Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/BBucxnPEBhILP_8lAolGYwdcH_4.roa
File: BBucxnPEBhILP_8lAolGYwdcH_4.roa (raw, json)
Hash identifier: lilZZpWQn2tYWcEY57N0TBA0H+itq/SXya7FtNEC6P0=
Subject key identifier: 04:1B:9C:C6:73:C4:06:12:0B:3F:FF:25:02:89:46:63:07:5C:1F:FE
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01834A1B06EEDD1FA7B93595E5577A1B7F9C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/BBucxnPEBhILP_8lAolGYwdcH_4.roa
Signing time: Sat 17 Sep 2022 06:20:28 +0000
ROA not before: Sat 17 Sep 2022 06:20:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3233
IP address blocks: 85.120.170.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
81.181.86.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
81.181.100.0/24 maxlen: 24
85.120.155.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
85.121.38.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
81.181.213.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
85.121.60.0/22 maxlen: 22
81.181.152.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
85.121.6.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.96.0/22 maxlen: 22
194.153.238.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
81.180.239.0/24 maxlen: 24
194.153.247.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
85.120.43.0/24 maxlen: 24
85.120.42.0/24 maxlen: 24
80.97.176.0/23 maxlen: 23
193.226.84.0/24 maxlen: 24
193.226.81.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
80.96.238.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
80.96.17.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
193.231.111.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
80.96.190.0/24 maxlen: 24
193.231.119.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
217.156.11.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.114.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
217.156.106.0/24 maxlen: 24
193.230.134.0/23 maxlen: 23
217.156.108.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.141.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
194.102.163.0/24 maxlen: 24
194.102.176.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
193.230.184.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
194.102.183.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
194.102.106.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
217.156.101.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
192.162.16.0/24 maxlen: 24
81.181.244.0/24 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.252.0/22 maxlen: 22
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:4a:1b:06:ee:dd:1f:a7:b9:35:95:e5:57:7a:1b:7f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 17 06:20:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=041b9cc673c406120b3fff2502894663075c1ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:67:81:35:54:25:c8:0f:8f:b3:37:ab:87:
1b:f3:ee:0a:c9:3b:f4:45:f4:06:9f:27:3b:b8:1f:
cb:25:2a:59:26:8d:e6:a3:1b:c2:07:0c:ff:13:c2:
81:67:b1:a3:f6:50:62:12:97:ac:15:15:6e:89:a9:
43:09:09:c3:61:7d:2e:6d:e5:82:ad:f7:10:13:1f:
04:0e:86:ae:ae:08:4e:b7:e1:7a:aa:59:8a:47:ee:
e3:62:51:ac:d9:0e:b4:af:fc:e5:d7:bd:c0:2a:1a:
a7:92:45:15:1a:5a:53:85:60:cd:d3:da:18:0c:d6:
f5:a1:ed:a5:7a:a6:1b:ab:dd:a6:b7:98:68:3d:b6:
21:e5:22:a3:4c:0c:7e:f1:52:0f:bf:17:d1:42:c8:
48:9e:3c:92:87:df:d7:20:9f:ad:e4:1c:18:16:40:
50:8d:6a:db:d6:a5:59:c3:83:11:2c:5c:4a:0b:d3:
70:c2:e3:38:26:68:4e:05:b1:9c:23:f5:b5:ff:eb:
8e:6f:6a:16:c1:36:47:a5:d8:c7:d8:63:12:ab:4f:
68:6e:cc:d3:c8:aa:6e:ba:5d:af:66:48:d9:79:af:
29:d2:cc:49:64:7d:07:f1:20:33:88:d1:2c:5f:55:
20:77:b4:ae:4a:01:b2:a9:00:93:c0:76:e4:2f:c6:
75:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1B:9C:C6:73:C4:06:12:0B:3F:FF:25:02:89:46:63:07:5C:1F:FE
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/BBucxnPEBhILP_8lAolGYwdcH_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.238.0/24
80.96.255.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.96.0/22
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.86.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.244.0/24
85.120.42.0/23
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.156.0/22
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.83.0/24
85.122.106.0/24
85.122.114.0/24
85.122.182.0/23
192.162.16.0/24
193.226.35.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.208.0/24
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.111.0-193.231.112.255
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.102.65.0/24
194.102.106.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.176.0/23
194.102.183.0/24
194.102.247.0/24
194.105.6.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.153.247.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.11.0/24
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.66.0/23
217.156.71.0/24
217.156.77.0/24
217.156.93.0/24
217.156.101.0/24
217.156.106.0/24
217.156.108.0/24
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
41:6b:09:f0:47:ff:b9:f0:9d:d2:a5:59:a9:1c:79:14:b8:9c:
10:78:27:c1:01:c9:d0:64:9d:ae:3a:c8:0e:49:11:59:b1:94:
f1:66:c1:40:80:42:75:41:92:30:36:36:46:3d:90:72:74:0d:
8f:b4:33:7a:bb:8d:20:bf:6c:46:44:2b:d2:a5:4e:00:97:c2:
9b:07:f3:64:a4:df:bb:f7:92:41:d2:fc:f4:a2:53:0f:43:e2:
56:1e:13:83:1f:14:04:00:b9:7c:eb:f6:24:04:fd:06:a8:41:
fb:c6:6f:98:54:2d:10:fb:a9:b9:5e:98:24:5f:a3:c7:23:38:
4d:1a:08:f9:49:3e:d0:66:72:ee:81:03:0e:46:bb:1c:f0:91:
33:f3:62:a0:87:32:51:1a:22:14:8a:4d:c6:10:8c:ac:99:bb:
1d:d9:e5:da:26:3f:5e:19:b9:03:78:b7:22:f4:bd:9f:05:48:
96:dd:bc:e0:55:c6:4a:3e:0a:db:52:4f:d8:9e:41:b6:50:27:
9c:33:d5:4a:25:5d:41:1b:dc:cb:d7:a8:a0:83:f8:61:89:96:
c4:6d:92:07:3d:39:f0:c7:62:95:44:c3:58:8d:39:ce:64:25:
34:8a:87:d8:3a:86:b0:56:4e:17:45:e1:3e:84:a6:14:c4:4c:
89:bd:f1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org