Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/6-lzFfRoD52A88Q2emcvUJcTW8E.roa
File: 6-lzFfRoD52A88Q2emcvUJcTW8E.roa (raw, json)
Hash identifier: 0xPOLBTN0X+ASKM7Chgdlm14IumaBbEYuaLwNjZ05c8=
Subject key identifier: EB:E9:73:15:F4:68:0F:9D:80:F3:C4:36:7A:67:2F:50:97:13:5B:C1
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 1AC69838
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/6-lzFfRoD52A88Q2emcvUJcTW8E.roa
Signing time: Mon 24 Jan 2022 22:30:16 +0000
ROA not before: Mon 24 Jan 2022 22:30:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 185.134.20.0/22 maxlen: 22
195.140.212.0/22 maxlen: 22
109.70.144.0/21 maxlen: 21
109.70.145.0/24 maxlen: 24
109.70.149.0/24 maxlen: 24
134.255.243.0/24 maxlen: 24
185.16.204.0/22 maxlen: 22
81.19.208.0/20 maxlen: 20
81.19.208.0/23 maxlen: 23
89.46.223.0/24 maxlen: 24
89.46.222.0/23 maxlen: 23
86.106.112.0/24 maxlen: 24
109.69.104.0/21 maxlen: 21
195.234.124.0/23 maxlen: 24
195.234.124.0/24 maxlen: 24
109.69.110.0/24 maxlen: 24
195.234.127.0/24 maxlen: 24
109.230.203.0/24 maxlen: 24
109.230.209.0/24 maxlen: 24
109.230.218.0/24 maxlen: 24
109.230.215.0/24 maxlen: 24
109.230.220.0/24 maxlen: 24
188.241.120.0/24 maxlen: 24
188.241.144.0/24 maxlen: 24
188.241.156.0/23 maxlen: 23
188.241.157.0/24 maxlen: 24
193.32.208.0/22 maxlen: 22
86.106.158.0/24 maxlen: 24
86.106.157.0/24 maxlen: 24
188.240.58.0/24 maxlen: 24
188.240.56.0/21 maxlen: 21
188.240.56.0/24 maxlen: 24
188.240.57.0/24 maxlen: 24
188.240.71.0/24 maxlen: 24
195.206.165.0/24 maxlen: 24
185.125.204.0/22 maxlen: 22
195.206.166.0/23 maxlen: 23
195.206.169.0/24 maxlen: 24
195.206.170.0/23 maxlen: 23
89.38.68.0/23 maxlen: 23
195.206.180.0/22 maxlen: 22
5.226.136.0/21 maxlen: 21
77.81.191.0/24 maxlen: 24
31.14.102.0/24 maxlen: 24
193.176.31.0/24 maxlen: 24
193.176.28.0/22 maxlen: 22
185.216.144.0/22 maxlen: 22
217.146.80.0/20 maxlen: 20
217.146.87.0/24 maxlen: 24
185.38.148.0/22 maxlen: 22
217.146.92.0/24 maxlen: 24
185.223.232.0/22 maxlen: 22
213.166.84.0/22 maxlen: 24
89.35.28.0/22 maxlen: 22
195.20.108.0/24 maxlen: 24
195.20.108.0/23 maxlen: 23
185.121.136.0/22 maxlen: 22
185.114.224.0/24 maxlen: 24
37.10.113.0/24 maxlen: 24
37.10.114.0/24 maxlen: 24
89.40.212.0/24 maxlen: 24
188.212.154.0/24 maxlen: 24
89.37.64.0/22 maxlen: 22
185.158.241.0/24 maxlen: 24
185.158.242.0/24 maxlen: 24
89.37.173.0/24 maxlen: 24
89.34.96.0/22 maxlen: 22
178.239.160.0/20 maxlen: 20
178.239.165.0/24 maxlen: 24
178.239.167.0/24 maxlen: 24
185.44.76.0/22 maxlen: 22
178.239.173.0/24 maxlen: 24
185.158.240.0/22 maxlen: 24
89.37.172.0/22 maxlen: 22
2a01:4020::/32 maxlen: 32
2a01:4020:2::/48 maxlen: 48
2a00:1a30::/32 maxlen: 32
2a01:4020:32::/48 maxlen: 48
