Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/PFLPeg8FNR8dx8MuJabNaPMPMiA.roa
File: PFLPeg8FNR8dx8MuJabNaPMPMiA.roa (raw, json)
Hash identifier: WxGvXT1lHprQrHNzAk11IwYswjC6U4vfHE1RAkHLJuw=
Subject key identifier: 3C:52:CF:7A:0F:05:35:1F:1D:C7:C3:2E:25:A6:CD:68:F3:0F:32:20
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: F5B82B
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/PFLPeg8FNR8dx8MuJabNaPMPMiA.roa
Signing time: Sat 01 Jan 2022 06:54:53 +0000
ROA not before: Sat 01 Jan 2022 06:54:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206067
IP address blocks: 188.29.192.0/20 maxlen: 20
188.29.208.0/20 maxlen: 20
188.29.128.0/19 maxlen: 19
188.30.64.0/22 maxlen: 22
188.30.76.0/22 maxlen: 22
188.29.240.0/21 maxlen: 21
188.29.248.0/22 maxlen: 22
188.30.0.0/21 maxlen: 21
94.197.104.0/21 maxlen: 21
188.29.0.0/20 maxlen: 20
94.197.112.0/21 maxlen: 21
188.28.192.0/18 maxlen: 18
188.29.80.0/20 maxlen: 20
188.29.96.0/20 maxlen: 20
188.29.112.0/20 maxlen: 20
188.29.16.0/20 maxlen: 20
188.29.32.0/20 maxlen: 20
188.29.64.0/20 maxlen: 20
188.31.96.0/20 maxlen: 20
188.28.16.0/20 maxlen: 20
92.41.144.0/21 maxlen: 21
92.41.156.0/22 maxlen: 22
94.196.144.0/20 maxlen: 20
92.41.160.0/21 maxlen: 21
188.31.208.0/21 maxlen: 21
94.196.224.0/19 maxlen: 19
188.31.224.0/20 maxlen: 20
188.28.64.0/20 maxlen: 20
188.31.176.0/20 maxlen: 20
188.28.80.0/20 maxlen: 20
92.41.208.0/20 maxlen: 20
92.41.224.0/20 maxlen: 20
94.196.208.0/20 maxlen: 20
188.30.136.0/21 maxlen: 21
92.40.160.0/21 maxlen: 21
92.40.168.0/23 maxlen: 23
92.40.170.0/23 maxlen: 23
92.40.174.0/23 maxlen: 23
188.30.160.0/19 maxlen: 19
92.40.196.0/23 maxlen: 23
92.40.198.0/23 maxlen: 23
92.40.208.0/23 maxlen: 23
92.40.210.0/23 maxlen: 23
188.30.80.0/22 maxlen: 22
92.40.112.0/20 maxlen: 20
92.41.16.0/20 maxlen: 20
94.196.0.0/18 maxlen: 18
188.31.8.0/21 maxlen: 21
92.40.248.0/24 maxlen: 24
92.41.0.0/20 maxlen: 20
2a04:4a45:a::/48 maxlen: 48
2a04:4a45:b::/48 maxlen: 48
2a04:4a43:4700::/40 maxlen: 40
2a04:4a43:4200::/39 maxlen: 39
2a04:4a43:4000::/39 maxlen: 39
2a04:4a43:4400::/40 maxlen: 40
2a04:4a43:4900::/40 maxlen: 40
2a04:4a43:5400::/40 maxlen: 40
2a04:4a43:5200::/40 maxlen: 40
2a04:4a43:5300::/40 maxlen: 40
2a04:4a43:4500::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16103467 (0xf5b82b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Jan 1 06:54:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c52cf7a0f05351f1dc7c32e25a6cd68f30f3220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cd:c0:1e:16:b4:40:a6:92:0f:25:19:bd:6d:
e5:08:7a:16:32:25:48:3b:60:50:e3:1b:98:30:37:
10:7e:ed:4c:c0:e2:25:84:ae:d0:a3:c1:9d:cb:7b:
8c:1f:6e:28:3f:0f:0e:44:fd:3c:89:4a:2d:ae:89:
da:06:33:10:89:cf:53:3f:41:9a:c0:47:2e:c4:56:
cd:1e:ca:32:ca:97:51:d7:57:6a:69:7c:1c:9a:5c:
a6:b2:95:80:72:11:7c:eb:8b:76:06:58:48:b5:83:
aa:7a:1d:84:cf:f6:26:f0:53:9f:f4:56:0c:99:aa:
0e:a5:c7:9f:77:84:d6:c7:47:f5:13:09:27:ec:8c:
16:ba:f5:b8:f5:f7:9a:03:ab:91:19:a6:c5:6d:6b:
87:58:90:8d:5a:d6:c2:92:e7:25:56:40:d3:ce:e1:
40:be:16:80:4f:c7:3b:1c:fc:a8:5c:f3:a7:a6:2d:
6e:b9:71:0d:47:cd:fc:bf:b4:55:d9:4a:41:ce:9a:
8a:2d:1b:99:06:c0:f4:70:ee:dd:fb:e5:6e:61:eb:
0a:82:c4:f1:eb:d3:e2:1e:5e:7b:9f:49:4d:92:d8:
9e:da:de:54:31:9c:23:93:e0:ca:ec:91:cd:cf:80:
c4:bf:fc:6a:80:cf:f7:18:59:dc:e0:29:44:c3:82:
f7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:52:CF:7A:0F:05:35:1F:1D:C7:C3:2E:25:A6:CD:68:F3:0F:32:20
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/PFLPeg8FNR8dx8MuJabNaPMPMiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.40.112.0/20
92.40.160.0-92.40.171.255
92.40.174.0/23
92.40.196.0/22
92.40.208.0/22
92.40.248.0/24
92.41.0.0/19
92.41.144.0/21
92.41.156.0-92.41.167.255
92.41.208.0-92.41.239.255
94.196.0.0/18
94.196.144.0/20
94.196.208.0-94.196.255.255
94.197.104.0-94.197.119.255
188.28.16.0/20
188.28.64.0/19
188.28.192.0-188.29.47.255
188.29.64.0-188.29.159.255
188.29.192.0/19
188.29.240.0-188.29.251.255
188.30.0.0/21
188.30.64.0/22
188.30.76.0-188.30.83.255
188.30.136.0/21
188.30.160.0/19
188.31.8.0/21
188.31.96.0/20
188.31.176.0/20
188.31.208.0/21
188.31.224.0/20
IPv6:
2a04:4a43:4000::-2a04:4a43:45ff:ffff:ffff:ffff:ffff:ffff
2a04:4a43:4700::/40
2a04:4a43:4900::/40
2a04:4a43:5200::-2a04:4a43:54ff:ffff:ffff:ffff:ffff:ffff
2a04:4a45:a::/47
Signature Algorithm: sha256WithRSAEncryption
aa:c3:ab:a5:35:81:02:31:72:d9:2d:62:89:98:33:60:ba:34:
b0:f2:32:f3:71:99:4a:18:c6:5d:11:c0:38:1a:91:f2:ae:1c:
d5:c4:36:35:87:1c:40:9c:17:5d:24:9c:38:0f:1d:fb:8a:ab:
02:c6:17:ee:c6:e5:d9:c0:9a:55:0f:da:ab:db:b2:a1:08:ac:
07:13:a6:b0:e8:41:ed:b4:8a:00:fc:d2:d2:75:f4:e3:95:ae:
54:69:c8:e3:03:cb:71:5b:9d:c2:e9:9d:6e:0f:dc:ba:0d:d7:
85:4e:11:54:d5:f5:e7:81:b2:bb:06:b8:cf:2f:99:38:6c:a0:
fb:2d:f8:a5:ca:7e:c7:c6:d1:95:b3:3b:c1:30:14:c8:80:c4:
cc:54:70:33:06:3e:74:ac:d1:cb:ab:d2:ec:e0:3a:c2:c7:62:
04:65:45:10:12:fd:0d:9d:8a:a4:a4:1b:72:75:af:28:50:12:
86:d8:18:40:5c:0e:4b:e4:42:01:db:f0:de:43:dd:ef:0c:95:
8f:8a:3f:c8:fa:0d:d8:29:c4:44:34:f3:4f:a4:90:4a:ac:6e:
13:f2:8b:4a:d9:45:e4:de:57:c4:c8:c5:3d:79:a6:79:52:51:
65:f8:b0:2d:2e:40:c0:07:3c:4e:12:45:15:45:c6:12:7c:5e:
47:db:9c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:42 2024 by rpki-client on console-fra.rpki-client.org