Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/sRBzkNkDCgI7hEyocgiuhxZlP3g.roa
File: sRBzkNkDCgI7hEyocgiuhxZlP3g.roa (raw, json)
Hash identifier: aihSDwJgnKeSQcOiLzkpqQ+GJt/pU7iV5+C7wDBtBl0=
Subject key identifier: B1:10:73:90:D9:03:0A:02:3B:84:4C:A8:72:08:AE:87:16:65:3F:78
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 0182F9DE2938ABE1A8638774E33727E6C741
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/sRBzkNkDCgI7hEyocgiuhxZlP3g.roa
Signing time: Thu 01 Sep 2022 16:24:22 +0000
ROA not before: Thu 01 Sep 2022 16:24:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206067
IP address blocks: 188.29.184.0/21 maxlen: 21
188.29.192.0/20 maxlen: 20
188.29.208.0/20 maxlen: 20
188.29.128.0/19 maxlen: 19
188.30.64.0/22 maxlen: 22
188.30.76.0/22 maxlen: 22
188.29.240.0/21 maxlen: 21
188.29.248.0/22 maxlen: 22
188.30.0.0/21 maxlen: 21
92.40.48.0/20 maxlen: 20
94.197.104.0/21 maxlen: 21
188.29.0.0/20 maxlen: 20
94.197.112.0/21 maxlen: 21
188.28.192.0/18 maxlen: 18
188.29.80.0/20 maxlen: 20
188.29.96.0/20 maxlen: 20
188.29.112.0/20 maxlen: 20
188.29.16.0/20 maxlen: 20
188.29.32.0/20 maxlen: 20
188.29.64.0/20 maxlen: 20
188.31.96.0/20 maxlen: 20
188.28.16.0/20 maxlen: 20
92.41.144.0/21 maxlen: 21
92.41.156.0/22 maxlen: 22
94.196.144.0/20 maxlen: 20
92.41.160.0/21 maxlen: 21
188.31.208.0/21 maxlen: 21
94.196.224.0/19 maxlen: 19
188.31.224.0/20 maxlen: 20
188.28.64.0/20 maxlen: 20
188.31.176.0/20 maxlen: 20
188.28.80.0/20 maxlen: 20
92.41.208.0/20 maxlen: 20
92.41.224.0/20 maxlen: 20
94.196.208.0/20 maxlen: 20
188.30.136.0/21 maxlen: 21
92.40.160.0/21 maxlen: 21
92.40.168.0/23 maxlen: 23
92.40.170.0/23 maxlen: 23
92.40.172.0/23 maxlen: 23
92.40.174.0/23 maxlen: 23
92.40.186.0/23 maxlen: 23
92.40.182.0/23 maxlen: 23
188.30.160.0/19 maxlen: 19
92.40.196.0/23 maxlen: 23
92.40.198.0/23 maxlen: 23
92.40.200.0/23 maxlen: 23
92.40.202.0/23 maxlen: 23
92.40.204.0/23 maxlen: 23
92.40.208.0/23 maxlen: 23
92.40.210.0/23 maxlen: 23
92.40.212.0/23 maxlen: 23
188.30.80.0/22 maxlen: 22
92.40.112.0/20 maxlen: 20
188.30.96.0/19 maxlen: 19
92.41.16.0/20 maxlen: 20
94.196.0.0/18 maxlen: 18
188.31.8.0/21 maxlen: 21
188.31.24.0/21 maxlen: 21
92.40.248.0/24 maxlen: 24
92.41.0.0/20 maxlen: 20
2a04:4a45:a::/48 maxlen: 48
2a04:4a45:b::/48 maxlen: 48
2a04:4a43:4500::/40 maxlen: 40
2a04:4a43:4000::/39 maxlen: 39
2a04:4a43:4900::/40 maxlen: 40
2a04:4a43:5200::/40 maxlen: 40
2a04:4a43:4200::/39 maxlen: 39
2a04:4a43:5600::/40 maxlen: 40
2a04:4a43:5000::/40 maxlen: 40
2a04:4a43:5300::/40 maxlen: 40
2a04:4a43:4d00::/40 maxlen: 40
2a04:4a43:5700::/40 maxlen: 40
2a04:4a43:5400::/40 maxlen: 40
2a04:4a43:4600::/40 maxlen: 40
2a04:4a43:5500::/40 maxlen: 40
2a04:4a43:4b00::/40 maxlen: 40
2a04:4a43:9500::/40 maxlen: 40
2a04:4a43:4e00::/40 maxlen: 40
2a04:4a43:4700::/40 maxlen: 40
2a04:4a43:4400::/40 maxlen: 40
