Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/ilZdTHDAGoydg5f1pburSbI6vzs.roa
File: ilZdTHDAGoydg5f1pburSbI6vzs.roa (raw, json)
Hash identifier: b9Uvw8cuKD2tMv0ttmt5Xm0xQsWMRR/csSqeBvvgWRs=
Subject key identifier: 8A:56:5D:4C:70:C0:1A:8C:9D:83:97:F5:A5:BB:AB:49:B2:3A:BF:3B
Certificate issuer: /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial: 0182B4E4DC586030A6F96281E8E07DA685B4
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/ilZdTHDAGoydg5f1pburSbI6vzs.roa
Signing time: Fri 19 Aug 2022 06:57:53 +0000
ROA not before: Fri 19 Aug 2022 06:57:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199610
IP address blocks: 31.214.193.0/24 maxlen: 24
31.214.196.0/22 maxlen: 22
31.214.195.0/24 maxlen: 24
31.214.202.0/23 maxlen: 23
31.214.204.0/22 maxlen: 22
31.214.208.0/22 maxlen: 22
31.214.216.0/24 maxlen: 24
31.214.218.0/24 maxlen: 24
31.214.219.0/24 maxlen: 24
31.214.224.0/22 maxlen: 22
31.214.227.0/24 maxlen: 24
31.214.232.0/21 maxlen: 21
134.255.208.0/23 maxlen: 23
134.255.212.0/23 maxlen: 23
134.255.214.0/24 maxlen: 24
134.255.240.0/24 maxlen: 24
134.255.251.0/24 maxlen: 24
134.255.198.0/24 maxlen: 24
31.214.134.0/23 maxlen: 23
31.214.136.0/24 maxlen: 24
31.214.142.0/23 maxlen: 23
31.214.148.0/24 maxlen: 24
45.140.128.0/23 maxlen: 23
45.140.131.0/24 maxlen: 24
31.214.158.0/23 maxlen: 23
31.214.161.0/24 maxlen: 24
31.214.160.0/24 maxlen: 24
31.214.162.0/23 maxlen: 23
31.214.166.0/24 maxlen: 24
31.214.130.0/23 maxlen: 23
31.214.128.0/24 maxlen: 24
37.10.96.0/21 maxlen: 21
37.10.106.0/24 maxlen: 24
37.10.115.0/24 maxlen: 24
37.10.120.0/22 maxlen: 22
37.10.119.0/24 maxlen: 24
37.10.124.0/22 maxlen: 22
45.159.4.0/23 maxlen: 23
45.159.7.0/24 maxlen: 24
45.159.6.0/24 maxlen: 24
5.83.160.0/22 maxlen: 24
5.83.164.0/24 maxlen: 24
5.83.165.0/24 maxlen: 24
5.83.163.0/24 maxlen: 24
5.83.172.0/23 maxlen: 23
5.83.167.0/24 maxlen: 24
5.83.168.0/22 maxlen: 22
5.83.174.0/23 maxlen: 23
46.251.231.0/24 maxlen: 24
46.251.228.0/24 maxlen: 24
46.251.229.0/24 maxlen: 24
46.251.232.0/23 maxlen: 23
185.9.104.0/22 maxlen: 22
46.251.234.0/24 maxlen: 24
46.251.238.0/24 maxlen: 24
46.251.235.0/24 maxlen: 24
46.251.236.0/24 maxlen: 24
46.251.240.0/21 maxlen: 21
85.190.138.0/23 maxlen: 23
85.190.134.0/23 maxlen: 23
85.190.137.0/24 maxlen: 24
109.230.243.0/24 maxlen: 24
109.230.248.0/23 maxlen: 23
85.190.141.0/24 maxlen: 24
95.156.220.0/23 maxlen: 23
95.156.224.0/24 maxlen: 24
85.190.143.0/24 maxlen: 24
85.190.144.0/24 maxlen: 24
85.190.145.0/24 maxlen: 24
85.190.152.0/24 maxlen: 24
85.190.147.0/24 maxlen: 24
85.190.148.0/24 maxlen: 24
85.190.146.0/24 maxlen: 24
85.190.150.0/24 maxlen: 24
