Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/8kIU_zUkhntoxRgthJUM4bDQGjs.roa
File: 8kIU_zUkhntoxRgthJUM4bDQGjs.roa (raw, json)
Hash identifier: 0LldXm1IGlW3RN352L+k0fAC1jAd/PpYlblq74KUudA=
Subject key identifier: F2:42:14:FF:35:24:86:7B:68:C5:18:2D:84:95:0C:E1:B0:D0:1A:3B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018258FC434DE2787414388FE9CD2A9A940F
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/8kIU_zUkhntoxRgthJUM4bDQGjs.roa
Signing time: Mon 01 Aug 2022 10:38:23 +0000
ROA not before: Mon 01 Aug 2022 10:38:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9125
IP address blocks: 188.255.136.0/21 maxlen: 21
188.255.139.0/24 maxlen: 24
188.255.137.0/24 maxlen: 24
188.255.133.0/24 maxlen: 24
188.255.142.0/23 maxlen: 23
188.255.144.0/20 maxlen: 20
188.255.145.0/24 maxlen: 24
193.107.4.0/22 maxlen: 22
188.255.204.0/24 maxlen: 24
188.255.201.0/24 maxlen: 24
188.255.203.0/24 maxlen: 24
188.255.202.0/24 maxlen: 24
109.121.16.0/20 maxlen: 20
109.121.12.0/22 maxlen: 22
109.121.30.0/24 maxlen: 24
188.255.221.0/24 maxlen: 24
188.255.223.0/24 maxlen: 24
188.255.220.0/24 maxlen: 24
188.255.222.0/23 maxlen: 23
188.255.224.0/22 maxlen: 22
109.121.32.0/21 maxlen: 21
188.255.232.0/22 maxlen: 22
109.121.44.0/23 maxlen: 23
109.121.40.0/22 maxlen: 22
188.255.230.0/23 maxlen: 24
188.255.233.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.240.0/23 maxlen: 23
109.121.48.0/21 maxlen: 21
109.121.46.0/23 maxlen: 23
188.255.242.0/23 maxlen: 23
109.121.56.0/22 maxlen: 22
109.121.60.0/22 maxlen: 22
188.255.249.0/24 maxlen: 24
188.255.152.0/21 maxlen: 24
188.255.148.0/22 maxlen: 24
188.255.146.0/23 maxlen: 24
188.255.160.0/20 maxlen: 20
188.255.176.0/20 maxlen: 20
188.255.181.0/24 maxlen: 24
188.255.184.0/23 maxlen: 23
188.255.186.0/23 maxlen: 23
188.255.189.0/24 maxlen: 24
188.255.188.0/24 maxlen: 24
109.121.0.0/18 maxlen: 18
188.255.194.0/24 maxlen: 24
109.121.8.0/22 maxlen: 22
188.255.196.0/22 maxlen: 22
93.186.79.0/24 maxlen: 24
178.253.192.0/21 maxlen: 21
178.253.204.0/23 maxlen: 23
178.253.200.0/22 maxlen: 22
178.253.206.0/24 maxlen: 24
178.253.208.0/23 maxlen: 23
178.253.211.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.224.0/21 maxlen: 21
178.253.220.0/23 maxlen: 23
178.253.223.0/24 maxlen: 24
93.186.70.0/24 maxlen: 24
93.186.66.0/24 maxlen: 24
93.186.73.0/24 maxlen: 24
178.253.232.0/23 maxlen: 23
178.253.239.0/24 maxlen: 24
178.253.234.0/24 maxlen: 24
109.233.186.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.242.0/24 maxlen: 24
178.253.241.0/24 maxlen: 24
109.233.191.0/24 maxlen: 24
109.233.187.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
178.253.247.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
178.253.248.0/21 maxlen: 21
81.18.58.0/24 maxlen: 24
81.18.54.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
