Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/qsuf5MZVABfjeuaWtgthotdiQVs.roa
File: qsuf5MZVABfjeuaWtgthotdiQVs.roa (raw, json)
Hash identifier: j7kcVG0DayhoEdl4miGynTAu8sZy9eywkKMXB9wJ7cE=
Subject key identifier: AA:CB:9F:E4:C6:55:00:17:E3:7A:E6:96:B6:0B:61:A2:D7:62:41:5B
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 018BFC646BF69C9548C7AF5EC610B1D3E56D
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/qsuf5MZVABfjeuaWtgthotdiQVs.roa
Signing time: Thu 23 Nov 2023 13:35:21 +0000
ROA not before: Thu 23 Nov 2023 13:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8881
IP address blocks: 195.167.208.0/20 maxlen: 20
84.19.192.0/19 maxlen: 19
94.134.176.0/24 maxlen: 24
94.134.178.0/24 maxlen: 24
94.134.180.0/24 maxlen: 24
94.134.181.0/24 maxlen: 24
94.134.182.0/24 maxlen: 24
94.134.95.0/24 maxlen: 24
94.134.112.0/24 maxlen: 24
94.134.113.0/24 maxlen: 24
94.134.114.0/24 maxlen: 24
94.134.115.0/24 maxlen: 24
82.140.0.0/18 maxlen: 18
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
82.207.128.0/17 maxlen: 17
89.247.236.0/22 maxlen: 22
82.140.48.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.192.0/20 maxlen: 20
82.194.96.0/19 maxlen: 19
82.207.224.0/21 maxlen: 21
82.207.240.0/20 maxlen: 20
89.247.254.0/23 maxlen: 23
62.220.0.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.246.192.0/19 maxlen: 19
143.58.64.0/18 maxlen: 18
89.247.96.0/20 maxlen: 20
62.72.64.0/19 maxlen: 19
89.247.112.0/21 maxlen: 21
89.247.120.0/22 maxlen: 22
89.247.144.0/20 maxlen: 20
89.247.64.0/20 maxlen: 20
213.139.128.0/19 maxlen: 19
89.247.80.0/20 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.56.0/21 maxlen: 21
213.138.32.0/19 maxlen: 19
89.246.0.0/19 maxlen: 20
89.246.160.0/19 maxlen: 19
89.246.160.0/21 maxlen: 21
202.71.128.0/20 maxlen: 20
89.246.184.0/21 maxlen: 21
213.30.192.0/18 maxlen: 18
89.246.96.0/21 maxlen: 21
89.246.112.0/22 maxlen: 22
89.246.116.0/22 maxlen: 22
89.246.124.0/22 maxlen: 22
104.151.0.0/17 maxlen: 17
89.245.80.0/20 maxlen: 20
89.245.96.0/20 maxlen: 20
89.245.112.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
87.123.208.0/23 maxlen: 23
87.123.224.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
87.123.240.0/21 maxlen: 21
89.245.64.0/20 maxlen: 20
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.245.160.0/20 maxlen: 20
212.204.0.0/19 maxlen: 19
89.244.120.0/21 maxlen: 21
87.123.80.0/20 maxlen: 20
87.123.0.0/19 maxlen: 20
89.244.78.0/23 maxlen: 23
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
87.123.32.0/19 maxlen: 19
88.130.87.0/24 maxlen: 24
89.244.224.0/20 maxlen: 20
87.123.160.0/20 maxlen: 20
87.123.176.0/20 maxlen: 20
89.245.0.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
89.244.176.0/20 maxlen: 20
88.130.51.0/24 maxlen: 24
89.244.192.0/19 maxlen: 20
88.130.52.0/24 maxlen: 24
88.130.53.0/24 maxlen: 24
88.130.57.0/24 maxlen: 24
88.130.58.0/24 maxlen: 24
87.123.128.0/19 maxlen: 19
88.130.59.0/24 maxlen: 24
88.130.60.0/24 maxlen: 24
88.130.61.0/24 maxlen: 24
