Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Ne9aF8XOH8Tk2uQbH-6Po3Yex4g.roa
File: Ne9aF8XOH8Tk2uQbH-6Po3Yex4g.roa (raw, json)
Hash identifier: u4dFjSVUC9Rg6UZyK0J/dVdJUgxwgmrS1MBmI1f84cE=
Subject key identifier: 35:EF:5A:17:C5:CE:1F:C4:E4:DA:E4:1B:1F:EE:8F:A3:76:1E:C7:88
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0183AD8AB91F13495E901841BB8DE8A51BD0
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Ne9aF8XOH8Tk2uQbH-6Po3Yex4g.roa
Signing time: Thu 06 Oct 2022 13:44:53 +0000
ROA not before: Thu 06 Oct 2022 13:44:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 95.174.160.0/19 maxlen: 24
87.255.128.0/19 maxlen: 24
217.19.192.0/20 maxlen: 24
159.20.8.0/21 maxlen: 24
213.222.64.0/18 maxlen: 24
95.168.0.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
185.147.204.0/22 maxlen: 24
79.174.192.0/18 maxlen: 24
85.168.0.0/14 maxlen: 24
194.6.128.0/19 maxlen: 24
195.146.192.0/19 maxlen: 24
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 24
62.106.128.0/17 maxlen: 24
217.112.224.0/20 maxlen: 24
194.153.89.0/24 maxlen: 24
194.153.90.0/24 maxlen: 24
194.153.88.0/23 maxlen: 24
194.153.97.0/24 maxlen: 24
194.153.92.0/24 maxlen: 24
178.18.176.0/20 maxlen: 24
87.100.0.0/17 maxlen: 24
212.39.128.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
178.19.0.0/20 maxlen: 24
81.220.0.0/16 maxlen: 24
77.233.96.0/19 maxlen: 24
78.112.0.0/12 maxlen: 24
62.85.128.0/19 maxlen: 24
37.64.0.0/13 maxlen: 24
46.165.64.0/18 maxlen: 24
89.185.160.0/19 maxlen: 24
84.205.128.0/19 maxlen: 24
212.23.160.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
91.91.0.0/16 maxlen: 24
88.219.0.0/16 maxlen: 24
81.64.0.0/14 maxlen: 24
80.118.0.0/15 maxlen: 24
195.132.0.0/16 maxlen: 24
195.98.96.0/19 maxlen: 24
78.159.0.0/19 maxlen: 24
84.4.0.0/14 maxlen: 24
85.192.192.0/18 maxlen: 24
79.132.32.0/19 maxlen: 24
77.192.0.0/12 maxlen: 24
86.64.0.0/12 maxlen: 24
80.70.32.0/20 maxlen: 24
80.124.0.0/15 maxlen: 24
82.151.0.0/19 maxlen: 24
95.157.192.0/18 maxlen: 24
212.198.0.0/16 maxlen: 24
93.191.80.0/21 maxlen: 24
77.84.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 24
86.63.224.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
77.144.0.0/12 maxlen: 24
217.70.80.0/20 maxlen: 24
85.117.128.0/19 maxlen: 24
195.3.0.0/18 maxlen: 24
95.171.128.0/19 maxlen: 24
80.185.0.0/16 maxlen: 24
81.185.0.0/16 maxlen: 24
84.96.0.0/13 maxlen: 24
87.231.0.0/16 maxlen: 24
62.62.169.0/24 maxlen: 24
89.2.0.0/15 maxlen: 24
188.224.0.0/17 maxlen: 24
95.136.128.0/17 maxlen: 24
194.183.192.0/19 maxlen: 24
62.62.128.0/17 maxlen: 24
89.157.88.0/21 maxlen: 24
89.157.96.0/19 maxlen: 24
141.170.216.0/21 maxlen: 24
213.245.0.0/16 maxlen: 24
185.150.120.0/22 maxlen: 24
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 24
213.169.160.0/19 maxlen: 24
93.0.0.0/11 maxlen: 24
109.0.0.0/11 maxlen: 24
93.182.192.0/18 maxlen: 24
81.1.0.0/18 maxlen: 24
88.136.0.0/13 maxlen: 24
213.176.192.0/19 maxlen: 24
84.55.128.0/18 maxlen: 24
89.170.0.0/16 maxlen: 24
62.129.160.0/19 maxlen: 24
62.8.0.0/19 maxlen: 24
46.35.0.0/19 maxlen: 24
77.136.0.0/15 maxlen: 24
80.236.0.0/17 maxlen: 24
77.128.0.0/13 maxlen: 24
188.7.0.0/16 maxlen: 24
