
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/SPehdzgA9OU6b2XSEZk-tf2TnEA.roa
File: SPehdzgA9OU6b2XSEZk-tf2TnEA.roa (raw, json)
Hash identifier: vM7IhhuyxfCLzNKy3BPhWjmRrLfAIHPPzcJZBzAH4L0=
Subject key identifier: 48:F7:A1:77:38:00:F4:E5:3A:6F:65:D2:11:99:3E:B5:FD:93:9C:40
Certificate issuer: /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial: 0184E7F470DD4AC474E91BC442241A8875E4
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/SPehdzgA9OU6b2XSEZk-tf2TnEA.roa
Signing time: Tue 06 Dec 2022 15:01:07 +0000
ROA not before: Tue 06 Dec 2022 15:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 37.19.195.0/24 maxlen: 24
37.19.198.0/23 maxlen: 23
37.19.196.0/23 maxlen: 23
45.134.142.0/24 maxlen: 24
45.134.140.0/24 maxlen: 24
37.19.201.0/24 maxlen: 24
37.19.205.0/24 maxlen: 24
37.19.200.0/24 maxlen: 24
37.19.211.0/24 maxlen: 24
37.19.209.0/24 maxlen: 24
37.19.210.0/24 maxlen: 24
37.19.212.0/23 maxlen: 23
37.19.217.0/24 maxlen: 24
37.19.221.0/24 maxlen: 24
37.19.223.0/24 maxlen: 24
37.19.220.0/24 maxlen: 24
156.146.37.0/24 maxlen: 24
156.146.39.0/24 maxlen: 24
156.146.41.0/24 maxlen: 24
156.146.45.0/24 maxlen: 24
156.146.51.0/24 maxlen: 24
156.146.47.0/24 maxlen: 24
156.146.46.0/23 maxlen: 23
156.146.46.0/24 maxlen: 24
156.146.50.0/24 maxlen: 24
156.146.48.0/24 maxlen: 24
156.146.57.0/24 maxlen: 24
156.146.55.0/24 maxlen: 24
156.146.54.0/24 maxlen: 24
156.146.63.0/24 maxlen: 24
156.146.60.0/24 maxlen: 24
156.146.62.0/24 maxlen: 24
84.17.36.0/24 maxlen: 24
138.199.7.0/24 maxlen: 24
138.199.10.0/23 maxlen: 23
138.199.6.0/24 maxlen: 24
138.199.13.0/24 maxlen: 24
84.17.43.0/24 maxlen: 24
138.199.16.0/24 maxlen: 24
84.17.48.0/24 maxlen: 24
84.17.48.0/23 maxlen: 23
138.199.21.0/24 maxlen: 24
138.199.19.0/24 maxlen: 24
138.199.18.0/23 maxlen: 23
84.17.51.0/24 maxlen: 24
84.17.49.0/24 maxlen: 24
138.199.18.0/24 maxlen: 24
84.17.52.0/24 maxlen: 24
138.199.31.0/24 maxlen: 24
138.199.28.0/23 maxlen: 23
138.199.30.0/24 maxlen: 24
138.199.35.0/24 maxlen: 24
138.199.33.0/24 maxlen: 24
138.199.34.0/23 maxlen: 23
138.199.38.0/24 maxlen: 24
138.199.34.0/24 maxlen: 24
138.199.39.0/24 maxlen: 24
138.199.43.0/24 maxlen: 24
138.199.42.0/24 maxlen: 24
138.199.49.0/24 maxlen: 24
138.199.47.0/24 maxlen: 24
138.199.46.0/23 maxlen: 23
138.199.50.0/24 maxlen: 24
138.199.48.0/24 maxlen: 24
138.199.55.0/24 maxlen: 24
138.199.52.0/24 maxlen: 24
138.199.58.0/24 maxlen: 24
138.199.56.0/24 maxlen: 24
138.199.54.0/24 maxlen: 24
138.199.63.0/24 maxlen: 24
138.199.61.0/24 maxlen: 24
138.199.59.0/24 maxlen: 24
138.199.62.0/24 maxlen: 24
138.199.60.0/23 maxlen: 23
138.199.60.0/24 maxlen: 24
169.150.248.0/24 maxlen: 24
169.150.254.0/24 maxlen: 24
169.150.198.0/24 maxlen: 24
169.150.196.0/24 maxlen: 24
169.150.199.0/24 maxlen: 24
