Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/XcFhAbkAF5sr90aUmsNa4ByN-F8.roa
File: XcFhAbkAF5sr90aUmsNa4ByN-F8.roa (raw, json)
Hash identifier: kF7Q13R/PaqWtNKXphIUSDGIWYFGZN/EDNc65/SkqXY=
Subject key identifier: 5D:C1:61:01:B9:00:17:9B:2B:F7:46:94:9A:C3:5A:E0:1C:8D:F8:5F
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 01830C934BEC3763AED8FEBB750219A7C90A
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/XcFhAbkAF5sr90aUmsNa4ByN-F8.roa
Signing time: Mon 05 Sep 2022 07:35:22 +0000
ROA not before: Mon 05 Sep 2022 07:35:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206067
IP address blocks: 92.40.48.0/20 maxlen: 20
188.31.96.0/20 maxlen: 20
188.31.208.0/21 maxlen: 21
188.31.224.0/20 maxlen: 20
188.31.176.0/20 maxlen: 20
188.30.136.0/21 maxlen: 21
188.30.160.0/19 maxlen: 19
188.30.80.0/22 maxlen: 22
188.30.96.0/19 maxlen: 19
188.31.8.0/21 maxlen: 21
188.31.24.0/21 maxlen: 21
188.29.184.0/21 maxlen: 21
188.29.192.0/20 maxlen: 20
188.29.208.0/20 maxlen: 20
188.29.128.0/19 maxlen: 19
188.30.64.0/22 maxlen: 22
188.30.76.0/22 maxlen: 22
188.29.240.0/21 maxlen: 21
188.29.248.0/22 maxlen: 22
188.30.0.0/21 maxlen: 21
94.197.104.0/21 maxlen: 21
188.29.0.0/20 maxlen: 20
94.197.112.0/21 maxlen: 21
188.28.192.0/18 maxlen: 18
188.29.80.0/20 maxlen: 20
188.29.96.0/20 maxlen: 20
188.29.112.0/20 maxlen: 20
188.29.16.0/20 maxlen: 20
188.29.32.0/20 maxlen: 20
188.29.64.0/20 maxlen: 20
188.28.16.0/20 maxlen: 20
92.41.144.0/21 maxlen: 21
92.41.156.0/22 maxlen: 22
94.196.144.0/20 maxlen: 20
92.41.160.0/21 maxlen: 21
94.196.224.0/19 maxlen: 19
188.28.64.0/20 maxlen: 20
188.28.80.0/20 maxlen: 20
92.41.208.0/20 maxlen: 20
92.41.224.0/20 maxlen: 20
94.196.208.0/20 maxlen: 20
92.40.160.0/21 maxlen: 21
92.40.168.0/23 maxlen: 23
92.40.170.0/23 maxlen: 23
92.40.172.0/23 maxlen: 23
92.40.174.0/23 maxlen: 23
92.40.176.0/23 maxlen: 23
92.40.178.0/23 maxlen: 23
92.40.186.0/23 maxlen: 23
92.40.180.0/23 maxlen: 23
92.40.182.0/23 maxlen: 23
92.40.184.0/23 maxlen: 23
92.40.188.0/23 maxlen: 23
92.40.190.0/23 maxlen: 23
92.40.194.0/23 maxlen: 23
92.40.196.0/23 maxlen: 23
92.40.198.0/23 maxlen: 23
92.40.200.0/23 maxlen: 23
92.40.202.0/23 maxlen: 23
92.40.204.0/23 maxlen: 23
92.40.208.0/23 maxlen: 23
92.40.210.0/23 maxlen: 23
92.40.212.0/23 maxlen: 23
92.40.112.0/20 maxlen: 20
92.41.16.0/20 maxlen: 20
94.196.0.0/18 maxlen: 18
92.40.248.0/24 maxlen: 24
92.41.0.0/20 maxlen: 20
2a04:4a45:b::/48 maxlen: 48
2a04:4a45:a::/48 maxlen: 48
2a04:4a43:4500::/40 maxlen: 40
2a04:4a43:5800::/40 maxlen: 40
2a04:4a43:4000::/39 maxlen: 39
2a04:4a43:4c00::/40 maxlen: 40
2a04:4a43:4900::/40 maxlen: 40
2a04:4a43:9600::/40 maxlen: 40
2a04:4a43:4200::/39 maxlen: 39
2a04:4a43:4700::/40 maxlen: 40
2a04:4a43:4a00::/40 maxlen: 40
2a04:4a43:5600::/40 maxlen: 40
2a04:4a43:5300::/40 maxlen: 40
2a04:4a43:5000::/40 maxlen: 40
2a04:4a43:9700::/40 maxlen: 40
2a04:4a43:4d00::/40 maxlen: 40
2a04:4a43:4600::/40 maxlen: 40
2a04:4a43:5700::/40 maxlen: 40
2a04:4a43:5100::/40 maxlen: 40
2a04:4a43:5400::/40 maxlen: 40
2a04:4a43:4400::/40 maxlen: 40
2a04:4a43:5500::/40 maxlen: 40
2a04:4a43:5200::/40 maxlen: 40
2a04:4a43:4f00::/40 maxlen: 40
