Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9PdomZs4WFWNF5THe11LQnFXPXY.roa
File: 9PdomZs4WFWNF5THe11LQnFXPXY.roa (raw, json)
Hash identifier: uOuccNsPtVykqlUqT79uUgiljTP9MSxCv46xnf7UVBc=
Subject key identifier: F4:F7:68:99:9B:38:58:55:8D:17:94:C7:7B:5D:4B:42:71:57:3D:76
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01882E885136973961561BE16B6F98B39B00
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9PdomZs4WFWNF5THe11LQnFXPXY.roa
Signing time: Thu 18 May 2023 11:04:25 +0000
ROA not before: Thu 18 May 2023 11:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8717
IP address blocks: 82.147.154.0/24 maxlen: 24
89.215.0.0/16 maxlen: 16
89.215.8.0/22 maxlen: 22
62.221.128.0/19 maxlen: 19
62.221.128.0/24 maxlen: 24
82.147.128.0/19 maxlen: 19
95.140.208.0/20 maxlen: 20
213.222.32.0/19 maxlen: 19
213.222.59.0/24 maxlen: 24
84.242.128.0/18 maxlen: 18
89.215.40.0/22 maxlen: 22
5.53.128.0/17 maxlen: 17
89.215.48.0/22 maxlen: 22
176.12.0.0/18 maxlen: 18
92.247.168.0/24 maxlen: 24
87.227.128.0/17 maxlen: 17
217.18.240.0/20 maxlen: 20
92.247.0.0/16 maxlen: 16
92.247.29.0/24 maxlen: 24
217.10.240.0/20 maxlen: 20
89.253.128.0/18 maxlen: 18
89.186.200.0/21 maxlen: 21
213.240.192.0/18 maxlen: 18
217.79.32.0/20 maxlen: 20
92.247.67.0/24 maxlen: 24
213.226.0.0/18 maxlen: 18
213.226.9.0/24 maxlen: 24
213.226.6.0/24 maxlen: 24
213.226.5.0/24 maxlen: 24
85.118.64.0/19 maxlen: 19
212.91.160.0/19 maxlen: 19
212.91.172.0/24 maxlen: 24
212.91.186.0/24 maxlen: 24
212.91.181.0/24 maxlen: 24
212.91.184.0/24 maxlen: 24
212.91.185.0/24 maxlen: 24
212.91.187.0/24 maxlen: 24
213.226.31.0/24 maxlen: 24
213.226.35.0/24 maxlen: 24
213.226.48.0/24 maxlen: 24
213.226.47.0/24 maxlen: 24
80.253.48.0/20 maxlen: 20
195.24.32.0/19 maxlen: 19
85.91.128.0/19 maxlen: 19
78.83.146.0/24 maxlen: 24
78.83.151.0/24 maxlen: 24
78.83.149.0/24 maxlen: 24
78.83.150.0/24 maxlen: 24
84.252.0.0/18 maxlen: 18
78.83.147.0/24 maxlen: 24
78.83.148.0/24 maxlen: 24
83.97.24.0/21 maxlen: 21
78.83.160.0/24 maxlen: 24
212.50.0.0/19 maxlen: 19
212.50.7.0/24 maxlen: 24
77.70.0.0/17 maxlen: 17
151.251.237.0/24 maxlen: 24
78.83.143.0/24 maxlen: 24
78.83.144.0/24 maxlen: 24
78.83.145.0/24 maxlen: 24
87.97.128.0/17 maxlen: 17
78.90.206.0/24 maxlen: 24
95.111.0.0/17 maxlen: 17
212.104.96.0/19 maxlen: 19
87.97.160.0/22 maxlen: 22
78.83.210.0/24 maxlen: 24
213.191.160.0/19 maxlen: 19
78.83.226.0/23 maxlen: 23
78.83.225.0/24 maxlen: 24
217.9.224.0/20 maxlen: 20
130.204.0.0/16 maxlen: 16
85.130.0.0/17 maxlen: 17
88.203.204.0/24 maxlen: 24
151.251.0.0/16 maxlen: 16
195.149.248.0/21 maxlen: 21
88.203.237.0/24 maxlen: 24
212.36.0.0/19 maxlen: 19
212.36.6.0/24 maxlen: 24
82.103.103.0/24 maxlen: 24
82.103.110.0/23 maxlen: 23
85.130.95.0/24 maxlen: 24
82.103.109.0/24 maxlen: 24
85.130.96.0/23 maxlen: 23
