Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/GsGxN4UNYSfL_fKH-MpO5QRe0OA.roa
File: GsGxN4UNYSfL_fKH-MpO5QRe0OA.roa (raw, json)
Hash identifier: fEhZmmn1I2IH0Mktmgx2msijMjJtlHMtGG0E6q5n3CQ=
Subject key identifier: 1A:C1:B1:37:85:0D:61:27:CB:FD:F2:87:F8:CA:4E:E5:04:5E:D0:E0
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0185106949276DFDB64C0305C60F87E063AE
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/GsGxN4UNYSfL_fKH-MpO5QRe0OA.roa
Signing time: Wed 14 Dec 2022 11:33:33 +0000
ROA not before: Wed 14 Dec 2022 11:33:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3233
IP address blocks: 85.120.170.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
81.181.86.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
81.181.100.0/24 maxlen: 24
85.120.155.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
81.181.213.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
85.121.60.0/22 maxlen: 22
81.181.152.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
85.121.6.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.96.0/22 maxlen: 22
194.153.238.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
81.180.239.0/24 maxlen: 24
194.153.247.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
85.120.42.0/24 maxlen: 24
80.97.176.0/23 maxlen: 23
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
80.96.238.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
80.96.17.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
80.96.43.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
193.231.111.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
80.96.190.0/24 maxlen: 24
193.231.119.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.11.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.114.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
217.156.106.0/24 maxlen: 24
193.230.134.0/23 maxlen: 23
217.156.108.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.141.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
194.102.163.0/24 maxlen: 24
194.102.176.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.184.0/24 maxlen: 24
194.102.183.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
194.102.106.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
217.156.101.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
192.162.16.0/24 maxlen: 24
81.181.244.0/24 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.252.0/22 maxlen: 22
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:10:69:49:27:6d:fd:b6:4c:03:05:c6:0f:87:e0:63:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Dec 14 11:33:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ac1b137850d6127cbfdf287f8ca4ee5045ed0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a2:47:3f:e2:ee:2b:bb:84:38:85:ca:bf:27:
84:04:8a:ff:19:39:5a:68:e3:f8:23:6f:70:2a:ac:
57:73:17:cb:51:96:fe:76:fa:09:f5:8f:78:3d:a7:
0e:59:42:2f:0a:b5:24:ee:94:fe:41:b8:a5:97:be:
c1:c3:6c:0c:92:0f:6d:a5:d5:01:b6:e7:d2:9c:75:
f4:9a:1b:97:e5:a2:f9:4f:96:4b:97:37:36:6f:c6:
5e:fd:07:a0:b4:a9:e2:b9:8d:da:f9:0e:48:7f:b7:
e0:14:8a:29:85:b4:cb:f1:2a:ce:88:aa:be:0b:7a:
26:45:44:26:44:67:d1:ab:eb:52:c0:a4:20:3f:59:
70:7d:75:0e:d6:bb:4d:c1:31:60:2f:09:20:bb:0d:
4b:98:72:92:0f:6f:2b:c3:7d:f0:52:d8:21:49:0e:
c8:60:58:65:7b:f8:74:3c:c5:9d:05:30:b1:72:9b:
94:f2:e8:3a:87:0e:6a:c9:de:52:b2:ca:e9:98:e8:
27:9d:81:5b:11:32:70:c2:f7:68:aa:c2:5c:0e:b7:
f4:ab:f8:24:7a:da:a0:53:7b:03:7b:b9:94:93:ab:
03:70:93:0a:61:a6:d2:14:db:a1:86:ca:6a:f0:4b:
12:50:fb:18:5d:3a:d1:a1:61:b3:77:65:07:44:f9:
4a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C1:B1:37:85:0D:61:27:CB:FD:F2:87:F8:CA:4E:E5:04:5E:D0:E0
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/GsGxN4UNYSfL_fKH-MpO5QRe0OA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.43.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.238.0/24
80.96.255.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.96.0/22
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.86.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.244.0/24
85.120.42.0/24
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.156.0/22
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.83.0/24
85.122.106.0/24
85.122.114.0/24
85.122.181.0-85.122.183.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.208.0/24
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.111.0-193.231.112.255
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.102.65.0/24
194.102.106.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.176.0/23
194.102.183.0/24
194.102.247.0/24
194.105.6.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.153.247.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.11.0/24
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.66.0/23
217.156.71.0/24
217.156.77.0/24
217.156.93.0/24
217.156.101.0/24
217.156.106.0/24
217.156.108.0/24
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
63:36:16:2e:11:e1:0b:c9:ee:a5:6b:1e:e5:05:33:d5:28:11:
bc:81:a6:16:e5:e0:37:b9:19:d6:30:59:05:34:5a:dc:94:94:
ce:a5:a2:e0:fa:87:ff:56:fe:de:fd:f5:30:9e:3a:4e:ea:95:
02:67:5f:6c:81:f2:c8:73:f0:35:af:dc:0d:d5:43:e0:81:9d:
8f:77:f0:07:33:84:e4:2d:37:58:73:61:b1:44:1c:76:8f:25:
d0:d4:a1:48:c2:69:c8:5d:62:fd:00:07:e4:2f:35:33:e1:c2:
cf:2a:23:07:10:77:72:c4:3f:26:bd:bd:96:d6:41:93:33:d7:
e2:b8:a2:1a:70:b8:47:49:8f:64:fa:48:37:78:f5:c8:75:39:
a0:cb:d8:c9:16:73:f7:2d:9b:24:bb:1b:c8:38:55:42:6e:b2:
10:03:29:bd:aa:58:3c:b6:56:4a:02:bf:b3:48:fb:60:0d:12:
f8:ce:69:d9:f2:0f:3e:28:6a:47:dc:6e:8e:7d:ce:60:20:01:
f2:6f:dc:1a:c5:37:08:2a:eb:46:0f:a9:0b:8a:c9:a4:c8:a1:
9b:e2:4a:42:fd:75:bd:5e:19:14:e9:6e:07:51:c3:94:5d:7d:
5d:97:0f:ca:32:a8:51:3e:e3:c5:59:e4:44:91:c9:50:5e:b7:
d8:a6:bc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org