Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/CMPFQoFAsU-R1obovlbETE7yzQ8.roa
File: CMPFQoFAsU-R1obovlbETE7yzQ8.roa (raw, json)
Hash identifier: mxg2FH1jyg5Cg+BYflW0KPWPPXlpd6JlnvwpXYfvklM=
Subject key identifier: 08:C3:C5:42:81:40:B1:4F:91:D6:86:E8:BE:56:C4:4C:4E:F2:CD:0F
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 018C34B2FD93C7E9991B04CFF447AE8B8388
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/CMPFQoFAsU-R1obovlbETE7yzQ8.roa
Signing time: Mon 04 Dec 2023 11:59:54 +0000
ROA not before: Mon 04 Dec 2023 11:59:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8881
IP address blocks: 195.167.208.0/20 maxlen: 20
84.19.192.0/19 maxlen: 19
94.134.176.0/24 maxlen: 24
94.134.178.0/24 maxlen: 24
94.134.180.0/24 maxlen: 24
94.134.181.0/24 maxlen: 24
94.134.182.0/24 maxlen: 24
94.134.95.0/24 maxlen: 24
94.134.112.0/24 maxlen: 24
94.134.113.0/24 maxlen: 24
94.134.114.0/24 maxlen: 24
94.134.115.0/24 maxlen: 24
82.140.0.0/18 maxlen: 18
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
82.207.128.0/17 maxlen: 17
89.247.236.0/22 maxlen: 22
82.140.48.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.192.0/20 maxlen: 20
82.194.96.0/19 maxlen: 19
82.207.224.0/21 maxlen: 21
82.207.240.0/20 maxlen: 20
89.247.254.0/23 maxlen: 23
62.220.0.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.246.192.0/19 maxlen: 19
143.58.64.0/18 maxlen: 18
89.247.96.0/20 maxlen: 20
62.72.64.0/19 maxlen: 19
89.247.112.0/21 maxlen: 21
89.247.120.0/22 maxlen: 22
89.247.144.0/20 maxlen: 20
89.247.64.0/20 maxlen: 20
213.139.128.0/19 maxlen: 19
89.247.80.0/20 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.56.0/21 maxlen: 21
213.138.32.0/19 maxlen: 19
89.246.0.0/19 maxlen: 20
89.246.160.0/19 maxlen: 19
89.246.160.0/21 maxlen: 21
202.71.128.0/20 maxlen: 20
89.246.184.0/21 maxlen: 21
213.30.192.0/18 maxlen: 18
89.246.96.0/21 maxlen: 21
89.246.112.0/22 maxlen: 22
89.246.116.0/22 maxlen: 22
89.246.124.0/22 maxlen: 22
104.151.0.0/17 maxlen: 17
89.245.80.0/20 maxlen: 20
89.245.96.0/20 maxlen: 20
89.245.112.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
87.123.208.0/23 maxlen: 23
87.123.224.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
87.123.240.0/21 maxlen: 21
89.245.64.0/20 maxlen: 20
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.245.160.0/20 maxlen: 20
212.204.0.0/19 maxlen: 19
89.244.120.0/21 maxlen: 21
87.123.80.0/20 maxlen: 20
87.123.0.0/19 maxlen: 20
89.244.78.0/23 maxlen: 23
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
87.123.32.0/19 maxlen: 19
88.130.87.0/24 maxlen: 24
89.244.224.0/20 maxlen: 20
87.123.160.0/20 maxlen: 20
87.123.176.0/20 maxlen: 20
89.245.0.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
89.244.176.0/20 maxlen: 20
88.130.48.0/24 maxlen: 24
88.130.49.0/24 maxlen: 24
88.130.50.0/24 maxlen: 24
88.130.51.0/24 maxlen: 24
89.244.192.0/19 maxlen: 20
88.130.52.0/24 maxlen: 24
88.130.53.0/24 maxlen: 24
88.130.57.0/24 maxlen: 24
88.130.58.0/24 maxlen: 24
87.123.128.0/19 maxlen: 19
88.130.59.0/24 maxlen: 24
