Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/T0MF5vicb08Teq7C6w4p8ETOvek.roa
File: T0MF5vicb08Teq7C6w4p8ETOvek.roa (raw, json)
Hash identifier: evJ944VkQoqZI+r2zqzTtAMEky0Zk5nQ+Fjn4KxBElo=
Subject key identifier: 4F:43:05:E6:F8:9C:6F:4F:13:7A:AE:C2:EB:0E:29:F0:44:CE:BD:E9
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 01827CA98EF11F618D6A2C1D6103F51263A8
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/T0MF5vicb08Teq7C6w4p8ETOvek.roa
Signing time: Mon 08 Aug 2022 08:54:23 +0000
ROA not before: Mon 08 Aug 2022 08:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9021
IP address blocks: 213.161.128.0/19 maxlen: 19
213.161.128.0/21 maxlen: 21
213.161.136.0/21 maxlen: 21
213.161.135.0/24 maxlen: 24
213.161.145.0/24 maxlen: 24
213.161.144.0/23 maxlen: 23
213.161.144.0/24 maxlen: 24
213.161.146.0/24 maxlen: 24
213.161.150.0/24 maxlen: 24
213.161.148.0/23 maxlen: 23
213.161.149.0/24 maxlen: 24
213.161.148.0/24 maxlen: 24
213.161.152.0/24 maxlen: 24
213.161.151.0/24 maxlen: 24
213.161.152.0/21 maxlen: 21
90.159.128.0/20 maxlen: 20
90.159.136.0/21 maxlen: 21
90.159.136.0/24 maxlen: 24
90.159.44.0/22 maxlen: 22
90.159.50.0/24 maxlen: 24
90.159.51.0/24 maxlen: 24
90.159.58.0/24 maxlen: 24
90.159.59.0/24 maxlen: 24
90.159.68.0/24 maxlen: 24
90.159.64.0/18 maxlen: 18
90.159.240.0/20 maxlen: 20
90.159.246.0/24 maxlen: 24
90.158.136.0/21 maxlen: 21
90.158.139.0/24 maxlen: 24
212.98.0.0/19 maxlen: 19
212.98.2.0/24 maxlen: 24
212.98.1.0/24 maxlen: 24
90.158.161.0/24 maxlen: 24
212.98.0.0/20 maxlen: 20
90.158.160.0/24 maxlen: 24
212.98.8.0/21 maxlen: 21
212.98.9.0/24 maxlen: 24
212.98.16.0/24 maxlen: 24
212.98.16.0/21 maxlen: 21
90.158.96.0/22 maxlen: 22
90.158.101.0/24 maxlen: 24
90.158.100.0/24 maxlen: 24
90.158.105.0/24 maxlen: 24
90.158.104.0/24 maxlen: 24
90.158.102.0/23 maxlen: 23
90.158.111.0/24 maxlen: 24
90.158.110.0/24 maxlen: 24
90.158.109.0/24 maxlen: 24
90.158.114.0/24 maxlen: 24
90.158.112.0/20 maxlen: 20
90.158.116.0/24 maxlen: 24
90.158.119.0/24 maxlen: 24
90.158.122.0/24 maxlen: 24
90.158.121.0/24 maxlen: 24
90.158.120.0/24 maxlen: 24
90.158.123.0/24 maxlen: 24
90.158.126.0/24 maxlen: 24
90.158.128.0/21 maxlen: 21
90.158.127.0/24 maxlen: 24
90.158.128.0/17 maxlen: 17
90.158.240.0/21 maxlen: 21
90.158.248.0/21 maxlen: 21
90.158.249.0/24 maxlen: 24
90.159.2.0/24 maxlen: 24
90.159.1.0/24 maxlen: 24
90.159.0.0/24 maxlen: 24
90.159.0.0/22 maxlen: 22
90.159.3.0/24 maxlen: 24
90.159.0.0/16 maxlen: 16
90.159.10.0/24 maxlen: 24
90.159.15.0/24 maxlen: 24
90.159.20.0/24 maxlen: 24
90.159.26.0/24 maxlen: 24
90.159.29.0/24 maxlen: 24
90.159.27.0/24 maxlen: 24
90.159.31.0/24 maxlen: 24
90.159.33.0/24 maxlen: 24
90.159.36.0/24 maxlen: 24
90.159.34.0/24 maxlen: 24
90.159.38.0/24 maxlen: 24
90.159.37.0/24 maxlen: 24
212.98.28.0/22 maxlen: 22
90.158.200.0/23 maxlen: 23
213.143.255.0/24 maxlen: 24