88.130.63.0/24 maxlen: 24
83.135.208.0/20 maxlen: 20
87.122.96.0/19 maxlen: 19
83.135.224.0/22 maxlen: 22
83.135.232.0/21 maxlen: 21
83.135.240.0/22 maxlen: 22
87.122.128.0/21 maxlen: 21
87.122.32.0/19 maxlen: 19
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
87.122.64.0/19 maxlen: 20
83.135.184.0/21 maxlen: 21
83.135.192.0/20 maxlen: 20
87.122.192.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
89.244.0.0/14 maxlen: 14
87.122.224.0/19 maxlen: 20
87.122.138.0/23 maxlen: 23
87.122.144.0/20 maxlen: 20
46.142.214.0/24 maxlen: 24
87.122.176.0/21 maxlen: 21
83.135.0.0/20 maxlen: 20
83.135.0.0/16 maxlen: 16
46.189.0.0/17 maxlen: 17
94.134.192.0/22 maxlen: 22
212.80.224.0/19 maxlen: 19
195.202.32.0/19 maxlen: 19
24.40.128.0/18 maxlen: 18
94.134.216.0/21 maxlen: 21
80.242.160.0/19 maxlen: 19
83.135.96.0/20 maxlen: 20
83.135.112.0/20 maxlen: 20
87.122.0.0/20 maxlen: 20
83.135.128.0/19 maxlen: 20
217.27.192.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.0.0/15 maxlen: 15
83.135.64.0/19 maxlen: 19
89.27.128.0/17 maxlen: 17
94.134.64.0/19 maxlen: 23
94.134.64.0/22 maxlen: 22
94.134.64.0/23 maxlen: 23
94.134.68.0/22 maxlen: 22
94.134.68.0/23 maxlen: 23
94.134.0.0/18 maxlen: 18
62.214.224.0/19 maxlen: 19
94.134.0.0/15 maxlen: 15
94.134.144.0/20 maxlen: 20
94.134.160.0/21 maxlen: 21
94.134.172.0/23 maxlen: 23
94.134.168.0/22 maxlen: 22
94.134.174.0/23 maxlen: 23
94.134.96.0/20 maxlen: 21
212.93.0.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
62.214.0.0/16 maxlen: 16
89.247.255.0/24 maxlen: 24
217.65.16.0/20 maxlen: 20
195.226.160.0/19 maxlen: 19
217.78.128.0/20 maxlen: 20
89.247.124.0/24 maxlen: 24
89.246.36.0/24 maxlen: 24
89.246.37.0/24 maxlen: 24
89.246.41.0/24 maxlen: 24
89.246.45.0/24 maxlen: 24
193.219.15.0/24 maxlen: 24
82.145.0.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
217.199.64.0/20 maxlen: 20
89.246.120.0/24 maxlen: 24
89.246.122.0/24 maxlen: 24
88.130.192.0/23 maxlen: 23
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
87.123.201.0/24 maxlen: 24
87.123.202.0/24 maxlen: 24
87.123.203.0/24 maxlen: 24
87.123.204.0/24 maxlen: 24
87.123.206.0/24 maxlen: 24
88.130.136.0/21 maxlen: 21
87.123.207.0/24 maxlen: 24
88.130.144.0/21 maxlen: 21
217.9.96.0/19 maxlen: 19
88.130.160.0/22 maxlen: 22
82.144.32.0/19 maxlen: 19
88.130.176.0/21 maxlen: 21
88.130.0.0/19 maxlen: 19
88.130.0.0/16 maxlen: 16
89.244.76.0/24 maxlen: 24
61.8.128.0/19 maxlen: 19
88.130.80.0/20 maxlen: 20
88.130.96.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
87.123.194.0/24 maxlen: 24
87.123.195.0/24 maxlen: 24
87.123.196.0/24 maxlen: 24
87.123.197.0/24 maxlen: 24
88.130.32.0/20 maxlen: 20
88.130.54.0/23 maxlen: 23
88.130.64.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.180.0/23 maxlen: 23
46.142.96.0/20 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.128.0/19 maxlen: 19
46.142.224.0/19 maxlen: 19
185.128.68.0/22 maxlen: 22
94.134.196.0/24 maxlen: 24
46.142.64.0/19 maxlen: 20
212.7.128.0/19 maxlen: 19
46.142.0.0/18 maxlen: 20
