Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/Nd7xzSVDr4b3WZCTBQUTBMR8TeY.roa
File: Nd7xzSVDr4b3WZCTBQUTBMR8TeY.roa (raw, json)
Hash identifier: P1bXPchjwPOpaz00oS5nkflKgJS7iFwDPsHGImUMpKQ=
Subject key identifier: 35:DE:F1:CD:25:43:AF:86:F7:59:90:93:05:05:13:04:C4:7C:4D:E6
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 0182EF90869FB588E6D5BBFFC5B8F24B1AB2
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/Nd7xzSVDr4b3WZCTBQUTBMR8TeY.roa
Signing time: Tue 30 Aug 2022 16:23:22 +0000
ROA not before: Tue 30 Aug 2022 16:23:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206067
IP address blocks: 188.29.184.0/21 maxlen: 21
188.29.192.0/20 maxlen: 20
188.29.208.0/20 maxlen: 20
188.29.128.0/19 maxlen: 19
188.30.64.0/22 maxlen: 22
188.30.76.0/22 maxlen: 22
188.29.240.0/21 maxlen: 21
188.29.248.0/22 maxlen: 22
188.30.0.0/21 maxlen: 21
92.40.48.0/20 maxlen: 20
94.197.104.0/21 maxlen: 21
188.29.0.0/20 maxlen: 20
94.197.112.0/21 maxlen: 21
188.28.192.0/18 maxlen: 18
188.29.80.0/20 maxlen: 20
188.29.96.0/20 maxlen: 20
188.29.112.0/20 maxlen: 20
188.29.16.0/20 maxlen: 20
188.29.32.0/20 maxlen: 20
188.29.64.0/20 maxlen: 20
188.31.96.0/20 maxlen: 20
188.28.16.0/20 maxlen: 20
92.41.144.0/21 maxlen: 21
92.41.156.0/22 maxlen: 22
94.196.144.0/20 maxlen: 20
92.41.160.0/21 maxlen: 21
188.31.208.0/21 maxlen: 21
94.196.224.0/19 maxlen: 19
188.31.224.0/20 maxlen: 20
188.28.64.0/20 maxlen: 20
188.31.176.0/20 maxlen: 20
188.28.80.0/20 maxlen: 20
92.41.208.0/20 maxlen: 20
92.41.224.0/20 maxlen: 20
94.196.208.0/20 maxlen: 20
188.30.136.0/21 maxlen: 21
92.40.160.0/21 maxlen: 21
92.40.168.0/23 maxlen: 23
92.40.170.0/23 maxlen: 23
92.40.172.0/23 maxlen: 23
92.40.174.0/23 maxlen: 23
92.40.186.0/23 maxlen: 23
92.40.182.0/23 maxlen: 23
188.30.160.0/19 maxlen: 19
92.40.196.0/23 maxlen: 23
92.40.198.0/23 maxlen: 23
92.40.200.0/23 maxlen: 23
92.40.202.0/23 maxlen: 23
92.40.204.0/23 maxlen: 23
92.40.208.0/23 maxlen: 23
92.40.210.0/23 maxlen: 23
92.40.212.0/23 maxlen: 23
188.30.80.0/22 maxlen: 22
92.40.112.0/20 maxlen: 20
188.30.96.0/19 maxlen: 19
92.41.16.0/20 maxlen: 20
94.196.0.0/18 maxlen: 18
188.31.8.0/21 maxlen: 21
188.31.24.0/21 maxlen: 21
92.40.248.0/24 maxlen: 24
92.41.0.0/20 maxlen: 20
2a04:4a45:a::/48 maxlen: 48
2a04:4a45:b::/48 maxlen: 48
2a04:4a43:4400::/40 maxlen: 40
2a04:4a43:4200::/39 maxlen: 39
2a04:4a43:8000::/34 maxlen: 34
2a04:4a43:4000::/39 maxlen: 39
2a04:4a43:4900::/40 maxlen: 40
2a04:4a43:5300::/40 maxlen: 40
2a04:4a43:9500::/40 maxlen: 40
2a04:4a43:4b00::/40 maxlen: 40
2a04:4a43:4500::/40 maxlen: 40
2a04:4a43:4e00::/40 maxlen: 40
2a04:4a43:5400::/40 maxlen: 40
2a04:4a43:5500::/40 maxlen: 40
2a04:4a43:4700::/40 maxlen: 40
2a04:4a43:4d00::/40 maxlen: 40
2a04:4a43:5200::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ef:90:86:9f:b5:88:e6:d5:bb:ff:c5:b8:f2:4b:1a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Aug 30 16:23:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35def1cd2543af86f759909305051304c47c4de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:44:06:69:d9:d9:e4:f4:70:24:d2:48:86:c1:
49:74:fb:e9:5a:97:62:65:e9:08:63:86:7d:c4:92:
b9:c0:e3:4c:fc:c5:58:88:c3:74:77:0d:a7:f8:f3:
36:a6:9f:c2:9f:4f:a1:86:18:1a:2c:34:c0:40:4e:
9e:dd:ee:c4:28:8a:16:a8:a8:af:e0:07:f0:14:a2:
b3:80:91:36:ef:0e:f6:9c:aa:d9:bd:c2:0e:80:80:
55:92:0b:76:8f:92:8a:a1:d2:19:c3:8b:fd:3c:37:
90:4f:9c:90:da:0d:5e:71:76:08:3d:67:c9:1c:00:
3c:d7:35:ea:05:20:91:2c:36:3d:cb:90:89:81:eb:
76:74:07:0c:32:7e:5c:a8:97:61:79:ba:5c:0a:cf:
e8:74:78:7d:77:62:bc:79:77:97:77:44:6f:e3:c1:
58:ad:f8:0f:6b:80:1d:73:05:aa:99:04:95:5b:49:
ce:ae:6e:89:87:81:3f:8d:4b:ae:84:6c:bd:2d:73:
a3:9d:ce:d8:c8:65:01:c5:e4:9c:90:f3:40:b6:27:
8b:db:ec:6f:b2:0f:3b:92:bb:92:c9:ad:a7:b2:10:
20:3e:0a:8c:41:ec:ca:65:20:9c:ae:0e:3f:dc:1b:
d7:6c:2b:ce:02:9d:d6:9e:df:40:01:2b:85:bd:b2:
c9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DE:F1:CD:25:43:AF:86:F7:59:90:93:05:05:13:04:C4:7C:4D:E6
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/Nd7xzSVDr4b3WZCTBQUTBMR8TeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.40.48.0/20
92.40.112.0/20
92.40.160.0/20
92.40.182.0/23
92.40.186.0/23
92.40.196.0-92.40.205.255
92.40.208.0-92.40.213.255
92.40.248.0/24
92.41.0.0/19
92.41.144.0/21
92.41.156.0-92.41.167.255
92.41.208.0-92.41.239.255
94.196.0.0/18
94.196.144.0/20
94.196.208.0-94.196.255.255
94.197.104.0-94.197.119.255
188.28.16.0/20
188.28.64.0/19
188.28.192.0-188.29.47.255
188.29.64.0-188.29.159.255
188.29.184.0-188.29.223.255
188.29.240.0-188.29.251.255
188.30.0.0/21
188.30.64.0/22
188.30.76.0-188.30.83.255
188.30.96.0/19
188.30.136.0/21
188.30.160.0/19
188.31.8.0/21
188.31.24.0/21
188.31.96.0/20
188.31.176.0/20
188.31.208.0/21
188.31.224.0/20
IPv6:
2a04:4a43:4000::-2a04:4a43:45ff:ffff:ffff:ffff:ffff:ffff
2a04:4a43:4700::/40
2a04:4a43:4900::/40
2a04:4a43:4b00::/40
2a04:4a43:4d00::-2a04:4a43:4eff:ffff:ffff:ffff:ffff:ffff
2a04:4a43:5200::-2a04:4a43:55ff:ffff:ffff:ffff:ffff:ffff
2a04:4a43:8000::/34
2a04:4a45:a::/47
Signature Algorithm: sha256WithRSAEncryption
38:e5:1b:7b:4f:9c:45:5d:1e:e3:5b:6c:6d:45:9a:8c:d2:5e:
e1:0a:d7:e3:c5:4b:22:2e:c0:d8:d0:a3:cf:b0:40:0d:34:44:
90:0c:29:c5:98:29:d2:91:ab:aa:0e:a3:49:68:24:7e:7d:5b:
64:f4:5b:8a:61:9f:a3:0e:a9:2f:60:2d:ec:93:95:bb:63:36:
99:d8:85:18:1c:26:22:b5:72:08:ce:08:bb:f2:55:55:5b:a1:
2f:07:9d:8d:35:28:f6:5a:21:3b:3e:74:08:20:d0:dd:1a:bc:
61:a2:f2:2b:a7:3d:9b:fb:b3:02:d1:11:e3:d1:cc:1a:91:17:
0a:ed:db:60:97:65:54:7b:03:18:36:24:2c:ba:67:42:50:bf:
ad:25:8d:b5:7c:bf:7b:33:d5:f6:70:7f:25:7d:ea:15:ee:2d:
f8:ea:f5:92:63:2b:40:ec:15:41:f0:6c:c1:36:c1:da:3f:f8:
c7:b1:ea:62:4b:52:a7:be:c1:3b:3b:9c:32:cd:90:80:65:6c:
28:8d:04:b2:50:81:9a:0c:74:d4:21:4b:1a:53:c6:f7:13:01:
32:9b:dd:b4:d9:ea:23:b4:ea:67:dc:27:ba:7f:62:40:61:ea:
37:25:77:12:b1:11:53:06:f7:8f:5a:b1:35:5c:13:5e:f7:3a:
eb:00:94:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:21 2023 by rpki-client on console-ams.rpki-client.org