213.143.254.0/24 maxlen: 24
90.158.28.0/24 maxlen: 24
90.158.27.0/24 maxlen: 24
90.158.26.0/24 maxlen: 24
90.158.31.0/24 maxlen: 24
90.158.30.0/24 maxlen: 24
90.158.29.0/24 maxlen: 24
90.158.32.0/24 maxlen: 24
90.158.33.0/24 maxlen: 24
90.158.37.0/24 maxlen: 24
90.158.36.0/24 maxlen: 24
90.158.39.0/24 maxlen: 24
90.158.41.0/24 maxlen: 24
90.158.44.0/24 maxlen: 24
90.158.43.0/24 maxlen: 24
90.158.50.0/23 maxlen: 23
90.158.51.0/24 maxlen: 24
90.158.46.0/24 maxlen: 24
90.158.45.0/24 maxlen: 24
90.158.48.0/20 maxlen: 20
90.158.48.0/24 maxlen: 24
90.158.47.0/24 maxlen: 24
90.158.52.0/23 maxlen: 23
90.158.53.0/24 maxlen: 24
90.158.52.0/24 maxlen: 24
90.158.56.0/24 maxlen: 24
90.158.55.0/24 maxlen: 24
90.158.54.0/23 maxlen: 23
90.158.60.0/24 maxlen: 24
90.158.62.0/24 maxlen: 24
90.158.64.0/21 maxlen: 21
90.158.64.0/24 maxlen: 24
90.158.66.0/24 maxlen: 24
90.158.65.0/24 maxlen: 24
90.158.68.0/24 maxlen: 24
90.158.67.0/24 maxlen: 24
90.158.73.0/24 maxlen: 24
90.158.72.0/24 maxlen: 24
90.158.72.0/22 maxlen: 22
90.158.75.0/24 maxlen: 24
90.158.74.0/24 maxlen: 24
90.158.0.0/23 maxlen: 23
90.158.0.0/22 maxlen: 22
90.158.0.0/18 maxlen: 18
90.158.3.0/24 maxlen: 24
90.158.0.0/16 maxlen: 16
90.158.8.0/24 maxlen: 24
90.158.16.0/24 maxlen: 24
90.158.15.0/24 maxlen: 24
90.158.18.0/24 maxlen: 24
90.158.19.0/24 maxlen: 24
90.158.24.0/24 maxlen: 24
213.143.224.0/20 maxlen: 20
213.143.226.0/24 maxlen: 24
213.143.226.0/23 maxlen: 23
213.143.228.0/24 maxlen: 24
213.143.227.0/24 maxlen: 24
213.143.230.0/24 maxlen: 24
213.143.229.0/24 maxlen: 24
213.143.233.0/24 maxlen: 24
213.143.235.0/24 maxlen: 24
213.143.234.0/24 maxlen: 24
213.143.238.0/24 maxlen: 24
213.143.236.0/22 maxlen: 22
213.143.240.0/24 maxlen: 24
213.143.240.0/22 maxlen: 22
213.143.239.0/24 maxlen: 24
213.143.240.0/20 maxlen: 20
213.143.241.0/24 maxlen: 24
213.143.244.0/22 maxlen: 22
213.143.243.0/24 maxlen: 24
213.143.252.0/24 maxlen: 24
213.143.251.0/24 maxlen: 24
213.143.250.0/24 maxlen: 24
213.143.253.0/24 maxlen: 24
2a00:1f90::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7c:a9:8e:f1:1f:61:8d:6a:2c:1d:61:03:f5:12:63:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Aug 8 08:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f4305e6f89c6f4f137aaec2eb0e29f044cebde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:29:9f:f3:4b:f8:b9:a3:71:46:df:ce:82:
d2:08:ff:e8:23:44:7f:fa:46:bd:14:8c:d0:a5:fa:
c0:fd:b2:91:b8:4c:4e:e9:fe:98:75:87:ce:e7:fa:
aa:28:9c:b2:99:7d:7d:03:e6:38:fa:9c:5e:89:69:
82:29:e8:c0:5a:3a:67:4c:ff:cb:c9:29:e6:11:29:
a1:ec:1b:79:11:5e:9e:38:0f:b5:25:f5:ae:92:3e:
ff:95:79:ea:d0:5f:ca:3d:73:5e:4c:d3:1b:59:eb:
df:19:e7:35:aa:ed:b3:5f:0b:90:b8:d1:7b:39:82:
c7:09:46:b0:9c:cd:8a:e2:58:e6:83:f3:22:f3:0c:
91:df:23:57:5d:d6:8b:58:5b:94:21:96:86:24:65:
66:91:7b:c7:bf:ea:da:96:9b:72:fd:33:d1:29:f2:
cd:8d:3a:e6:fe:3c:c2:70:66:71:02:36:72:96:1e:
76:df:fc:c7:d7:8e:b9:cd:cb:35:b4:3a:25:56:58:
73:9e:2a:b7:47:84:ba:c1:cc:c5:12:28:cd:0a:19:
95:ae:de:51:86:c0:9a:5c:fc:28:c6:d9:43:3a:c5:
65:99:ed:0c:0c:8f:1f:aa:38:fa:2e:b4:ca:50:78:
d1:1b:ba:d1:60:1d:fd:6f:e3:1f:4e:20:96:92:98:
25:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:43:05:E6:F8:9C:6F:4F:13:7A:AE:C2:EB:0E:29:F0:44:CE:BD:E9
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/T0MF5vicb08Teq7C6w4p8ETOvek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.158.0.0/15
212.98.0.0/19
213.143.224.0/19
213.161.128.0/19
IPv6:
2a00:1f90::/32
Signature Algorithm: sha256WithRSAEncryption
79:b2:76:f8:71:12:01:8e:a2:07:55:2e:d2:f0:47:22:74:05:
e0:f6:4a:3f:e1:12:1c:92:6f:c0:1f:64:03:08:28:6a:8e:8e:
44:b9:b1:8e:f3:1a:4c:45:c9:eb:16:6d:3f:23:60:b9:d3:d6:
13:bf:85:e3:30:81:be:04:c8:e3:9c:8d:ae:7c:c8:8a:2e:89:
ba:f9:d8:43:3d:45:38:5b:3e:c0:b2:af:8e:20:fd:34:62:f6:
6a:de:46:cc:08:4d:33:7e:86:0b:8e:da:4a:53:5e:ae:b8:cc:
6a:e9:f8:ab:93:21:78:c2:7b:0c:be:ad:6e:63:4c:2e:d2:36:
e2:cc:49:2a:1d:e7:76:82:c2:5c:68:98:48:5e:29:d8:cd:a2:
7d:33:61:cd:08:a4:c3:f4:e1:04:4a:79:ed:03:99:95:b8:73:
09:39:bd:4d:3b:f8:97:31:5e:e9:17:8e:91:a5:4a:dc:2f:0c:
d9:c5:db:04:3a:d3:be:7f:fa:3f:4f:27:16:07:3e:fb:f9:a8:
02:62:51:0d:90:4c:87:ca:a0:66:ab:d6:0d:8b:3d:18:66:d1:
24:dc:7b:03:40:79:e4:58:55:9c:7c:db:55:5a:f3:a5:13:fc:
47:83:18:50:d7:6b:4c:51:7e:17:22:f2:d3:bf:7d:0a:45:dc:
4b:89:30:4d
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYJ8qY7xH2GNaiwdYQP1EmOoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx
ZjlkZDMwHhcNMjIwODA4MDg1NDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjQzMDVlNmY4OWM2ZjRmMTM3YWFlYzJlYjBlMjlmMDQ0Y2ViZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7Epn/NL+LmjcUbfzoLSCP/oI0R/
+ka9FIzQpfrA/bKRuExO6f6YdYfO5/qqKJyymX19A+Y4+pxeiWmCKejAWjpnTP/L
ySnmESmh7Bt5EV6eOA+1JfWukj7/lXnq0F/KPXNeTNMbWevfGec1qu2zXwuQuNF7
OYLHCUawnM2K4ljmg/Mi8wyR3yNXXdaLWFuUIZaGJGVmkXvHv+ralpty/TPRKfLN
jTrm/jzCcGZxAjZylh523/zH1465zcs1tDolVlhzniq3R4S6wczFEijNChmVrt5R
hsCaXPwoxtlDOsVlme0MDI8fqjj6LrTKUHjRG7rRYB39b+MfTiCWkpgl4wIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFE9DBeb4nG9PE3quwusOKfBEzr3pMB8GA1UdIwQY
MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt
MzJhYTY3MzFjMjkxLzEvVDBNRjV2aWNiMDhUZXE3QzZ3NHA4RVRPdmVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx
LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwMBWp4DBAXU
YgADBAXVj+ADBAXVoYAwDQQCAAIwBwMFACoAH5AwDQYJKoZIhvcNAQELBQADggEB
AHmydvhxEgGOogdVLtLwRyJ0BeD2Sj/hEhySb8AfZAMIKGqOjkS5sY7zGkxFyesW
bT8jYLnT1hO/heMwgb4EyOOcja58yIouibr52EM9RThbPsCyr44g/TRi9mreRswI
TTN+hguO2kpTXq64zGrp+KuTIXjCewy+rW5jTC7SNuLMSSod53aCwlxomEheKdjN
on0zYc0IpMP04QRKee0DmZW4cwk5vU07+JcxXukXjpGlStwvDNnF2wQ6075/+j9P
JxYHPvv5qAJiUQ2QTIfKoGar1g2LPRhm0STcewNAeeRYVZx821Va86UT/EeDGFDX
a0xRfhci8tO/fQpF3EuJME0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:16 2024 by rpki-client on console-ams.rpki-client.org