46.142.0.0/16 maxlen: 16
213.182.128.0/19 maxlen: 19
2001:7b0::/32 maxlen: 32
2a00:fb8:6000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8::/35 maxlen: 35
2001:9e8:4140::/42 maxlen: 42
2001:9e8:3540::/42 maxlen: 42
2001:9e8:2140::/42 maxlen: 42
2001:9e8:4000::/48 maxlen: 48
2001:9e8:2000::/48 maxlen: 48
2001:9e8:2003::/48 maxlen: 48
2001:9e8:3980::/42 maxlen: 42
2001:9e8:4001::/48 maxlen: 48
2001:9e8:2001::/48 maxlen: 48
2001:16b8::/32 maxlen: 40
2001:9e8:50c0::/42 maxlen: 42
2001:9e8:39c0::/42 maxlen: 42
2001:9e8:a000::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8::/32 maxlen: 32
2001:9e8:e000::/35 maxlen: 36
2a00:fb8::/29 maxlen: 29
2001:9e8:4100::/42 maxlen: 42
2001:9e8:3a00::/42 maxlen: 42
2001:9e8:5100::/42 maxlen: 42
2001:9e8:3500::/42 maxlen: 42
2001:1438::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fc:64:6b:f6:9c:95:48:c7:af:5e:c6:10:b1:d3:e5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Nov 23 13:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aacb9fe4c6550017e37ae696b60b61a2d762415b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:20:e6:eb:58:b4:ba:d4:75:2c:69:ff:e4:
79:55:ea:0d:d2:bd:51:81:68:32:85:2c:c5:8c:39:
cd:75:39:bf:73:49:1a:2e:e8:e5:30:ac:cc:8b:54:
06:c4:a2:4a:9b:60:04:00:81:8e:3c:1d:e4:2c:7f:
a8:a2:05:f9:de:1a:5c:bb:23:61:78:9a:16:a6:67:
46:ff:ed:e8:26:33:a6:5b:89:dc:34:68:4d:34:82:
48:88:79:7e:36:f5:e5:45:29:59:e3:a3:20:ae:dc:
b5:5e:74:b9:16:ff:a3:16:4c:a5:93:87:11:ec:60:
8e:30:3a:f0:ee:b5:d2:05:3f:b0:32:99:c8:33:97:
a1:64:87:9e:5d:1d:d5:f4:b0:db:49:b8:20:67:c4:
6e:41:a7:54:b1:10:3b:a7:cb:d7:99:fa:64:d1:a4:
4b:58:a0:8f:66:ae:44:c3:0d:52:05:bd:62:79:f3:
38:23:cc:3e:8c:2f:ed:59:18:43:71:0e:6d:78:f1:
2f:6e:6c:8a:48:65:e4:11:a1:16:cf:2f:59:7b:8c:
5a:3f:a8:f4:9e:f6:22:51:d1:04:b9:2b:d6:e3:f5:
3c:88:3f:78:00:48:49:6c:69:13:cb:86:7b:20:fc:
ad:cb:b5:34:c7:b7:5f:a1:b2:77:a3:34:1e:2c:23:
97:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CB:9F:E4:C6:55:00:17:E3:7A:E6:96:B6:0B:61:A2:D7:62:41:5B
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/qsuf5MZVABfjeuaWtgthotdiQVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
3f:ad:a5:d5:d5:28:cc:57:51:d1:f3:6f:8e:93:5e:aa:1a:4c:
5f:80:60:08:7d:8f:fa:67:43:c8:f1:25:67:ec:b4:e1:74:03:
b5:8b:9e:3e:5a:08:d9:4b:14:12:d2:1c:ed:c7:06:82:10:22:
8a:33:44:d2:f5:c0:c6:ae:4b:14:7a:af:01:10:2a:e0:2c:7b:
3a:51:3e:49:db:28:bc:8f:4d:4b:39:e8:d4:ba:78:8c:5c:d2:
b4:b1:db:ff:73:4d:60:fe:8e:3c:25:69:dd:cd:3b:cb:49:1b:
1f:6b:bb:30:cc:f9:fe:39:df:bd:e0:9d:7d:fd:fe:85:c2:bd:
83:34:8c:48:b4:9d:7b:ff:3f:c7:cd:b8:34:6c:57:a5:8c:da:
6c:8e:b2:ce:38:b8:9c:56:4f:76:5e:25:a9:37:53:2b:fc:99:
5e:e7:a1:54:58:48:04:86:ae:7d:6d:1e:9e:87:6b:db:37:dc:
d7:c7:0f:fd:b3:d0:69:de:a2:88:26:56:2e:7c:0a:12:be:fb:
bd:41:ff:ac:50:7d:85:4e:f9:e4:ac:57:52:0c:d3:e1:23:39:
13:24:41:c8:a4:09:c1:d5:c7:80:10:0a:33:0e:73:80:b1:e6:
03:76:fa:6c:8a:8b:3a:13:9f:b6:2c:7b:e6:19:a1:4c:3e:c7:
9a:31:53:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 15:22:06 2025 by rpki-client