Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/I447CKv6jd5RLTkJ6D9qOtVXBx0.roa
File: I447CKv6jd5RLTkJ6D9qOtVXBx0.roa (raw, json)
Hash identifier: 1z3qx31/gWhNa9x86y4kSUpzWk6PuUEacYhIyjssd5I=
Subject key identifier: 23:8E:3B:08:AB:FA:8D:DE:51:2D:39:09:E8:3F:6A:3A:D5:57:07:1D
Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial: 040125
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/I447CKv6jd5RLTkJ6D9qOtVXBx0.roa
Signing time: Thu 14 Apr 2022 08:55:16 +0000
ROA not before: Thu 14 Apr 2022 08:55:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206564
IP address blocks: 95.174.137.0/24 maxlen: 24
95.174.138.0/24 maxlen: 24
95.174.139.0/24 maxlen: 24
95.174.133.0/24 maxlen: 24
95.174.134.0/24 maxlen: 24
95.174.135.0/24 maxlen: 24
95.174.136.0/24 maxlen: 24
95.174.144.0/24 maxlen: 24
95.174.145.0/24 maxlen: 24
95.174.140.0/24 maxlen: 24
95.174.141.0/24 maxlen: 24
95.174.142.0/24 maxlen: 24
95.174.143.0/24 maxlen: 24
95.174.151.0/24 maxlen: 24
95.174.152.0/24 maxlen: 24
95.174.147.0/24 maxlen: 24
95.174.148.0/24 maxlen: 24
95.174.149.0/24 maxlen: 24
95.174.150.0/24 maxlen: 24
95.174.146.0/24 maxlen: 24
95.174.158.0/24 maxlen: 24
95.174.159.0/24 maxlen: 24
95.174.154.0/24 maxlen: 24
95.174.155.0/24 maxlen: 24
95.174.156.0/24 maxlen: 24
95.174.157.0/24 maxlen: 24
95.174.153.0/24 maxlen: 24
95.174.130.0/24 maxlen: 24
95.174.131.0/24 maxlen: 24
95.174.132.0/24 maxlen: 24
95.174.128.0/24 maxlen: 24
95.174.129.0/24 maxlen: 24
217.10.79.0/24 maxlen: 24
217.10.64.0/24 maxlen: 24
217.10.69.0/24 maxlen: 24
217.10.70.0/24 maxlen: 24
217.10.71.0/24 maxlen: 24
217.10.66.0/24 maxlen: 24
217.10.67.0/24 maxlen: 24
217.10.68.0/24 maxlen: 24
217.10.65.0/24 maxlen: 24
217.10.74.0/24 maxlen: 24
217.10.77.0/24 maxlen: 24
217.10.76.0/24 maxlen: 24
217.10.78.0/24 maxlen: 24
217.10.73.0/24 maxlen: 24
217.10.75.0/24 maxlen: 24
217.10.72.0/24 maxlen: 24
82.116.110.0/24 maxlen: 24
82.116.111.0/24 maxlen: 24
217.116.112.0/24 maxlen: 24
82.116.112.0/24 maxlen: 24
82.116.106.0/24 maxlen: 24
82.116.107.0/24 maxlen: 24
82.116.108.0/24 maxlen: 24
82.116.109.0/24 maxlen: 24
82.116.118.0/24 maxlen: 24
82.116.117.0/24 maxlen: 24
82.116.116.0/24 maxlen: 24
217.116.117.0/24 maxlen: 24
217.116.116.0/24 maxlen: 24
217.116.118.0/24 maxlen: 24
217.116.113.0/24 maxlen: 24
82.116.113.0/24 maxlen: 24
217.116.114.0/24 maxlen: 24
