Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/lZGCER5UbD-YbAkuQ9udfn0GqYo.roa
File: lZGCER5UbD-YbAkuQ9udfn0GqYo.roa (raw, json)
Hash identifier: dTbxDplMi4HQNTzaIFD6ekMuR44ZIJ9ENgZ3882RA30=
Subject key identifier: 95:91:82:11:1E:54:6C:3F:98:6C:09:2E:43:DB:9D:7E:7D:06:A9:8A
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 01852867D71FFFDADD2C9ABCF024FEDE5F72
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/lZGCER5UbD-YbAkuQ9udfn0GqYo.roa
Signing time: Mon 19 Dec 2022 03:22:52 +0000
ROA not before: Mon 19 Dec 2022 03:22:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 185.134.20.0/22 maxlen: 22
195.140.212.0/22 maxlen: 22
93.114.83.0/24 maxlen: 24
134.255.243.0/24 maxlen: 24
128.127.148.0/22 maxlen: 22
81.19.208.0/20 maxlen: 20
81.19.208.0/23 maxlen: 23
81.19.216.0/24 maxlen: 24
89.46.223.0/24 maxlen: 24
89.46.222.0/23 maxlen: 23
86.106.89.0/24 maxlen: 24
86.106.112.0/24 maxlen: 24
195.234.124.0/23 maxlen: 24
195.234.124.0/24 maxlen: 24
195.234.127.0/24 maxlen: 24
188.241.120.0/24 maxlen: 24
188.241.144.0/24 maxlen: 24
188.241.156.0/23 maxlen: 23
188.241.157.0/24 maxlen: 24
193.32.208.0/22 maxlen: 22
86.106.135.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
86.106.158.0/24 maxlen: 24
86.106.157.0/24 maxlen: 24
188.240.58.0/24 maxlen: 24
188.240.56.0/21 maxlen: 21
188.240.56.0/24 maxlen: 24
188.240.57.0/24 maxlen: 24
188.240.71.0/24 maxlen: 24
84.247.0.0/24 maxlen: 24
195.206.165.0/24 maxlen: 24
185.125.204.0/22 maxlen: 22
195.206.166.0/23 maxlen: 23
195.206.169.0/24 maxlen: 24
195.206.170.0/23 maxlen: 23
89.38.68.0/23 maxlen: 23
195.206.180.0/22 maxlen: 22
5.226.136.0/21 maxlen: 21
217.146.80.0/20 maxlen: 20
217.146.87.0/24 maxlen: 24
185.38.148.0/22 maxlen: 22
217.146.92.0/24 maxlen: 24
213.166.84.0/22 maxlen: 24
37.10.113.0/24 maxlen: 24
37.10.114.0/24 maxlen: 24
188.212.154.0/24 maxlen: 24
194.50.234.0/23 maxlen: 23
89.37.64.0/22 maxlen: 22
185.158.241.0/24 maxlen: 24
185.158.242.0/24 maxlen: 24
89.37.173.0/24 maxlen: 24
178.239.160.0/20 maxlen: 20
178.239.165.0/24 maxlen: 24
178.239.167.0/24 maxlen: 24
185.44.76.0/22 maxlen: 22
178.239.173.0/24 maxlen: 24
185.3.236.0/22 maxlen: 22
185.158.240.0/22 maxlen: 24
89.37.172.0/22 maxlen: 22
109.70.144.0/21 maxlen: 21
109.70.145.0/24 maxlen: 24
109.70.149.0/24 maxlen: 24
109.70.148.0/24 maxlen: 24
185.16.204.0/22 maxlen: 22
94.177.17.0/24 maxlen: 24
109.69.104.0/21 maxlen: 21
109.69.110.0/24 maxlen: 24
109.230.203.0/24 maxlen: 24
109.230.209.0/24 maxlen: 24
109.230.218.0/24 maxlen: 24
109.230.215.0/24 maxlen: 24
109.230.220.0/24 maxlen: 24
185.137.36.0/24 maxlen: 24
185.137.36.0/22 maxlen: 22
85.204.70.0/24 maxlen: 24
89.21.66.0/24 maxlen: 24
77.81.191.0/24 maxlen: 24
31.14.102.0/24 maxlen: 24
193.176.31.0/24 maxlen: 24
193.176.28.0/22 maxlen: 22
185.216.144.0/22 maxlen: 22
185.61.157.0/24 maxlen: 24
185.61.156.0/24 maxlen: 24
185.61.156.0/22 maxlen: 22
89.21.64.0/24 maxlen: 24
89.21.64.0/22 maxlen: 22
185.223.232.0/22 maxlen: 22
185.223.235.0/24 maxlen: 24
89.35.28.0/22 maxlen: 22
195.20.108.0/24 maxlen: 24
