Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/Yrf8kM90LRkyr5MPk83lHFgNLBE.roa
File: Yrf8kM90LRkyr5MPk83lHFgNLBE.roa (raw, json)
Hash identifier: XXDO2hrQtKXhIKU5N9bSpQJYb1INxRf17DC+BLFJsXk=
Subject key identifier: 62:B7:FC:90:CF:74:2D:19:32:AF:93:0F:93:CD:E5:1C:58:0D:2C:11
Certificate issuer: /CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Certificate serial: 06A10BB7
Authority key identifier: 7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/Yrf8kM90LRkyr5MPk83lHFgNLBE.roa
Signing time: Sat 01 Jan 2022 03:57:32 +0000
ROA not before: Sat 01 Jan 2022 03:57:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16135
IP address blocks: 178.241.248.0/24 maxlen: 24
178.241.249.0/24 maxlen: 24
31.140.192.0/18 maxlen: 24
31.141.80.0/20 maxlen: 24
31.141.32.0/20 maxlen: 24
31.141.48.0/20 maxlen: 24
31.141.64.0/20 maxlen: 24
31.140.0.0/17 maxlen: 24
31.140.0.0/14 maxlen: 24
188.58.240.0/20 maxlen: 24
188.59.0.0/17 maxlen: 24
31.140.128.0/18 maxlen: 24
188.59.192.0/20 maxlen: 24
188.59.128.0/18 maxlen: 24
178.247.0.0/18 maxlen: 24
188.58.128.0/18 maxlen: 24
178.246.192.0/18 maxlen: 24
188.58.64.0/18 maxlen: 24
188.58.192.0/19 maxlen: 24
188.58.224.0/20 maxlen: 24
178.247.128.0/18 maxlen: 24
178.247.64.0/18 maxlen: 24
188.57.128.0/17 maxlen: 24
178.246.64.0/19 maxlen: 24
188.57.64.0/18 maxlen: 24
178.246.0.0/18 maxlen: 24
188.58.0.0/18 maxlen: 24
178.246.96.0/19 maxlen: 24
178.246.128.0/18 maxlen: 24
188.56.192.0/19 maxlen: 24
213.43.64.0/18 maxlen: 24
188.56.192.0/18 maxlen: 24
213.43.0.0/18 maxlen: 24
178.245.32.0/19 maxlen: 24
178.245.64.0/19 maxlen: 24
178.245.192.0/19 maxlen: 24
213.43.160.0/20 maxlen: 24
213.43.176.0/21 maxlen: 24
213.43.184.0/21 maxlen: 24
213.43.192.0/20 maxlen: 24
178.245.224.0/19 maxlen: 24
188.56.224.0/20 maxlen: 24
178.245.128.0/19 maxlen: 24
188.56.240.0/20 maxlen: 24
188.57.0.0/18 maxlen: 24
178.245.160.0/19 maxlen: 24
178.244.128.0/18 maxlen: 24
178.244.64.0/18 maxlen: 24
178.245.0.0/19 maxlen: 24
188.56.0.0/19 maxlen: 24
188.56.0.0/14 maxlen: 24
188.56.32.0/19 maxlen: 24
178.244.192.0/18 maxlen: 24
86.108.216.0/22 maxlen: 24
86.108.220.0/22 maxlen: 24
86.108.232.0/21 maxlen: 24
178.243.160.0/21 maxlen: 24
178.243.160.0/19 maxlen: 24
178.243.168.0/21 maxlen: 24
178.243.176.0/21 maxlen: 24
178.243.184.0/21 maxlen: 24
86.108.184.0/21 maxlen: 24
86.108.192.0/20 maxlen: 24
178.243.128.0/19 maxlen: 24
86.108.212.0/22 maxlen: 24
31.142.129.0/24 maxlen: 24
31.142.128.0/24 maxlen: 24
86.108.208.0/21 maxlen: 24
178.244.0.0/18 maxlen: 24
5.27.48.0/20 maxlen: 24
5.27.0.0/19 maxlen: 24
77.67.128.0/19 maxlen: 19
77.67.128.0/17 maxlen: 24
5.27.32.0/20 maxlen: 24
86.108.128.0/17 maxlen: 24
178.243.0.0/17 maxlen: 24
5.27.128.0/17 maxlen: 24
188.59.255.0/24 maxlen: 24
178.242.0.0/16 maxlen: 24
188.59.212.0/24 maxlen: 24
