Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/NNy6hFJoZ329lzCR7n8Zdad14Fw.roa
File: NNy6hFJoZ329lzCR7n8Zdad14Fw.roa (raw, json)
Hash identifier: K0nTYtbYLsLBRuIWCnPp+jUgsQfJNdCdoE+kj45GhmQ=
Subject key identifier: 34:DC:BA:84:52:68:67:7D:BD:97:30:91:EE:7F:19:75:A7:75:E0:5C
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01842D73739D6BCE0FAAE1D8D05B600E69E5
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/NNy6hFJoZ329lzCR7n8Zdad14Fw.roa
Signing time: Mon 31 Oct 2022 09:50:51 +0000
ROA not before: Mon 31 Oct 2022 09:50:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9125
IP address blocks: 188.255.136.0/21 maxlen: 21
188.255.139.0/24 maxlen: 24
188.255.137.0/24 maxlen: 24
188.255.133.0/24 maxlen: 24
188.255.142.0/23 maxlen: 23
188.255.144.0/20 maxlen: 20
188.255.145.0/24 maxlen: 24
193.107.4.0/22 maxlen: 22
188.255.204.0/24 maxlen: 24
188.255.201.0/24 maxlen: 24
188.255.203.0/24 maxlen: 24
188.255.202.0/24 maxlen: 24
109.121.16.0/20 maxlen: 20
109.121.12.0/22 maxlen: 22
188.255.211.0/24 maxlen: 24
188.255.209.0/24 maxlen: 24
109.121.30.0/24 maxlen: 24
188.255.214.0/24 maxlen: 24
188.255.216.0/24 maxlen: 24
188.255.221.0/24 maxlen: 24
188.255.223.0/24 maxlen: 24
188.255.220.0/24 maxlen: 24
188.255.222.0/23 maxlen: 23
188.255.224.0/22 maxlen: 22
109.121.32.0/21 maxlen: 21
188.255.232.0/22 maxlen: 22
109.121.44.0/23 maxlen: 23
109.121.40.0/22 maxlen: 22
188.255.230.0/23 maxlen: 24
188.255.233.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.240.0/23 maxlen: 23
109.121.48.0/21 maxlen: 21
109.121.46.0/23 maxlen: 23
188.255.239.0/24 maxlen: 24
188.255.236.0/24 maxlen: 24
109.121.56.0/22 maxlen: 22
188.255.242.0/24 maxlen: 24
109.121.60.0/22 maxlen: 22
188.255.249.0/24 maxlen: 24
188.255.152.0/21 maxlen: 24
188.255.148.0/22 maxlen: 24
188.255.146.0/23 maxlen: 24
188.255.160.0/21 maxlen: 21
188.255.168.0/22 maxlen: 22
188.255.176.0/20 maxlen: 20
188.255.174.0/23 maxlen: 23
188.255.185.0/24 maxlen: 24
188.255.181.0/24 maxlen: 24
188.255.186.0/23 maxlen: 23
188.255.189.0/24 maxlen: 24
188.255.188.0/24 maxlen: 24
109.121.0.0/18 maxlen: 18
188.255.194.0/24 maxlen: 24
109.121.8.0/22 maxlen: 22
188.255.196.0/22 maxlen: 22
93.186.79.0/24 maxlen: 24
178.253.192.0/21 maxlen: 21
178.253.204.0/23 maxlen: 23
178.253.200.0/22 maxlen: 22
178.253.206.0/24 maxlen: 24
178.253.208.0/23 maxlen: 23
178.253.211.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.224.0/21 maxlen: 21
178.253.220.0/23 maxlen: 23
178.253.223.0/24 maxlen: 24
93.186.70.0/24 maxlen: 24
93.186.66.0/24 maxlen: 24
93.186.73.0/24 maxlen: 24
178.253.232.0/23 maxlen: 23
178.253.239.0/24 maxlen: 24
178.253.234.0/24 maxlen: 24