2a04:4a43:5800::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f9:de:29:38:ab:e1:a8:63:87:74:e3:37:27:e6:c7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Sep 1 16:24:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1107390d9030a023b844ca87208ae8716653f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:8e:48:d4:13:78:ad:4c:61:fe:28:c5:05:
24:9a:95:eb:d7:3b:ca:ac:0c:5d:22:ad:0a:74:b8:
4c:a3:ea:98:f4:4a:84:d7:52:c2:ee:54:75:2f:e9:
3b:f0:38:8b:8e:d0:08:22:fd:9a:e8:cc:0d:2e:08:
7e:15:3c:e5:43:76:39:3c:69:2f:e9:94:8b:c1:ce:
3b:f9:de:a9:2b:03:17:b5:c2:4c:69:a8:1b:b3:4d:
84:be:37:2c:61:4e:ea:e3:e3:12:44:36:f0:f8:f7:
c4:0b:3e:78:78:e5:30:a3:54:56:2e:36:a4:ca:a5:
43:ca:ab:fd:2b:a6:c8:57:bc:46:2d:9f:57:aa:75:
06:67:ab:4c:0e:d6:6b:0b:b7:16:45:2d:fa:58:a5:
a5:c8:dd:31:02:93:66:1b:b8:6c:ce:9d:32:24:f0:
92:c6:3b:58:ab:6a:ec:71:65:2c:77:0c:23:1e:25:
2d:dd:51:c4:ad:9a:a6:94:95:58:2a:3c:05:38:ec:
d5:09:23:8a:3f:f1:0e:e2:32:ef:e7:f7:51:65:2e:
53:f8:22:d3:c9:3f:c0:56:5a:6b:a7:ba:57:1a:29:
5c:5a:71:cd:1d:1c:bb:83:86:0d:21:d6:7e:09:e7:
0e:94:ed:ef:68:81:89:56:04:4b:37:3d:26:95:04:
3a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:10:73:90:D9:03:0A:02:3B:84:4C:A8:72:08:AE:87:16:65:3F:78
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/sRBzkNkDCgI7hEyocgiuhxZlP3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.40.48.0/20
92.40.112.0/20
92.40.160.0/20
92.40.182.0/23
92.40.186.0/23
92.40.196.0-92.40.205.255
92.40.208.0-92.40.213.255
92.40.248.0/24
92.41.0.0/19
92.41.144.0/21
92.41.156.0-92.41.167.255
92.41.208.0-92.41.239.255
94.196.0.0/18
94.196.144.0/20
94.196.208.0-94.196.255.255
94.197.104.0-94.197.119.255
188.28.16.0/20
188.28.64.0/19
188.28.192.0-188.29.47.255
188.29.64.0-188.29.159.255
188.29.184.0-188.29.223.255
188.29.240.0-188.29.251.255
188.30.0.0/21
188.30.64.0/22
188.30.76.0-188.30.83.255
188.30.96.0/19
188.30.136.0/21
188.30.160.0/19
188.31.8.0/21
188.31.24.0/21
188.31.96.0/20
188.31.176.0/20
188.31.208.0/21
188.31.224.0/20
IPv6:
2a04:4a43:4000::/37
2a04:4a43:4900::/40
2a04:4a43:4b00::/40
2a04:4a43:4d00::-2a04:4a43:4eff:ffff:ffff:ffff:ffff:ffff
2a04:4a43:5000::/40
2a04:4a43:5200::-2a04:4a43:58ff:ffff:ffff:ffff:ffff:ffff
2a04:4a43:9500::/40
2a04:4a45:a::/47
Signature Algorithm: sha256WithRSAEncryption
5c:6a:c6:b7:37:28:1a:4b:19:3d:13:16:05:5f:5b:de:dd:ac:
5f:7f:0d:0c:3a:09:a6:e5:20:e6:65:b0:19:72:86:cf:68:b8:
35:3b:a9:67:00:b4:a2:63:3d:9c:9f:06:a4:0f:02:c0:33:67:
1e:a3:bb:8b:0c:32:3e:c4:a9:f0:a7:da:e4:42:ba:01:ca:96:
e7:29:f2:d1:ba:f2:f9:fe:a2:6c:97:4b:74:c8:2b:7b:36:6d:
8c:3c:9f:ad:64:21:8c:34:0a:f4:9e:63:06:17:66:34:72:6c:
3c:bb:df:c0:5a:0b:85:ec:ad:9e:35:3d:7b:11:a7:e5:45:be:
a0:b9:15:9b:52:72:73:9e:58:fc:eb:76:47:e5:b6:88:11:6c:
5d:a2:c3:c5:a2:8e:c5:59:19:b4:43:f1:69:69:29:17:66:11:
0a:7d:71:02:b1:54:22:6c:49:d4:ab:90:7b:81:eb:ee:1a:7b:
06:ce:ac:36:ff:07:e4:cf:40:24:c7:03:7c:7c:01:7b:83:b1:
5c:9e:1e:31:9f:04:51:57:45:19:41:9e:60:bd:80:6e:93:ff:
31:d1:aa:55:4e:66:56:38:84:01:e8:46:13:bc:7d:3a:30:18:
d9:38:78:23:63:ad:86:1a:db:2b:72:80:41:f5:19:ea:a8:df:
2a:e8:2f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:21 2023 by rpki-client on console-ams.rpki-client.org