188.59.211.0/24 maxlen: 24
188.59.209.0/24 maxlen: 24
188.59.208.0/24 maxlen: 24
188.59.210.0/24 maxlen: 24
188.59.215.0/24 maxlen: 24
188.59.217.0/24 maxlen: 24
188.59.216.0/24 maxlen: 24
178.241.192.0/19 maxlen: 24
188.59.225.0/24 maxlen: 24
188.59.222.0/24 maxlen: 24
188.59.224.0/24 maxlen: 24
188.59.223.0/24 maxlen: 24
188.59.221.0/24 maxlen: 24
188.59.220.0/24 maxlen: 24
188.59.229.0/24 maxlen: 24
188.59.231.0/24 maxlen: 24
188.59.230.0/24 maxlen: 24
188.59.228.0/24 maxlen: 24
188.59.227.0/24 maxlen: 24
188.59.239.0/24 maxlen: 24
188.59.246.0/24 maxlen: 24
188.59.250.0/24 maxlen: 24
188.59.252.0/24 maxlen: 24
188.59.249.0/24 maxlen: 24
188.59.248.0/24 maxlen: 24
188.59.253.0/24 maxlen: 24
5.25.128.0/18 maxlen: 24
176.227.96.0/19 maxlen: 24
5.25.96.0/19 maxlen: 24
178.241.0.0/19 maxlen: 24
178.241.128.0/19 maxlen: 24
5.25.240.0/20 maxlen: 24
5.26.0.0/16 maxlen: 24
178.241.64.0/18 maxlen: 24
5.25.192.0/20 maxlen: 24
5.25.208.0/20 maxlen: 24
5.25.224.0/20 maxlen: 24
178.240.0.0/13 maxlen: 24
178.240.64.0/18 maxlen: 24
5.24.192.0/18 maxlen: 24
178.240.0.0/18 maxlen: 24
5.24.128.0/18 maxlen: 24
5.25.32.0/19 maxlen: 24
176.227.64.0/19 maxlen: 24
178.240.192.0/18 maxlen: 24
5.25.64.0/19 maxlen: 24
176.227.0.0/18 maxlen: 24
178.240.128.0/18 maxlen: 24
5.11.128.0/17 maxlen: 24
5.25.0.0/19 maxlen: 24
176.239.96.0/19 maxlen: 24
176.239.128.0/19 maxlen: 24
176.91.0.0/16 maxlen: 17
176.239.64.0/19 maxlen: 24
213.43.246.0/24 maxlen: 24
213.43.243.0/24 maxlen: 24
213.43.245.0/24 maxlen: 24
213.43.241.0/24 maxlen: 24
213.43.247.0/24 maxlen: 24
213.43.249.0/24 maxlen: 24
5.24.64.0/19 maxlen: 24
176.239.224.0/20 maxlen: 24
176.239.224.0/21 maxlen: 24
176.239.232.0/21 maxlen: 24
176.239.240.0/20 maxlen: 24
176.239.240.0/21 maxlen: 24
5.24.96.0/19 maxlen: 24
176.239.248.0/21 maxlen: 24
5.24.0.0/19 maxlen: 24
176.239.160.0/19 maxlen: 24
5.24.0.0/14 maxlen: 24
5.24.32.0/19 maxlen: 24
176.239.192.0/19 maxlen: 24
176.90.80.0/21 maxlen: 24
176.90.88.0/21 maxlen: 24
176.90.96.0/19 maxlen: 24
176.90.128.0/17 maxlen: 24
176.90.32.0/20 maxlen: 24
176.90.48.0/20 maxlen: 24
176.90.64.0/20 maxlen: 24
176.239.0.0/19 maxlen: 24
176.239.32.0/19 maxlen: 24
176.237.176.0/21 maxlen: 24
176.237.184.0/21 maxlen: 24
176.237.192.0/18 maxlen: 24
176.237.128.0/18 maxlen: 24
176.237.128.0/21 maxlen: 24
176.237.136.0/21 maxlen: 24
176.237.144.0/21 maxlen: 24
176.237.152.0/21 maxlen: 24
176.237.160.0/21 maxlen: 24
176.237.168.0/21 maxlen: 24
176.238.32.0/20 maxlen: 24
176.238.48.0/20 maxlen: 24
176.90.0.0/19 maxlen: 24
176.90.0.0/17 maxlen: 24
176.238.64.0/18 maxlen: 24
176.238.0.0/19 maxlen: 24
31.142.136.0/21 maxlen: 24
31.142.144.0/20 maxlen: 24
141.196.112.0/21 maxlen: 24
141.196.120.0/21 maxlen: 24
86.108.233.0/24 maxlen: 24
86.108.240.0/24 maxlen: 24
141.196.128.0/18 maxlen: 24
141.196.128.0/21 maxlen: 24
