Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/OPbWBJz6RKrBqAIiGKO0Zpb83To.roa
File: OPbWBJz6RKrBqAIiGKO0Zpb83To.roa (raw, json)
Hash identifier: VrA6d2gnWgFXWk/WWte3brlHjobUWHW+gi0v4MQdmcE=
Subject key identifier: 38:F6:D6:04:9C:FA:44:AA:C1:A8:02:22:18:A3:B4:66:96:FC:DD:3A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018258C4696B0EA8904574F56B611FA3B073
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/OPbWBJz6RKrBqAIiGKO0Zpb83To.roa
Signing time: Mon 01 Aug 2022 09:37:23 +0000
ROA not before: Mon 01 Aug 2022 09:37:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9125
IP address blocks: 188.255.136.0/21 maxlen: 21
188.255.139.0/24 maxlen: 24
188.255.137.0/24 maxlen: 24
188.255.133.0/24 maxlen: 24
188.255.142.0/23 maxlen: 23
188.255.144.0/20 maxlen: 20
188.255.145.0/24 maxlen: 24
193.107.4.0/22 maxlen: 22
188.255.204.0/24 maxlen: 24
188.255.201.0/24 maxlen: 24
188.255.203.0/24 maxlen: 24
188.255.202.0/24 maxlen: 24
109.121.16.0/20 maxlen: 20
109.121.12.0/22 maxlen: 22
109.121.30.0/24 maxlen: 24
188.255.221.0/24 maxlen: 24
188.255.223.0/24 maxlen: 24
188.255.220.0/24 maxlen: 24
188.255.222.0/23 maxlen: 23
188.255.224.0/22 maxlen: 22
109.121.32.0/21 maxlen: 21
188.255.232.0/22 maxlen: 22
109.121.44.0/23 maxlen: 23
109.121.40.0/22 maxlen: 22
188.255.230.0/23 maxlen: 24
188.255.233.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.240.0/23 maxlen: 23
109.121.48.0/21 maxlen: 21
109.121.46.0/23 maxlen: 23
188.255.242.0/23 maxlen: 23
109.121.56.0/22 maxlen: 22
109.121.60.0/22 maxlen: 22
188.255.249.0/24 maxlen: 24
188.255.152.0/21 maxlen: 24
188.255.148.0/22 maxlen: 24
188.255.146.0/23 maxlen: 24
188.255.160.0/20 maxlen: 20
188.255.176.0/20 maxlen: 20
188.255.181.0/24 maxlen: 24
188.255.184.0/23 maxlen: 23
188.255.186.0/23 maxlen: 23
188.255.189.0/24 maxlen: 24
188.255.188.0/24 maxlen: 24
109.121.0.0/18 maxlen: 18
188.255.194.0/24 maxlen: 24
109.121.8.0/22 maxlen: 22
188.255.196.0/22 maxlen: 22
93.186.79.0/24 maxlen: 24
178.253.192.0/21 maxlen: 21
178.253.204.0/23 maxlen: 23
178.253.200.0/22 maxlen: 22
178.253.206.0/24 maxlen: 24
178.253.208.0/23 maxlen: 23
178.253.211.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.224.0/21 maxlen: 21
178.253.220.0/23 maxlen: 23
178.253.223.0/24 maxlen: 24
93.186.70.0/24 maxlen: 24
93.186.66.0/24 maxlen: 24
93.186.73.0/24 maxlen: 24
178.253.232.0/23 maxlen: 23
178.253.239.0/24 maxlen: 24
178.253.234.0/24 maxlen: 24
109.233.186.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.242.0/24 maxlen: 24
178.253.241.0/24 maxlen: 24
109.233.191.0/24 maxlen: 24
109.233.187.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
178.253.247.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
178.253.248.0/21 maxlen: 21
81.18.58.0/24 maxlen: 24
