Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/h8UTZ5g7LkJpDpmvLsv2PFP7CQA.roa
File: h8UTZ5g7LkJpDpmvLsv2PFP7CQA.roa (raw, json)
Hash identifier: f/F0q+FApHvRbwdMcpH68M3NfAMVp7g7dKSBVCsIiEU=
Subject key identifier: 87:C5:13:67:98:3B:2E:42:69:0E:99:AF:2E:CB:F6:3C:53:FB:09:00
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01837982A652D98E91255617ADC132060BC6
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/h8UTZ5g7LkJpDpmvLsv2PFP7CQA.roa
Signing time: Mon 26 Sep 2022 11:15:48 +0000
ROA not before: Mon 26 Sep 2022 11:15:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3233
IP address blocks: 85.120.170.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
81.181.86.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
81.181.100.0/24 maxlen: 24
85.120.155.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
85.121.38.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
81.181.213.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
85.121.60.0/22 maxlen: 22
81.181.152.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
85.121.6.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.96.0/22 maxlen: 22
194.153.238.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
81.180.239.0/24 maxlen: 24
194.153.247.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
85.120.43.0/24 maxlen: 24
85.120.42.0/24 maxlen: 24
80.97.176.0/23 maxlen: 23
193.226.84.0/24 maxlen: 24
193.226.81.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
80.96.238.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
80.96.17.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
193.231.111.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
80.96.190.0/24 maxlen: 24
193.231.119.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
217.156.11.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.114.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
217.156.106.0/24 maxlen: 24
193.230.134.0/23 maxlen: 23
217.156.108.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.141.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
194.102.163.0/24 maxlen: 24
194.102.176.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
193.230.184.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
194.102.183.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
194.102.106.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
217.156.101.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
192.162.16.0/24 maxlen: 24
81.181.244.0/24 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.252.0/22 maxlen: 22
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:79:82:a6:52:d9:8e:91:25:56:17:ad:c1:32:06:0b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 26 11:15:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87c51367983b2e42690e99af2ecbf63c53fb0900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:37:90:8a:94:e7:43:47:d3:6d:e6:9a:44:69:
3b:1d:4e:38:6b:b2:2b:df:80:48:2b:6e:8f:c3:0f:
00:06:20:ed:48:0b:3f:6c:1d:9b:80:9b:3f:13:d4:
91:fa:d9:0b:23:ba:ab:d9:97:1e:ab:b6:20:ca:16:
de:02:50:c2:65:14:57:1f:91:7e:a5:c2:81:6a:d1:
11:f8:92:d1:72:6e:c0:3b:1c:d2:58:aa:94:40:97:
9b:36:13:02:27:bb:d0:5e:7e:1f:d7:91:2b:10:6b:
e1:6a:e6:ab:62:f4:5a:bf:2f:5c:a2:6e:fc:00:d8:
b6:55:8c:6c:ca:c1:46:ad:13:ea:dc:2f:a4:a9:0d:
68:e1:2d:e7:ca:7f:01:23:6e:e6:03:75:16:37:3d:
89:54:bf:96:cd:93:41:d1:74:54:a1:cf:2c:41:e1:
eb:db:1d:b3:ae:0c:f6:d3:6a:60:16:88:26:af:7b:
05:82:9c:4d:77:47:37:b9:03:12:c0:f1:3a:9f:26:
57:a8:44:b4:f1:9f:f1:aa:f6:1c:ad:48:c5:0d:ff:
a6:92:cb:c1:e0:42:fe:3a:ba:27:8d:05:ce:20:fe:
1f:42:60:f6:c6:40:61:90:c7:38:a2:b1:84:c9:cf:
88:14:08:5b:fa:4c:56:82:57:65:f7:b8:8e:e8:23:
63:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C5:13:67:98:3B:2E:42:69:0E:99:AF:2E:CB:F6:3C:53:FB:09:00
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/h8UTZ5g7LkJpDpmvLsv2PFP7CQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.238.0/24
80.96.255.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.96.0/22
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.86.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.244.0/24
85.120.42.0/23
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.156.0/22
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.83.0/24
85.122.106.0/24
85.122.114.0/24
85.122.182.0/23
192.162.16.0/24
193.226.35.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.208.0/24
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.111.0-193.231.112.255
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.102.65.0/24
194.102.106.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.176.0/23
194.102.183.0/24
194.102.247.0/24
194.105.6.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.153.247.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.11.0/24
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.66.0/23
217.156.71.0/24
217.156.77.0/24
217.156.93.0/24
217.156.101.0/24
217.156.106.0/24
217.156.108.0/24
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
bb:82:c4:b3:b4:4b:d7:26:41:36:e2:e5:a4:be:66:c5:47:f6:
3e:84:80:f0:9a:1f:bb:b4:58:11:c2:f7:12:1e:c1:31:c4:36:
ae:45:e5:54:f4:06:a2:90:1a:f5:78:22:29:7d:5e:c1:0d:44:
7d:26:14:90:c4:a9:e5:7e:33:be:4c:16:2a:f1:d4:58:25:d5:
d4:26:f6:ae:cb:a8:65:33:5a:6b:ff:62:3e:5a:60:29:47:21:
0e:d5:c4:a0:29:d1:62:9f:8d:5c:15:1a:03:b9:b0:f0:bb:94:
46:99:2b:71:5b:bd:4c:e5:78:8a:81:9a:32:1d:a1:31:5e:2b:
08:ab:8e:04:61:05:2c:ff:12:25:8f:54:7b:73:36:ae:aa:75:
73:fd:ad:fe:e0:04:32:76:7a:29:c1:38:fa:2c:7d:9c:2c:ba:
92:3c:93:80:57:f4:fe:2a:57:c2:c8:a3:79:36:65:70:a9:3b:
f3:a2:23:74:1a:eb:9f:68:4a:cd:e2:85:f4:3a:fc:f5:73:35:
9a:87:65:f7:05:f0:73:43:1c:ef:2a:64:3c:f8:80:d2:8c:c9:
47:c8:7a:ea:50:e4:1b:3f:a4:15:71:e5:f9:43:1b:e7:14:ee:
e5:ca:ed:ff:07:36:9d:79:9c:69:5f:01:1f:0e:c6:79:fa:5a:
e8:83:1f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org