Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ksV79Mgv6Q0WA7lJH8lygwvjgVY.roa
File: ksV79Mgv6Q0WA7lJH8lygwvjgVY.roa (raw, json)
Hash identifier: RkL/ZIdW4IzVa7N5/gVUvksFwbmhpsDr3+cREyMllQw=
Subject key identifier: 92:C5:7B:F4:C8:2F:E9:0D:16:03:B9:49:1F:C9:72:83:0B:E3:81:56
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01826290F542D03C04BE2CB0A465DD5B22A2
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ksV79Mgv6Q0WA7lJH8lygwvjgVY.roa
Signing time: Wed 03 Aug 2022 07:17:23 +0000
ROA not before: Wed 03 Aug 2022 07:17:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3233
IP address blocks: 85.120.170.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
81.181.86.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
81.181.100.0/24 maxlen: 24
81.181.13.0/24 maxlen: 24
85.120.155.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
85.121.38.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
81.181.213.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
85.121.60.0/22 maxlen: 22
81.181.152.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
85.121.6.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.96.0/22 maxlen: 22
194.153.238.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
81.180.239.0/24 maxlen: 24
194.153.247.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
85.120.43.0/24 maxlen: 24
85.120.42.0/24 maxlen: 24
80.97.176.0/23 maxlen: 23
193.226.84.0/24 maxlen: 24
193.226.81.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
80.96.238.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
80.96.17.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
193.231.111.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
80.96.190.0/24 maxlen: 24
193.231.119.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
217.156.11.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.114.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
217.156.106.0/24 maxlen: 24
193.230.134.0/23 maxlen: 23
217.156.108.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.141.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
194.102.163.0/24 maxlen: 24
194.102.176.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
193.230.184.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
194.102.183.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
194.102.106.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
217.156.101.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
192.162.16.0/24 maxlen: 24
81.181.244.0/24 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:90:f5:42:d0:3c:04:be:2c:b0:a4:65:dd:5b:22:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 3 07:17:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92c57bf4c82fe90d1603b9491fc972830be38156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:a2:d4:60:42:de:d2:4b:9c:8e:71:c0:e2:
9d:47:dd:10:96:a8:91:2b:1f:22:e9:3d:df:f3:ea:
43:2e:9f:de:30:84:4e:f6:a6:0b:8b:bc:dd:75:cb:
ef:a5:0d:ea:2c:2e:2d:0e:76:c7:b3:4e:39:13:7f:
ef:da:9a:8e:3e:a4:f3:b1:da:ad:ba:a1:8d:52:0a:
df:d1:47:2c:f6:29:38:96:ef:03:ec:f0:e5:28:f2:
63:34:f8:5c:42:a0:c9:a5:11:0f:b1:bc:3a:09:c6:
7d:42:db:0b:72:a3:0a:20:dc:70:46:83:e0:3a:3c:
89:be:7d:4b:5a:ae:24:6f:76:1b:c2:9f:e2:65:99:
cc:51:cf:36:dc:69:cc:7f:39:4c:e4:f4:71:c9:23:
77:70:c8:49:00:3c:67:5d:30:6b:75:28:b0:d1:8f:
31:6e:5d:1c:91:cc:d3:63:3a:3d:58:10:07:4b:5a:
80:e0:9e:e0:dc:e5:f9:b8:62:09:06:8b:b3:c3:99:
e2:bc:d4:4e:55:58:bc:bf:57:4a:52:c2:d9:03:cc:
7a:b0:8f:bd:03:64:b4:cd:5d:77:89:eb:e6:11:dd:
eb:0b:72:24:5c:3c:30:af:ef:bb:0d:85:40:d8:5e:
6d:60:a5:21:4b:2c:f6:3b:53:32:aa:02:38:63:76:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C5:7B:F4:C8:2F:E9:0D:16:03:B9:49:1F:C9:72:83:0B:E3:81:56
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ksV79Mgv6Q0WA7lJH8lygwvjgVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.238.0/24
80.96.255.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.96.0/22
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.13.0/24
81.181.74.0/24
81.181.86.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.244.0/24