85.190.149.0/24 maxlen: 24
85.190.154.0/24 maxlen: 24
85.190.155.0/24 maxlen: 24
85.190.153.0/24 maxlen: 24
95.156.238.0/24 maxlen: 24
85.190.158.0/24 maxlen: 24
95.156.239.0/24 maxlen: 24
85.190.156.0/23 maxlen: 23
85.190.159.0/24 maxlen: 24
85.190.160.0/22 maxlen: 22
85.190.164.0/22 maxlen: 22
85.190.168.0/22 maxlen: 22
95.156.250.0/24 maxlen: 24
109.230.197.0/24 maxlen: 24
5.62.96.0/20 maxlen: 20
109.230.208.0/24 maxlen: 24
109.230.211.0/24 maxlen: 24
195.82.158.0/23 maxlen: 23
109.230.214.0/24 maxlen: 24
95.156.193.0/24 maxlen: 24
95.156.194.0/24 maxlen: 24
5.62.112.0/21 maxlen: 21
95.156.198.0/24 maxlen: 24
5.62.120.0/22 maxlen: 22
5.62.124.0/23 maxlen: 23
5.62.127.0/24 maxlen: 24
5.62.126.0/24 maxlen: 24
95.156.210.0/24 maxlen: 24
95.156.211.0/24 maxlen: 24
85.190.130.0/23 maxlen: 23
85.190.128.0/23 maxlen: 23
95.156.209.0/24 maxlen: 24
95.156.213.0/24 maxlen: 24
109.230.240.0/23 maxlen: 23
5.62.64.0/21 maxlen: 21
194.169.211.0/24 maxlen: 24
217.114.192.0/21 maxlen: 21
128.0.112.0/23 maxlen: 23
128.0.114.0/23 maxlen: 23
5.101.160.0/21 maxlen: 21
5.101.166.0/24 maxlen: 24
2a03:4d45::/37 maxlen: 37
2a03:4d45:800::/37 maxlen: 37
2a03:4d44:2000::/37 maxlen: 37
2a03:4d40::/32 maxlen: 32
2a03:4d43::/32 maxlen: 32
2a03:4d43::/37 maxlen: 37
2a03:4d43:800::/37 maxlen: 37
2a03:4d43:2000::/37 maxlen: 37
2a03:4d41::/40 maxlen: 40
2a03:4d42::/37 maxlen: 37
2a03:4d42:800::/37 maxlen: 37
2a03:4d41:100::/40 maxlen: 40
2a03:4d41:200::/40 maxlen: 40
2a03:4d41:300::/40 maxlen: 40
2a03:4d41:900::/40 maxlen: 40
2a03:4d41:600::/40 maxlen: 40
2a03:4d41:400::/40 maxlen: 40
2a03:4d41:500::/40 maxlen: 40
2a03:4d42::/32 maxlen: 32
2a03:4d41::/44 maxlen: 44
2a03:4d41:100::/44 maxlen: 44
2a03:4d41:200::/44 maxlen: 44
2a03:4d41:300::/44 maxlen: 44
2a03:4d41:400::/44 maxlen: 44
2a03:4d41:500::/44 maxlen: 44
2a03:4d41:600::/44 maxlen: 44
2a03:4d41:10::/44 maxlen: 44
2a03:4d41:210::/44 maxlen: 44
2a03:4d41:510::/44 maxlen: 44
2a03:4d41:610::/44 maxlen: 44
2a03:4d47::/48 maxlen: 48
2a03:4d47:800::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b4:e4:dc:58:60:30:a6:f9:62:81:e8:e0:7d:a6:85:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Validity
Not Before: Aug 19 06:57:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a565d4c70c01a8c9d8397f5a5bbab49b23abf3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3d:8c:1a:1e:65:ab:65:ad:6f:53:68:8d:60:
1f:64:4b:c6:02:dc:26:d4:6a:5c:4d:fe:38:58:c4:
27:39:4c:54:7f:95:80:4a:0b:e6:da:5e:c9:58:fe:
56:08:95:25:2b:a4:ff:2a:8b:e6:92:c7:26:c7:d0:
f2:c2:92:2b:dd:1c:be:97:82:d8:1d:36:ec:75:f8:
cc:94:ce:b0:f7:fe:98:91:93:eb:bf:d8:96:4e:d5:
77:ef:da:19:82:6b:1d:15:c9:e5:2c:3f:de:6b:61:
cb:d0:dd:32:fd:f4:f0:f2:70:8a:42:9b:e3:bd:f0:
77:8c:58:78:16:2c:1f:41:ed:15:28:8e:b6:8b:89:
55:33:75:7c:7d:fe:ee:4f:e0:dd:fa:34:74:4d:9c:
e4:c1:2c:35:94:5e:50:52:3c:5f:bd:c0:54:41:bd:
73:d5:21:b6:a2:0b:97:90:bc:57:b4:f8:1f:c2:ee:
91:5a:32:94:91:af:41:0f:aa:06:fd:48:ab:0b:7f:
c9:c5:c3:1c:d3:ee:4b:18:d8:16:21:cc:f9:35:72:
4d:52:4c:19:30:dd:73:76:0e:8c:6a:5d:ba:5a:83:
58:d6:df:12:d5:a4:2f:66:9a:34:0e:2a:5c:3d:4b:
30:ac:f5:1c:a6:14:a8:c5:26:74:b3:00:ba:02:bf:
30:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:56:5D:4C:70:C0:1A:8C:9D:83:97:F5:A5:BB:AB:49:B2:3A:BF:3B
X509v3 Authority Key Identifier:
keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/ilZdTHDAGoydg5f1pburSbI6vzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.64.0/21
5.62.96.0/19
5.83.160.0-5.83.165.255
5.83.167.0-5.83.175.255
5.101.160.0/21
31.214.128.0/24
31.214.130.0/23
31.214.134.0-31.214.136.255
31.214.142.0/23
31.214.148.0/24
31.214.158.0-31.214.163.255
31.214.166.0/24
31.214.193.0/24
31.214.195.0-31.214.199.255
31.214.202.0-31.214.211.255
31.214.216.0/24
31.214.218.0/23
31.214.224.0/22
31.214.232.0/21
37.10.96.0/21
37.10.106.0/24
37.10.115.0/24
37.10.119.0-37.10.127.255
45.140.128.0/23
45.140.131.0/24
45.159.4.0/22
46.251.228.0/23
46.251.231.0-46.251.236.255
46.251.238.0/24
46.251.240.0/21
85.190.128.0/22
85.190.134.0/23
85.190.137.0-85.190.139.255
85.190.141.0/24
85.190.143.0-85.190.150.255
85.190.152.0-85.190.171.255
95.156.193.0-95.156.194.255
95.156.198.0/24
95.156.209.0-95.156.211.255
95.156.213.0/24
95.156.220.0/23
95.156.224.0/24
95.156.238.0/23
95.156.250.0/24
109.230.197.0/24
109.230.208.0/24
109.230.211.0/24
109.230.214.0/24
109.230.240.0/23
109.230.243.0/24
109.230.248.0/23
128.0.112.0/22
134.255.198.0/24
134.255.208.0/23
134.255.212.0-134.255.214.255
134.255.240.0/24
134.255.251.0/24
185.9.104.0/22
194.169.211.0/24
195.82.158.0/23
217.114.192.0/21
IPv6:
2a03:4d40::-2a03:4d41:6ff:ffff:ffff:ffff:ffff:ffff
2a03:4d41:900::/40
2a03:4d42::/31
2a03:4d44:2000::/37
2a03:4d45::/36
2a03:4d47::/48
2a03:4d47:800::/48
Signature Algorithm: sha256WithRSAEncryption
96:be:08:db:aa:0b:15:98:68:5f:39:2d:17:f3:84:9a:c9:2f:
6e:a1:c1:4b:62:14:3d:85:fb:46:ff:9e:6c:f4:e8:c2:bc:d3:
48:c4:b3:94:30:e2:c1:39:1a:77:88:2e:04:43:ac:f1:78:9f:
f2:c3:82:d6:1c:5a:6c:df:0b:83:35:12:44:92:5b:32:09:c1:
ee:a4:ac:ff:aa:c3:8b:92:42:df:d4:f2:84:46:7e:7b:05:5c:
22:fe:3b:23:17:af:c7:ee:95:0a:a9:d0:1e:1d:89:78:6f:57:
9b:23:1f:13:e0:67:b6:e5:41:c5:a6:da:52:f8:3e:65:5c:59:
7a:6a:89:f7:de:6d:62:fe:a0:ef:16:4d:92:ea:f5:cd:e3:63:
96:92:a2:a1:a9:6c:ee:bd:91:f4:75:25:d0:7a:ea:de:4a:54:
24:2a:75:f4:8a:af:26:e6:76:17:8b:d6:9e:ee:81:69:6b:ef:
5e:03:24:fb:fe:ed:4e:a3:40:66:ce:fc:19:76:55:6d:cf:3c:
b1:f7:a1:ab:cf:14:04:ee:db:e2:64:c5:7a:cf:09:bf:f4:c9:
41:86:ee:5b:c5:db:d9:5f:a7:5b:7d:02:1f:8c:11:a3:a7:8e:
9f:8a:4c:ea:6b:33:63:43:9a:f8:04:8b:e0:fb:fc:57:4a:be:
9b:2a:1e:61
-----BEGIN CERTIFICATE-----
MIIHKTCCBhGgAwIBAgISAYK05NxYYDCm+WKB6OB9poW0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTZkNTYwYTA4YTAxM2YzZmUwZTY2ZGFkYWY2ZmQwMmJl
YWY0M2YwHhcNMjIwODE5MDY1NzUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTU2NWQ0YzcwYzAxYThjOWQ4Mzk3ZjVhNWJiYWI0OWIyM2FiZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz2MGh5lq2Wtb1NojWAfZEvGAtwm
1GpcTf44WMQnOUxUf5WASgvm2l7JWP5WCJUlK6T/Kovmkscmx9DywpIr3Ry+l4LY
HTbsdfjMlM6w9/6YkZPrv9iWTtV379oZgmsdFcnlLD/ea2HL0N0y/fTw8nCKQpvj
vfB3jFh4FiwfQe0VKI62i4lVM3V8ff7uT+Dd+jR0TZzkwSw1lF5QUjxfvcBUQb1z
1SG2oguXkLxXtPgfwu6RWjKUka9BD6oG/UirC3/JxcMc0+5LGNgWIcz5NXJNUkwZ
MN1zdg6Mal26WoNY1t8S1aQvZpo0DipcPUswrPUcphSoxSZ0swC6Ar8wywIDAQAB
o4IENTCCBDEwHQYDVR0OBBYEFIpWXUxwwBqMnYOX9aW7q0myOr87MB8GA1UdIwQY
MBaAFC7m1WCgigE/P+Dmba2vb9Ar6vQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2It
NzM0OTVmYzA4ZmM0LzEvaWxaZFRIREFHb3lkZzVmMXBidXJTYkk2dnpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2ItNzM0OTVmYzA4ZmM0
LzEvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICSQYIKwYBBQUHAQcBAf8EggI4MIICNDCCAeYEAgABMIIB
3gMEAwU+QAMEBQU+YDAMAwQFBVOgAwQBBVOkMAwDBAAFU6cDBAQFU6ADBAMFZaAD
BAAf1oADBAEf1oIwDAMEAR/WhgMEAB/WiAMEAR/WjgMEAB/WlDAMAwQBH9aeAwQC
H9agAwQAH9amAwQAH9bBMAwDBAAf1sMDBAMf1sAwDAMEAR/WygMEAh/W0AMEAB/W
2AMEAR/W2gMEAh/W4AMEAx/W6AMEAyUKYAMEACUKagMEACUKczAMAwQAJQp3AwQH
JQoAAwQBLYyAAwQALYyDAwQCLZ8EAwQBLvvkMAwDBAAu++cDBAAu++wDBAAu++4D
BAMu+/ADBAJVvoADBAFVvoYwDAMEAFW+iQMEAlW+iAMEAFW+jTAMAwQAVb6PAwQA
Vb6WMAwDBANVvpgDBAJVvqgwDAMEAF+cwQMEAF+cwgMEAF+cxjAMAwQAX5zRAwQC
X5zQAwQAX5zVAwQBX5zcAwQAX5zgAwQBX5zuAwQAX5z6AwQAbebFAwQAbebQAwQA
bebTAwQAbebWAwQBbebwAwQAbebzAwQBbeb4AwQCgABwAwQAhv/GAwQBhv/QMAwD
BAKG/9QDBACG/9YDBACG//ADBACG//sDBAK5CWgDBADCqdMDBAHDUp4DBAPZcsAw
SAQCAAIwQjAPAwUGKgNNQAMGACoDTUEGAwYAKgNNQQkDBQEqA01CAwYDKgNNRCAD
BgQqA01FAAMHACoDTUcAAAMHACoDTUcIADANBgkqhkiG9w0BAQsFAAOCAQEAlr4I
26oLFZhoXzktF/OEmskvbqHBS2IUPYX7Rv+ebPTowrzTSMSzlDDiwTkad4guBEOs
8Xif8sOC1hxabN8LgzUSRJJbMgnB7qSs/6rDi5JC39TyhEZ+ewVcIv47Ixevx+6V
CqnQHh2JeG9XmyMfE+BntuVBxabaUvg+ZVxZemqJ995tYv6g7xZNkur1zeNjlpKi
oals7r2R9HUl0Hrq3kpUJCp19IqvJuZ2F4vWnu6BaWvvXgMk+/7tTqNAZs78GXZV
bc88sfehq88UBO7b4mTFes8Jv/TJQYbuW8Xb2V+nW30CH4wRo6eOn4pM6mszY0Oa
+ASL4Pv8V0q+myoeYQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:07 2023 by rpki-client on console-ams.rpki-client.org