Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/MthcZ0NKf776Y7kr0MsDj9y3k3c.roa
File: MthcZ0NKf776Y7kr0MsDj9y3k3c.roa (raw, json)
Hash identifier: sU1scYur+FwQXPIVsdLuBYSz4OByWSzpVfUJj1oqNvQ=
Subject key identifier: 32:D8:5C:67:43:4A:7F:BE:FA:63:B9:2B:D0:CB:03:8F:DC:B7:93:77
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 0184B41D02D0B03EB2BBEB26B5A79C7F3595
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/MthcZ0NKf776Y7kr0MsDj9y3k3c.roa
Signing time: Sat 26 Nov 2022 13:25:10 +0000
ROA not before: Sat 26 Nov 2022 13:25:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3326
IP address blocks: 185.46.248.0/22 maxlen: 22
195.114.131.0/24 maxlen: 24
194.146.198.0/24 maxlen: 24
194.146.197.0/24 maxlen: 24
194.146.196.0/24 maxlen: 24
176.241.130.0/23 maxlen: 23
176.241.128.0/23 maxlen: 23
176.241.132.0/22 maxlen: 22
176.241.136.0/21 maxlen: 21
176.241.144.0/20 maxlen: 20
176.241.104.0/21 maxlen: 21
176.112.0.0/19 maxlen: 19
188.247.96.0/20 maxlen: 20
188.247.112.0/22 maxlen: 22
188.247.116.0/22 maxlen: 22
217.112.208.0/20 maxlen: 20
91.193.68.0/22 maxlen: 22
178.213.168.0/21 maxlen: 21
109.206.32.0/19 maxlen: 19
80.91.166.0/24 maxlen: 24
80.91.160.0/22 maxlen: 22
80.91.164.0/23 maxlen: 23
85.159.0.0/21 maxlen: 21
80.91.172.0/22 maxlen: 22
80.91.168.0/24 maxlen: 24
80.91.167.0/24 maxlen: 24
80.91.171.0/24 maxlen: 24
80.91.170.0/24 maxlen: 24
80.91.169.0/24 maxlen: 24
80.91.176.0/22 maxlen: 22
80.91.180.0/23 maxlen: 23
80.91.184.0/21 maxlen: 21
80.91.183.0/24 maxlen: 24
213.111.192.0/18 maxlen: 18
46.164.128.0/20 maxlen: 20
46.164.144.0/21 maxlen: 21
46.164.152.0/23 maxlen: 23
46.164.158.0/24 maxlen: 24
46.164.159.0/24 maxlen: 24
46.164.154.0/23 maxlen: 23
46.164.156.0/23 maxlen: 23
94.232.72.0/21 maxlen: 21
80.77.38.0/24 maxlen: 24
80.77.37.0/24 maxlen: 24
80.77.36.0/24 maxlen: 24
80.77.32.0/22 maxlen: 22
80.77.39.0/24 maxlen: 24
80.77.40.0/21 maxlen: 21
93.183.200.0/21 maxlen: 21
93.183.208.0/22 maxlen: 22
93.183.212.0/23 maxlen: 23
93.183.218.0/23 maxlen: 23
93.183.215.0/24 maxlen: 24
93.183.214.0/24 maxlen: 24
93.183.217.0/24 maxlen: 24
93.183.216.0/24 maxlen: 24
93.183.220.0/22 maxlen: 22
93.183.225.0/24 maxlen: 24
93.183.224.0/24 maxlen: 24
93.183.226.0/24 maxlen: 24
93.183.232.0/22 maxlen: 22
93.183.230.0/23 maxlen: 23
93.183.228.0/24 maxlen: 24
93.183.227.0/24 maxlen: 24
93.183.229.0/24 maxlen: 24
93.183.239.0/24 maxlen: 24
93.183.237.0/24 maxlen: 24
93.183.240.0/21 maxlen: 21
93.183.248.0/21 maxlen: 21
93.183.192.0/24 maxlen: 24
193.109.164.0/22 maxlen: 24
93.183.193.0/24 maxlen: 24
93.183.197.0/24 maxlen: 24
93.183.196.0/24 maxlen: 24
93.183.194.0/23 maxlen: 23
93.183.198.0/23 maxlen: 23
195.69.176.0/23 maxlen: 23
195.69.177.0/24 maxlen: 24
195.69.176.0/24 maxlen: 24
195.69.179.0/24 maxlen: 24
