Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/nqpKANlRKUWO8VQBQ2A3FTsW9DE.roa
File: nqpKANlRKUWO8VQBQ2A3FTsW9DE.roa (raw, json)
Hash identifier: f6Np7wOLWWoJGXr68ucMtDwg2hncueX99dbZuix2Agc=
Subject key identifier: 9E:AA:4A:00:D9:51:29:45:8E:F1:54:01:43:60:37:15:3B:16:F4:31
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01850FC11DC661BA8C57529154672086D1F1
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/nqpKANlRKUWO8VQBQ2A3FTsW9DE.roa
Signing time: Wed 14 Dec 2022 08:29:52 +0000
ROA not before: Wed 14 Dec 2022 08:29:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3233
IP address blocks: 85.120.170.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
81.181.86.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
81.181.100.0/24 maxlen: 24
85.120.155.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
81.181.213.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
85.121.60.0/22 maxlen: 22
81.181.152.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
85.121.6.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.96.0/22 maxlen: 22
194.153.238.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
81.180.239.0/24 maxlen: 24
194.153.247.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
85.120.42.0/24 maxlen: 24
80.97.176.0/23 maxlen: 23
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
194.105.9.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
80.96.238.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
80.96.17.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
80.96.43.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
193.231.111.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
80.96.190.0/24 maxlen: 24
193.231.119.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.11.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.114.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
217.156.106.0/24 maxlen: 24
193.230.134.0/23 maxlen: 23
217.156.108.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.141.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
194.102.163.0/24 maxlen: 24
194.102.176.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.184.0/24 maxlen: 24
194.102.183.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
194.102.106.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
217.156.101.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
192.162.16.0/24 maxlen: 24
81.181.244.0/24 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.252.0/22 maxlen: 22
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:c1:1d:c6:61:ba:8c:57:52:91:54:67:20:86:d1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Dec 14 08:29:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9eaa4a00d95129458ef15401436037153b16f431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:65:5e:1f:13:a1:18:6f:c7:b2:9a:b2:37:01:
c6:6b:2b:57:22:f3:7a:19:6d:ef:1f:5f:70:bb:c8:
fc:88:cb:12:11:01:67:97:e1:11:93:f1:ba:fe:c0:
32:0f:69:4c:84:b1:04:e6:2b:00:9f:53:a3:22:08:
15:df:a1:a5:e9:b3:31:7b:49:ba:78:8a:7b:3c:a0:
74:66:73:f3:4d:7a:e3:e5:96:56:74:ee:c9:67:28:
ad:71:a8:71:d6:92:74:f8:ef:23:6a:bb:2e:a0:67:
4b:b5:c2:90:78:86:f0:62:5a:72:be:6f:a1:11:bc:
39:d2:33:63:b8:33:9d:06:35:0c:3f:79:7c:93:ea:
7c:00:dd:2a:7d:3d:08:a4:dc:74:70:1d:84:7e:e9:
57:20:e9:f8:e3:b7:1e:92:88:c1:22:0f:0f:b2:14:
b4:fa:b1:65:ce:08:77:05:37:58:b0:17:b8:d3:4a:
05:86:ae:39:37:e7:fe:1c:91:04:59:18:d7:ea:e6:
b6:26:13:19:3b:db:a7:83:99:42:82:c3:a6:2e:0e:
f1:00:41:3e:8f:02:81:c9:f7:2c:6a:b5:79:c9:33:
28:b5:6a:0a:4b:d9:e1:12:4f:bb:89:38:87:ce:1b:
7c:9d:0d:98:c2:e1:72:e3:3f:d8:cb:bf:fa:ac:51:
26:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AA:4A:00:D9:51:29:45:8E:F1:54:01:43:60:37:15:3B:16:F4:31
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/nqpKANlRKUWO8VQBQ2A3FTsW9DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.43.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.238.0/24
80.96.255.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.96.0/22
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.86.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.244.0/24
85.120.42.0/24