217.116.115.0/24 maxlen: 24
82.116.114.0/24 maxlen: 24
82.116.115.0/24 maxlen: 24
82.116.124.0/24 maxlen: 24
217.116.124.0/24 maxlen: 24
82.116.125.0/24 maxlen: 24
82.116.123.0/24 maxlen: 24
217.116.125.0/24 maxlen: 24
217.116.123.0/24 maxlen: 24
217.116.120.0/24 maxlen: 24
217.116.119.0/24 maxlen: 24
82.116.120.0/24 maxlen: 24
217.116.121.0/24 maxlen: 24
217.116.122.0/24 maxlen: 24
82.116.121.0/24 maxlen: 24
82.116.122.0/24 maxlen: 24
82.116.119.0/24 maxlen: 24
217.116.127.0/24 maxlen: 24
82.116.127.0/24 maxlen: 24
217.116.126.0/24 maxlen: 24
82.116.126.0/24 maxlen: 24
82.116.96.0/24 maxlen: 24
82.116.97.0/24 maxlen: 24
82.116.98.0/24 maxlen: 24
82.116.99.0/24 maxlen: 24
82.116.100.0/24 maxlen: 24
82.116.101.0/24 maxlen: 24
82.116.102.0/24 maxlen: 24
82.116.103.0/24 maxlen: 24
82.116.104.0/24 maxlen: 24
82.116.105.0/24 maxlen: 24
212.9.36.0/24 maxlen: 24
212.9.37.0/24 maxlen: 24
212.9.38.0/24 maxlen: 24
212.9.33.0/24 maxlen: 24
212.9.34.0/24 maxlen: 24
212.9.35.0/24 maxlen: 24
212.9.32.0/24 maxlen: 24
212.9.43.0/24 maxlen: 24
212.9.44.0/24 maxlen: 24
212.9.40.0/24 maxlen: 24
212.9.41.0/24 maxlen: 24
212.9.42.0/24 maxlen: 24
212.9.39.0/24 maxlen: 24
212.9.50.0/24 maxlen: 24
212.9.51.0/24 maxlen: 24
212.9.47.0/24 maxlen: 24
212.9.48.0/24 maxlen: 24
212.9.49.0/24 maxlen: 24
212.9.45.0/24 maxlen: 24
212.9.46.0/24 maxlen: 24
212.9.57.0/24 maxlen: 24
212.9.58.0/24 maxlen: 24
212.9.54.0/24 maxlen: 24
212.9.55.0/24 maxlen: 24
212.9.56.0/24 maxlen: 24
212.9.52.0/24 maxlen: 24
212.9.53.0/24 maxlen: 24
212.9.61.0/24 maxlen: 24
212.9.62.0/24 maxlen: 24
212.9.63.0/24 maxlen: 24
212.9.59.0/24 maxlen: 24
212.9.60.0/24 maxlen: 24
2001:ab7:f001::/48 maxlen: 48
2001:ab7:3001::/48 maxlen: 48
2001:ab7:2001::/48 maxlen: 48
2001:ab7:1001::/48 maxlen: 48
2001:ab7:f004::/48 maxlen: 48
2001:ab7:f000::/48 maxlen: 48
2001:ab7:1000::/48 maxlen: 48
2001:ab7:2000::/48 maxlen: 48
2001:ab7:3000::/48 maxlen: 48
2001:ab7::/48 maxlen: 48
2001:ab7:f003::/48 maxlen: 48
2001:ab0::/48 maxlen: 48
2001:ab7:f002::/48 maxlen: 48
2001:ab7:3002::/48 maxlen: 48
2001:ab7:2002::/48 maxlen: 48
2001:ab7:1002::/48 maxlen: 48
2001:ab7:f005::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262437 (0x40125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Validity
