Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/r-tTX_CnH7IccFXsiRJMmPB9b1M.roa
File: r-tTX_CnH7IccFXsiRJMmPB9b1M.roa (raw, json)
Hash identifier: IuFaBC9SKmT0449KxXH+oP4PVSzrEIF4fOe8CHGR9UM=
Subject key identifier: AF:EB:53:5F:F0:A7:1F:B2:1C:70:55:EC:89:12:4C:98:F0:7D:6F:53
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01851C81A10FC0AF1FCBF70D91D4AA14E5AC
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/r-tTX_CnH7IccFXsiRJMmPB9b1M.roa
Signing time: Fri 16 Dec 2022 19:55:35 +0000
ROA not before: Fri 16 Dec 2022 19:55:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3233
IP address blocks: 85.120.170.0/24 maxlen: 24
81.181.74.0/24 maxlen: 24
85.120.178.0/24 maxlen: 24
81.181.86.0/24 maxlen: 24
85.120.192.0/21 maxlen: 21
81.181.100.0/24 maxlen: 24
85.120.155.0/24 maxlen: 24
81.181.192.0/24 maxlen: 24
81.181.199.0/24 maxlen: 24
85.121.38.0/24 maxlen: 24
85.121.40.0/21 maxlen: 21
81.181.213.0/24 maxlen: 24
81.181.212.0/24 maxlen: 24
85.121.60.0/22 maxlen: 22
81.181.152.0/24 maxlen: 24
81.181.148.0/24 maxlen: 24
81.181.156.0/24 maxlen: 24
81.181.155.0/24 maxlen: 24
85.121.6.0/23 maxlen: 23
81.180.143.0/24 maxlen: 24
81.180.96.0/22 maxlen: 22
194.153.238.0/24 maxlen: 24
194.153.234.0/24 maxlen: 24
194.153.242.0/23 maxlen: 23
194.153.245.0/24 maxlen: 24
85.120.66.0/23 maxlen: 23
81.180.239.0/24 maxlen: 24
194.153.247.0/24 maxlen: 24
81.180.234.0/24 maxlen: 24
81.181.0.0/24 maxlen: 24
85.120.42.0/24 maxlen: 24
80.97.176.0/23 maxlen: 23
193.226.81.0/24 maxlen: 24
193.226.84.0/24 maxlen: 24
193.226.80.0/24 maxlen: 24
193.226.99.0/24 maxlen: 24
193.226.101.0/24 maxlen: 24
193.226.112.0/24 maxlen: 24
193.226.111.0/24 maxlen: 24
193.226.120.0/24 maxlen: 24
193.226.123.0/24 maxlen: 24
193.226.27.0/24 maxlen: 24
193.226.35.0/24 maxlen: 24
193.226.65.0/24 maxlen: 24
194.105.6.0/24 maxlen: 24
193.231.204.0/24 maxlen: 24
193.231.240.0/24 maxlen: 24
193.231.244.0/24 maxlen: 24
80.97.54.0/24 maxlen: 24
193.231.247.0/24 maxlen: 24
193.231.249.0/24 maxlen: 24
80.96.216.0/24 maxlen: 24
80.96.220.0/24 maxlen: 24
80.96.228.0/24 maxlen: 24
193.231.163.0/24 maxlen: 24
193.231.168.0/24 maxlen: 24
80.96.238.0/24 maxlen: 24
193.231.192.0/24 maxlen: 24
80.96.255.0/24 maxlen: 24
80.97.144.0/24 maxlen: 24
80.97.171.0/24 maxlen: 24
193.231.254.0/24 maxlen: 24
193.230.244.0/24 maxlen: 24
194.102.247.0/24 maxlen: 24
80.96.75.0/24 maxlen: 24
80.96.76.0/24 maxlen: 24
80.96.17.0/24 maxlen: 24
193.230.212.0/24 maxlen: 24
193.230.208.0/24 maxlen: 24
193.230.211.0/24 maxlen: 24
193.230.219.0/24 maxlen: 24
193.230.225.0/24 maxlen: 24
80.96.170.0/24 maxlen: 24
193.231.111.0/24 maxlen: 24
193.231.112.0/24 maxlen: 24
80.96.181.0/24 maxlen: 24
193.231.114.0/24 maxlen: 24
193.231.116.0/23 maxlen: 23
80.96.190.0/24 maxlen: 24
193.231.119.0/24 maxlen: 24
80.96.207.0/24 maxlen: 24
80.96.209.0/24 maxlen: 24
80.96.109.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.136.0/24 maxlen: 24
