Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/tJS8_yExVtAPAfhkpSYsFxCZnpI.roa
File: tJS8_yExVtAPAfhkpSYsFxCZnpI.roa (raw, json)
Hash identifier: HWsuHelLmAl73dtUZdr/a01jpMXPcVWyT1snYUJMcTU=
Subject key identifier: B4:94:BC:FF:21:31:56:D0:0F:01:F8:64:A5:26:2C:17:10:99:9E:92
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 01847601DB401897942B90148F696E0580DE
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/tJS8_yExVtAPAfhkpSYsFxCZnpI.roa
Signing time: Mon 14 Nov 2022 11:59:03 +0000
ROA not before: Mon 14 Nov 2022 11:59:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 31.11.50.0/24 maxlen: 24
31.11.51.0/24 maxlen: 24
31.11.48.0/24 maxlen: 24
31.11.49.0/24 maxlen: 24
31.11.52.0/24 maxlen: 24
31.11.53.0/24 maxlen: 24
31.11.54.0/24 maxlen: 24
31.11.55.0/24 maxlen: 24
37.186.35.0/24 maxlen: 24
37.186.36.0/24 maxlen: 24
37.186.37.0/24 maxlen: 24
37.186.32.0/24 maxlen: 24
37.186.33.0/24 maxlen: 24
37.186.34.0/24 maxlen: 24
37.186.38.0/24 maxlen: 24
37.186.41.0/24 maxlen: 24
37.186.42.0/24 maxlen: 24
37.186.43.0/24 maxlen: 24
37.186.44.0/24 maxlen: 24
37.186.39.0/24 maxlen: 24
37.186.40.0/24 maxlen: 24
37.186.48.0/24 maxlen: 24
37.186.49.0/24 maxlen: 24
37.186.50.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
37.186.45.0/24 maxlen: 24
37.186.46.0/24 maxlen: 24
37.186.47.0/24 maxlen: 24
37.186.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.58.0/24 maxlen: 24
37.186.52.0/24 maxlen: 24
37.186.53.0/24 maxlen: 24
37.186.54.0/24 maxlen: 24
37.186.62.0/24 maxlen: 24
37.186.63.0/24 maxlen: 24
37.186.59.0/24 maxlen: 24
37.186.60.0/24 maxlen: 24
37.186.61.0/24 maxlen: 24
185.247.88.0/24 maxlen: 24
185.247.89.0/24 maxlen: 24
185.247.90.0/24 maxlen: 24
185.247.91.0/24 maxlen: 24
103.17.2.0/24 maxlen: 24
103.17.3.0/24 maxlen: 24
103.17.0.0/24 maxlen: 24
103.17.1.0/24 maxlen: 24
103.199.88.0/24 maxlen: 24
103.199.89.0/24 maxlen: 24
103.199.90.0/24 maxlen: 24
103.199.91.0/24 maxlen: 24
80.76.162.0/24 maxlen: 24
80.76.163.0/24 maxlen: 24
80.76.164.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.160.0/24 maxlen: 24
80.76.161.0/24 maxlen: 24
80.76.166.0/24 maxlen: 24
80.76.169.0/24 maxlen: 24
80.76.170.0/24 maxlen: 24
80.76.171.0/24 maxlen: 24
80.76.172.0/24 maxlen: 24
80.76.167.0/24 maxlen: 24
80.76.168.0/24 maxlen: 24
80.76.173.0/24 maxlen: 24
80.76.174.0/24 maxlen: 24
80.76.175.0/24 maxlen: 24
103.23.124.0/24 maxlen: 24
103.23.125.0/24 maxlen: 24
103.23.126.0/24 maxlen: 24
103.23.127.0/24 maxlen: 24
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
103.225.75.0/24 maxlen: 24
212.70.96.0/24 maxlen: 24
212.70.97.0/24 maxlen: 24
212.70.98.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.100.0/24 maxlen: 24
212.70.99.0/24 maxlen: 24
212.70.101.0/24 maxlen: 24
212.70.103.0/24 maxlen: 24
212.70.105.0/24 maxlen: 24
212.70.106.0/24 maxlen: 24
212.70.107.0/24 maxlen: 24
212.70.108.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.110.0/24 maxlen: 24
212.70.111.0/24 maxlen: 24
