Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/DfNEbOxR1xvknXGC7PjJHjlouuA.roa
File: DfNEbOxR1xvknXGC7PjJHjlouuA.roa (raw, json)
Hash identifier: V8sGwlQTfkn8UB21/eNJdT86+IWfMc9wvu/xLvYEE/M=
Subject key identifier: 0D:F3:44:6C:EC:51:D7:1B:E4:9D:71:82:EC:F8:C9:1E:39:68:BA:E0
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 0183FE756C24126DEA99BFC0022F52C89994
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/DfNEbOxR1xvknXGC7PjJHjlouuA.roa
Signing time: Sat 22 Oct 2022 06:50:51 +0000
ROA not before: Sat 22 Oct 2022 06:50:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206067
IP address blocks: 92.40.48.0/20 maxlen: 20
188.31.96.0/20 maxlen: 20
188.31.208.0/21 maxlen: 21
188.31.224.0/20 maxlen: 20
188.31.176.0/20 maxlen: 20
188.30.136.0/21 maxlen: 21
188.30.160.0/19 maxlen: 19
188.30.80.0/22 maxlen: 22
188.30.96.0/19 maxlen: 19
188.31.8.0/21 maxlen: 21
188.31.24.0/21 maxlen: 21
188.29.184.0/21 maxlen: 21
188.29.192.0/20 maxlen: 20
188.29.208.0/20 maxlen: 20
188.29.128.0/19 maxlen: 19
188.30.64.0/22 maxlen: 22
188.30.76.0/22 maxlen: 22
188.29.240.0/21 maxlen: 21
188.29.248.0/22 maxlen: 22
188.30.0.0/21 maxlen: 21
94.197.104.0/21 maxlen: 21
188.29.0.0/20 maxlen: 20
94.197.112.0/21 maxlen: 21
188.28.192.0/18 maxlen: 18
188.29.80.0/20 maxlen: 20
188.29.96.0/20 maxlen: 20
188.29.112.0/20 maxlen: 20
188.29.16.0/20 maxlen: 20
188.29.32.0/20 maxlen: 20
188.29.64.0/20 maxlen: 20
188.28.16.0/20 maxlen: 20
92.41.144.0/21 maxlen: 21
92.41.156.0/22 maxlen: 22
94.196.144.0/20 maxlen: 20
92.41.160.0/21 maxlen: 21
94.196.224.0/19 maxlen: 19
188.28.64.0/20 maxlen: 20
188.28.80.0/20 maxlen: 20
92.41.208.0/20 maxlen: 20
92.41.224.0/20 maxlen: 20
94.196.208.0/20 maxlen: 20
92.40.160.0/21 maxlen: 21
92.40.168.0/23 maxlen: 23
92.40.170.0/23 maxlen: 23
92.40.172.0/23 maxlen: 23
92.40.174.0/23 maxlen: 23
92.40.176.0/23 maxlen: 23
92.40.178.0/23 maxlen: 23
92.40.186.0/23 maxlen: 23
92.40.180.0/23 maxlen: 23
92.40.182.0/23 maxlen: 23
92.40.184.0/23 maxlen: 23
92.40.188.0/23 maxlen: 23
92.40.190.0/23 maxlen: 23
92.40.192.0/23 maxlen: 23
92.40.194.0/23 maxlen: 23
92.40.196.0/23 maxlen: 23
92.40.198.0/23 maxlen: 23
92.40.200.0/23 maxlen: 23
92.40.202.0/23 maxlen: 23
92.40.204.0/23 maxlen: 23
92.40.208.0/23 maxlen: 23
92.40.210.0/23 maxlen: 23
92.40.212.0/23 maxlen: 23
92.40.112.0/20 maxlen: 20
92.41.16.0/20 maxlen: 20
94.196.0.0/18 maxlen: 18
92.40.216.0/23 maxlen: 23
92.40.218.0/23 maxlen: 23
92.40.248.0/24 maxlen: 24
92.41.0.0/20 maxlen: 20
2a04:4a45:b::/48 maxlen: 48
2a04:4a45:a::/48 maxlen: 48
2a04:4a43:4500::/40 maxlen: 40
2a04:4a43:4200::/39 maxlen: 39
2a04:4a43:4000::/39 maxlen: 39
2a04:4a43:9600::/40 maxlen: 40
2a04:4a43:4c00::/40 maxlen: 40
2a04:4a43:4900::/40 maxlen: 40
2a04:4a43:4700::/40 maxlen: 40
2a04:4a43:5000::/40 maxlen: 40
2a04:4a43:5600::/40 maxlen: 40
2a04:4a43:5300::/40 maxlen: 40
2a04:4a43:4d00::/40 maxlen: 40
2a04:4a43:9700::/40 maxlen: 40
2a04:4a43:4a00::/40 maxlen: 40
2a04:4a43:9500::/40 maxlen: 40
2a04:4a43:4e00::/40 maxlen: 40
2a04:4a43:9800::/40 maxlen: 40
2a04:4a43:4800::/40 maxlen: 40
2a04:4a43:4b00::/40 maxlen: 40
2a04:4a43:4600::/40 maxlen: 40
2a04:4a43:5700::/40 maxlen: 40
2a04:4a43:5400::/40 maxlen: 40