2a01:4020:30::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449222712 (0x1ac69838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jan 24 22:30:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebe97315f4680f9d80f3c4367a672f5097135bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:50:9b:62:bf:74:e1:7b:c6:f0:1c:fd:a4:f8:
1c:44:32:f6:6c:6f:5e:ec:39:34:23:64:6b:ce:ac:
03:c0:72:62:e6:4f:d8:7f:b5:af:c3:d7:9f:09:c8:
35:17:78:ed:ed:98:2f:c3:76:8b:c9:8e:11:39:e7:
1b:1c:42:32:d8:01:75:82:1b:32:6c:99:9f:76:df:
90:a3:9a:5d:57:2a:63:77:ab:f7:2c:3f:fe:94:6f:
8e:8d:69:79:87:2f:2d:f5:b8:75:e8:b3:7c:6a:bd:
7e:94:36:6d:12:95:e3:a3:5f:85:21:93:88:10:1e:
b4:4b:b6:77:f5:c7:1a:ce:ee:da:82:61:da:b4:08:
80:11:ce:ed:17:d9:4c:f6:b0:1e:46:a0:b6:47:d6:
d3:b9:8c:26:a3:6f:a2:e9:f3:23:5c:7e:c2:ab:5d:
ac:9f:2e:7d:a1:37:5c:87:73:ff:41:b9:bf:b0:5c:
59:24:b6:b6:30:fd:dc:28:b0:92:f3:a6:d5:a7:0f:
60:f2:b2:de:52:57:43:c8:d6:bf:60:bb:a9:c4:85:
c3:2c:2c:44:f0:4e:6b:3a:f1:f5:e0:7f:2e:fe:af:
5a:ca:30:fa:fb:23:4c:e8:3e:1a:23:f6:fa:b0:dc:
08:50:e4:c8:61:99:37:0a:d4:f8:3d:7a:eb:b6:b3:
83:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E9:73:15:F4:68:0F:9D:80:F3:C4:36:7A:67:2F:50:97:13:5B:C1
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/6-lzFfRoD52A88Q2emcvUJcTW8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
37.10.113.0-37.10.114.255
77.81.191.0/24
81.19.208.0/20
86.106.112.0/24
86.106.157.0-86.106.158.255
89.34.96.0/22
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
134.255.243.0/24
178.239.160.0/20
185.16.204.0/22
185.38.148.0/22
185.44.76.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.158.240.0/22
185.216.144.0/22
185.223.232.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
193.32.208.0/22
193.176.28.0/22
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
Signature Algorithm: sha256WithRSAEncryption
09:64:09:a9:0f:3b:e6:79:53:8e:2c:d3:f0:35:79:52:2a:87:
1d:eb:04:cf:d1:e7:df:0c:5a:ff:04:c9:67:55:8b:cc:8d:6b:
43:f0:ad:b1:6f:b6:65:15:2a:51:c7:72:40:be:9b:4e:9c:2f:
ef:b6:51:11:68:cd:d7:02:38:53:f2:51:52:71:34:95:38:71:
fe:f3:8c:f6:09:1a:71:15:65:1c:86:a7:05:39:a0:cc:c1:56:
1a:d4:68:49:5a:49:e8:2e:88:49:ae:9a:ec:84:01:84:5c:a3:
a1:a7:51:af:0d:a6:e7:84:4d:37:73:74:c8:46:50:8a:2a:bd:
06:cb:a7:09:a9:da:eb:3e:61:a7:4d:7d:3f:50:4e:fe:a5:80:
20:35:02:2b:33:e0:80:d9:49:b3:a3:7d:86:4b:0f:51:79:68:
a2:dd:67:93:a3:bd:21:35:03:b1:ff:cf:d2:e8:00:be:57:78:
2e:21:bc:1a:2f:02:28:cf:2a:a9:6f:21:97:a5:2d:83:b2:71:
39:50:57:0d:f4:3c:fa:45:79:14:ec:04:b9:fc:e3:ed:6d:13:
24:9b:60:cd:36:ae:3a:59:38:ac:76:c0:11:1a:20:1a:5a:0e:
e0:f5:08:63:01:e3:59:c9:90:a8:e0:47:f8:b9:63:6c:7e:72:
80:21:6f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org