Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/GaVQPvcbCsbICCF9skNurQqsOfM.roa
File: GaVQPvcbCsbICCF9skNurQqsOfM.roa (raw, json)
Hash identifier: BuEgj0pxw//kpT8WhmviyFvEu+hF+RtLaLw4KJS07A4=
Subject key identifier: 19:A5:50:3E:F7:1B:0A:C6:C8:08:21:7D:B2:43:6E:AD:0A:AC:39:F3
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 1BB75575
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/GaVQPvcbCsbICCF9skNurQqsOfM.roa
Signing time: Wed 04 May 2022 14:57:21 +0000
ROA not before: Wed 04 May 2022 14:57:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 185.134.20.0/22 maxlen: 22
195.140.212.0/22 maxlen: 22
109.70.144.0/21 maxlen: 21
109.70.145.0/24 maxlen: 24
109.70.149.0/24 maxlen: 24
109.70.148.0/24 maxlen: 24
134.255.243.0/24 maxlen: 24
185.16.204.0/22 maxlen: 22
128.127.148.0/22 maxlen: 22
81.19.208.0/20 maxlen: 20
81.19.208.0/23 maxlen: 23
89.46.223.0/24 maxlen: 24
89.46.222.0/23 maxlen: 23
86.106.112.0/24 maxlen: 24
109.69.104.0/21 maxlen: 21
195.234.124.0/24 maxlen: 24
195.234.124.0/23 maxlen: 24
109.69.110.0/24 maxlen: 24
195.234.127.0/24 maxlen: 24
109.230.203.0/24 maxlen: 24
109.230.209.0/24 maxlen: 24
109.230.218.0/24 maxlen: 24
109.230.215.0/24 maxlen: 24
109.230.220.0/24 maxlen: 24
188.241.120.0/24 maxlen: 24
188.241.144.0/24 maxlen: 24
188.241.156.0/23 maxlen: 23
188.241.157.0/24 maxlen: 24
193.32.208.0/22 maxlen: 22
86.106.158.0/24 maxlen: 24
86.106.157.0/24 maxlen: 24
188.240.58.0/24 maxlen: 24
188.240.56.0/21 maxlen: 21
188.240.56.0/24 maxlen: 24
188.240.57.0/24 maxlen: 24
188.240.71.0/24 maxlen: 24
195.206.165.0/24 maxlen: 24
185.125.204.0/22 maxlen: 22
195.206.166.0/23 maxlen: 23
195.206.169.0/24 maxlen: 24
195.206.170.0/23 maxlen: 23
89.38.68.0/23 maxlen: 23
195.206.180.0/22 maxlen: 22
5.226.136.0/21 maxlen: 21
77.81.191.0/24 maxlen: 24
31.14.102.0/24 maxlen: 24
193.176.28.0/22 maxlen: 22
193.176.31.0/24 maxlen: 24
185.216.144.0/22 maxlen: 22
89.21.64.0/22 maxlen: 22
217.146.80.0/20 maxlen: 20
217.146.87.0/24 maxlen: 24
185.38.148.0/22 maxlen: 22
217.146.92.0/24 maxlen: 24
185.223.232.0/22 maxlen: 22
213.166.84.0/22 maxlen: 24
89.35.28.0/22 maxlen: 22
195.20.108.0/24 maxlen: 24
195.20.108.0/23 maxlen: 23
185.121.136.0/22 maxlen: 22
185.114.224.0/24 maxlen: 24
37.10.113.0/24 maxlen: 24
37.10.114.0/24 maxlen: 24
89.40.212.0/24 maxlen: 24
188.212.154.0/24 maxlen: 24
89.37.64.0/22 maxlen: 22
185.158.241.0/24 maxlen: 24
185.158.242.0/24 maxlen: 24
89.37.173.0/24 maxlen: 24
89.34.96.0/22 maxlen: 22
178.239.160.0/20 maxlen: 20
178.239.165.0/24 maxlen: 24
178.239.167.0/24 maxlen: 24
185.44.76.0/22 maxlen: 22
178.239.173.0/24 maxlen: 24
185.3.236.0/22 maxlen: 22
185.158.240.0/22 maxlen: 24
89.37.172.0/22 maxlen: 22
2a01:4020::/32 maxlen: 32
2a01:4020:34::/48 maxlen: 48
2a01:4020:2::/48 maxlen: 48