195.69.178.0/24 maxlen: 24
91.197.222.0/24 maxlen: 24
91.197.221.0/24 maxlen: 24
91.197.220.0/24 maxlen: 24
91.197.223.0/24 maxlen: 24
91.204.92.0/23 maxlen: 23
91.204.95.0/24 maxlen: 24
91.204.94.0/24 maxlen: 24
194.29.60.0/22 maxlen: 22
5.1.16.0/20 maxlen: 20
88.81.232.0/22 maxlen: 22
176.102.32.0/21 maxlen: 21
88.81.237.0/24 maxlen: 24
88.81.236.0/24 maxlen: 24
88.81.238.0/23 maxlen: 23
88.81.240.0/22 maxlen: 22
176.102.40.0/21 maxlen: 21
88.81.246.0/24 maxlen: 24
88.81.244.0/22 maxlen: 22
88.81.248.0/24 maxlen: 24
88.81.251.0/24 maxlen: 24
176.102.48.0/23 maxlen: 23
88.81.249.0/24 maxlen: 24
88.81.252.0/23 maxlen: 23
176.102.50.0/24 maxlen: 24
176.102.51.0/24 maxlen: 24
176.102.52.0/22 maxlen: 22
176.102.56.0/21 maxlen: 21
88.81.254.0/23 maxlen: 23
77.88.202.0/24 maxlen: 24
77.88.201.0/24 maxlen: 24
77.88.206.0/24 maxlen: 24
77.88.208.0/23 maxlen: 23
77.88.207.0/24 maxlen: 24
77.88.212.0/24 maxlen: 24
77.88.211.0/24 maxlen: 24
77.88.210.0/24 maxlen: 24
5.1.0.0/23 maxlen: 23
5.1.4.0/22 maxlen: 22
5.1.8.0/21 maxlen: 21
88.81.224.0/21 maxlen: 21
77.88.216.0/22 maxlen: 22
77.88.214.0/23 maxlen: 23
77.88.221.0/24 maxlen: 24
77.88.220.0/24 maxlen: 24
77.88.248.0/24 maxlen: 24
77.88.253.0/24 maxlen: 24
77.88.252.0/24 maxlen: 24
77.88.254.0/24 maxlen: 24
185.8.41.0/24 maxlen: 24
185.8.40.0/24 maxlen: 24
77.88.255.0/24 maxlen: 24
185.8.40.0/22 maxlen: 22
77.222.137.0/24 maxlen: 24
77.222.139.0/24 maxlen: 24
77.222.138.0/24 maxlen: 24
77.222.140.0/22 maxlen: 22
77.222.144.0/21 maxlen: 21
188.0.64.0/22 maxlen: 22
188.0.64.0/23 maxlen: 23
188.0.66.0/24 maxlen: 24
31.128.68.0/22 maxlen: 22
77.222.152.0/22 maxlen: 22
31.128.72.0/22 maxlen: 22
77.222.158.0/23 maxlen: 23
31.128.76.0/23 maxlen: 23
77.222.156.0/23 maxlen: 23
31.128.78.0/23 maxlen: 23
31.128.80.0/20 maxlen: 20
193.108.51.0/24 maxlen: 24
193.108.49.0/24 maxlen: 24
193.108.48.0/24 maxlen: 24
195.114.139.0/24 maxlen: 24
195.114.142.0/24 maxlen: 24
195.114.141.0/24 maxlen: 24
195.114.143.0/24 maxlen: 24
195.114.144.0/20 maxlen: 22
77.222.128.0/21 maxlen: 21
193.108.129.0/24 maxlen: 24
193.108.128.0/24 maxlen: 24
193.41.48.0/22 maxlen: 22
80.249.224.0/20 maxlen: 20
2a01:758::/32 maxlen: 48
2a01:758:ffe0::/48 maxlen: 48
2a02:70:1::/48 maxlen: 48
2a02:70::/32 maxlen: 32
2a02:70:100::/40 maxlen: 40
2a01:758:fff3::/48 maxlen: 48
2a01:758:ffe8::/48 maxlen: 48
2a02:70::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b4:1d:02:d0:b0:3e:b2:bb:eb:26:b5:a7:9c:7f:35:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Nov 26 13:25:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32d85c67434a7fbefa63b92bd0cb038fdcb79377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:c6:19:65:e5:03:6f:47:8a:c9:67:e1:db:
c4:4f:01:10:b0:0c:e0:80:3d:c8:d2:d2:ee:22:d2:
07:9a:85:a5:dc:0e:c2:c6:50:65:eb:6d:91:46:98:
da:60:8a:65:2e:73:ff:78:55:dc:02:4d:69:2a:c4:
cf:4f:74:36:9e:91:86:22:a0:9a:32:39:cc:5c:b1:
46:cf:90:8b:15:b2:19:4e:05:fa:35:ec:b3:5c:ad:
48:d5:da:04:84:31:df:77:f8:b0:5e:46:1c:6e:1d:
72:ab:95:cb:25:e1:06:c7:2b:19:1d:2c:f1:69:09:
0b:75:0a:7f:69:a7:ef:5a:93:32:17:5e:06:fd:e4:
34:60:79:c3:bb:f4:57:fc:9b:23:26:be:1b:95:3c:
87:04:d3:e5:9a:67:4a:17:03:39:b8:35:74:e7:07:
7e:e4:a9:b4:b0:83:55:2e:3c:eb:2e:67:c3:4c:97:
bc:a6:b3:40:a4:7a:95:90:f6:37:1c:c2:db:33:f1:
54:12:f1:e7:26:31:94:18:64:75:c1:30:b3:45:28:
ae:ef:7a:21:26:c7:84:62:22:e6:18:b9:84:b2:f2:
26:a2:62:fc:17:c9:63:b1:5c:9e:6a:5f:8f:80:fa:
78:34:c8:24:08:ef:a0:a5:b7:e6:b0:12:a5:0f:f2:
e6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D8:5C:67:43:4A:7F:BE:FA:63:B9:2B:D0:CB:03:8F:DC:B7:93:77
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/MthcZ0NKf776Y7kr0MsDj9y3k3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.0.0/23
5.1.4.0-5.1.31.255
31.128.68.0-31.128.95.255
46.164.128.0/19
77.88.201.0-77.88.202.255
77.88.206.0-77.88.212.255
77.88.214.0-77.88.221.255
77.88.248.0/24
77.88.252.0/22
77.222.128.0/21
77.222.137.0-77.222.159.255
80.77.32.0/20
80.91.160.0-80.91.181.255
80.91.183.0-80.91.191.255
80.249.224.0/20
85.159.0.0/21
88.81.224.0-88.81.249.255
88.81.251.0-88.81.255.255
91.193.68.0/22
91.197.220.0/22
91.204.92.0/22
93.183.192.0-93.183.235.255
93.183.237.0/24
93.183.239.0-93.183.255.255
94.232.72.0/21
109.206.32.0/19
176.102.32.0/19
176.112.0.0/19
176.241.104.0/21
176.241.128.0/19
178.213.168.0/21
185.8.40.0/22
185.46.248.0/22
188.0.64.0/22
188.247.96.0-188.247.119.255
193.41.48.0/22
193.108.48.0/23
193.108.51.0/24
193.108.128.0/23
193.109.164.0/22
194.29.60.0/22
194.146.196.0-194.146.198.255
195.69.176.0/22
195.114.131.0/24
195.114.139.0/24
195.114.141.0-195.114.159.255
213.111.192.0/18
217.112.208.0/20
IPv6:
2a01:758::/32
2a02:70::/32
Signature Algorithm: sha256WithRSAEncryption
04:54:f3:3a:67:db:f6:61:82:b9:f7:31:94:2c:70:b0:d7:56:
9e:4f:38:aa:8a:82:2f:39:70:f3:48:7b:8d:fb:3e:b8:d1:0f:
6c:83:51:d8:7c:8d:8f:34:14:b8:b8:1d:ea:93:c0:12:60:2b:
fa:6a:56:7b:00:2c:d5:19:65:c6:d2:ad:c8:f4:9d:35:4f:bf:
fc:75:b9:e4:94:38:b2:ab:41:5f:74:f1:76:f7:13:95:a0:cc:
f7:00:d5:71:90:38:c9:40:98:9e:77:bf:14:ac:5c:4f:ba:7c:
b6:c3:74:80:6d:4f:b4:da:14:5a:94:28:5c:77:10:93:6b:5a:
6f:2e:16:9b:cc:6f:22:73:03:ec:20:10:24:7e:99:3f:6e:7f:
cd:ef:73:1b:50:f5:58:dc:0a:0d:b8:a0:13:b6:2b:b3:1e:84:
c4:43:99:ea:32:ad:9e:21:52:da:b1:25:5a:2f:9d:0c:7e:71:
d1:44:06:a1:77:62:f5:7b:f2:f2:27:52:58:3e:39:79:67:ff:
10:d1:45:ed:df:47:40:e3:04:a8:93:7d:ed:78:60:d7:4a:13:
5e:39:b2:be:38:24:fc:86:7a:21:b1:e9:f7:b7:6e:f0:8d:50:
54:4c:af:f5:a1:32:0e:2e:44:b0:0b:63:01:05:f6:be:47:bd:
ad:3c:99:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:04 2024 by rpki-client on console-ams.rpki-client.org