109.233.186.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.242.0/24 maxlen: 24
178.253.241.0/24 maxlen: 24
109.233.191.0/24 maxlen: 24
109.233.187.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
178.253.251.0/24 maxlen: 24
178.253.247.0/24 maxlen: 24
178.253.252.0/22 maxlen: 22
81.18.50.0/24 maxlen: 24
178.253.248.0/23 maxlen: 23
81.18.58.0/24 maxlen: 24
81.18.54.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
81.18.62.0/24 maxlen: 24
81.18.59.0/24 maxlen: 24
81.18.60.0/24 maxlen: 24
178.219.0.0/22 maxlen: 22
178.219.10.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
178.219.14.0/24 maxlen: 24
77.105.13.0/24 maxlen: 24
77.105.12.0/24 maxlen: 24
77.105.14.0/24 maxlen: 24
77.105.16.0/20 maxlen: 20
77.105.15.0/24 maxlen: 24
77.105.17.0/24 maxlen: 24
77.105.18.0/23 maxlen: 23
77.105.23.0/24 maxlen: 24
77.105.24.0/24 maxlen: 24
77.105.20.0/24 maxlen: 24
77.105.21.0/24 maxlen: 24
77.105.30.0/24 maxlen: 24
77.105.29.0/24 maxlen: 24
77.105.27.0/24 maxlen: 24
77.105.26.0/24 maxlen: 24
77.105.28.0/24 maxlen: 24
77.105.25.0/24 maxlen: 24
77.105.36.0/23 maxlen: 23
77.105.36.0/22 maxlen: 22
77.105.32.0/22 maxlen: 22
77.105.38.0/24 maxlen: 24
77.105.44.0/24 maxlen: 24
77.105.43.0/24 maxlen: 24
77.105.40.0/24 maxlen: 24
77.105.42.0/24 maxlen: 24
77.105.41.0/24 maxlen: 24
77.105.48.0/20 maxlen: 20
77.105.46.0/23 maxlen: 23
77.105.45.0/24 maxlen: 24
77.105.0.0/24 maxlen: 24
77.105.0.0/22 maxlen: 22
77.105.10.0/24 maxlen: 24
77.105.5.0/24 maxlen: 24
77.105.7.0/24 maxlen: 24
77.105.8.0/23 maxlen: 23
46.16.104.0/21 maxlen: 21
212.69.17.0/24 maxlen: 24
212.69.16.0/24 maxlen: 24
212.69.15.0/24 maxlen: 24
212.69.20.0/24 maxlen: 24
212.69.28.0/22 maxlen: 22
212.69.28.0/23 maxlen: 23
212.69.31.0/24 maxlen: 24
194.28.131.0/24 maxlen: 24
194.28.129.0/24 maxlen: 24
212.69.2.0/24 maxlen: 24
212.69.8.0/23 maxlen: 23
79.175.97.0/24 maxlen: 24
79.175.94.0/24 maxlen: 24
79.175.96.0/22 maxlen: 22
79.175.98.0/23 maxlen: 23
79.175.92.0/23 maxlen: 24
79.175.102.0/24 maxlen: 24
79.175.104.0/21 maxlen: 24
79.175.100.0/23 maxlen: 24
79.175.111.0/24 maxlen: 24
79.175.112.0/24 maxlen: 24
79.175.114.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.113.0/24 maxlen: 24
79.175.119.0/24 maxlen: 24
79.175.120.0/22 maxlen: 22
79.175.125.0/24 maxlen: 24
79.175.124.0/24 maxlen: 24
79.175.121.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
79.175.123.0/24 maxlen: 24
79.175.122.0/24 maxlen: 24
79.175.126.0/23 maxlen: 24
188.255.255.0/24 maxlen: 24
79.175.64.0/23 maxlen: 24
79.175.64.0/21 maxlen: 21
79.175.64.0/20 maxlen: 20
79.175.68.0/22 maxlen: 24
79.175.64.0/18 maxlen: 18
79.175.72.0/21 maxlen: 21
79.175.80.0/20 maxlen: 20
79.175.80.0/21 maxlen: 24
79.175.88.0/22 maxlen: 24