141.196.136.0/21 maxlen: 24
86.108.244.0/24 maxlen: 24
86.108.246.0/24 maxlen: 24
86.108.241.0/24 maxlen: 24
86.108.243.0/24 maxlen: 24
31.142.160.0/19 maxlen: 24
141.196.144.0/21 maxlen: 24
86.108.248.0/24 maxlen: 24
86.108.247.0/24 maxlen: 24
141.196.152.0/21 maxlen: 24
86.108.255.0/24 maxlen: 24
86.108.254.0/24 maxlen: 24
176.237.0.0/19 maxlen: 24
86.108.160.0/24 maxlen: 24
86.108.165.0/24 maxlen: 24
141.196.64.0/21 maxlen: 24
141.196.64.0/18 maxlen: 24
86.108.183.0/24 maxlen: 24
141.196.72.0/21 maxlen: 24
141.196.80.0/21 maxlen: 24
141.196.88.0/21 maxlen: 24
141.196.96.0/21 maxlen: 24
31.142.132.0/22 maxlen: 24
31.142.128.0/17 maxlen: 24
141.196.104.0/21 maxlen: 24
31.142.130.0/23 maxlen: 24
176.237.96.0/19 maxlen: 24
176.237.96.0/20 maxlen: 24
176.237.112.0/20 maxlen: 24
141.196.160.0/21 maxlen: 24
31.142.192.0/18 maxlen: 24
141.196.168.0/21 maxlen: 24
141.196.176.0/21 maxlen: 24
176.237.32.0/20 maxlen: 24
176.237.32.0/19 maxlen: 24
141.196.184.0/21 maxlen: 24
141.196.192.0/19 maxlen: 24
176.237.48.0/20 maxlen: 24
176.237.64.0/19 maxlen: 24
176.89.0.0/16 maxlen: 24
141.196.0.0/18 maxlen: 24
141.196.0.0/16 maxlen: 24
86.108.140.0/24 maxlen: 24
86.108.152.0/24 maxlen: 24
31.142.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111217591 (0x6a10bb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Validity
Not Before: Jan 1 03:57:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62b7fc90cf742d1932af930f93cde51c580d2c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:3f:10:8a:5d:85:c9:57:32:80:00:43:d8:
d0:e8:e6:b6:fc:50:6c:6d:4a:b1:09:e5:cd:d6:6b:
d5:5e:57:ef:2f:f7:82:6d:f8:fa:61:60:3d:5f:e6:
2b:b2:8d:f7:97:3d:8a:e7:f4:ef:4b:17:82:53:b8:
df:d5:1a:97:e3:71:e1:0c:56:6e:bc:1d:a6:7e:52:
e7:8b:2f:e1:3e:79:84:51:f7:06:2c:2f:d8:a7:60:
90:1b:3e:f0:35:ce:1b:44:fb:b9:88:24:17:37:fe:
81:c2:d2:60:7f:f8:d4:b5:1e:a3:7f:8d:cb:e0:27:
e7:fb:07:ae:ed:86:46:19:c1:d0:96:d2:e0:7d:a0:
74:5e:9f:e1:8c:c2:02:78:99:d1:33:69:5e:c2:3a:
f8:2f:47:20:32:30:3b:27:76:2c:32:e5:51:37:f5:
8b:71:d0:7e:04:6c:28:5e:66:06:1e:b7:5a:64:17:
61:69:89:ad:a0:13:a4:1a:fc:b9:06:3e:39:78:b2:
8f:5b:84:26:43:d8:a7:2a:73:f0:49:a3:cd:b8:7f:
e4:3a:04:c4:60:e8:06:da:e2:08:cb:fa:59:21:03:
79:bf:3c:2c:68:26:d2:61:6d:84:39:e4:9a:1e:d4:
23:40:0d:89:c6:ce:cc:00:00:66:ed:3b:8c:99:df:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B7:FC:90:CF:74:2D:19:32:AF:93:0F:93:CD:E5:1C:58:0D:2C:11
X509v3 Authority Key Identifier:
keyid:7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/Yrf8kM90LRkyr5MPk83lHFgNLBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.128.0/17
5.24.0.0/14
31.140.0.0/14
77.67.128.0/17
86.108.128.0/17
141.196.0.0/16
176.89.0.0-176.91.255.255
176.227.0.0/17
176.237.0.0-176.238.127.255
176.239.0.0/16
178.240.0.0/13
188.56.0.0/14
213.43.0.0/17
213.43.160.0-213.43.207.255
