Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/lKFekDLVm2jFg9RV6BNABz7sPj8.roa
File: lKFekDLVm2jFg9RV6BNABz7sPj8.roa (raw, json)
Hash identifier: 9c5nZq97onVd9b/c4BXbzHtq7IUs1o5GSA/+AyOaNhA=
Subject key identifier: 94:A1:5E:90:32:D5:9B:68:C5:83:D4:55:E8:13:40:07:3E:EC:3E:3F
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 01825DAAAEBFDB2C392A177211F0018F9FAF
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/lKFekDLVm2jFg9RV6BNABz7sPj8.roa
Signing time: Tue 02 Aug 2022 08:27:23 +0000
ROA not before: Tue 02 Aug 2022 08:27:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206067
IP address blocks: 188.29.184.0/21 maxlen: 21
188.29.192.0/20 maxlen: 20
188.29.208.0/20 maxlen: 20
188.29.128.0/19 maxlen: 19
188.30.64.0/22 maxlen: 22
188.30.76.0/22 maxlen: 22
188.29.240.0/21 maxlen: 21
188.29.248.0/22 maxlen: 22
188.30.0.0/21 maxlen: 21
92.40.48.0/20 maxlen: 20
94.197.104.0/21 maxlen: 21
188.29.0.0/20 maxlen: 20
94.197.112.0/21 maxlen: 21
188.28.192.0/18 maxlen: 18
188.29.80.0/20 maxlen: 20
188.29.96.0/20 maxlen: 20
188.29.112.0/20 maxlen: 20
188.29.16.0/20 maxlen: 20
188.29.32.0/20 maxlen: 20
188.29.64.0/20 maxlen: 20
188.31.96.0/20 maxlen: 20
188.28.16.0/20 maxlen: 20
92.41.144.0/21 maxlen: 21
92.41.156.0/22 maxlen: 22
94.196.144.0/20 maxlen: 20
92.41.160.0/21 maxlen: 21
188.31.208.0/21 maxlen: 21
94.196.224.0/19 maxlen: 19
188.31.224.0/20 maxlen: 20
188.28.64.0/20 maxlen: 20
188.31.176.0/20 maxlen: 20
188.28.80.0/20 maxlen: 20
92.41.208.0/20 maxlen: 20
92.41.224.0/20 maxlen: 20
94.196.208.0/20 maxlen: 20
188.30.136.0/21 maxlen: 21
92.40.160.0/21 maxlen: 21
92.40.168.0/23 maxlen: 23
92.40.170.0/23 maxlen: 23
92.40.172.0/23 maxlen: 23
92.40.174.0/23 maxlen: 23
92.40.186.0/23 maxlen: 23
92.40.182.0/23 maxlen: 23
188.30.160.0/19 maxlen: 19
92.40.196.0/23 maxlen: 23
92.40.198.0/23 maxlen: 23
92.40.208.0/23 maxlen: 23
92.40.210.0/23 maxlen: 23
188.30.80.0/22 maxlen: 22
92.40.112.0/20 maxlen: 20
188.30.96.0/19 maxlen: 19
92.41.16.0/20 maxlen: 20
94.196.0.0/18 maxlen: 18
188.31.8.0/21 maxlen: 21
188.31.24.0/21 maxlen: 21
92.40.248.0/24 maxlen: 24
92.41.0.0/20 maxlen: 20
2a04:4a45:a::/48 maxlen: 48
2a04:4a45:b::/48 maxlen: 48
2a04:4a43:4b00::/40 maxlen: 40
2a04:4a43:4200::/39 maxlen: 39
2a04:4a43:8000::/34 maxlen: 34
2a04:4a43:4000::/39 maxlen: 39
2a04:4a43:4900::/40 maxlen: 40
2a04:4a43:9500::/40 maxlen: 40
2a04:4a43:4400::/40 maxlen: 40
2a04:4a43:5300::/40 maxlen: 40
2a04:4a43:4500::/40 maxlen: 40
2a04:4a43:4700::/40 maxlen: 40
2a04:4a43:4d00::/40 maxlen: 40
2a04:4a43:5400::/40 maxlen: 40
2a04:4a43:5500::/40 maxlen: 40
2a04:4a43:5200::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5d:aa:ae:bf:db:2c:39:2a:17:72:11:f0:01:8f:9f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Aug 2 08:27:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94a15e9032d59b68c583d455e81340073eec3e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3f:b4:f8:81:45:c6:d4:be:1c:8f:02:99:8d:
