
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/8sHP64lUhvE6ZKYw3n0wV4SiJNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.40.48.0/20
92.40.112.0/20
92.40.160.0/20
92.40.182.0/23
92.40.186.0/23
92.40.196.0-92.40.205.255
92.40.208.0-92.40.213.255
92.40.248.0/24
92.41.0.0/19
92.41.144.0/21
92.41.156.0-92.41.167.255
92.41.208.0-92.41.239.255
94.196.0.0/18
94.196.144.0/20
94.196.208.0-94.196.255.255
94.197.104.0-94.197.119.255
188.28.16.0/20
188.28.64.0/19
188.28.192.0-188.29.47.255
188.29.64.0-188.29.159.255
188.29.184.0-188.29.223.255
188.29.240.0-188.29.251.255
188.30.0.0/21
188.30.64.0/22
188.30.76.0-188.30.83.255
188.30.96.0/19
188.30.136.0/21
188.30.160.0/19
188.31.8.0/21
188.31.24.0/21
188.31.96.0/20
188.31.176.0/20
188.31.208.0/21
188.31.224.0/20
IPv6:
2a04:4a43:4000::/37
2a04:4a43:4900::/40
2a04:4a43:4b00::/40
2a04:4a43:4d00::-2a04:4a43:4eff:ffff:ffff:ffff:ffff:ffff
2a04:4a43:5000::/40
2a04:4a43:5200::-2a04:4a43:58ff:ffff:ffff:ffff:ffff:ffff
2a04:4a43:9500::-2a04:4a43:98ff:ffff:ffff:ffff:ffff:ffff
2a04:4a45:a::/47
Signature Algorithm: sha256WithRSAEncryption
78:74:e4:56:ce:75:00:70:38:9e:35:e5:08:79:92:67:ac:a3:
37:a4:68:ee:08:7f:b8:5d:14:ab:8d:9e:cc:9a:2a:19:94:05:
e8:1a:15:28:63:ec:b7:fd:06:d6:d1:74:57:0c:d9:06:69:c2:
02:07:1b:17:db:0a:c8:8c:c7:23:b8:b1:11:5c:87:47:a7:04:
f3:9b:1d:16:1e:be:17:91:f7:55:d6:6e:1a:6f:b9:46:88:b2:
f2:d8:d8:3d:b2:a5:0b:51:86:88:0e:db:43:48:a1:ea:e6:19:
82:76:bb:f7:bc:34:f7:dd:9b:e6:4a:25:69:e3:14:9c:6a:fe:
9b:e9:a6:62:c4:dd:a0:58:12:55:7e:21:64:9d:d8:26:72:c6:
2e:62:79:85:4a:57:7c:30:9c:f9:da:0f:3d:65:84:99:2f:81:
8a:95:00:f5:aa:00:32:fe:62:52:ef:5d:99:6f:b0:51:a1:7e:
81:54:be:77:e2:20:d8:aa:ed:08:a3:53:ba:2d:29:2d:29:4e:
6e:df:2b:be:0d:03:4b:af:36:46:51:d4:bb:49:c7:7c:3c:a9:
1c:cb:31:70:d0:d3:4c:37:84:a5:6e:a4:0a:85:b4:c4:80:e0:
54:d3:ee:fa:35:52:c5:d2:f7:8f:71:78:ff:fd:11:3d:99:99:
f1:67:1f:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:41 2024 by rpki-client on console-ams.rpki-client.org