193.231.81.0/24 maxlen: 24
217.156.0.0/24 maxlen: 24
217.156.2.0/24 maxlen: 24
85.122.83.0/24 maxlen: 24
217.156.6.0/24 maxlen: 24
217.156.11.0/24 maxlen: 24
217.156.7.0/24 maxlen: 24
217.156.15.0/24 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.19.0/24 maxlen: 24
85.122.106.0/24 maxlen: 24
85.122.114.0/24 maxlen: 24
217.156.35.0/24 maxlen: 24
217.156.37.0/24 maxlen: 24
194.102.65.0/24 maxlen: 24
217.156.50.0/24 maxlen: 24
217.156.49.0/24 maxlen: 24
217.156.51.0/24 maxlen: 24
193.230.0.0/17 maxlen: 17
217.156.106.0/24 maxlen: 24
193.230.134.0/23 maxlen: 23
217.156.108.0/24 maxlen: 24
194.102.135.0/24 maxlen: 24
193.230.143.0/24 maxlen: 24
193.230.141.0/24 maxlen: 24
194.102.143.0/24 maxlen: 24
217.156.119.0/24 maxlen: 24
194.102.154.0/24 maxlen: 24
194.102.157.0/24 maxlen: 24
193.230.164.0/23 maxlen: 23
194.102.163.0/24 maxlen: 24
194.102.176.0/24 maxlen: 24
194.102.177.0/24 maxlen: 24
193.230.185.0/24 maxlen: 24
193.230.184.0/24 maxlen: 24
194.102.183.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.59.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.71.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
194.102.106.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
85.122.181.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
217.156.101.0/24 maxlen: 24
85.121.156.0/22 maxlen: 22
192.162.16.0/24 maxlen: 24
81.181.244.0/24 maxlen: 24
85.121.88.0/21 maxlen: 21
85.121.252.0/22 maxlen: 22
85.121.198.0/24 maxlen: 24
85.121.220.0/22 maxlen: 22
2a03:5e80::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1c:81:a1:0f:c0:af:1f:cb:f7:0d:91:d4:aa:14:e5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Dec 16 19:55:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=afeb535ff0a71fb21c7055ec89124c98f07d6f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:0e:11:3e:f8:81:4c:35:3f:0a:7e:0c:4d:
e7:9d:20:69:9e:6a:23:99:20:75:e0:46:0c:87:a9:
bc:44:b6:d2:d2:a2:3b:27:b6:b4:c5:56:76:8b:d5:
a9:ec:bc:2e:25:14:46:93:b5:25:2b:02:97:b6:1b:
55:d5:54:34:93:ef:88:02:b4:0c:a3:fa:ff:fb:62:
3f:6c:fe:a0:5d:2d:26:69:0a:fd:69:55:ef:41:97:
64:bc:3a:13:8e:48:9a:8f:38:96:bf:32:7d:f0:8f:
60:79:50:c6:d8:e7:b5:13:e4:24:10:ea:1e:77:b5:
29:d7:94:24:ef:bb:d8:ec:86:5b:1d:75:22:62:68:
3d:05:68:c2:6e:b2:20:83:d7:e0:36:44:e7:19:96:
bb:9e:ba:3d:7b:29:df:f9:87:51:5e:24:19:35:ce:
20:87:ad:f8:7d:f6:4b:f2:3f:6c:15:d0:ae:c2:04:
dd:31:cb:1d:78:96:b3:27:c3:54:36:2a:94:e1:55:
1e:f5:51:76:d8:ed:51:ce:1c:a4:a8:84:ec:7b:da:
1e:90:ba:65:16:f1:87:55:a1:13:5d:2f:25:5f:07:
6d:36:b0:7a:c5:b1:d9:e5:e6:ac:51:82:04:33:dd:
4f:14:05:93:55:5c:fe:ae:7a:1f:4f:70:25:2c:86:
dd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EB:53:5F:F0:A7:1F:B2:1C:70:55:EC:89:12:4C:98:F0:7D:6F:53
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/r-tTX_CnH7IccFXsiRJMmPB9b1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.17.0/24
80.96.75.0-80.96.76.255
80.96.108.0/23
80.96.136.0/24
80.96.170.0/24
80.96.181.0/24
80.96.190.0/24
