Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Y9BBMd8Yu5b9kKZ_7yt0qjyGbs8.roa
File: Y9BBMd8Yu5b9kKZ_7yt0qjyGbs8.roa (raw, json)
Hash identifier: xFseV3QD9GDJ/sAht4LkTU/addpVlRmJfHdvqWuPsfM=
Subject key identifier: 63:D0:41:31:DF:18:BB:96:FD:90:A6:7F:EF:2B:74:AA:3C:86:6E:CF
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 01850CDFD2C9D4A13966DD2968FD29C94C0A
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Y9BBMd8Yu5b9kKZ_7yt0qjyGbs8.roa
Signing time: Tue 13 Dec 2022 19:04:33 +0000
ROA not before: Tue 13 Dec 2022 19:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 185.134.20.0/22 maxlen: 22
195.140.212.0/22 maxlen: 22
134.255.243.0/24 maxlen: 24
128.127.148.0/22 maxlen: 22
81.19.208.0/20 maxlen: 20
81.19.208.0/23 maxlen: 23
81.19.216.0/24 maxlen: 24
89.46.223.0/24 maxlen: 24
89.46.222.0/23 maxlen: 23
86.106.89.0/24 maxlen: 24
86.106.112.0/24 maxlen: 24
195.234.124.0/24 maxlen: 24
195.234.124.0/23 maxlen: 24
195.234.127.0/24 maxlen: 24
188.241.120.0/24 maxlen: 24
188.241.144.0/24 maxlen: 24
188.241.156.0/23 maxlen: 23
188.241.157.0/24 maxlen: 24
193.32.208.0/22 maxlen: 22
86.106.135.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
86.106.158.0/24 maxlen: 24
86.106.157.0/24 maxlen: 24
188.240.58.0/24 maxlen: 24
188.240.56.0/21 maxlen: 21
188.240.56.0/24 maxlen: 24
188.240.57.0/24 maxlen: 24
188.240.71.0/24 maxlen: 24
84.247.0.0/24 maxlen: 24
195.206.165.0/24 maxlen: 24
185.125.204.0/22 maxlen: 22
195.206.166.0/23 maxlen: 23
195.206.169.0/24 maxlen: 24
195.206.170.0/23 maxlen: 23
89.38.68.0/23 maxlen: 23
195.206.180.0/22 maxlen: 22
5.226.136.0/21 maxlen: 21
217.146.80.0/20 maxlen: 20
217.146.87.0/24 maxlen: 24
185.38.148.0/22 maxlen: 22
217.146.92.0/24 maxlen: 24
213.166.84.0/22 maxlen: 24
37.10.113.0/24 maxlen: 24
37.10.114.0/24 maxlen: 24
188.212.154.0/24 maxlen: 24
194.50.234.0/23 maxlen: 23
89.37.64.0/22 maxlen: 22
185.158.241.0/24 maxlen: 24
185.158.242.0/24 maxlen: 24
89.37.173.0/24 maxlen: 24
178.239.160.0/20 maxlen: 20
178.239.165.0/24 maxlen: 24
178.239.167.0/24 maxlen: 24
185.44.76.0/22 maxlen: 22
178.239.173.0/24 maxlen: 24
185.3.236.0/22 maxlen: 22
185.158.240.0/22 maxlen: 24
89.37.172.0/22 maxlen: 22
109.70.144.0/21 maxlen: 21
109.70.145.0/24 maxlen: 24
109.70.149.0/24 maxlen: 24
109.70.148.0/24 maxlen: 24
185.16.204.0/22 maxlen: 22
109.69.104.0/21 maxlen: 21
109.69.110.0/24 maxlen: 24
109.230.203.0/24 maxlen: 24
109.230.209.0/24 maxlen: 24
109.230.218.0/24 maxlen: 24
109.230.215.0/24 maxlen: 24
109.230.220.0/24 maxlen: 24
185.137.36.0/24 maxlen: 24
185.137.36.0/22 maxlen: 22
85.204.70.0/24 maxlen: 24
89.21.66.0/24 maxlen: 24
77.81.191.0/24 maxlen: 24
31.14.102.0/24 maxlen: 24
193.176.28.0/22 maxlen: 22
193.176.31.0/24 maxlen: 24
185.216.144.0/22 maxlen: 22
185.61.157.0/24 maxlen: 24
185.61.156.0/24 maxlen: 24
185.61.156.0/22 maxlen: 22
89.21.64.0/24 maxlen: 24
89.21.64.0/22 maxlen: 22
185.223.232.0/22 maxlen: 22
185.223.235.0/24 maxlen: 24
89.35.28.0/22 maxlen: 22
