Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/BSASs8VSUbgGyQwbveV2GhhL_vY.roa
File: BSASs8VSUbgGyQwbveV2GhhL_vY.roa (raw, json)
Hash identifier: NLP3I7oKR/CyEp97eOnuOAA7FuiPtGw9lLrEHm692T8=
Subject key identifier: 05:20:12:B3:C5:52:51:B8:06:C9:0C:1B:BD:E5:76:1A:18:4B:FE:F6
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 018452D4855A4CDD6A563D6FD3BD2E5C9C94
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/BSASs8VSUbgGyQwbveV2GhhL_vY.roa
Signing time: Mon 07 Nov 2022 16:02:50 +0000
ROA not before: Mon 07 Nov 2022 16:02:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206067
IP address blocks: 92.40.64.0/20 maxlen: 20
92.40.80.0/20 maxlen: 20
92.40.96.0/20 maxlen: 20
92.40.16.0/20 maxlen: 20
92.40.48.0/20 maxlen: 20
185.153.236.0/24 maxlen: 24
185.153.237.0/24 maxlen: 24
185.153.238.0/24 maxlen: 24
185.153.239.0/24 maxlen: 24
188.31.96.0/20 maxlen: 20
188.31.92.0/22 maxlen: 22
188.31.112.0/20 maxlen: 20
188.31.128.0/19 maxlen: 19
188.31.64.0/22 maxlen: 22
188.31.68.0/22 maxlen: 22
188.31.72.0/22 maxlen: 22
188.31.76.0/22 maxlen: 22
188.31.80.0/22 maxlen: 22
188.31.84.0/22 maxlen: 22
188.31.88.0/22 maxlen: 22
188.31.208.0/21 maxlen: 21
188.31.224.0/20 maxlen: 20
188.31.248.0/23 maxlen: 23
188.31.251.0/24 maxlen: 24
188.31.160.0/20 maxlen: 20
188.31.176.0/20 maxlen: 20
188.31.192.0/21 maxlen: 21
188.30.136.0/21 maxlen: 21
188.30.144.0/21 maxlen: 21
188.30.160.0/19 maxlen: 19
188.30.80.0/22 maxlen: 22
188.30.84.0/22 maxlen: 22
188.30.96.0/19 maxlen: 19
188.30.128.0/21 maxlen: 21
188.30.240.0/21 maxlen: 21
188.31.0.0/21 maxlen: 21
188.31.8.0/21 maxlen: 21
188.31.16.0/21 maxlen: 21
188.31.24.0/21 maxlen: 21
188.31.32.0/19 maxlen: 19
188.30.192.0/21 maxlen: 21
188.30.200.0/21 maxlen: 21
188.30.208.0/20 maxlen: 20
188.30.224.0/20 maxlen: 20
188.29.184.0/21 maxlen: 21
188.29.192.0/20 maxlen: 20
188.29.208.0/20 maxlen: 20
188.29.224.0/20 maxlen: 20
188.29.128.0/19 maxlen: 19
188.29.160.0/22 maxlen: 22
188.30.32.0/19 maxlen: 19
188.30.64.0/22 maxlen: 22
188.30.68.0/22 maxlen: 22
188.30.76.0/22 maxlen: 22
188.30.72.0/22 maxlen: 22
188.29.240.0/21 maxlen: 21
188.29.248.0/22 maxlen: 22
188.30.0.0/21 maxlen: 21
188.30.8.0/21 maxlen: 21
188.30.16.0/21 maxlen: 21
188.30.24.0/21 maxlen: 21
94.197.104.0/21 maxlen: 21
188.29.0.0/20 maxlen: 20
94.197.112.0/21 maxlen: 21
188.28.160.0/19 maxlen: 19
188.28.192.0/18 maxlen: 18
188.29.80.0/20 maxlen: 20
188.29.96.0/20 maxlen: 20
188.29.112.0/20 maxlen: 20
188.29.16.0/20 maxlen: 20
188.29.32.0/20 maxlen: 20
188.29.48.0/20 maxlen: 20
188.29.64.0/20 maxlen: 20
188.28.0.0/20 maxlen: 20
92.41.128.0/20 maxlen: 20
188.28.16.0/20 maxlen: 20
92.41.144.0/21 maxlen: 21
92.41.156.0/22 maxlen: 22