80.96.207.0/24
80.96.209.0/24
80.96.216.0/24
80.96.220.0/24
80.96.228.0/24
80.96.238.0/24
80.96.255.0/24
80.97.54.0/24
80.97.144.0/24
80.97.171.0/24
80.97.176.0/23
81.180.96.0/22
81.180.143.0/24
81.180.234.0/24
81.180.239.0/24
81.181.0.0/24
81.181.74.0/24
81.181.86.0/24
81.181.100.0/24
81.181.148.0/24
81.181.152.0/24
81.181.155.0-81.181.156.255
81.181.192.0/24
81.181.199.0/24
81.181.212.0/23
81.181.244.0/24
85.120.42.0/24
85.120.66.0/23
85.120.155.0/24
85.120.170.0/24
85.120.178.0/24
85.120.192.0/21
85.121.6.0/23
85.121.38.0/24
85.121.40.0/21
85.121.60.0/22
85.121.88.0/21
85.121.156.0/22
85.121.198.0/24
85.121.220.0/22
85.121.252.0/22
85.122.83.0/24
85.122.106.0/24
85.122.114.0/24
85.122.181.0-85.122.183.255
192.162.16.0/24
193.226.27.0/24
193.226.35.0/24
193.226.65.0/24
193.226.80.0/23
193.226.84.0/24
193.226.99.0/24
193.226.101.0/24
193.226.111.0-193.226.112.255
193.226.120.0/24
193.226.123.0/24
193.230.0.0/17
193.230.134.0/23
193.230.141.0/24
193.230.143.0/24
193.230.164.0/23
193.230.184.0/23
193.230.208.0/24
193.230.211.0-193.230.212.255
193.230.219.0/24
193.230.225.0/24
193.230.244.0/24
193.231.81.0/24
193.231.111.0-193.231.112.255
193.231.114.0/24
193.231.116.0/23
193.231.119.0/24
193.231.163.0/24
193.231.168.0/24
193.231.192.0/24
193.231.204.0/24
193.231.240.0/24
193.231.244.0/24
193.231.247.0/24
193.231.249.0/24
193.231.254.0/24
194.102.65.0/24
194.102.106.0/24
194.102.135.0/24
194.102.143.0/24
194.102.154.0/24
194.102.157.0/24
194.102.163.0/24
194.102.176.0/23
194.102.183.0/24
194.102.247.0/24
194.105.6.0/24
194.153.234.0/24
194.153.238.0/24
194.153.242.0/23
194.153.245.0/24
194.153.247.0/24
217.156.0.0/24
217.156.2.0/24
217.156.6.0/23
217.156.11.0/24
217.156.13.0/24
217.156.15.0/24
217.156.19.0/24
217.156.35.0/24
217.156.37.0/24
217.156.49.0-217.156.51.255
217.156.57.0/24
217.156.59.0/24
217.156.62.0/24
217.156.66.0/23
217.156.71.0/24
217.156.77.0/24
217.156.93.0/24
217.156.101.0/24
217.156.106.0/24
217.156.108.0/24
217.156.119.0/24
IPv6:
2a03:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
b7:11:56:65:5e:08:b9:2a:86:e4:b1:9b:d0:f2:ad:9b:ea:16:
0f:53:c5:90:5f:8e:e4:f8:1a:06:d5:21:34:80:b0:8c:4b:1f:
bd:78:a5:5c:07:eb:ca:43:dd:16:22:4c:92:25:14:de:fd:fb:
da:3a:78:13:e9:30:ba:ad:83:60:07:07:fd:e6:0f:01:72:80:
17:17:51:ff:6e:c2:f2:b8:27:9c:44:4c:6b:0b:db:e5:af:82:
e0:1a:2a:54:9d:33:4f:39:51:b5:91:1d:0c:71:3e:a6:99:12:
9c:03:64:4f:83:53:64:b4:f6:7f:04:01:7a:99:18:87:e1:1c:
63:4f:44:bb:2b:bc:7e:a6:2e:d7:5e:b5:15:cc:cb:61:c3:31:
7a:24:2e:80:8f:f9:18:95:6a:9e:64:e7:b9:52:4f:65:87:af:
7d:8e:67:c7:96:8f:f6:19:da:1f:13:dd:fa:9c:ca:a5:28:16:
6a:f9:e9:ef:84:11:d4:99:88:e5:4c:00:96:ca:7f:d8:f6:2a:
d7:b6:db:61:f2:b8:12:0c:7a:35:08:1c:47:63:a7:fa:31:18:
24:43:b9:59:d8:0e:60:fa:c0:17:62:1b:d1:02:e1:c9:62:43:
fb:de:6b:58:3e:4f:10:fe:bb:a4:fe:fe:b2:68:64:79:95:88:
6f:ff:5b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:17 2023 by rpki-client on console-ams.rpki-client.org