195.20.108.0/23 maxlen: 23
185.121.136.0/22 maxlen: 22
185.114.224.0/24 maxlen: 24
89.40.212.0/24 maxlen: 24
86.107.241.0/24 maxlen: 24
89.34.96.0/22 maxlen: 22
2a01:4020:34::/48 maxlen: 48
2a01:4020:3::/48 maxlen: 48
2a01:4020::/32 maxlen: 32
2a01:4020:2::/48 maxlen: 48
2a00:1a30::/32 maxlen: 32
2a01:4020:32::/48 maxlen: 48
2a01:4020:33::/48 maxlen: 48
2a01:4020:30::/48 maxlen: 48
2a0b:b840::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:28:67:d7:1f:ff:da:dd:2c:9a:bc:f0:24:fe:de:5f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Dec 19 03:22:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=959182111e546c3f986c092e43db9d7e7d06a98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d5:b0:f2:ad:4f:71:3f:99:42:c9:73:1c:a7:
b8:be:f9:b2:07:d2:ff:92:8b:96:78:9b:93:2d:00:
a0:64:fc:c7:58:a0:70:51:31:de:14:bc:45:8f:2a:
21:2c:57:ea:37:80:e3:28:2f:5b:9d:5f:b8:a3:e3:
36:8a:b7:c9:4a:46:6b:fc:cd:5d:26:ee:d3:f9:cf:
80:01:e0:74:98:3c:9c:da:ce:41:2d:b9:c2:a5:55:
60:58:96:06:9e:0d:96:71:ac:c9:46:d4:2c:6c:12:
ac:cd:d0:e0:e4:1e:58:b9:1a:fb:4d:79:2b:8e:0f:
8f:8e:e1:0f:70:9f:5c:bc:cf:0c:94:50:37:d2:c9:
c5:32:2f:1c:d3:73:41:de:5e:d8:5d:2a:ba:9a:99:
0a:e5:43:82:11:10:56:29:21:00:db:c5:a4:11:45:
67:4e:c2:5f:67:ba:be:b0:61:36:d0:0c:07:b4:aa:
f3:b4:19:83:fa:b2:08:bc:52:9c:2d:8d:cc:81:ce:
af:55:6c:d2:90:62:f6:b6:50:70:ff:75:5d:e3:e9:
a1:35:26:7f:b9:24:4a:d2:93:4f:37:8e:47:07:73:
d7:bf:d4:73:0e:74:44:a9:61:2f:54:53:4d:1b:e4:
85:0b:f5:96:7b:34:89:16:53:45:18:0c:e5:88:17:
d1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:91:82:11:1E:54:6C:3F:98:6C:09:2E:43:DB:9D:7E:7D:06:A9:8A
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/lZGCER5UbD-YbAkuQ9udfn0GqYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
37.10.113.0-37.10.114.255
77.81.191.0/24
81.19.208.0/20
84.247.0.0/24
85.204.70.0/24
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
93.114.83.0/24
94.177.17.0/24
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.216.144.0/22
185.223.232.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
193.32.208.0/22
193.176.28.0/22
194.50.234.0/23
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
Signature Algorithm: sha256WithRSAEncryption
b4:f2:46:9f:ce:f9:47:58:03:2e:33:8b:86:87:ad:21:d8:90:
f0:b6:d8:00:4f:21:f9:3d:6e:99:81:6c:e3:62:47:04:6d:b8:
f5:e4:4c:3f:0d:b1:7f:a1:b9:d2:4e:e4:fb:5f:59:b7:7c:7a:
2e:f0:3a:59:49:e8:55:48:0a:5d:09:ae:2b:d0:f8:03:89:90:
94:4f:ba:18:b9:49:9c:8c:3a:3c:64:34:b6:6d:fd:68:44:d4:
ea:bf:c7:e8:81:9b:9f:d6:63:f6:be:4e:78:f3:de:4c:74:68:
0c:a7:22:cc:60:03:cd:39:8a:58:b1:43:3a:7a:43:0c:f4:b4:
a9:ca:d8:c8:9c:c0:b3:e4:c4:01:c9:cf:86:a2:ed:26:db:24:
60:0b:33:e8:e3:e2:38:0b:10:de:19:fb:63:73:ab:62:24:07:
82:36:51:7a:35:e7:be:72:33:8e:31:8c:f0:1b:a8:ae:ef:2a:
d9:61:01:4f:48:8d:83:ab:e5:0d:89:9e:af:ab:90:d8:3d:9d:
9c:2d:cc:35:9a:eb:d7:3c:2f:76:3f:91:c9:d1:81:1d:fd:b5:
b6:09:2f:47:56:c5:6a:1b:be:c3:a7:2a:c2:cb:6d:f1:6e:a1:
1f:96:37:e8:09:37:53:b0:06:4a:ca:fc:c2:46:f5:72:42:70:
05:26:71:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org