37.63.0.0/17 maxlen: 17
62.204.128.0/19 maxlen: 19
62.204.128.0/24 maxlen: 24
62.204.130.0/24 maxlen: 24
82.103.120.0/24 maxlen: 24
78.90.0.0/16 maxlen: 16
82.103.126.0/24 maxlen: 24
82.103.127.0/24 maxlen: 24
85.130.120.0/23 maxlen: 23
89.190.192.0/19 maxlen: 19
78.83.0.0/16 maxlen: 16
82.103.64.0/18 maxlen: 18
46.238.0.0/18 maxlen: 18
46.238.14.0/24 maxlen: 24
82.103.91.0/24 maxlen: 24
85.196.128.0/18 maxlen: 18
77.236.160.0/19 maxlen: 19
77.236.178.0/23 maxlen: 23
88.203.147.0/24 maxlen: 24
212.95.161.0/24 maxlen: 24
212.95.160.0/19 maxlen: 19
88.203.128.0/17 maxlen: 17
88.203.128.0/24 maxlen: 24
88.203.129.0/24 maxlen: 24
88.203.128.0/23 maxlen: 23
89.215.214.0/24 maxlen: 24
84.242.176.0/24 maxlen: 24
195.34.96.0/19 maxlen: 19
213.169.32.0/19 maxlen: 19
195.34.101.0/24 maxlen: 24
195.34.122.0/24 maxlen: 24
2a01:288::/32 maxlen: 32
2a00:4800::/29 maxlen: 29
2a01:288:400b::/48 maxlen: 48
2a01:288:400c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2e:88:51:36:97:39:61:56:1b:e1:6b:6f:98:b3:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 18 11:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4f768999b3858558d1794c77b5d4b4271573d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:f1:79:cc:9b:cf:ad:6a:d6:26:aa:61:45:
ab:a0:40:c2:48:cb:48:dc:8c:83:48:94:ad:e1:23:
23:e9:d9:ea:c6:19:6c:91:03:ba:55:dd:40:b6:59:
73:e8:a3:e3:64:a7:1e:cd:c7:10:d5:55:c0:30:3c:
02:98:3c:a3:c2:c9:59:da:db:f3:87:c2:b0:5f:c2:
79:07:ac:9c:3e:02:5d:c4:9b:02:3b:16:d8:1b:6d:
c7:47:77:8f:99:d0:f3:68:91:96:16:a9:e8:b5:9b:
6c:4c:74:42:aa:19:9a:cd:e2:a0:49:1b:3a:dc:38:
55:4b:b1:04:ed:6b:c7:77:0c:da:86:fa:6c:3d:f1:
58:34:16:de:48:09:0e:fd:e2:b0:e7:6a:d6:d4:15:
d5:ff:1f:9e:78:35:19:c4:cf:21:ac:d2:af:b4:bd:
50:5b:da:ba:d9:40:49:41:42:7c:93:aa:9b:c4:38:
b5:30:57:6c:86:f8:69:68:cb:b3:f3:aa:29:c0:8e:
d0:e7:0e:8f:dc:0a:6c:bd:cb:96:99:a1:3d:56:4f:
cf:55:49:d0:3d:f3:fa:d5:a0:f2:ca:c8:97:b9:cc:
7d:f0:09:e5:dd:f5:76:39:9a:ac:c4:dc:72:69:86:
7a:74:62:da:19:1d:d6:1a:44:71:5d:ba:fd:5f:e5:
52:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F7:68:99:9B:38:58:55:8D:17:94:C7:7B:5D:4B:42:71:57:3D:76
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9PdomZs4WFWNF5THe11LQnFXPXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.128.0/17
37.63.0.0/17
46.238.0.0/18
62.204.128.0/19
62.221.128.0/19
77.70.0.0/17
77.236.160.0/19
78.83.0.0/16
78.90.0.0/16
80.253.48.0/20
82.103.64.0/18
82.147.128.0/19
83.97.24.0/21
84.242.128.0/18
84.252.0.0/18
85.91.128.0/19
85.118.64.0/19
85.130.0.0/17
85.196.128.0/18
87.97.128.0/17
87.227.128.0/17
88.203.128.0/17
89.186.200.0/21
89.190.192.0/19
89.215.0.0/16
89.253.128.0/18
92.247.0.0/16
95.111.0.0/17
95.140.208.0/20
130.204.0.0/16
151.251.0.0/16
176.12.0.0/18
195.24.32.0/19
195.34.96.0/19
195.149.248.0/21
212.36.0.0/19
212.50.0.0/19
212.91.160.0/19
212.95.160.0/19