213.43.241.0/24
213.43.243.0/24
213.43.245.0-213.43.247.255
213.43.249.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:d1:b5:4d:e7:ce:51:2f:43:80:f0:1f:b2:74:9b:0e:42:99:
09:fa:ce:b9:96:e7:15:e9:1b:60:12:e2:56:55:99:db:62:69:
f2:20:08:c1:02:37:29:3d:44:7e:83:bf:95:3d:70:c7:05:da:
1e:b7:de:b6:a3:c3:31:0d:6c:c2:1c:5a:65:dd:cc:6b:0a:8e:
d0:dd:de:78:d7:67:97:7b:6e:fd:3f:a1:07:4a:4d:ec:36:0b:
ce:78:b8:fd:8e:90:2c:43:8f:d0:e3:e6:47:30:7e:0f:1b:da:
89:77:be:5a:f7:83:98:29:86:6a:c7:48:5c:ed:92:23:16:8a:
8b:46:d0:af:22:69:3b:f7:71:b1:bb:3f:f5:a1:7a:5b:77:42:
25:64:89:3a:fc:c8:9c:cf:05:aa:8e:06:a6:fc:d7:bc:77:42:
86:c4:c8:93:6d:e3:aa:71:51:1c:5d:44:b8:8b:dd:1b:98:6f:
a3:5b:bb:b7:af:16:f7:d8:b1:c1:4e:25:27:2b:1d:cc:e1:2b:
9b:96:3f:a5:0f:87:4d:96:8c:8a:9b:8c:93:ff:97:cd:77:7e:
7c:6f:46:f3:5f:92:d9:00:6c:fd:31:89:af:fa:87:d0:97:55:
0a:a7:a4:ae:6f:a3:5a:38:c2:f9:01:75:98:2b:23:d7:93:f7:
1c:18:9b:a1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIEBqELtzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZWM2NWExZGNmODIyNWU3ZjEwYmUyMGRkZGUxZTIxNmU4MDBiNjdjMB4XDTIyMDEw
MTAzNTczMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjJiN2ZjOTBjZjc0
MmQxOTMyYWY5MzBmOTNjZGU1MWM1ODBkMmMxMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALHCPxCKXYXJVzKAAEPY0OjmtvxQbG1KsQnlzdZr1V5X7y/3
gm34+mFgPV/mK7KN95c9iuf070sXglO439Ual+Nx4QxWbrwdpn5S54sv4T55hFH3
Biwv2KdgkBs+8DXOG0T7uYgkFzf+gcLSYH/41LUeo3+Ny+An5/sHru2GRhnB0JbS
4H2gdF6f4YzCAniZ0TNpXsI6+C9HIDIwOyd2LDLlUTf1i3HQfgRsKF5mBh63WmQX
YWmJraATpBr8uQY+OXiyj1uEJkPYpypz8Emjzbh/5DoExGDoBtriCMv6WSEDeb88
LGgm0mFthDnkmh7UI0ANicbOzAAAZu07jJnfMT8CAwEAAaOCAoswggKHMB0GA1Ud
DgQWBBRit/yQz3QtGTKvkw+TzeUcWA0sETAfBgNVHSMEGDAWgBR+xlodz4Il5/EL
4g3d4eIW6AC2fDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZzWmFIYy1DSmVmeEMtSU4zZUhpRnVnQXRudy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWIvOGU3Nzg1LTk0NTEtNDZmYi1iMjQ0LTdkOWI4MjMwNTM3ZS8x
L1lyZjhrTTkwTFJreXI1TVBrODNsSEZnTkxCRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIv
OGU3Nzg1LTk0NTEtNDZmYi1iMjQ0LTdkOWI4MjMwNTM3ZS8xL2ZzWmFIYy1DSmVm
eEMtSU4zZUhpRnVnQXRudy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
oAYIKwYBBQUHAQcBAf8EgZAwgY0wgYoEAgABMIGDAwQHBQuAAwMCBRgDAwIfjAME
B01DgAMEB1ZsgAMDAI3EMAoDAwCwWQMDArBYAwQHsOMAMAsDAwCw7QMEB7DuAAMD
ALDvAwMDsvADAwK8OAMEB9UrADAMAwQF1SugAwQE1SvAAwQA1SvxAwQA1SvzMAwD
BADVK/UDBAPVK/ADBADVK/kwDQYJKoZIhvcNAQELBQADggEBAB/RtU3nzlEvQ4Dw
H7J0mw5CmQn6zrmW5xXpG2AS4lZVmdtiafIgCMECNyk9RH6Dv5U9cMcF2h633raj
wzENbMIcWmXdzGsKjtDd3njXZ5d7bv0/oQdKTew2C854uP2OkCxDj9Dj5kcwfg8b
2ol3vlr3g5gphmrHSFztkiMWiotG0K8iaTv3cbG7P/Whelt3QiVkiTr8yJzPBaqO
Bqb817x3QobEyJNt46pxURxdRLiL3RuYb6Nbu7evFvfYscFOJScrHczhK5uWP6UP
h02WjIqbjJP/l813fnxvRvNfktkAbP0xia/6h9CXVQqnpK5vo1o4wvkBdZgrI9eT
9xwYm6E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-fra.rpki-client.org