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.156.0/22
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.83.0/24
85.122.106.0/24
85.122.114.0/24
85.122.182.0/23
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.208.0/24
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.111.0-193.231.112.255
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.102.65.0/24
194.102.106.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.176.0/23
194.102.183.0/24
194.102.247.0/24
194.105.6.0/24
194.105.9.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.153.247.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.11.0/24
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.66.0/23
217.156.71.0/24
217.156.77.0/24
217.156.93.0/24
217.156.101.0/24
217.156.106.0/24
217.156.108.0/24
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
3f:2b:36:a6:dc:13:2e:29:18:9e:7f:1a:38:23:61:b9:d5:33:
48:72:24:7c:05:99:d2:b5:a3:e2:f5:91:29:c3:49:7d:2e:59:
ab:88:c6:02:22:41:cb:ee:a5:4b:7e:8f:b0:b7:6c:e5:38:6f:
fb:09:32:a4:1b:02:88:71:85:94:0f:4f:d4:9e:36:48:70:6d:
91:75:71:64:1b:8d:b1:16:64:d2:cd:22:af:b7:64:a1:7f:d9:
c5:07:d6:65:e7:be:3f:24:cc:9a:f1:1b:95:83:f6:21:94:f9:
a4:43:2b:8d:55:d3:43:93:02:da:81:d7:48:fc:9e:14:e4:42:
4e:2d:f1:2a:cd:2f:09:84:20:57:1f:a4:36:9a:87:2f:b7:6d:
06:d6:79:5c:4c:ad:67:af:fe:72:58:8d:2a:72:fb:b0:9c:ed:
ad:05:de:fa:d6:5f:ab:a6:3c:b0:b3:a0:2e:b0:5d:6e:68:48:
66:a6:f9:33:2f:50:9c:ee:8d:c1:b1:d9:09:61:71:0d:79:36:
9c:bc:0c:27:3c:b1:ad:1f:18:98:d6:6c:cb:7a:81:46:66:9f:
19:df:b6:38:a1:34:b0:65:dc:53:7b:c4:dd:64:7f:4b:d3:b2:
c5:b2:54:19:07:64:ba:34:e0:47:0a:5a:41:b4:7d:28:c5:d8:
04:09:7b:61
-----BEGIN CERTIFICATE-----
MIIIOjCCByKgAwIBAgISAYUPwR3GYbqMV1KRVGcghtHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjIxMjE0MDgyOTUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWFhNGEwMGQ5NTEyOTQ1OGVmMTU0MDE0MzYwMzcxNTNiMTZmNDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGVeHxOhGG/HspqyNwHGaytXIvN6
GW3vH19wu8j8iMsSEQFnl+ERk/G6/sAyD2lMhLEE5isAn1OjIggV36Gl6bMxe0m6
eIp7PKB0ZnPzTXrj5ZZWdO7JZyitcahx1pJ0+O8jarsuoGdLtcKQeIbwYlpyvm+h
Ebw50jNjuDOdBjUMP3l8k+p8AN0qfT0IpNx0cB2EfulXIOn447cekojBIg8PshS0
+rFlzgh3BTdYsBe400oFhq45N+f+HJEEWRjX6ua2JhMZO9ung5lCgsOmLg7xAEE+
jwKByfcsarV5yTMotWoKS9nhEk+7iTiHzht8nQ2YwuFy4z/Yy7/6rFEmAQIDAQAB
o4IFRjCCBUIwHQYDVR0OBBYEFJ6qSgDZUSlFjvFUAUNgNxU7FvQxMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvbnFwS0FObFJLVVdPOFZRQlEyQTNGVHNXOURFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIDWgYIKwYBBQUHAQcBAf8EggNJMIIDRTCCAzIEAgABMIID
KgMEAFBgEQMEAFBgKzAMAwQAUGBLAwQAUGBMAwQBUGBsAwQAUGCIAwQAUGCqAwQA
UGC1AwQAUGC+AwQAUGDPAwQAUGDRAwQAUGDYAwQAUGDcAwQAUGDkAwQAUGDuAwQA
UGD/AwQAUGE2AwQAUGGQAwQAUGGrAwQBUGGwAwQCUbRgAwQAUbSPAwQAUbTqAwQA
UbTvAwQAUbUAAwQAUbVKAwQAUbVWAwQAUbVkAwQAUbWUAwQAUbWYMAwDBABRtZsD
BABRtZwDBABRtcADBABRtccDBAFRtdQDBABRtfQDBABVeCoDBAFVeEIDBABVeJsD
BABVeKoDBABVeLIDBANVeMADBAFVeQYDBABVeSYDBANVeSgDBAJVeTwDBANVeVgD
BAJVeZwDBABVecYDBAJVedwDBAJVefwDBABVelMDBABVemoDBABVenIDBAFVerYD
BADAohADBADB4hsDBADB4iMDBADB4kEDBAHB4lADBADB4lQDBADB4mMDBADB4mUw
DAMEAMHibwMEAMHicAMEAMHieAMEAMHiewMEB8HmAAMEAcHmhgMEAMHmjQMEAMHm
jwMEAcHmpAMEAcHmuAMEAMHm0DAMAwQAwebTAwQAwebUAwQAwebbAwQAwebhAwQA
web0AwQAwedRMAwDBADB528DBADB53ADBADB53IDBAHB53QDBADB53cDBADB56MD
BADB56gDBADB58ADBADB58wDBADB5/ADBADB5/QDBADB5/cDBADB5/kDBADB5/4D
BADCZkEDBADCZmoDBADCZocDBADCZo8DBADCZpoDBADCZp0DBADCZqMDBAHCZrAD
BADCZrcDBADCZvcDBADCaQYDBADCaQkDBADCmeoDBADCme4DBAHCmfIDBADCmfUD
BADCmfcDBADZnAADBADZnAIDBAHZnAYDBADZnAsDBADZnA0DBADZnA8DBADZnBMD
BADZnCMDBADZnCUwDAMEANmcMQMEAtmcMAMEANmcOQMEANmcOwMEANmcPgMEAdmc
QgMEANmcRwMEANmcTQMEANmcXQMEANmcZQMEANmcagMEANmcbAMEANmcdzANBAIA
AjAHAwUDKgNegDANBgkqhkiG9w0BAQsFAAOCAQEAPys2ptwTLikYnn8aOCNhudUz
SHIkfAWZ0rWj4vWRKcNJfS5Zq4jGAiJBy+6lS36PsLds5Thv+wkypBsCiHGFlA9P
1J42SHBtkXVxZBuNsRZk0s0ir7dkoX/ZxQfWZee+PyTMmvEblYP2IZT5pEMrjVXT
Q5MC2oHXSPyeFORCTi3xKs0vCYQgVx+kNpqHL7dtBtZ5XEytZ6/+cliNKnL7sJzt
rQXe+tZfq6Y8sLOgLrBdbmhIZqb5My9QnO6NwbHZCWFxDXk2nLwMJzyxrR8YmNZs
y3qBRmafGd+2OKE0sGXcU3vE3WR/S9OyxbJUGQdkujTgRwpaQbR9KMXYBAl7YQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org