Not Before: Apr 14 08:55:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=238e3b08abfa8dde512d3909e83f6a3ad557071d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:29:04:7c:d1:85:29:2f:21:72:a5:1c:66:83:
55:54:b7:56:d3:54:a8:05:26:0b:94:0f:67:6a:f3:
76:31:18:c8:82:bb:a2:ce:89:a6:6e:88:f9:26:0a:
57:d8:1e:24:28:db:b3:21:a6:2f:a8:b3:98:ab:64:
05:db:04:a3:a4:c2:87:3d:5a:4f:d4:56:2b:0a:be:
e1:72:7c:a7:36:4d:f1:11:91:15:f5:7e:f7:80:a2:
a3:f8:02:a9:62:3f:39:a8:ab:95:d6:d1:d7:6f:3b:
32:9c:1f:86:37:3c:32:3b:93:d7:39:d5:a3:b0:c4:
d5:41:9d:1e:64:90:a7:fc:27:ab:50:36:59:fc:27:
14:c6:a7:e6:c1:48:f0:e1:f2:92:16:c9:a4:1a:18:
df:58:4f:f6:4c:a2:42:81:24:0a:7d:bc:53:f3:aa:
25:42:c8:39:3b:9a:d6:7a:85:45:f4:db:40:c1:a1:
67:28:35:5c:38:5c:84:5e:72:97:e6:e9:57:e3:5e:
d2:cd:18:7c:25:af:7c:74:d1:71:e1:6f:ce:42:5a:
b6:c2:fe:ab:85:6e:f8:48:9c:39:0d:2b:75:30:05:
6a:10:84:cc:1c:a8:f9:37:f9:7f:03:6e:e1:68:1c:
92:93:d0:33:d9:02:62:58:1f:b3:8c:01:2f:e0:53:
44:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8E:3B:08:AB:FA:8D:DE:51:2D:39:09:E8:3F:6A:3A:D5:57:07:1D
X509v3 Authority Key Identifier:
keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/I447CKv6jd5RLTkJ6D9qOtVXBx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.116.96.0/19
95.174.128.0/19
212.9.32.0/19
217.10.64.0/20
217.116.112.0/20
IPv6:
2001:ab0::/48
2001:ab7::/48
2001:ab7:1000::-2001:ab7:1002:ffff:ffff:ffff:ffff:ffff
2001:ab7:2000::-2001:ab7:2002:ffff:ffff:ffff:ffff:ffff
2001:ab7:3000::-2001:ab7:3002:ffff:ffff:ffff:ffff:ffff
2001:ab7:f000::-2001:ab7:f005:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
27:8f:54:50:74:be:73:a6:24:92:0e:53:4f:d4:88:8d:11:ca:
5a:11:61:1e:41:c7:e4:63:02:f6:25:19:6f:20:ac:43:8d:b2:
d3:d2:24:6b:50:55:79:d8:6c:12:e5:ab:91:e9:87:24:79:2b:
d6:3d:b7:f6:20:0e:46:3b:e4:8f:15:db:0a:38:5a:5b:78:f6:
2d:64:26:bf:8a:89:5a:70:75:cb:dd:c0:a6:c1:e2:1f:f8:25:
ea:a8:7b:c1:e6:23:0e:2b:99:8d:cb:c0:12:14:ca:29:a0:36:
d2:fe:4a:8a:8a:a4:4c:4c:4b:f7:90:59:ad:79:45:f8:2a:64:
8d:24:43:28:68:92:f6:2a:82:c4:52:d3:28:9d:b6:c2:7c:72:
8d:f6:d8:8b:68:41:71:e5:6a:e6:33:fe:15:63:48:dd:2c:f7:
7c:c9:77:a4:d7:75:fd:94:b2:57:4a:1d:18:24:bd:37:79:ed:
f9:e1:0a:c9:e9:fc:0f:29:0f:65:c6:a7:7b:42:d5:ee:55:47:
4a:d0:2f:de:3d:81:ff:0e:8c:ee:4b:e6:24:fd:5d:df:b0:1e:
40:80:43:7f:62:9c:16:73:bb:8f:6c:5e:43:38:14:71:ee:d7:
80:05:f6:14:5f:ef:d9:81:ed:ac:d9:b5:16:12:0a:2b:7c:38:
90:8b:ef:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:28:42 2025 by rpki-client