212.94.160.0/19 maxlen: 24
83.141.128.0/17 maxlen: 24
188.141.128.0/17 maxlen: 24
213.128.32.0/19 maxlen: 24
194.242.176.0/20 maxlen: 24
195.7.96.0/19 maxlen: 24
92.88.0.0/13 maxlen: 24
85.68.0.0/15 maxlen: 24
213.223.0.0/16 maxlen: 24
91.68.0.0/14 maxlen: 24
91.88.0.0/16 maxlen: 24
82.216.0.0/16 maxlen: 24
95.175.160.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
78.155.128.0/19 maxlen: 24
2a00:5e80::/32 maxlen: 48
2a00:6200::/29 maxlen: 48
2a00:7180::/32 maxlen: 48
2a02:8400::/25 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ad:8a:b9:1f:13:49:5e:90:18:41:bb:8d:e8:a5:1b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Oct 6 13:44:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35ef5a17c5ce1fc4e4dae41b1fee8fa3761ec788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7e:3f:d9:d9:63:35:16:55:12:ff:9c:95:f9:
08:1d:d6:0b:9a:e7:95:35:d4:52:2e:e6:c0:7b:48:
60:c8:44:6e:f1:94:55:53:7c:db:d7:10:1d:e5:59:
29:c2:3c:79:1f:18:a5:8e:df:45:40:5b:f4:c9:16:
8c:b2:2f:77:11:f6:d4:10:1d:13:80:73:70:f6:94:
3c:70:72:80:11:11:7a:52:f7:67:31:73:a8:23:ae:
87:a0:1f:00:cd:e0:10:70:57:60:01:ac:68:11:41:
4e:9c:7f:fa:97:18:55:58:f3:14:31:d7:e6:9e:10:
c3:51:b1:d1:b4:c1:66:9d:60:97:c8:a5:0a:b1:7a:
c6:92:e7:51:10:28:29:ce:ca:48:78:48:e9:9a:ea:
6d:6a:43:82:60:c0:8a:d8:39:fd:a4:d8:f9:5d:21:
b6:6d:33:ac:30:68:d7:ed:d1:54:fe:af:ff:99:5c:
51:27:bb:e2:e9:6f:d0:94:bf:42:4c:bf:6b:63:73:
35:09:e6:df:91:4f:0d:83:6d:ca:18:e0:9e:f1:2b:
e6:1c:53:b2:90:76:49:0f:76:b8:24:6b:b3:52:29:
1a:11:ba:81:88:bd:30:db:2b:44:64:73:66:07:1e:
72:33:f7:c0:40:04:4c:94:7a:b9:fa:7d:d4:dd:a3:
ad:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EF:5A:17:C5:CE:1F:C4:E4:DA:E4:1B:1F:EE:8F:A3:76:1E:C7:88
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Ne9aF8XOH8Tk2uQbH-6Po3Yex4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
46.165.64.0/18
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.85.128.0/19
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.84.0.0/16
77.128.0.0-77.137.255.255
77.140.0.0-77.159.255.255
77.192.0.0/12
77.233.96.0/19
78.112.0.0/12
78.155.128.0/19
78.159.0.0/19
79.80.0.0/12
79.132.32.0/19
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.185.0.0/16
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.151.0.0/19
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.117.128.0/19
85.168.0.0/14
85.192.192.0/18
86.63.224.0-86.79.255.255
87.100.0.0/17
87.231.0.0/16
87.255.128.0/19
88.136.0.0/13
88.219.0.0/16
89.2.0.0/15
89.156.0.0/14
89.170.0.0/16
89.185.160.0/19
91.68.0.0/14
91.88.0.0/16
91.91.0.0/16
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
93.182.192.0/18
93.191.80.0/21
95.136.128.0/17
95.157.192.0/18
95.168.0.0/19
95.171.128.0/19
95.174.160.0/19
95.175.160.0/19
109.0.0.0/11
141.170.216.0/21
159.20.8.0/21
178.18.176.0/20
178.19.0.0/20
185.147.204.0/22
185.150.120.0/22
188.7.0.0/16
188.141.128.0/17
188.224.0.0/17
194.6.128.0/19
194.153.88.0-194.153.90.255
194.153.92.0/24
194.153.97.0/24
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.23.160.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.176.192.0/19
213.203.64.0/18
213.222.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:5e80::/32