212.70.112.0/24 maxlen: 24
212.70.113.0/24 maxlen: 24
212.70.114.0/24 maxlen: 24
212.70.115.0/24 maxlen: 24
212.70.116.0/24 maxlen: 24
212.70.117.0/24 maxlen: 24
212.70.118.0/24 maxlen: 24
212.70.120.0/24 maxlen: 24
212.70.121.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.119.0/24 maxlen: 24
212.70.123.0/24 maxlen: 24
212.70.124.0/24 maxlen: 24
212.70.125.0/24 maxlen: 24
212.70.127.0/24 maxlen: 24
212.70.126.0/24 maxlen: 24
103.14.208.0/24 maxlen: 24
103.14.209.0/24 maxlen: 24
103.14.210.0/24 maxlen: 24
103.14.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:01:db:40:18:97:94:2b:90:14:8f:69:6e:05:80:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Nov 14 11:59:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b494bcff213156d00f01f864a5262c1710999e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f0:63:00:9e:cc:0f:84:fd:87:1f:ac:c4:dd:
32:75:6c:93:ef:e6:02:cd:36:00:c4:29:07:7e:a3:
ea:c2:96:51:91:ea:b3:99:62:83:b5:de:79:75:d1:
58:d6:b2:49:db:3b:03:19:05:29:95:53:3d:09:b7:
74:4b:9e:c8:a2:86:77:3a:86:12:2b:25:ca:63:7b:
52:a5:fc:28:f1:e2:39:33:78:90:ca:b8:41:42:3d:
ea:b3:f8:d4:d9:0e:fc:5e:f8:fb:64:10:e4:a7:6a:
80:22:59:62:5d:84:86:cd:84:4b:0b:83:fc:5d:b0:
a7:4b:fb:6a:ef:cd:ab:7b:1a:64:37:7e:0e:90:fa:
9d:07:c4:e5:f2:36:17:d7:db:18:6f:73:01:b7:f0:
65:e1:ea:94:43:93:6d:d3:37:30:e5:08:3f:35:4d:
99:f9:b6:1d:7f:c8:15:ce:9d:35:2e:51:6e:80:3a:
87:c9:84:40:f7:76:e5:ba:6a:a7:62:84:ee:f7:2b:
1f:a0:70:21:37:71:cd:49:f4:98:72:a5:42:19:e9:
ec:6b:a0:c3:50:f4:e2:dd:08:48:dd:ca:aa:10:9d:
54:27:94:be:ac:56:b9:64:d8:c6:40:d4:f1:f4:8e:
14:4e:0b:77:8f:e3:d7:49:62:98:fb:cf:65:16:ac:
dc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:94:BC:FF:21:31:56:D0:0F:01:F8:64:A5:26:2C:17:10:99:9E:92
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/tJS8_yExVtAPAfhkpSYsFxCZnpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.32.0/19
80.76.160.0/20
103.14.208.0/22
103.17.0.0/22
103.23.124.0/22
103.199.88.0/22
103.225.72.0/22
185.247.88.0/22
212.70.96.0/21
212.70.105.0-212.70.127.255
Signature Algorithm: sha256WithRSAEncryption
90:64:5a:a4:65:17:fd:33:4e:4b:7d:bd:95:e5:9c:24:17:4f:
f2:c7:ca:a8:02:15:ca:31:e2:8a:db:5e:bf:89:eb:2b:37:93:
cf:bd:3b:ae:73:61:8a:95:58:52:2c:7a:7b:84:3d:95:57:e6:
c6:6c:d4:a1:98:74:dd:30:72:4f:11:c0:65:26:5c:5d:e0:82:
61:54:85:d0:4b:83:14:be:4c:93:c6:55:7f:c2:2b:1d:90:93:
49:aa:37:f9:d4:f5:e7:86:6b:43:b1:c8:ed:62:70:03:40:1f:
76:4b:a8:f1:43:9e:70:29:4b:87:88:89:e7:52:76:ac:19:8c:
b2:72:bd:35:9d:a9:7c:09:58:96:77:d9:c5:b8:66:52:51:11:
c8:15:b2:47:2a:17:ef:80:97:02:9b:36:19:d5:52:46:d6:58:
7e:ca:d1:aa:c7:37:78:9a:7c:3f:98:6c:c3:03:a9:1a:0a:44:
44:e7:b0:9e:ef:bc:6f:52:ce:76:ab:4a:e4:66:f8:89:e8:05:
f6:6a:52:6c:38:ac:91:3a:73:db:17:79:3a:65:73:fd:b4:08:
bc:cc:a9:fe:11:be:aa:b0:0d:64:a6:39:54:94:3e:b9:c2:39:
68:0e:fd:7d:cc:56:e4:97:54:2c:76:93:b3:8a:d0:48:1e:a2:
b9:7f:b5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:16 2023 by rpki-client on console.sobornost.net