195.20.108.0/24 maxlen: 24
195.20.108.0/23 maxlen: 23
185.121.136.0/22 maxlen: 22
185.114.224.0/24 maxlen: 24
89.40.212.0/24 maxlen: 24
86.107.241.0/24 maxlen: 24
89.34.96.0/22 maxlen: 22
2a01:4020:34::/48 maxlen: 48
2a01:4020:3::/48 maxlen: 48
2a01:4020::/32 maxlen: 32
2a01:4020:2::/48 maxlen: 48
2a00:1a30::/32 maxlen: 32
2a01:4020:32::/48 maxlen: 48
2a01:4020:33::/48 maxlen: 48
2a01:4020:30::/48 maxlen: 48
2a0b:b840::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:df:d2:c9:d4:a1:39:66:dd:29:68:fd:29:c9:4c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Dec 13 19:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63d04131df18bb96fd90a67fef2b74aa3c866ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:04:06:12:9e:43:04:c9:48:f4:d2:93:2b:a6:
3b:72:a9:0f:01:95:54:90:11:89:bb:08:c6:13:b8:
d8:e2:f1:71:51:5c:41:86:c1:35:22:6b:e2:c5:83:
10:a3:b7:6a:14:55:82:f2:f4:14:57:77:6e:68:51:
db:57:78:76:bb:71:f2:06:07:ca:04:b6:8f:b1:1e:
ac:cb:8c:8e:9a:af:76:c6:4c:9b:d6:90:0b:3c:56:
e0:b0:23:57:c7:e0:df:97:11:0d:52:fb:85:9a:01:
6d:51:75:66:29:78:e6:df:bb:b7:40:75:72:55:dc:
d4:19:c0:76:b1:b7:c5:59:b6:29:ea:56:80:ea:e9:
9a:30:26:1f:52:3b:e7:2b:28:8f:06:aa:3c:91:2b:
88:ee:1a:e9:33:cd:bf:8b:4d:6e:25:d9:3d:7c:0f:
dc:a9:07:f6:ca:5c:63:2a:45:87:e3:3b:d8:69:37:
f2:93:18:e3:9a:52:5b:1d:9b:16:1a:ed:19:49:aa:
c8:17:a4:6b:40:a8:b7:4d:da:fe:fc:6e:9c:c4:55:
5b:9d:b5:c1:32:01:90:cb:bc:c5:27:5e:ef:57:aa:
4f:5a:dd:5c:59:59:ff:10:61:c6:dd:ed:98:98:6c:
95:9c:15:f4:18:f0:2f:bd:cd:1e:dc:e8:90:7b:fb:
3e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D0:41:31:DF:18:BB:96:FD:90:A6:7F:EF:2B:74:AA:3C:86:6E:CF
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Y9BBMd8Yu5b9kKZ_7yt0qjyGbs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
37.10.113.0-37.10.114.255
77.81.191.0/24
81.19.208.0/20
84.247.0.0/24
85.204.70.0/24
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.216.144.0/22
185.223.232.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
193.32.208.0/22
193.176.28.0/22
194.50.234.0/23
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
Signature Algorithm: sha256WithRSAEncryption
64:7a:7a:df:a5:b1:3c:4e:13:78:64:80:eb:26:26:24:98:87:
f7:9e:30:74:14:87:31:4e:e7:a8:1d:1c:35:56:82:8b:a9:0b:
81:5b:ab:f4:11:2f:70:7c:5f:8d:3e:6c:51:fe:63:43:13:61:
ec:5a:38:f4:48:e8:a5:24:95:a0:51:21:a6:72:0c:fa:69:7f:
bf:21:72:33:a2:aa:5e:85:77:39:ac:6d:c1:fd:05:cc:d9:72:
4b:7b:12:8d:a6:07:c6:60:2e:91:b2:29:39:2d:ee:12:bf:0e:
50:13:79:d1:d2:50:6c:38:8e:93:b2:d5:fc:88:a2:83:7f:18:
59:3d:46:18:31:27:87:3b:77:e5:97:78:f8:d2:e8:43:13:a2:
9a:3b:e3:9c:58:23:d3:22:34:b3:9f:9d:8e:27:47:fe:66:8a:
96:68:d2:9c:f2:18:01:df:be:a0:8e:cc:21:9a:8c:3d:49:2d:
82:88:79:0c:29:ad:03:45:31:3b:7b:d3:c1:b0:01:d1:8f:27:
e1:ab:74:03:8f:1a:01:77:42:92:ed:23:08:81:cc:7f:9d:ed:
84:59:16:69:81:f4:7a:1e:42:62:e4:58:78:df:b6:b2:2b:ed:
e5:5b:fd:43:65:6b:4f:29:6d:1c:08:c2:db:e2:5e:dd:1f:a2:
16:74:8a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org