88.130.60.0/24 maxlen: 24
88.130.61.0/24 maxlen: 24
88.130.63.0/24 maxlen: 24
83.135.208.0/20 maxlen: 20
87.122.96.0/19 maxlen: 19
83.135.224.0/22 maxlen: 22
83.135.232.0/21 maxlen: 21
83.135.240.0/22 maxlen: 22
87.122.128.0/21 maxlen: 21
87.122.32.0/19 maxlen: 19
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
87.122.64.0/19 maxlen: 20
83.135.184.0/21 maxlen: 21
83.135.192.0/20 maxlen: 20
87.122.192.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
89.244.0.0/14 maxlen: 14
87.122.224.0/19 maxlen: 20
87.122.138.0/23 maxlen: 23
87.122.144.0/20 maxlen: 20
46.142.214.0/24 maxlen: 24
87.122.176.0/21 maxlen: 21
83.135.0.0/20 maxlen: 20
83.135.0.0/16 maxlen: 16
46.189.0.0/17 maxlen: 17
94.134.192.0/22 maxlen: 22
212.80.224.0/19 maxlen: 19
195.202.32.0/19 maxlen: 19
24.40.128.0/18 maxlen: 18
94.134.216.0/21 maxlen: 21
80.242.160.0/19 maxlen: 19
83.135.96.0/20 maxlen: 20
83.135.112.0/20 maxlen: 20
87.122.0.0/20 maxlen: 20
83.135.128.0/19 maxlen: 20
217.27.192.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.0.0/15 maxlen: 15
83.135.64.0/19 maxlen: 19
89.27.128.0/17 maxlen: 17
94.134.64.0/19 maxlen: 23
94.134.64.0/22 maxlen: 22
94.134.64.0/23 maxlen: 23
94.134.68.0/23 maxlen: 23
94.134.68.0/22 maxlen: 22
94.134.0.0/18 maxlen: 18
62.214.224.0/19 maxlen: 19
94.134.0.0/15 maxlen: 15
94.134.144.0/20 maxlen: 20
94.134.160.0/21 maxlen: 21
94.134.172.0/23 maxlen: 23
94.134.168.0/22 maxlen: 22
94.134.174.0/23 maxlen: 23
94.134.96.0/20 maxlen: 21
212.93.0.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
62.214.0.0/16 maxlen: 16
89.247.255.0/24 maxlen: 24
217.65.16.0/20 maxlen: 20
195.226.160.0/19 maxlen: 19
217.78.128.0/20 maxlen: 20
89.247.124.0/24 maxlen: 24
89.246.36.0/24 maxlen: 24
89.246.37.0/24 maxlen: 24
89.246.41.0/24 maxlen: 24
89.246.45.0/24 maxlen: 24
193.219.15.0/24 maxlen: 24
82.145.0.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
217.199.64.0/20 maxlen: 20
89.246.120.0/24 maxlen: 24
89.246.122.0/24 maxlen: 24
88.130.192.0/23 maxlen: 23
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
87.123.201.0/24 maxlen: 24
87.123.202.0/24 maxlen: 24
87.123.203.0/24 maxlen: 24
87.123.204.0/24 maxlen: 24
87.123.206.0/24 maxlen: 24
88.130.136.0/21 maxlen: 21
87.123.207.0/24 maxlen: 24
88.130.144.0/21 maxlen: 21
217.9.96.0/19 maxlen: 19
88.130.160.0/22 maxlen: 22
82.144.32.0/19 maxlen: 19
88.130.176.0/21 maxlen: 21
88.130.0.0/19 maxlen: 19
88.130.0.0/16 maxlen: 16
89.244.76.0/24 maxlen: 24
61.8.128.0/19 maxlen: 19
88.130.80.0/20 maxlen: 20
88.130.96.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
87.123.194.0/24 maxlen: 24
87.123.195.0/24 maxlen: 24
87.123.196.0/24 maxlen: 24
87.123.197.0/24 maxlen: 24
88.130.32.0/20 maxlen: 20
88.130.54.0/23 maxlen: 23
88.130.64.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.180.0/23 maxlen: 23
46.142.96.0/20 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.128.0/19 maxlen: 19
46.142.224.0/19 maxlen: 19
185.128.68.0/22 maxlen: 22
94.134.196.0/24 maxlen: 24
46.142.64.0/19 maxlen: 20