2a00:1a30::/32 maxlen: 32
2a01:4020:32::/48 maxlen: 48
2a01:4020:33::/48 maxlen: 48
2a01:4020:30::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464999797 (0x1bb75575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: May 4 14:57:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19a5503ef71b0ac6c808217db2436ead0aac39f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:41:e4:d7:9f:ff:02:26:e8:e7:50:6d:72:
dc:78:69:a5:e0:de:d7:ea:e9:39:3d:c6:bb:fa:64:
9d:dc:8c:b9:bf:5f:8d:06:e0:3a:83:9f:5f:93:d3:
bf:32:16:e9:8d:b5:6d:fb:48:7a:03:1b:9f:2c:06:
e1:ef:b9:72:0b:c0:3a:b1:17:11:0d:e2:cc:0c:3a:
be:04:73:2e:e7:3d:80:bd:db:1a:71:48:52:2a:e0:
0d:7c:ae:ae:f2:f3:02:6a:4b:f8:81:05:5c:da:b0:
22:1b:b3:1b:f1:57:83:2b:58:a7:8f:9b:56:f1:4d:
ff:80:59:d3:59:98:1c:b1:ef:6a:f6:8a:79:4e:d2:
95:c0:8f:e7:eb:b3:11:57:c0:55:f2:45:fb:34:fb:
20:2a:51:46:6b:bd:f8:af:d0:0b:e0:e6:97:3f:90:
71:82:94:94:b7:53:a4:c3:9a:11:db:4e:43:48:e5:
6d:d6:69:d3:2d:93:16:06:bb:ca:71:f1:cc:60:69:
e2:cf:07:4b:82:0a:f3:a7:fa:a2:db:59:11:94:ae:
5f:99:fd:fa:07:af:a7:2d:5f:28:71:fd:15:ce:7a:
7d:b6:0f:c5:97:c8:2a:10:35:32:e6:11:8e:05:16:
44:79:4c:95:1d:da:14:2e:68:f5:b0:00:dc:ce:bd:
c0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A5:50:3E:F7:1B:0A:C6:C8:08:21:7D:B2:43:6E:AD:0A:AC:39:F3
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/GaVQPvcbCsbICCF9skNurQqsOfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
37.10.113.0-37.10.114.255
77.81.191.0/24
81.19.208.0/20
86.106.112.0/24
86.106.157.0-86.106.158.255
89.21.64.0/22
89.34.96.0/22
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.38.148.0/22
185.44.76.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.158.240.0/22
185.216.144.0/22
185.223.232.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
193.32.208.0/22
193.176.28.0/22
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
Signature Algorithm: sha256WithRSAEncryption
a6:b7:48:b6:04:14:a8:58:c0:ba:ca:1f:10:3d:90:34:ce:52:
1c:11:61:9f:0c:15:44:24:65:68:0b:87:8c:fb:d3:f1:68:b9:
fe:3d:ff:d5:0c:ec:91:5a:f3:dd:95:a9:9f:fe:c0:be:30:12:
00:c6:3c:20:fa:75:0b:c0:dd:df:8f:1c:33:4a:77:64:33:62:
d3:7e:cb:7b:3f:25:17:f1:51:30:75:e1:83:78:8b:e1:e3:d7:
2a:23:fc:6c:00:fd:ce:3f:a6:6a:af:17:2b:9a:25:5c:cc:ca:
ec:ab:1b:91:a3:e6:3e:24:46:8e:5b:46:d4:ef:89:fb:11:3a:
c1:18:2e:df:fd:36:7f:fd:b2:88:99:e0:e6:50:3b:ab:c3:0e:
63:65:2e:5a:f6:a9:c1:c3:09:e7:2d:bc:35:c8:a2:6b:a7:a3:
d2:56:ba:97:c2:44:bd:d2:74:17:78:46:af:8d:63:bf:ec:b7:
24:1d:b9:94:f9:5f:f5:00:13:51:d6:7b:2b:0b:6a:5f:c9:8d:
a7:6d:e6:39:38:aa:35:1e:41:a7:bc:af:e4:2b:25:34:9c:a1:
6e:66:e1:de:3f:bc:9d:8b:b7:ab:e5:5f:ff:03:ae:66:63:20:
3b:57:e3:d3:2c:a8:ea:3c:bb:57:16:a3:41:bb:60:49:b8:55:
fb:56:ac:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:00 2024 by rpki-client on console-fra.rpki-client.org