81.18.54.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
81.18.62.0/24 maxlen: 24
81.18.59.0/24 maxlen: 24
81.18.60.0/24 maxlen: 24
178.219.0.0/22 maxlen: 22
178.219.10.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
178.219.14.0/24 maxlen: 24
77.105.13.0/24 maxlen: 24
77.105.12.0/24 maxlen: 24
77.105.14.0/24 maxlen: 24
77.105.16.0/20 maxlen: 20
77.105.15.0/24 maxlen: 24
77.105.17.0/24 maxlen: 24
77.105.23.0/24 maxlen: 24
77.105.24.0/24 maxlen: 24
77.105.20.0/24 maxlen: 24
77.105.21.0/24 maxlen: 24
77.105.30.0/24 maxlen: 24
77.105.29.0/24 maxlen: 24
77.105.27.0/24 maxlen: 24
77.105.26.0/24 maxlen: 24
77.105.28.0/24 maxlen: 24
77.105.25.0/24 maxlen: 24
77.105.36.0/23 maxlen: 23
77.105.36.0/22 maxlen: 22
77.105.32.0/22 maxlen: 22
77.105.32.0/19 maxlen: 19
77.105.38.0/24 maxlen: 24
77.105.44.0/24 maxlen: 24
77.105.43.0/24 maxlen: 24
77.105.40.0/24 maxlen: 24
77.105.41.0/24 maxlen: 24
77.105.48.0/20 maxlen: 20
77.105.46.0/23 maxlen: 23
77.105.45.0/24 maxlen: 24
77.105.0.0/24 maxlen: 24
77.105.0.0/22 maxlen: 22
77.105.11.0/24 maxlen: 24
77.105.10.0/24 maxlen: 24
77.105.5.0/24 maxlen: 24
77.105.7.0/24 maxlen: 24
77.105.8.0/23 maxlen: 23
46.16.104.0/21 maxlen: 21
212.69.17.0/24 maxlen: 24
212.69.16.0/24 maxlen: 24
212.69.15.0/24 maxlen: 24
212.69.20.0/24 maxlen: 24
212.69.28.0/22 maxlen: 22
212.69.28.0/23 maxlen: 23
212.69.31.0/24 maxlen: 24
194.28.131.0/24 maxlen: 24
194.28.128.0/23 maxlen: 23
212.69.2.0/24 maxlen: 24
212.69.8.0/23 maxlen: 23
79.175.97.0/24 maxlen: 24
79.175.94.0/24 maxlen: 24
79.175.96.0/22 maxlen: 22
79.175.98.0/23 maxlen: 23
79.175.92.0/23 maxlen: 24
79.175.102.0/24 maxlen: 24
79.175.104.0/21 maxlen: 24
79.175.100.0/23 maxlen: 24
79.175.111.0/24 maxlen: 24
79.175.112.0/24 maxlen: 24
79.175.114.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.113.0/24 maxlen: 24
79.175.119.0/24 maxlen: 24
79.175.120.0/22 maxlen: 22
79.175.125.0/24 maxlen: 24
79.175.124.0/24 maxlen: 24
79.175.121.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
79.175.123.0/24 maxlen: 24
79.175.122.0/24 maxlen: 24
79.175.126.0/23 maxlen: 24
188.255.255.0/24 maxlen: 24
79.175.64.0/23 maxlen: 24
79.175.64.0/21 maxlen: 21
79.175.64.0/20 maxlen: 20
79.175.68.0/22 maxlen: 24
79.175.64.0/18 maxlen: 18
79.175.72.0/21 maxlen: 21
79.175.80.0/20 maxlen: 20
79.175.80.0/21 maxlen: 24
79.175.88.0/22 maxlen: 24
80.74.160.0/20 maxlen: 20
2a00:8100::/32 maxlen: 32
2a02:660::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:c4:69:6b:0e:a8:90:45:74:f5:6b:61:1f:a3:b0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 1 09:37:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38f6d6049cfa44aac1a8022218a3b46696fcdd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:5c:dd:61:c5:68:16:2e:65:ea:a3:d0:7b:
57:2f:7e:1e:84:ec:f4:ed:5a:a5:08:bc:50:d1:f8:
d5:e8:dd:28:90:cc:a0:9f:69:7f:28:b2:54:f2:7d:
ae:49:3d:a4:ea:96:df:9e:90:f1:92:0a:e5:0a:90:
43:d5:ae:80:fc:d4:91:71:57:7c:06:0b:f7:36:7a:
9a:b9:1d:48:3b:26:9f:44:16:3e:92:9f:6e:b6:1b:
ad:93:9a:27:73:bc:af:a5:32:55:ab:16:27:20:30:
23:3b:20:f0:fc:00:7d:63:f2:db:dc:29:52:29:47:
87:b2:26:e1:c7:ea:d9:22:d4:4a:10:78:0a:e8:43:
fa:6f:fa:11:37:73:ff:68:81:8b:29:05:a1:6c:6e:
66:11:14:a0:1a:e1:4c:ef:0e:ea:8d:1c:7e:9f:f4:
33:ec:5b:a7:92:0d:ef:e2:dd:28:10:1f:74:08:8a:
4e:4a:d0:76:09:2d:84:b8:b2:10:14:e6:f3:25:ca:
ac:6e:bf:82:7b:7d:f2:94:c0:49:de:25:54:2a:f3:
64:ec:c4:1e:fa:87:a3:44:64:df:c0:94:59:b4:68:
3f:78:d1:45:7a:ab:bd:e3:2f:b5:68:3d:c9:28:dd:
dc:e4:65:98:9e:ea:a5:22:ea:96:72:40:31:f9:84:
c0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F6:D6:04:9C:FA:44:AA:C1:A8:02:22:18:A3:B4:66:96:FC:DD:3A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/OPbWBJz6RKrBqAIiGKO0Zpb83To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.104.0/21
77.105.0.0/22
77.105.5.0/24
77.105.7.0-77.105.63.255
79.175.64.0/18
80.74.160.0/20
81.18.50.0/24
81.18.54.0/24
81.18.58.0-81.18.60.255
81.18.62.0/23
93.186.66.0/24
93.186.70.0/24
93.186.73.0/24
93.186.79.0/24
109.121.0.0/18
109.233.186.0-109.233.188.255
109.233.191.0/24
178.219.0.0/22
178.219.10.0/24
178.219.12.0-178.219.14.255
178.253.192.0-178.253.206.255
178.253.208.0/23
178.253.211.0/24
178.253.217.0/24
178.253.219.0-178.253.221.255
178.253.223.0-178.253.234.255
178.253.239.0/24
178.253.241.0-178.253.242.255
178.253.246.0-178.253.255.255
188.215.228.0/24
188.255.133.0/24
188.255.136.0-188.255.191.255
188.255.194.0/24
188.255.196.0/22
188.255.201.0-188.255.204.255
188.255.220.0-188.255.228.255
188.255.230.0-188.255.235.255
188.255.240.0/22
188.255.249.0/24
188.255.255.0/24
193.107.4.0/22
194.28.128.0/23
194.28.131.0/24
212.69.2.0/24
212.69.8.0/23
212.69.15.0-212.69.17.255
212.69.20.0/24
212.69.28.0/22
IPv6:
2a00:8100::/32
2a02:660::/32
Signature Algorithm: sha256WithRSAEncryption
1b:de:e1:22:48:c8:95:d2:a6:c6:74:00:91:27:ff:17:00:42:
bb:d4:63:c9:31:bf:59:91:1d:2a:18:a7:06:86:6c:3a:f6:22:
5a:a7:a8:89:1c:79:58:22:64:6a:71:d1:18:ef:c6:3b:17:74:
a1:bd:cd:3e:be:a4:45:2d:2e:c3:ab:78:c7:68:3a:2e:f2:76:
d8:5f:a5:ec:87:11:be:a9:09:f1:81:69:38:cb:01:1f:04:6f:
63:cb:55:82:2f:b3:1c:80:b6:ae:40:e1:75:bd:21:2a:8d:7e:
c9:47:32:1a:64:3f:a1:96:29:b8:de:fb:c8:06:9e:8f:8b:0f:
52:dc:e6:1a:03:96:68:e4:01:a3:21:64:67:87:e1:57:6e:00:
7c:fc:c6:25:ec:3d:31:c4:f9:e2:f7:38:f9:d6:d5:3d:c0:db:
08:b7:50:df:6a:76:be:67:a7:65:e2:2d:e4:1e:b8:ac:48:72:
72:3a:6c:55:19:7f:1a:e2:9d:54:80:fe:94:dc:6b:21:2f:25:
56:f2:d3:a6:6b:17:ff:a8:1f:fc:e6:b8:58:e0:00:c8:00:e8:
d9:47:44:2c:15:4b:a8:d8:d6:67:49:ad:a0:9c:69:61:6d:7a:
5d:b5:e2:06:f0:e2:4e:b7:cf:83:f8:ce:88:c1:81:63:d7:37:
cc:33:b1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-fra.rpki-client.org