212.7.128.0/19 maxlen: 19
46.142.0.0/18 maxlen: 20
46.142.0.0/16 maxlen: 16
213.182.128.0/19 maxlen: 19
2001:7b0::/32 maxlen: 32
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
2001:9e8:2140::/42 maxlen: 42
2001:9e8:3540::/42 maxlen: 42
2001:9e8:4140::/42 maxlen: 42
2001:9e8:2000::/48 maxlen: 48
2001:9e8:4000::/48 maxlen: 48
2001:9e8:2003::/48 maxlen: 48
2001:9e8:3980::/42 maxlen: 42
2001:9e8:2001::/48 maxlen: 48
2001:9e8:4001::/48 maxlen: 48
2001:16b8::/32 maxlen: 40
2001:9e8:39c0::/42 maxlen: 42
2001:9e8:50c0::/42 maxlen: 42
2001:9e8:c000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8::/32 maxlen: 32
2001:9e8:e000::/35 maxlen: 36
2a00:fb8::/29 maxlen: 29
2001:9e8:3500::/42 maxlen: 42
2001:9e8:5100::/42 maxlen: 42
2001:9e8:3a00::/42 maxlen: 42
2001:9e8:4100::/42 maxlen: 42
2001:1438::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:34:b2:fd:93:c7:e9:99:1b:04:cf:f4:47:ae:8b:83:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Dec 4 11:59:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08c3c5428140b14f91d686e8be56c44c4ef2cd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:03:4f:b5:bb:66:3b:47:22:5c:24:fb:86:98:
4c:46:e9:e0:1c:46:44:af:d1:a1:c4:63:ca:43:6a:
07:9f:ec:cb:c3:f9:4a:a7:9e:9b:d0:f7:ed:3f:46:
33:7a:1d:16:46:05:01:e1:90:6e:cf:04:c0:b6:61:
e5:1b:3d:82:d1:b9:34:ff:1c:a1:e7:b8:ba:31:0f:
30:0d:94:78:ce:fd:c6:c0:6e:94:49:2e:2b:01:e3:
95:76:52:9b:ba:b6:36:fa:b3:81:83:f0:32:9d:07:
18:f9:4d:f4:2d:99:25:a5:05:d7:97:99:97:4c:51:
e1:ee:b4:7c:9f:bd:ec:52:3c:aa:b8:a0:28:49:d5:
fe:17:0d:ba:75:1d:bb:52:62:a7:ca:40:3b:61:7a:
f2:74:6c:13:23:56:8f:c6:3d:33:a7:e8:71:d4:c9:
11:cf:21:a3:dd:86:10:ef:c0:14:3a:a4:77:44:a7:
2e:de:cc:23:51:55:f0:bd:ad:9d:f7:16:98:39:3a:
ef:bb:f2:ad:e5:fb:2a:b8:39:0a:f1:31:f3:ab:bd:
fe:a3:54:7a:40:3f:b1:0c:7a:db:65:96:e9:a2:d7:
99:0d:8f:0a:45:f6:86:f6:f0:21:0e:a3:f7:4f:a1:
89:e3:11:45:b9:4e:f0:4e:1f:c3:54:68:13:22:02:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C3:C5:42:81:40:B1:4F:91:D6:86:E8:BE:56:C4:4C:4E:F2:CD:0F
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/CMPFQoFAsU-R1obovlbETE7yzQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
6a:58:00:ec:69:e1:60:89:3a:11:fc:4c:a8:bc:93:4d:b7:32:
3d:a6:0d:0c:ef:9d:f5:10:98:58:95:d7:a9:36:b9:fe:bc:63:
c4:91:ef:45:18:39:08:81:78:58:36:f3:73:3a:ec:42:86:a7:
92:be:1e:9a:89:48:76:fa:dc:5b:c2:8b:df:73:f8:99:8a:c8:
f1:53:6b:42:a4:c3:e7:16:69:93:35:03:30:ac:c4:de:09:25:
75:ae:01:f0:87:71:b8:d1:9f:8d:ca:74:3e:d7:33:43:0c:15:
cf:9e:8c:f3:38:13:2b:e3:95:eb:1d:d5:8b:13:3e:98:d9:16:
89:27:88:8b:71:cc:e8:47:3a:10:f0:6e:4e:9c:79:38:a6:8e:
7d:d3:0c:40:b9:af:49:e3:df:ab:26:53:8b:21:6f:46:e5:84:
18:1b:ad:10:20:06:15:92:f9:fd:73:90:89:c7:ca:b5:af:20:
1b:3c:96:84:1c:01:43:c8:bf:28:f1:9c:e6:0b:9d:07:49:b1:
81:a7:94:fa:d5:58:04:57:87:ae:9a:03:a7:29:87:ea:07:48:
94:91:53:62:2c:57:23:f2:ff:9e:22:8a:a9:88:eb:32:12:b7:
b9:51:bb:11:3e:50:e2:6b:c4:18:38:11:26:3c:81:7c:3b:ec:
f3:54:cb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 15:22:30 2025 by rpki-client