94.196.144.0/20 maxlen: 20
188.28.32.0/20 maxlen: 20
92.41.160.0/21 maxlen: 21
188.28.48.0/20 maxlen: 20
92.41.80.0/22 maxlen: 22
92.41.84.0/22 maxlen: 22
92.41.88.0/22 maxlen: 22
92.41.92.0/22 maxlen: 22
188.28.112.0/20 maxlen: 20
94.196.224.0/19 maxlen: 19
188.28.128.0/19 maxlen: 19
92.41.251.0/24 maxlen: 24
92.41.176.0/20 maxlen: 20
188.28.64.0/20 maxlen: 20
188.28.80.0/20 maxlen: 20
92.41.208.0/20 maxlen: 20
188.28.96.0/20 maxlen: 20
92.41.224.0/20 maxlen: 20
94.196.208.0/20 maxlen: 20
92.40.160.0/21 maxlen: 21
92.40.168.0/23 maxlen: 23
92.40.170.0/23 maxlen: 23
92.40.172.0/23 maxlen: 23
92.40.174.0/23 maxlen: 23
92.40.176.0/23 maxlen: 23
92.40.178.0/23 maxlen: 23
92.40.186.0/23 maxlen: 23
92.40.180.0/23 maxlen: 23
92.40.182.0/23 maxlen: 23
92.40.184.0/23 maxlen: 23
92.40.188.0/23 maxlen: 23
92.40.190.0/23 maxlen: 23
92.40.192.0/23 maxlen: 23
92.40.194.0/23 maxlen: 23
92.40.196.0/23 maxlen: 23
92.40.198.0/23 maxlen: 23
92.40.200.0/23 maxlen: 23
92.40.202.0/23 maxlen: 23
92.40.204.0/23 maxlen: 23
92.40.210.0/23 maxlen: 23
92.40.212.0/23 maxlen: 23
92.40.208.0/23 maxlen: 23
92.40.112.0/20 maxlen: 20
92.41.16.0/20 maxlen: 20
94.196.0.0/18 maxlen: 18
92.41.32.0/20 maxlen: 20
92.41.48.0/20 maxlen: 20
92.41.64.0/20 maxlen: 20
92.40.216.0/23 maxlen: 23
92.40.218.0/23 maxlen: 23
92.40.245.0/24 maxlen: 24
92.40.248.0/24 maxlen: 24
92.41.0.0/20 maxlen: 20
2a04:4a45:b::/48 maxlen: 48
2a04:4a45:d::/48 maxlen: 48
2a04:4a45:a::/48 maxlen: 48
2a04:4a45:f::/48 maxlen: 48
2a04:4a45:c::/48 maxlen: 48
2a04:4a45:9::/48 maxlen: 48
2a04:4a43:9500::/40 maxlen: 40
2a04:4a43:4000::/34 maxlen: 34
2a04:4a43:4000::/39 maxlen: 39
2a04:4a43:4900::/40 maxlen: 40
2a04:4a43:4c00::/40 maxlen: 40
2a04:4a43:9600::/40 maxlen: 40
2a04:4a43:4f00::/40 maxlen: 40
2a04:4a43:5200::/40 maxlen: 40
2a04:4a43:5500::/40 maxlen: 40
2a04:4a43:4200::/39 maxlen: 39
2a04:4a43:5400::/40 maxlen: 40
2a04:4a43:5100::/40 maxlen: 40
2a04:4a43:4e00::/40 maxlen: 40
2a04:4a43:9800::/40 maxlen: 40
2a04:4a43:4400::/40 maxlen: 40
2a04:4a43:5700::/40 maxlen: 40
2a04:4a43:4600::/40 maxlen: 40
2a04:4a43:5800::/40 maxlen: 40
2a04:4a43:4700::/40 maxlen: 40
2a04:4a43:5000::/40 maxlen: 40
2a04:4a43:5300::/40 maxlen: 40
2a04:4a43:5600::/40 maxlen: 40
2a04:4a43:9700::/40 maxlen: 40
2a04:4a43:4a00::/40 maxlen: 40
2a04:4a43:4d00::/40 maxlen: 40
2a04:4a43:4500::/40 maxlen: 40
2a04:4a43:4800::/40 maxlen: 40
2a04:4a43:4b00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:52:d4:85:5a:4c:dd:6a:56:3d:6f:d3:bd:2e:5c:9c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Nov 7 16:02:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=052012b3c55251b806c90c1bbde5761a184bfef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:fc:3b:74:0a:a4:e1:d2:ef:04:24:bc:e4:
e1:67:ce:70:68:74:57:08:62:00:10:1d:32:ef:ab:
49:dd:24:d6:a8:24:2c:20:11:be:0d:f2:be:48:5a:
a7:5b:28:c3:fa:2f:fc:bd:d9:72:5b:62:46:f4:69:
c9:38:16:42:08:9b:99:b9:7d:90:61:7b:a6:e1:f6:
00:a5:ab:a9:96:00:b5:f9:f0:33:6f:09:6f:b5:72:
c6:27:dd:97:6b:8a:5f:ba:08:4f:82:02:64:de:77:
92:ff:0b:9d:4d:58:98:49:75:94:3a:66:bb:f5:47:
20:60:84:17:56:41:d8:9b:c8:50:8c:5a:db:2d:c8:
a6:14:93:e0:6b:bb:98:fa:78:10:36:b9:6c:34:9b:
23:5d:2c:63:d8:c8:d8:ff:66:b8:c3:93:0f:c7:9d:
b9:6e:95:37:26:8e:d0:33:7e:be:2d:b8:19:2d:30:
41:de:a4:07:58:a9:c1:8b:ce:3b:7a:6a:b0:40:dd:
dc:a6:0a:c3:2f:2f:13:53:23:04:04:7d:1f:cb:eb:
20:d3:cb:cf:20:c1:e2:4d:67:26:ed:46:b6:20:88:
7d:43:fe:75:f0:ea:16:e0:e2:43:cb:87:12:04:f3:
fe:3e:56:3a:70:9e:0b:1b:1e:88:c2:0a:3b:b9:38:
d5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:20:12:B3:C5:52:51:B8:06:C9:0C:1B:BD:E5:76:1A:18:4B:FE:F6
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/BSASs8VSUbgGyQwbveV2GhhL_vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.40.16.0/20
92.40.48.0-92.40.127.255
92.40.160.0-92.40.205.255
92.40.208.0-92.40.213.255
92.40.216.0/22
92.40.245.0/24
92.40.248.0/24
92.41.0.0-92.41.95.255
92.41.128.0-92.41.151.255
92.41.156.0-92.41.167.255
92.41.176.0/20
92.41.208.0-92.41.239.255
92.41.251.0/24
94.196.0.0/18
94.196.144.0/20
94.196.208.0-94.196.255.255
94.197.104.0-94.197.119.255
185.153.236.0/22
188.28.0.0-188.29.163.255
188.29.184.0-188.29.251.255
188.30.0.0-188.30.87.255
188.30.96.0-188.30.151.255
188.30.160.0-188.30.247.255
188.31.0.0-188.31.199.255
188.31.208.0/21
188.31.224.0/20
188.31.248.0/23
188.31.251.0/24
IPv6:
2a04:4a43:4000::/34
2a04:4a43:9500::-2a04:4a43:98ff:ffff:ffff:ffff:ffff:ffff
2a04:4a45:9::-2a04:4a45:d:ffff:ffff:ffff:ffff:ffff
2a04:4a45:f::/48
Signature Algorithm: sha256WithRSAEncryption
51:f7:fd:4e:36:fe:b3:b6:ce:fb:7c:c4:f1:29:59:14:a0:45:
4b:96:7c:44:c2:54:cc:e7:c5:f6:86:0b:e1:e2:c2:72:e0:f4:
05:c9:fb:62:5e:b3:0a:00:23:6d:c5:b4:af:74:31:4a:dc:02:
3e:aa:34:30:7b:31:d1:d6:bb:2e:07:68:55:4b:49:d8:ed:29:
d0:b2:b4:c0:c8:cc:1c:e0:11:27:65:a4:d4:15:84:02:ae:0c:
0d:82:ba:47:5b:1e:6a:10:60:00:a3:9c:92:d9:f6:8e:d2:1f:
7d:fb:c6:06:1e:f7:1b:4e:04:eb:48:36:25:d9:44:0e:b5:d4:
4e:88:0f:df:a7:b0:d1:99:8a:a0:f6:36:db:ca:c7:82:a6:5f:
1a:4b:38:cd:1c:47:91:c2:21:4b:00:e8:c1:0e:09:4a:e0:c3:
64:9d:c4:bf:13:2f:96:a2:19:1e:e7:51:3c:8b:69:65:63:10:
90:af:94:09:84:09:10:e9:0f:d6:ed:1d:b9:0a:e1:2b:49:67:
e3:d2:b9:8d:c5:fa:eb:00:d0:01:cb:a9:8e:1e:17:ef:73:8e:
01:f6:79:a6:19:e3:07:35:78:e4:44:4f:6a:15:68:2f:36:61:
21:9b:19:19:c5:a0:6c:1d:a7:78:c8:74:94:ee:30:7b:d4:29:
f3:58:47:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:21 2023 by rpki-client on console-ams.rpki-client.org