00:5e:8b:47:0a:d5:9e:e2:f2:06:4a:01:fe:e9:c3:
33:2e:c6:6b:06:40:6e:fc:97:df:81:19:e6:79:d1:
7b:6c:7e:0b:9b:3c:8f:5b:58:94:6e:01:46:64:1b:
a8:eb:29:27:c1:18:2f:47:e5:4c:c1:f9:45:28:cd:
85:58:fb:03:8e:c7:0c:74:e4:aa:b1:10:37:1a:64:
77:f7:3c:67:22:25:26:16:7f:7e:5c:60:ca:cd:fc:
d2:dd:ba:ee:d7:2c:92:3b:3b:89:53:6f:bc:53:88:
aa:bd:d2:cf:18:a3:b1:b2:84:4c:43:0f:58:51:c5:
87:98:1a:ab:f4:f0:d5:f8:89:89:e2:3b:3b:1f:08:
d0:12:50:61:f5:07:3b:e9:9f:4b:7f:43:f5:3c:b5:
f2:54:7f:b4:0e:58:ef:de:75:b2:d9:a3:fd:41:7c:
82:ba:a8:44:ba:b2:19:b5:a4:2a:30:64:09:d9:29:
69:88:78:cb:e8:12:e3:63:7d:62:8d:46:3c:b7:5d:
f6:fe:d9:c5:1e:8d:86:8a:8e:11:ba:f4:44:db:3c:
a4:be:8b:03:4f:5f:3f:01:93:c2:30:d0:e8:11:ab:
44:7e:44:ce:e7:ea:b0:e0:38:da:2c:cf:be:a1:4b:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A1:5E:90:32:D5:9B:68:C5:83:D4:55:E8:13:40:07:3E:EC:3E:3F
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/lKFekDLVm2jFg9RV6BNABz7sPj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.40.48.0/20
92.40.112.0/20
92.40.160.0/20
92.40.182.0/23
92.40.186.0/23
92.40.196.0/22
92.40.208.0/22
92.40.248.0/24
92.41.0.0/19
92.41.144.0/21
92.41.156.0-92.41.167.255
92.41.208.0-92.41.239.255
94.196.0.0/18
94.196.144.0/20
94.196.208.0-94.196.255.255
94.197.104.0-94.197.119.255
188.28.16.0/20
188.28.64.0/19
188.28.192.0-188.29.47.255
188.29.64.0-188.29.159.255
188.29.184.0-188.29.223.255
188.29.240.0-188.29.251.255
188.30.0.0/21
188.30.64.0/22
188.30.76.0-188.30.83.255
188.30.96.0/19
188.30.136.0/21
188.30.160.0/19
188.31.8.0/21
188.31.24.0/21
188.31.96.0/20
188.31.176.0/20
188.31.208.0/21
188.31.224.0/20
IPv6:
2a04:4a43:4000::-2a04:4a43:45ff:ffff:ffff:ffff:ffff:ffff
2a04:4a43:4700::/40
2a04:4a43:4900::/40
2a04:4a43:4b00::/40
2a04:4a43:4d00::/40
2a04:4a43:5200::-2a04:4a43:55ff:ffff:ffff:ffff:ffff:ffff
2a04:4a43:8000::/34
2a04:4a45:a::/47
Signature Algorithm: sha256WithRSAEncryption
08:8f:aa:26:0f:c8:c4:98:cd:ca:5f:10:c9:15:9c:e7:aa:e7:
99:6b:d9:e0:9f:27:f1:cf:2b:5a:56:9b:54:32:97:7f:42:03:
00:56:ca:3d:7a:6d:3b:5c:53:07:ab:80:d5:fa:1f:62:dc:4d:
17:a3:2b:6f:06:16:e1:94:fc:e3:ab:f2:46:17:ba:2f:74:43:
cc:3b:34:f6:39:51:27:39:b9:07:6f:e8:f3:42:83:77:a0:5f:
23:76:b0:8f:3a:ca:d2:76:80:18:52:0a:35:ea:15:76:fe:a8:
c1:7d:7e:53:9a:fd:31:f2:55:41:3f:25:e4:e4:ee:76:82:55:
d8:fa:31:62:5e:d9:5c:19:9e:43:d5:af:9b:95:9a:49:17:a5:
f0:ad:d8:4c:e9:6f:5a:87:06:bc:9b:e3:61:85:5d:73:3a:98:
ab:d8:6b:f7:06:11:39:bc:41:10:99:82:0b:b8:5f:3e:2f:3d:
69:97:ea:cb:53:8a:fd:1b:93:22:73:c0:c3:1b:29:21:ca:3b:
76:ba:ea:9d:8d:68:de:d6:be:71:4f:76:f9:c2:ac:70:f8:16:
e8:25:e7:67:0a:4e:47:cd:f4:db:ca:ec:63:ef:de:52:50:f7:
0a:5a:be:76:16:d1:07:ee:a4:bd:1f:cc:4c:1e:de:e3:9d:e8:
f7:55:13:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:21 2023 by rpki-client on console-ams.rpki-client.org