169.150.197.0/24 maxlen: 24
169.150.205.0/24 maxlen: 24
169.150.203.0/24 maxlen: 24
169.150.201.0/24 maxlen: 24
169.150.204.0/24 maxlen: 24
169.150.209.0/24 maxlen: 24
169.150.210.0/23 maxlen: 23
169.150.212.0/24 maxlen: 24
169.150.208.0/24 maxlen: 24
169.150.218.0/24 maxlen: 24
169.150.226.0/23 maxlen: 23
169.150.233.0/24 maxlen: 24
169.150.231.0/24 maxlen: 24
169.150.232.0/24 maxlen: 24
143.244.52.0/22 maxlen: 22
143.244.54.0/23 maxlen: 23
143.244.52.0/23 maxlen: 23
45.136.154.0/24 maxlen: 24
45.136.155.0/24 maxlen: 24
212.102.37.0/24 maxlen: 24
212.102.35.0/24 maxlen: 24
212.102.39.0/24 maxlen: 24
212.102.51.0/24 maxlen: 24
212.102.49.0/24 maxlen: 24
212.102.47.0/24 maxlen: 24
212.102.57.0/24 maxlen: 24
212.102.53.0/24 maxlen: 24
185.156.44.0/24 maxlen: 24
185.156.46.0/24 maxlen: 24
143.244.34.0/24 maxlen: 24
143.244.41.0/24 maxlen: 24
143.244.44.0/24 maxlen: 24
143.244.47.0/24 maxlen: 24
143.244.46.0/24 maxlen: 24
45.134.212.0/24 maxlen: 24
45.134.213.0/24 maxlen: 24
45.134.214.0/24 maxlen: 24
2a02:6ea0:1c00::/40 maxlen: 40
2a02:6ea0:3000::/40 maxlen: 40
2a02:6ea0:1400::/40 maxlen: 40
2a02:6ea0:2500::/40 maxlen: 40
2a02:6ea0:2200::/40 maxlen: 40
2a02:6ea0:1100::/40 maxlen: 40
2a02:6ea0:3600::/40 maxlen: 40
2a02:6ea0:1200::/40 maxlen: 40
2a02:6ea0:2600::/40 maxlen: 40
2a02:6ea0:3700::/40 maxlen: 40
2a02:6ea0:1500::/40 maxlen: 40
2a02:6ea0:2900::/40 maxlen: 40
2a02:6ea0:1800::/40 maxlen: 40
2a02:6ea0:2c00::/40 maxlen: 40
2a02:6ea0:1b00::/40 maxlen: 40
2a02:6ea0:2d00::/40 maxlen: 40
2a02:6ea0:1900::/40 maxlen: 40
2a02:6ea0:1e00::/40 maxlen: 40
2a02:6ea0:2800::/40 maxlen: 40
2a02:6ea0:3200::/40 maxlen: 40
2a02:6ea0:1600::/40 maxlen: 40
2a02:6ea0:2700::/40 maxlen: 40
2a02:6ea0:3b00::/40 maxlen: 40
2a02:6ea0:3800::/40 maxlen: 40
2a02:6ea0:1300::/40 maxlen: 40
2a02:6ea0:1000::/40 maxlen: 40
2a02:6ea0:2100::/40 maxlen: 40
2a02:6ea0:2400::/40 maxlen: 40
2a02:6ea0:2a00::/40 maxlen: 40
2a02:6ea0:2000::/40 maxlen: 40
2a02:6ea0:2300::/40 maxlen: 40
2a02:6ea0:3100::/40 maxlen: 40
2a02:6ea0:1a00::/40 maxlen: 40
2a02:6ea0:2b00::/40 maxlen: 40
2a02:6ea0:1700::/40 maxlen: 40
2a02:6ea0:3f00::/40 maxlen: 40
2a02:6ea0:2e00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:f4:70:dd:4a:c4:74:e9:1b:c4:42:24:1a:88:75:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Validity
Not Before: Dec 6 15:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48f7a1773800f4e53a6f65d211993eb5fd939c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7c:27:cc:52:bf:54:28:7a:3d:e6:db:b1:d0:
74:38:f7:4c:6f:36:90:2a:47:45:d6:5c:77:e5:fa:
d5:41:f0:4c:40:bf:5c:a7:7c:ab:e0:fc:2b:a3:80:
06:b1:34:bc:9a:d3:0b:16:98:5b:45:4f:76:a3:dd:
8f:e0:e0:f6:59:fd:95:42:4d:76:3a:02:9d:11:1f:
dd:46:21:25:45:6d:46:68:e8:b0:86:e8:d1:4b:ba:
f7:53:5e:d0:a4:c9:10:69:ff:48:0a:b5:40:1d:00:
7d:a6:ac:a7:7f:40:a1:1a:68:d8:cb:b0:86:00:1b:
bf:b8:b6:2c:75:84:ba:33:3b:37:0c:59:3d:f4:8d:
96:53:4b:86:5a:c2:3e:da:ad:b5:72:38:71:e9:6e:
72:39:82:18:f2:03:8b:12:f9:19:22:d2:a4:a5:54:
6a:5d:12:76:66:c8:a4:ea:e2:58:4b:ec:27:31:c1:
48:6b:2d:f9:b5:da:f4:51:c4:45:10:d7:0d:a1:56:
62:7e:7c:0f:c8:a3:f3:20:c2:3d:d3:96:e0:ba:8a:
c2:93:20:a8:03:d1:ae:48:63:00:8f:33:88:94:29:
3c:85:8d:7e:cd:ee:1a:7e:94:48:d3:82:81:25:fe:
34:b8:64:ca:55:2e:44:01:96:8a:25:c1:e6:96:78:
a3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F7:A1:77:38:00:F4:E5:3A:6F:65:D2:11:99:3E:B5:FD:93:9C:40
X509v3 Authority Key Identifier:
keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/SPehdzgA9OU6b2XSEZk-tf2TnEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.195.0-37.19.201.255
37.19.205.0/24
37.19.209.0-37.19.213.255
37.19.217.0/24
37.19.220.0/23
37.19.223.0/24
45.134.140.0/24
45.134.142.0/24
45.134.212.0-45.134.214.255
45.136.154.0/23
84.17.36.0/24
84.17.43.0/24
84.17.48.0/23
84.17.51.0-84.17.52.255
138.199.6.0/23
138.199.10.0/23
138.199.13.0/24
138.199.16.0/24
138.199.18.0/23
138.199.21.0/24
138.199.28.0/22
138.199.33.0-138.199.35.255
138.199.38.0/23
138.199.42.0/23
138.199.46.0-138.199.50.255
138.199.52.0/24
138.199.54.0-138.199.56.255
138.199.58.0-138.199.63.255
143.244.34.0/24
143.244.41.0/24
143.244.44.0/24
143.244.46.0/23
143.244.52.0/22
156.146.37.0/24
156.146.39.0/24
156.146.41.0/24
156.146.45.0-156.146.48.255
156.146.50.0/23
156.146.54.0/23
156.146.57.0/24
156.146.60.0/24
156.146.62.0/23
169.150.196.0/22
169.150.201.0/24
169.150.203.0-169.150.205.255
169.150.208.0-169.150.212.255
169.150.218.0/24
169.150.226.0/23
169.150.231.0-169.150.233.255
169.150.248.0/24
169.150.254.0/24
185.156.44.0/24
185.156.46.0/24
212.102.35.0/24
212.102.37.0/24
212.102.39.0/24
212.102.47.0/24
212.102.49.0/24
212.102.51.0/24
212.102.53.0/24
212.102.57.0/24
IPv6:
2a02:6ea0:1000::-2a02:6ea0:1cff:ffff:ffff:ffff:ffff:ffff
2a02:6ea0:1e00::/40
2a02:6ea0:2000::-2a02:6ea0:2eff:ffff:ffff:ffff:ffff:ffff
2a02:6ea0:3000::-2a02:6ea0:32ff:ffff:ffff:ffff:ffff:ffff
2a02:6ea0:3600::-2a02:6ea0:38ff:ffff:ffff:ffff:ffff:ffff
2a02:6ea0:3b00::/40
2a02:6ea0:3f00::/40
Signature Algorithm: sha256WithRSAEncryption
65:9f:2b:24:a2:f0:90:a0:e9:d5:bf:d7:34:9f:b2:19:3b:ed:
e7:bf:fc:f1:c3:c1:97:0b:9a:7e:f9:4c:8b:67:71:fb:8e:48:
a1:36:a2:68:07:de:b0:12:ba:5f:ec:98:bc:32:58:a8:45:b9:
fd:77:15:12:48:bc:e1:11:5b:cd:e1:f8:d1:00:eb:43:71:f5:
e8:69:b3:fb:26:bd:14:49:2f:88:f5:91:bc:6d:4e:c5:63:3a:
72:ef:68:a8:a4:5b:92:94:ee:00:e7:fc:77:ea:f2:99:85:0c:
1f:32:6f:44:9d:c2:cf:25:ea:78:48:3c:af:05:1c:f0:6a:9f:
2b:04:49:53:ee:9f:2a:8a:98:9a:23:01:3b:5f:70:86:84:25:
b1:38:45:71:4d:1b:79:92:a7:b3:7a:6b:16:c6:08:8f:24:f3:
f4:44:dd:08:77:6d:e5:67:2b:d8:19:bf:49:12:69:bb:d8:f8:
b8:39:87:f6:cf:ce:2b:3a:60:13:8d:2d:0b:c6:02:a0:98:ce:
cc:10:62:68:64:52:0e:79:e7:7d:8a:c3:30:38:8c:42:24:ef:
30:6e:82:2c:a2:8c:07:5f:7e:2e:93:44:4e:47:04:51:ed:31:
37:05:3d:bb:96:57:e6:69:98:7d:f2:1d:d1:6a:91:ae:0b:d1:
b0:bc:67:6e
-----BEGIN CERTIFICATE-----
MIIHNzCCBh+gAwIBAgISAYTn9HDdSsR06RvEQiQaiHXkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MTkzY2QwY2ZiOTM5NTk4OTM1OGUwMzk2MzEyY2ZiYjFj
ODhmZmUwHhcNMjIxMjA2MTUwMTA3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGY3YTE3NzM4MDBmNGU1M2E2ZjY1ZDIxMTk5M2ViNWZkOTM5YzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XwnzFK/VCh6PebbsdB0OPdMbzaQ
KkdF1lx35frVQfBMQL9cp3yr4Pwro4AGsTS8mtMLFphbRU92o92P4OD2Wf2VQk12
OgKdER/dRiElRW1GaOiwhujRS7r3U17QpMkQaf9ICrVAHQB9pqynf0ChGmjYy7CG
ABu/uLYsdYS6Mzs3DFk99I2WU0uGWsI+2q21cjhx6W5yOYIY8gOLEvkZItKkpVRq
XRJ2Zsik6uJYS+wnMcFIay35tdr0UcRFENcNoVZifnwPyKPzIMI905bguorCkyCo
A9GuSGMAjzOIlCk8hY1+ze4afpRI04KBJf40uGTKVS5EAZaKJcHmlnijswIDAQAB
o4IEQzCCBD8wHQYDVR0OBBYEFEj3oXc4APTlOm9l0hGZPrX9k5xAMB8GA1UdIwQY
MBaAFBkZPNDPuTlZiTWOA5YxLPuxyI/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1JrODBNLTVPVm1KTlk0RGxqRXMtN0hJal80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wZDY4ZDQtYWRiMy00ZmY5LWI3OGEt
NGVmOWQwN2M0NDA1LzEvU1BlaGR6Z0E5T1U2YjJYU0Vaay10ZjJUbkVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8wZDY4ZDQtYWRiMy00ZmY5LWI3OGEtNGVmOWQwN2M0NDA1
LzEvR1JrODBNLTVPVm1KTlk0RGxqRXMtN0hJal80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICVwYIKwYBBQUHAQcBAf8EggJGMIICQjCCAdYEAgABMIIB
zjAMAwQAJRPDAwQBJRPIAwQAJRPNMAwDBAAlE9EDBAElE9QDBAAlE9kDBAElE9wD
BAAlE98DBAAthowDBAAtho4wDAMEAi2G1AMEAC2G1gMEAS2ImgMEAFQRJAMEAFQR
KwMEAVQRMDAMAwQAVBEzAwQAVBE0AwQBiscGAwQBiscKAwQAiscNAwQAiscQAwQB
iscSAwQAiscVAwQCisccMAwDBACKxyEDBAKKxyADBAGKxyYDBAGKxyowDAMEAYrH
LgMEAIrHMgMEAIrHNDAMAwQBisc2AwQAisc4MAwDBAGKxzoDBAaKxwADBACP9CID
BACP9CkDBACP9CwDBAGP9C4DBAKP9DQDBACckiUDBACckicDBACckikwDAMEAJyS
LQMEAJySMAMEAZySMgMEAZySNgMEAJySOQMEAJySPAMEAZySPgMEAqmWxAMEAKmW
yTAMAwQAqZbLAwQBqZbMMAwDBASpltADBACpltQDBACpltoDBAGpluIwDAMEAKmW
5wMEAamW6AMEAKmW+AMEAKmW/gMEALmcLAMEALmcLgMEANRmIwMEANRmJQMEANRm
JwMEANRmLwMEANRmMQMEANRmMwMEANRmNQMEANRmOTBmBAIAAjBgMBADBgQqAm6g
EAMGACoCbqAcAwYAKgJuoB4wEAMGBSoCbqAgAwYAKgJuoC4wEAMGBCoCbqAwAwYA
KgJuoDIwEAMGASoCbqA2AwYAKgJuoDgDBgAqAm6gOwMGACoCbqA/MA0GCSqGSIb3
DQEBCwUAA4IBAQBlnyskovCQoOnVv9c0n7IZO+3nv/zxw8GXC5p++UyLZ3H7jkih
NqJoB96wErpf7Ji8MlioRbn9dxUSSLzhEVvN4fjRAOtDcfXoabP7Jr0USS+I9ZG8
bU7FYzpy72iopFuSlO4A5/x36vKZhQwfMm9EncLPJep4SDyvBRzwap8rBElT7p8q
ipiaIwE7X3CGhCWxOEVxTRt5kqezemsWxgiPJPP0RN0Id23lZyvYGb9JEmm72Pi4
OYf2z84rOmATjS0LxgKgmM7MEGJoZFIOeed9isMwOIxCJO8wboIsoowHX34uk0RO
RwRR7TE3BT27llfmaZh98h3RapGuC9GwvGdu
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:07 2025 by rpki-client