2a04:4a43:5100::/40 maxlen: 40
2a04:4a43:4f00::/40 maxlen: 40
2a04:4a43:5500::/40 maxlen: 40
2a04:4a43:5200::/40 maxlen: 40
2a04:4a43:4400::/40 maxlen: 40
2a04:4a43:5800::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fe:75:6c:24:12:6d:ea:99:bf:c0:02:2f:52:c8:99:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Oct 22 06:50:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0df3446cec51d71be49d7182ecf8c91e3968bae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:f6:3f:82:7b:09:3f:a6:b5:7d:1e:92:4c:
aa:8a:aa:4b:33:40:4e:f7:9f:2f:3b:e9:cd:7a:4d:
64:20:a0:a8:57:e3:b6:0a:9e:9f:53:60:36:fa:75:
38:aa:c0:67:27:d4:e8:7e:cb:7e:8f:f6:8f:85:63:
be:a9:e0:ac:87:df:46:43:ed:67:b3:ed:5e:28:8c:
84:c8:aa:57:4b:a4:a8:8a:49:ba:61:f3:ea:2c:4f:
2f:6f:33:c9:ea:0c:22:78:79:47:e5:a0:70:17:9e:
70:f0:48:82:b3:ea:ba:05:80:07:8f:6e:e9:f9:d3:
8f:ff:ee:49:5f:e6:2d:3e:bb:40:eb:bb:d5:25:d4:
74:49:a9:8a:a9:00:1b:9f:4f:9f:66:1b:1d:1f:24:
68:e7:4d:6c:0e:4e:3f:9e:0a:d5:05:42:80:42:f3:
e9:03:d2:1f:14:36:79:c8:6e:d0:ed:4e:c3:87:64:
d7:07:70:9a:d1:f7:37:7b:8a:63:3c:47:3b:f5:a4:
f8:8f:98:62:54:f1:68:71:16:e6:92:e9:6a:41:6c:
eb:dd:6a:19:d8:9f:4e:c9:0b:50:77:43:99:a5:0a:
cd:38:3e:26:04:77:0c:0d:5e:31:5e:06:9b:38:1c:
ba:2c:a2:ea:46:5a:61:60:e6:36:c5:64:45:36:20:
09:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F3:44:6C:EC:51:D7:1B:E4:9D:71:82:EC:F8:C9:1E:39:68:BA:E0
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/DfNEbOxR1xvknXGC7PjJHjlouuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.40.48.0/20
92.40.112.0/20
92.40.160.0-92.40.205.255
92.40.208.0-92.40.213.255
92.40.216.0/22
92.40.248.0/24
92.41.0.0/19
92.41.144.0/21
92.41.156.0-92.41.167.255
92.41.208.0-92.41.239.255
94.196.0.0/18
94.196.144.0/20
94.196.208.0-94.196.255.255
94.197.104.0-94.197.119.255
188.28.16.0/20
188.28.64.0/19
188.28.192.0-188.29.47.255
188.29.64.0-188.29.159.255
188.29.184.0-188.29.223.255
188.29.240.0-188.29.251.255
188.30.0.0/21
188.30.64.0/22
188.30.76.0-188.30.83.255
188.30.96.0/19
188.30.136.0/21
188.30.160.0/19
188.31.8.0/21
188.31.24.0/21
188.31.96.0/20
188.31.176.0/20
188.31.208.0/21
188.31.224.0/20
IPv6:
2a04:4a43:4000::-2a04:4a43:58ff:ffff:ffff:ffff:ffff:ffff
2a04:4a43:9500::-2a04:4a43:98ff:ffff:ffff:ffff:ffff:ffff
2a04:4a45:a::/47
Signature Algorithm: sha256WithRSAEncryption
42:4a:7f:4b:af:33:b0:5b:ab:ef:e6:1d:7b:8e:15:a6:e0:b5:
85:ec:69:f6:36:c4:c9:b1:43:3d:cd:ce:e9:0d:a0:cc:5f:91:
86:f6:82:01:78:11:b7:61:84:4c:3a:da:15:e7:84:00:51:5a:
93:02:47:dd:94:9e:52:72:56:94:b2:67:0d:97:47:b5:38:30:
7a:8c:19:7f:ab:69:3f:8d:74:06:d8:30:48:ce:f8:d2:00:1e:
3c:e6:b0:1d:82:71:a7:ed:29:59:38:11:51:5e:2d:1f:a3:9b:
42:75:b2:97:c3:20:59:3f:4b:80:70:7b:02:70:a8:13:ae:69:
33:24:62:bb:02:23:f3:25:8a:43:fc:f8:4a:90:0b:16:f3:9b:
1c:fc:df:b1:3f:a4:66:50:28:5c:ee:52:47:c6:71:b6:36:fe:
a7:4f:2a:00:e4:f5:58:31:4e:ec:9d:c4:f2:ea:5c:a1:1c:d1:
bf:66:80:13:89:ac:a7:df:26:ef:08:77:1c:da:4d:90:c7:6c:
d9:29:7f:ba:b0:b2:78:19:8e:e6:79:c6:57:f9:43:4b:2e:70:
a4:5d:26:5b:2f:89:e9:ac:25:5a:d2:a5:86:0a:4f:5b:29:bd:
9e:15:7d:5f:29:13:f5:10:d1:1e:d0:3c:9e:a9:3e:29:ec:74:
ba:f0:0c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:21 2023 by rpki-client on console-ams.rpki-client.org