212.104.96.0/19
213.169.32.0/19
213.191.160.0/19
213.222.32.0/19
213.226.0.0/18
213.240.192.0/18
217.9.224.0/20
217.10.240.0/20
217.18.240.0/20
217.79.32.0/20
IPv6:
2a00:4800::/29
2a01:288::/32
Signature Algorithm: sha256WithRSAEncryption
72:4f:e9:92:61:64:d4:57:cc:40:80:40:4e:0c:98:d0:57:1f:
fb:73:24:29:59:55:af:ae:e6:71:68:0a:2c:08:26:78:fc:55:
ed:88:5b:5f:7c:76:63:3a:00:88:09:e8:6a:66:90:75:51:2f:
d8:d7:07:0b:9d:3f:71:d3:b2:9c:3a:be:0d:1c:bb:5b:5f:1f:
58:ea:cf:0d:f5:28:3c:67:6f:f6:81:c0:86:a6:af:21:8a:1d:
e3:29:84:28:bf:a5:4d:b6:95:d3:68:d8:4c:ea:3c:c3:c7:72:
cd:79:60:35:5d:41:1d:e6:21:ec:12:db:fc:8a:4f:64:2c:c3:
b0:bd:20:92:d1:34:e4:4a:b6:80:40:26:0a:3d:41:78:a2:34:
c4:c6:2a:c5:2c:1f:eb:63:07:62:9a:f8:48:c3:3a:e0:ba:4b:
b9:c4:e3:b9:18:a4:1e:df:8f:a7:c5:b6:7a:92:6a:00:f2:ad:
eb:43:c7:74:5e:be:bd:56:d0:08:4b:00:63:ea:de:e0:a7:37:
a2:36:e5:dd:48:91:48:4b:3b:5c:40:e5:85:21:78:9a:b8:a5:
75:7d:b6:40:f8:7a:69:70:80:6d:ca:d0:e0:5c:3e:2d:7c:8a:
95:93:e0:88:be:f4:1c:56:02:6d:eb:bf:55:4b:06:bd:8f:ef:
99:9f:e4:12
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgISAYguiFE2lzlhVhvha2+Ys5sAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjMwNTE4MTEwNDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGY3Njg5OTliMzg1ODU1OGQxNzk0Yzc3YjVkNGI0MjcxNTczZDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA/xecybz61q1iaqYUWroEDCSMtI
3IyDSJSt4SMj6dnqxhlskQO6Vd1Atllz6KPjZKcezccQ1VXAMDwCmDyjwslZ2tvz
h8KwX8J5B6ycPgJdxJsCOxbYG23HR3ePmdDzaJGWFqnotZtsTHRCqhmazeKgSRs6
3DhVS7EE7WvHdwzahvpsPfFYNBbeSAkO/eKw52rW1BXV/x+eeDUZxM8hrNKvtL1Q
W9q62UBJQUJ8k6qbxDi1MFdshvhpaMuz86opwI7Q5w6P3ApsvcuWmaE9Vk/PVUnQ
PfP61aDyysiXucx98Anl3fV2OZqsxNxyaYZ6dGLaGR3WGkRxXbr9X+VSrQIDAQAB
o4IDQzCCAz8wHQYDVR0OBBYEFPT3aJmbOFhVjReUx3tdS0JxVz12MB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvOVBkb21aczRXRldORjVUSGUxMUxRbkZYUFhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBVwYIKwYBBQUHAQcBAf8EggFGMIIBQjCCASgEAgABMIIB
IAMEBwU1gAMEByU/AAMEBi7uAAMEBT7MgAMEBT7dgAMEB01GAAMEBU3soAMDAE5T
AwMATloDBARQ/TADBAZSZ0ADBAVSk4ADBANTYRgDBAZU8oADBAZU/AADBAVVW4AD
BAVVdkADBAdVggADBAZVxIADBAdXYYADBAdX44ADBAdYy4ADBANZusgDBAVZvsAD
AwBZ1wMEBln9gAMDAFz3AwQHX28AAwQEX4zQAwMAgswDAwCX+wMEBrAMAAMEBcMY
IAMEBcMiYAMEA8OV+AMEBdQkAAMEBdQyAAMEBdRboAMEBdRfoAMEBdRoYAMEBdWp
IAMEBdW/oAMEBdXeIAMEBtXiAAMEBtXwwAMEBNkJ4AMEBNkK8AMEBNkS8AMEBNlP
IDAUBAIAAjAOAwUDKgBIAAMFACoBAogwDQYJKoZIhvcNAQELBQADggEBAHJP6ZJh
ZNRXzECAQE4MmNBXH/tzJClZVa+u5nFoCiwIJnj8Ve2IW198dmM6AIgJ6GpmkHVR
L9jXBwudP3HTspw6vg0cu1tfH1jqzw31KDxnb/aBwIamryGKHeMphCi/pU22ldNo
2EzqPMPHcs15YDVdQR3mIewS2/yKT2Qsw7C9IJLRNORKtoBAJgo9QXiiNMTGKsUs
H+tjB2Ka+EjDOuC6S7nE47kYpB7fj6fFtnqSagDyretDx3Revr1W0AhLAGPq3uCn
N6I25d1IkUhLO1xA5YUheJq4pXV9tkD4emlwgG3K0OBcPi18ipWT4Ii+9BxWAm3r
v1VLBr2P75mf5BI=
-----END CERTIFICATE-----
Generated at Wed Apr 16 19:41:30 2025 by rpki-client