2a04:4a43:4e00::/40 maxlen: 40
2a04:4a43:9800::/40 maxlen: 40
2a04:4a43:4b00::/40 maxlen: 40
2a04:4a43:4800::/40 maxlen: 40
2a04:4a43:9500::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0c:93:4b:ec:37:63:ae:d8:fe:bb:75:02:19:a7:c9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Sep 5 07:35:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dc16101b900179b2bf746949ac35ae01c8df85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:0f:41:a6:cd:11:8b:81:1b:b3:79:3f:f0:
18:5a:29:c0:3e:78:21:ab:60:5a:f8:f1:9c:8f:e5:
da:4d:a7:7e:51:d0:47:7d:d2:65:4d:58:9c:91:f5:
9e:2d:99:80:b3:1d:c2:9b:6a:1c:d7:4a:88:35:6b:
5e:e5:f2:a4:47:93:a0:c5:35:20:2d:35:48:54:78:
53:e9:85:71:ff:65:f4:09:5a:a2:6e:2b:c3:c8:32:
07:0e:6e:f2:30:52:49:d1:28:6f:c4:19:4b:ce:0b:
69:c5:f1:19:4c:74:bc:60:0b:27:95:00:e0:77:01:
d3:39:2e:29:35:f5:14:b0:50:8b:cc:39:7d:09:da:
06:7c:b8:00:f2:d7:8b:2f:61:28:8c:6d:41:18:58:
61:2e:cc:c7:1b:4d:7a:a3:06:99:84:48:58:b3:51:
ca:5c:c2:63:24:a9:ad:b2:d4:0b:51:31:7e:77:5b:
cb:3d:dc:e6:e5:98:cd:a9:d6:84:83:3a:d4:fd:16:
15:e5:3c:d8:a2:64:0c:1a:7b:93:47:52:5d:d3:ba:
a1:e3:55:53:72:a6:1c:b9:3f:85:b6:fd:8d:d6:c1:
5b:dc:e6:1b:9e:a1:c4:6f:64:ef:89:76:db:20:32:
7a:a7:fd:bf:b4:74:cc:ba:45:08:95:04:67:1f:7c:
36:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C1:61:01:B9:00:17:9B:2B:F7:46:94:9A:C3:5A:E0:1C:8D:F8:5F
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/XcFhAbkAF5sr90aUmsNa4ByN-F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.40.48.0/20
92.40.112.0/20
92.40.160.0/19
92.40.194.0-92.40.205.255
92.40.208.0-92.40.213.255
92.40.248.0/24
92.41.0.0/19
92.41.144.0/21
92.41.156.0-92.41.167.255
92.41.208.0-92.41.239.255
94.196.0.0/18
94.196.144.0/20
94.196.208.0-94.196.255.255
94.197.104.0-94.197.119.255
188.28.16.0/20
188.28.64.0/19
188.28.192.0-188.29.47.255
188.29.64.0-188.29.159.255
188.29.184.0-188.29.223.255
188.29.240.0-188.29.251.255
188.30.0.0/21
188.30.64.0/22
188.30.76.0-188.30.83.255
188.30.96.0/19
188.30.136.0/21
188.30.160.0/19
188.31.8.0/21
188.31.24.0/21
188.31.96.0/20
188.31.176.0/20
188.31.208.0/21
188.31.224.0/20
IPv6:
2a04:4a43:4000::-2a04:4a43:58ff:ffff:ffff:ffff:ffff:ffff
2a04:4a43:9500::-2a04:4a43:98ff:ffff:ffff:ffff:ffff:ffff
2a04:4a45:a::/47
Signature Algorithm: sha256WithRSAEncryption
20:50:95:17:b9:a4:fc:dd:dc:26:d9:26:00:9f:52:8f:cd:10:
6d:5e:c0:0a:0e:d3:c2:6f:8b:21:58:7e:66:d5:02:56:ca:7b:
93:96:ed:df:7d:96:6b:24:ad:49:fa:8f:f0:c2:b7:6e:74:44:
2b:25:71:d3:37:93:02:8f:ea:c4:6c:c4:54:85:a5:98:2b:dc:
99:10:d2:7d:39:3e:8f:1d:e9:44:a1:47:96:85:8d:e5:5f:22:
5c:f5:ce:a9:b2:de:8d:8a:9f:a6:78:dc:e8:e7:6f:8c:2a:fb:
a1:cc:fe:62:bd:22:0a:09:89:10:eb:e8:65:d1:85:34:78:c6:
9a:ff:b8:55:52:26:28:a7:e9:d2:18:db:53:ed:01:3d:b9:62:
33:eb:43:b6:02:1b:10:e4:df:8f:c2:fe:b9:0c:c4:72:8a:01:
5c:d0:45:9c:87:7d:21:42:0a:77:0e:e1:bd:f5:3d:66:19:c0:
11:8f:02:7a:e5:b9:0a:59:8a:d9:69:1d:9f:42:0c:01:1f:38:
94:dd:32:ac:aa:cf:c6:04:61:25:09:03:42:9a:cf:46:46:2c:
12:3d:05:f8:6f:b5:ed:f8:78:c3:a6:87:6f:2d:ed:aa:c5:60:
70:16:a2:f6:98:d1:7e:c9:90:aa:a7:fa:d8:30:e3:6c:90:67:
8b:de:84:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:41 2025 by rpki-client