85.120.42.0/23
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.156.0/22
85.121.198.0/24
85.121.220.0/22
85.122.83.0/24
85.122.106.0/24
85.122.114.0/24
85.122.182.0/23
192.162.16.0/24
193.226.35.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.208.0/24
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.111.0-193.231.112.255
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.102.65.0/24
194.102.106.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.176.0/23
194.102.183.0/24
194.102.247.0/24
194.105.6.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.153.247.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.11.0/24
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.66.0/23
217.156.71.0/24
217.156.77.0/24
217.156.93.0/24
217.156.101.0/24
217.156.106.0/24
217.156.108.0/24
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
2b:3c:5e:78:3a:c7:48:72:32:8c:26:5a:6c:8d:de:18:c6:ac:
f7:7b:0e:11:d2:63:6d:97:c3:9d:db:43:1d:2a:02:e6:b6:52:
ed:f1:39:07:c1:05:49:46:60:f5:80:ef:bb:6c:2b:de:2a:02:
4b:18:8a:be:dc:30:9c:c2:7a:36:cf:b6:e8:88:70:43:89:12:
ec:f5:41:7b:ec:55:ae:49:40:9f:f2:85:5e:f5:a7:66:6b:03:
c6:25:0a:2e:02:1a:9a:d2:5b:42:63:b4:da:27:79:95:28:46:
1e:d2:d4:df:e6:8a:28:8e:09:e7:4e:92:89:ac:ad:19:9e:2b:
bf:3e:41:6e:ea:1c:af:97:4d:26:16:bd:f8:29:8e:3d:8d:4d:
06:69:bc:64:47:2f:32:5a:df:ce:fb:86:e4:e3:68:eb:c3:8f:
69:e0:3a:8c:4b:f4:74:ae:2c:cb:4c:02:d0:c1:0e:6a:91:07:
aa:cd:ee:18:af:76:4a:e5:07:f8:a8:39:b6:4f:20:c8:26:42:
ee:72:ec:7e:f6:0d:2f:71:8e:2b:5f:44:86:f1:45:c7:70:53:
7a:b7:39:66:ec:eb:7a:9a:48:21:69:be:7f:ab:9f:99:b2:85:
93:7d:59:93:4d:2f:92:0f:61:d4:6b:9f:27:a5:b8:8b:ae:5c:
73:ab:56:31
-----BEGIN CERTIFICATE-----
MIIIHDCCBwSgAwIBAgISAYJikPVC0DwEviywpGXdWyKiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjIwODAzMDcxNzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmM1N2JmNGM4MmZlOTBkMTYwM2I5NDkxZmM5NzI4MzBiZTM4MTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqii1GBC3tJLnI5xwOKdR90QlqiR
Kx8i6T3f8+pDLp/eMIRO9qYLi7zddcvvpQ3qLC4tDnbHs045E3/v2pqOPqTzsdqt
uqGNUgrf0Ucs9ik4lu8D7PDlKPJjNPhcQqDJpREPsbw6CcZ9QtsLcqMKINxwRoPg
OjyJvn1LWq4kb3Ybwp/iZZnMUc823GnMfzlM5PRxySN3cMhJADxnXTBrdSiw0Y8x
bl0ckczTYzo9WBAHS1qA4J7g3OX5uGIJBouzw5nivNROVVi8v1dKUsLZA8x6sI+9
A2S0zV13ievmEd3rC3IkXDwwr++7DYVA2F5tYKUhSyz2O1MyqgI4Y3a74QIDAQAB
o4IFKDCCBSQwHQYDVR0OBBYEFJLFe/TIL+kNFgO5SR/JcoML44FWMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEva3NWNzlNZ3Y2UTBXQTdsSkg4bHlnd3ZqZ1ZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIDPAYIKwYBBQUHAQcBAf8EggMrMIIDJzCCAxQEAgABMIID
DAMEAFBgETAMAwQAUGBLAwQAUGBMAwQBUGBsAwQAUGCIAwQAUGCqAwQAUGC1AwQA
UGC+AwQAUGDPAwQAUGDRAwQAUGDYAwQAUGDcAwQAUGDkAwQAUGDuAwQAUGD/AwQA
UGE2AwQAUGGQAwQAUGGrAwQBUGGwAwQCUbRgAwQAUbSPAwQAUbTqAwQAUbTvAwQA
UbUAAwQAUbUNAwQAUbVKAwQAUbVWAwQAUbVkAwQAUbWUAwQAUbWYMAwDBABRtZsD
BABRtZwDBABRtcADBABRtccDBAFRtdQDBABRtfQDBAFVeCoDBAFVeEIDBABVeJsD
BABVeKoDBABVeLIDBANVeMADBAFVeQYDBABVeSYDBANVeSgDBAJVeTwDBANVeVgD
BAJVeZwDBABVecYDBAJVedwDBABVelMDBABVemoDBABVenIDBAFVerYDBADAohAD
BADB4iMDBADB4kEDBAHB4lADBADB4lQDBADB4mMDBADB4mUwDAMEAMHibwMEAMHi
cAMEB8HmAAMEAcHmhgMEAMHmjQMEAMHmjwMEAcHmpAMEAcHmuAMEAMHm0DAMAwQA
webTAwQAwebUAwQAwebbAwQAwebhAwQAweb0AwQAwedRMAwDBADB528DBADB53AD
BADB53IDBAHB53QDBADB53cDBADB56MDBADB56gDBADB58ADBADB58wDBADB5/AD
BADB5/QDBADB5/cDBADB5/kDBADB5/4DBADCZkEDBADCZmoDBADCZocDBADCZo8D
BADCZpoDBADCZp0DBADCZqMDBAHCZrADBADCZrcDBADCZvcDBADCaQYDBADCmeoD
BADCme4DBAHCmfIDBADCmfUDBADCmfcDBADZnAADBADZnAIDBAHZnAYDBADZnAsD
BADZnA0DBADZnA8DBADZnBMDBADZnCMDBADZnCUwDAMEANmcMQMEAtmcMAMEANmc
OQMEANmcOwMEANmcPgMEAdmcQgMEANmcRwMEANmcTQMEANmcXQMEANmcZQMEANmc
agMEANmcbAMEANmcdzANBAIAAjAHAwUDKgNegDANBgkqhkiG9w0BAQsFAAOCAQEA
KzxeeDrHSHIyjCZabI3eGMas93sOEdJjbZfDndtDHSoC5rZS7fE5B8EFSUZg9YDv
u2wr3ioCSxiKvtwwnMJ6Ns+26IhwQ4kS7PVBe+xVrklAn/KFXvWnZmsDxiUKLgIa
mtJbQmO02id5lShGHtLU3+aKKI4J506SiaytGZ4rvz5Bbuocr5dNJha9+CmOPY1N
Bmm8ZEcvMlrfzvuG5ONo68OPaeA6jEv0dK4sy0wC0MEOapEHqs3uGK92SuUH+Kg5
tk8gyCZC7nLsfvYNL3GOK19EhvFFx3BTerc5ZuzreppIIWm+f6ufmbKFk31Zk00v
kg9h1GufJ6W4i65cc6tWMQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org