80.74.160.0/20 maxlen: 20
2a00:8100::/32 maxlen: 32
2a02:660::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:73:73:9d:6b:ce:0f:aa:e1:d8:d0:5b:60:0e:69:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 31 09:50:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34dcba845268677dbd973091ee7f1975a775e05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:40:c1:03:d2:0f:c1:c2:0c:26:69:ef:7a:f0:
08:5e:34:78:d3:50:f6:45:ad:bb:a9:d8:e8:ee:a7:
a2:9d:31:76:47:3a:0a:13:40:24:91:06:ce:55:ed:
9d:36:8e:f7:38:05:b0:ae:58:f1:ad:ca:6a:1d:5d:
7b:7e:7d:c2:18:a2:6f:7d:fd:fd:7e:a4:82:33:30:
27:2d:c4:b0:84:a4:7c:36:2a:8f:c4:58:ef:af:a6:
7b:18:9d:d4:23:d0:6e:e6:0e:75:b3:67:1f:fd:05:
4c:21:2a:25:60:95:e5:3e:37:96:35:27:cf:dc:40:
e8:45:26:7a:fe:af:17:9c:7a:6d:2d:59:94:f1:ad:
ed:f5:4c:45:e1:e8:fd:6b:ac:15:95:27:f8:0d:36:
85:e5:57:3d:10:7e:36:e0:27:b7:39:09:bc:f7:ee:
5a:b0:be:c7:d8:ca:15:2c:89:d1:9c:90:88:0c:88:
db:ad:30:4d:2c:ee:b4:57:81:1e:24:db:1b:e1:79:
2d:e1:a7:65:a5:e1:f8:14:16:94:ae:7a:96:45:b4:
d2:22:96:29:bc:3b:c5:f9:63:83:1c:90:c1:5b:b9:
af:10:64:57:34:1c:3f:49:e0:23:f9:6e:ad:b3:32:
08:f2:e5:b4:11:7d:e1:9b:5b:c9:62:ac:fd:9d:d8:
50:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DC:BA:84:52:68:67:7D:BD:97:30:91:EE:7F:19:75:A7:75:E0:5C
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/NNy6hFJoZ329lzCR7n8Zdad14Fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.104.0/21
77.105.0.0/22
77.105.5.0/24
77.105.7.0-77.105.10.255
77.105.12.0-77.105.63.255
79.175.64.0/18
80.74.160.0/20
81.18.50.0/24
81.18.54.0/24
81.18.58.0-81.18.60.255
81.18.62.0/23
93.186.66.0/24
93.186.70.0/24
93.186.73.0/24
93.186.79.0/24
109.121.0.0/18
109.233.186.0-109.233.188.255
109.233.191.0/24
178.219.0.0/22
178.219.10.0/24
178.219.12.0-178.219.14.255
178.253.192.0-178.253.206.255
178.253.208.0/23
178.253.211.0/24
178.253.217.0/24
178.253.219.0-178.253.221.255
178.253.223.0-178.253.234.255
178.253.239.0/24
178.253.241.0-178.253.242.255
178.253.246.0-178.253.249.255
178.253.251.0-178.253.255.255
188.215.228.0/24
188.255.133.0/24
188.255.136.0-188.255.171.255
188.255.174.0-188.255.191.255
188.255.194.0/24
188.255.196.0/22
188.255.201.0-188.255.204.255
188.255.209.0/24
188.255.211.0/24
188.255.214.0/24
188.255.216.0/24
188.255.220.0-188.255.228.255
188.255.230.0-188.255.236.255
188.255.239.0-188.255.242.255
188.255.249.0/24
188.255.255.0/24
193.107.4.0/22
194.28.129.0/24
194.28.131.0/24
212.69.2.0/24
212.69.8.0/23
212.69.15.0-212.69.17.255
212.69.20.0/24
212.69.28.0/22
IPv6:
2a00:8100::/32
2a02:660::/32
Signature Algorithm: sha256WithRSAEncryption
0d:63:50:3e:9d:2e:0e:72:eb:57:07:03:82:be:bf:1a:e3:2f:
62:ae:87:10:8d:e2:f7:c6:8b:c2:91:fc:91:4f:34:1e:04:c6:
2b:a8:64:32:97:11:91:69:77:e1:f5:1c:d5:f3:03:e1:91:48:
66:9e:fd:b0:b4:07:87:3e:8e:a0:96:5f:17:11:f1:f6:51:ee:
31:e3:e2:1f:0a:42:b3:04:ff:da:e0:4d:b0:d3:29:a0:39:dd:
dc:e5:46:47:a1:05:19:b6:28:52:f6:08:48:f4:b6:13:e9:f1:
59:eb:3f:f8:ef:86:1a:a4:ad:ab:92:ff:d7:2f:9a:bf:f8:2d:
be:31:1b:17:50:cb:f6:1c:3f:1e:cc:2a:57:1d:52:26:f8:ac:
ce:9c:58:77:93:d7:90:5b:c3:6b:7b:00:dd:94:f7:85:fa:25:
d5:12:73:0a:70:8b:3c:73:0f:4e:33:d4:bd:5b:80:89:69:29:
bd:93:54:b8:e8:4b:d4:1d:77:3b:41:ee:63:5e:fc:2d:9c:4c:
51:6f:67:0a:54:c6:83:49:8a:6e:ba:79:fe:c5:4f:84:95:7c:
f0:ff:45:f8:13:30:4c:d4:f3:bf:5e:f8:3a:f7:66:67:64:ad:
19:74:75:a0:52:05:77:d3:b6:52:50:dd:8d:ea:12:3f:76:a6:
48:f6:7b:33
-----BEGIN CERTIFICATE-----
MIIG8DCCBdigAwIBAgISAYQtc3Oda84PquHY0FtgDmnlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjIxMDMxMDk1MDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGRjYmE4NDUyNjg2NzdkYmQ5NzMwOTFlZTdmMTk3NWE3NzVlMDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikDBA9IPwcIMJmnvevAIXjR401D2
Ra27qdjo7qeinTF2RzoKE0AkkQbOVe2dNo73OAWwrljxrcpqHV17fn3CGKJvff39
fqSCMzAnLcSwhKR8NiqPxFjvr6Z7GJ3UI9Bu5g51s2cf/QVMISolYJXlPjeWNSfP
3EDoRSZ6/q8XnHptLVmU8a3t9UxF4ej9a6wVlSf4DTaF5Vc9EH424Ce3OQm89+5a
sL7H2MoVLInRnJCIDIjbrTBNLO60V4EeJNsb4Xkt4adlpeH4FBaUrnqWRbTSIpYp
vDvF+WODHJDBW7mvEGRXNBw/SeAj+W6tszII8uW0EX3hm1vJYqz9ndhQCwIDAQAB
o4ID/DCCA/gwHQYDVR0OBBYEFDTcuoRSaGd9vZcwke5/GXWndeBcMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvTk55NmhGSm9aMzI5bHpDUjduOFpkYWQxNEZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICEAYIKwYBBQUHAQcBAf8EggH/MIIB+zCCAeEEAgABMIIB
2QMEAy4QaAMEAk1pAAMEAE1pBTAMAwQATWkHAwQATWkKMAwDBAJNaQwDBAZNaQAD
BAZPr0ADBARQSqADBABREjIDBABREjYwDAMEAVESOgMEAFESPAMEAVESPgMEAF26
QgMEAF26RgMEAF26SQMEAF26TwMEBm15ADAMAwQBbem6AwQAbem8AwQAbem/AwQC
stsAAwQAstsKMAwDBAKy2wwDBACy2w4wDAMEBrL9wAMEALL9zgMEAbL90AMEALL9
0wMEALL92TAMAwQAsv3bAwQBsv3cMAwDBACy/d8DBACy/eoDBACy/e8wDAMEALL9
8QMEALL98jAMAwQBsv32AwQBsv34MAsDBACy/fsDAwGy/AMEALzX5AMEALz/hTAM
AwQDvP+IAwQCvP+oMAwDBAG8/64DBAa8/4ADBAC8/8IDBAK8/8QwDAMEALz/yQME
ALz/zAMEALz/0QMEALz/0wMEALz/1gMEALz/2DAMAwQCvP/cAwQAvP/kMAwDBAG8
/+YDBAC8/+wwDAMEALz/7wMEALz/8gMEALz/+QMEALz//wMEAsFrBAMEAMIcgQME
AMIcgwMEANRFAgMEAdRFCDAMAwQA1EUPAwQB1EUQAwQA1EUUAwQC1EUcMBQEAgAC
MA4DBQAqAIEAAwUAKgIGYDANBgkqhkiG9w0BAQsFAAOCAQEADWNQPp0uDnLrVwcD
gr6/GuMvYq6HEI3i98aLwpH8kU80HgTGK6hkMpcRkWl34fUc1fMD4ZFIZp79sLQH
hz6OoJZfFxHx9lHuMePiHwpCswT/2uBNsNMpoDnd3OVGR6EFGbYoUvYISPS2E+nx
Wes/+O+GGqStq5L/1y+av/gtvjEbF1DL9hw/HswqVx1SJviszpxYd5PXkFvDa3sA
3ZT3hfol1RJzCnCLPHMPTjPUvVuAiWkpvZNUuOhL1B13O0HuY178LZxMUW9nClTG
g0mKbrp5/sVPhJV88P9F+BMwTNTzv174OvdmZ2StGXR1oFIFd9O2UlDdjeoSP3am
SPZ7Mw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org