81.18.62.0/24 maxlen: 24
81.18.59.0/24 maxlen: 24
81.18.60.0/24 maxlen: 24
178.219.0.0/22 maxlen: 22
178.219.10.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
178.219.14.0/24 maxlen: 24
77.105.13.0/24 maxlen: 24
77.105.12.0/24 maxlen: 24
77.105.14.0/24 maxlen: 24
77.105.16.0/20 maxlen: 20
77.105.15.0/24 maxlen: 24
77.105.17.0/24 maxlen: 24
77.105.23.0/24 maxlen: 24
77.105.24.0/24 maxlen: 24
77.105.20.0/24 maxlen: 24
77.105.21.0/24 maxlen: 24
77.105.30.0/24 maxlen: 24
77.105.29.0/24 maxlen: 24
77.105.27.0/24 maxlen: 24
77.105.26.0/24 maxlen: 24
77.105.28.0/24 maxlen: 24
77.105.25.0/24 maxlen: 24
77.105.36.0/23 maxlen: 23
77.105.36.0/22 maxlen: 22
77.105.32.0/22 maxlen: 22
77.105.32.0/19 maxlen: 19
77.105.38.0/24 maxlen: 24
77.105.44.0/24 maxlen: 24
77.105.43.0/24 maxlen: 24
77.105.40.0/24 maxlen: 24
77.105.41.0/24 maxlen: 24
77.105.48.0/20 maxlen: 20
77.105.46.0/23 maxlen: 23
77.105.45.0/24 maxlen: 24
77.105.0.0/24 maxlen: 24
77.105.0.0/22 maxlen: 22
77.105.11.0/24 maxlen: 24
77.105.10.0/24 maxlen: 24
77.105.5.0/24 maxlen: 24
77.105.7.0/24 maxlen: 24
77.105.8.0/23 maxlen: 23
46.16.104.0/21 maxlen: 21
212.69.17.0/24 maxlen: 24
212.69.16.0/24 maxlen: 24
212.69.15.0/24 maxlen: 24
212.69.20.0/24 maxlen: 24
212.69.28.0/22 maxlen: 22
212.69.28.0/23 maxlen: 23
212.69.31.0/24 maxlen: 24
194.28.131.0/24 maxlen: 24
194.28.129.0/24 maxlen: 24
212.69.2.0/24 maxlen: 24
212.69.8.0/23 maxlen: 23
79.175.97.0/24 maxlen: 24
79.175.94.0/24 maxlen: 24
79.175.96.0/22 maxlen: 22
79.175.98.0/23 maxlen: 23
79.175.92.0/23 maxlen: 24
79.175.102.0/24 maxlen: 24
79.175.104.0/21 maxlen: 24
79.175.100.0/23 maxlen: 24
79.175.111.0/24 maxlen: 24
79.175.112.0/24 maxlen: 24
79.175.114.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.113.0/24 maxlen: 24
79.175.119.0/24 maxlen: 24
79.175.120.0/22 maxlen: 22
79.175.125.0/24 maxlen: 24
79.175.124.0/24 maxlen: 24
79.175.121.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
79.175.123.0/24 maxlen: 24
79.175.122.0/24 maxlen: 24
79.175.126.0/23 maxlen: 24
188.255.255.0/24 maxlen: 24
79.175.64.0/23 maxlen: 24
79.175.64.0/21 maxlen: 21
79.175.64.0/20 maxlen: 20
79.175.68.0/22 maxlen: 24
79.175.64.0/18 maxlen: 18
79.175.72.0/21 maxlen: 21
79.175.80.0/20 maxlen: 20
79.175.80.0/21 maxlen: 24
79.175.88.0/22 maxlen: 24
80.74.160.0/20 maxlen: 20
2a00:8100::/32 maxlen: 32
2a02:660::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:fc:43:4d:e2:78:74:14:38:8f:e9:cd:2a:9a:94:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 1 10:38:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f24214ff3524867b68c5182d84950ce1b0d01a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:aa:f5:f9:f7:a1:83:b1:86:b5:69:35:c1:
6b:c6:56:af:ae:38:50:93:e0:d7:38:0d:71:1c:e0:
d1:5e:30:d0:a8:dd:96:2e:c1:17:80:57:62:4f:b2:
13:db:e8:eb:d9:78:f4:97:b3:73:78:5a:f9:f0:62:
13:60:43:82:83:fa:2b:bb:9e:d2:56:75:42:16:c3:
ed:aa:b9:c5:69:58:fb:36:77:b8:df:f4:93:17:d1:
40:75:bc:00:10:e6:00:bc:51:76:d8:df:4d:ec:b3:
69:a5:5d:8e:07:c0:83:d2:8e:ff:af:b9:08:6a:58:
f5:14:89:9f:83:c4:13:fe:5e:22:4c:e3:1e:06:1e:
db:4d:c5:7a:50:53:28:42:34:6f:77:63:47:2c:29:
42:f2:fd:79:17:6e:98:16:2a:92:5e:6f:60:f4:d9:
59:94:f8:89:15:71:4c:61:11:20:8d:01:1d:7a:68:
65:7f:16:8b:4f:7d:3b:e4:61:78:29:d5:00:77:c1:
a6:2a:6e:46:92:bb:f5:07:50:f7:7b:bc:5f:2a:35:
ab:ea:20:01:6e:d0:a1:2e:fc:7f:c4:dc:98:a0:51:
16:58:a1:6f:3a:78:fb:43:bc:cc:ab:be:42:b3:5d:
bd:c5:fe:23:3f:7c:da:6c:62:39:27:2c:56:15:fd:
ae:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:42:14:FF:35:24:86:7B:68:C5:18:2D:84:95:0C:E1:B0:D0:1A:3B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/8kIU_zUkhntoxRgthJUM4bDQGjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.104.0/21
77.105.0.0/22
77.105.5.0/24
77.105.7.0-77.105.63.255
79.175.64.0/18
80.74.160.0/20
81.18.50.0/24
81.18.54.0/24
81.18.58.0-81.18.60.255
81.18.62.0/23
93.186.66.0/24
93.186.70.0/24
93.186.73.0/24
93.186.79.0/24
109.121.0.0/18
109.233.186.0-109.233.188.255
109.233.191.0/24
178.219.0.0/22
178.219.10.0/24
178.219.12.0-178.219.14.255
178.253.192.0-178.253.206.255
178.253.208.0/23
178.253.211.0/24
178.253.217.0/24
178.253.219.0-178.253.221.255
178.253.223.0-178.253.234.255
178.253.239.0/24
178.253.241.0-178.253.242.255
178.253.246.0-178.253.255.255
188.215.228.0/24
188.255.133.0/24
188.255.136.0-188.255.191.255
188.255.194.0/24
188.255.196.0/22
188.255.201.0-188.255.204.255
188.255.220.0-188.255.228.255
188.255.230.0-188.255.235.255
188.255.240.0/22
188.255.249.0/24
188.255.255.0/24
193.107.4.0/22
194.28.129.0/24
194.28.131.0/24
212.69.2.0/24
212.69.8.0/23
212.69.15.0-212.69.17.255
212.69.20.0/24
212.69.28.0/22
IPv6:
2a00:8100::/32
2a02:660::/32
Signature Algorithm: sha256WithRSAEncryption
9e:d9:71:62:e8:08:e9:3e:56:25:f5:fb:0b:43:c6:97:9c:9f:
65:36:b4:32:34:49:d9:eb:1b:89:6a:bf:9f:35:51:40:0a:8b:
db:e2:11:50:6e:49:a2:f1:17:35:6f:24:1c:cb:a5:83:88:9d:
98:43:81:ff:38:ee:d0:9d:b8:bd:8e:5f:93:b2:44:82:08:02:
63:c5:5e:a2:00:23:81:3e:b9:75:ad:aa:c7:72:35:f4:4f:0c:
ac:8b:5f:a8:04:6e:2f:38:29:3b:9d:69:30:b5:02:69:9f:03:
fa:4a:ec:c0:99:71:8e:9b:4f:81:24:a2:97:a2:8e:77:fe:c0:
2b:4d:ff:14:c1:34:a3:88:1d:fb:30:a7:2b:f0:5d:07:5b:9d:
ad:e6:9f:b0:bd:64:47:c1:04:2a:ce:85:91:55:32:34:27:c6:
b5:f8:aa:71:2f:69:b8:2d:2d:02:d7:fa:da:00:ca:fa:19:48:
c0:0b:d8:98:6f:b0:d9:b5:58:da:a4:97:06:0b:c2:3e:b9:a0:
bd:42:17:d6:d3:8f:86:f0:b7:d1:cd:90:21:9d:30:f4:44:eb:
38:c6:ef:ff:2d:94:d2:b3:76:0a:1a:da:00:f3:a1:58:f9:21:
85:4e:ed:5c:b0:e1:70:36:ad:3e:6c:90:b3:92:58:c6:4b:b7:
33:da:67:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:25 2024 by rpki-client on console-fra.rpki-client.org