2a00:6200::/29
2a00:7180::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
46:54:72:ba:0b:71:61:a8:61:be:85:bd:73:b7:c1:da:cb:17:
5c:75:9f:0d:40:93:39:d6:0a:9d:59:82:45:65:69:ed:2a:3d:
0b:d8:2e:05:bf:ed:1c:13:47:74:31:f1:21:51:63:e4:59:c1:
36:dd:a7:64:4a:2e:e2:c3:2b:f3:12:98:85:69:af:8f:44:4b:
3b:c3:04:ac:2d:aa:f1:e4:d1:90:2e:ef:1c:5b:71:3c:fa:a2:
5f:c0:85:de:ed:6a:9d:df:8c:23:64:15:83:9c:19:19:9f:7f:
ff:f7:fc:2e:58:d9:f8:72:40:aa:b3:6b:57:aa:4f:01:a4:fc:
f9:13:e4:1d:78:38:40:2a:d2:43:33:23:50:20:fa:da:48:57:
d9:ec:d3:09:55:d9:6a:71:3d:ef:98:f5:ff:66:cd:5f:f1:41:
92:60:f8:59:3e:45:f9:97:6d:d0:58:09:1c:19:14:ef:84:57:
20:b0:09:f4:d5:af:9a:66:ce:b0:15:7c:83:58:fb:42:07:b7:
f6:ea:ac:55:7b:37:40:55:7a:ca:ba:e7:fa:96:1e:cf:23:85:
1f:d1:6b:ff:7a:a6:26:e0:b3:71:0a:e6:b6:75:ee:1e:4f:7b:
f1:dc:38:98:42:62:a7:90:82:7d:c3:c2:69:2e:8c:16:3f:23:
98:96:b6:aa
-----BEGIN CERTIFICATE-----
MIIHhzCCBm+gAwIBAgISAYOtirkfE0lekBhBu43opRvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz
YzQwM2UwHhcNMjIxMDA2MTM0NDUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWVmNWExN2M1Y2UxZmM0ZTRkYWU0MWIxZmVlOGZhMzc2MWVjNzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7H4/2dljNRZVEv+clfkIHdYLmueV
NdRSLubAe0hgyERu8ZRVU3zb1xAd5Vkpwjx5Hxiljt9FQFv0yRaMsi93EfbUEB0T
gHNw9pQ8cHKAERF6UvdnMXOoI66HoB8AzeAQcFdgAaxoEUFOnH/6lxhVWPMUMdfm
nhDDUbHRtMFmnWCXyKUKsXrGkudRECgpzspIeEjpmuptakOCYMCK2Dn9pNj5XSG2
bTOsMGjX7dFU/q//mVxRJ7vi6W/QlL9CTL9rY3M1CebfkU8Ng23KGOCe8SvmHFOy
kHZJD3a4JGuzUikaEbqBiL0w2ytEZHNmBx5yM/fAQARMlHq5+n3U3aOtFwIDAQAB
o4IEkzCCBI8wHQYDVR0OBBYEFDXvWhfFzh/E5NrkGx/uj6N2HseIMB8GA1UdIwQY
MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvTmU5YUY4WE9IOFRrMnVRYkgtNlBvM1lleDRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICpwYIKwYBBQUHAQcBAf8EggKWMIICkjCCAmoEAgABMIIC
YgMDAyVAAwQFLiMAAwQGLqVAAwQFPggAAwMAPicDBAc+PoADBAU+VYADBAc+aoAD
BAU+gaADBAY+8UADAwBNVDAKAwMHTYADAwFNiDAKAwMCTYwDAwVNgAMDBE3AAwQF
TelgAwMETnADBAVOm4ADBAVOnwADAwRPUAMEBU+EIAMEBk+uwAMEBFBGIAMDAVB2
AwMBUHwDAwBQuQMEB1DsAAMEBlEBAAMDAlFAAwMAUbkDAwBR3AMEBVKXAAMDAFLY
AwQHU42AAwMCVAQDBAZUN4ADAwNUYAMEBVTNgAMDAVVEAwQFVXWAAwMCVagDBAZV
wMAwCwMEBVY/4AMDBFZAAwQHV2QAAwMAV+cDBAVX/4ADAwNYiAMDAFjbAwMBWQID
AwJZnAMDAFmqAwQFWbmgAwMCW0QDAwBbWAMDAFtbAwQEW5dwAwMDXFgDAwVdAAME
Bl22wAMEA12/UAMEB1+IgAMEBl+dwAMEBV+oAAMEBV+rgAMEBV+uoAMEBV+voAMD
BW0AAwQDjarYAwQDnxQIAwQEshKwAwQEshMAAwQCuZPMAwQCuZZ4AwMAvAcDBAe8
jYADBAe84AADBAXCBoAwDAMEA8KZWAMEAMKZWgMEAMKZXAMEAMKZYQMEBcK3wAME
BMLysAMEBsMDAAMEBcMHYAMEBcNiYAMDAMNzAwMAw4QDBAXDksADBAXUF6ADBAXU
HmADBAXUJ4ADBAXUXqADAwDUxgMEBdWAIAMEBdWQwAMEBdWpoAMEBdWwwAMEBtXL
QAMEBtXeQAMDANXfAwMA1fUDBATZE8ADBATZRlADBATZcOAwIgQCAAIwHAMFACoA
XoADBQMqAGIAAwUAKgBxgAMFByoChAAwDQYJKoZIhvcNAQELBQADggEBAEZUcroL
cWGoYb6FvXO3wdrLF1x1nw1AkznWCp1ZgkVlae0qPQvYLgW/7RwTR3Qx8SFRY+RZ
wTbdp2RKLuLDK/MSmIVpr49ESzvDBKwtqvHk0ZAu7xxbcTz6ol/Ahd7tap3fjCNk
FYOcGRmff//3/C5Y2fhyQKqza1eqTwGk/PkT5B14OEAq0kMzI1Ag+tpIV9ns0wlV
2WpxPe+Y9f9mzV/xQZJg+Fk+RfmXbdBYCRwZFO+EVyCwCfTVr5pmzrAVfINY+0IH
t/bqrFV7N0BVesq65/qWHs8jhR/Ra/96pibgs3EK5rZ17h5Pe/HcOJhCYqeQgn3D
wmkujBY/I5iWtqo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:50 2024 by rpki-client on console-ams.rpki-client.org