Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PYHOJdoeHJXqSi0IpZOVCmBI4Fw.roa
File: PYHOJdoeHJXqSi0IpZOVCmBI4Fw.roa (raw, json)
Hash identifier: XcJlKbLiudFoaAJBzPhTF/YBCA+iG6MlFITT+K1ju3c=
Subject key identifier: 3D:81:CE:25:DA:1E:1C:95:EA:4A:2D:08:A5:93:95:0A:60:48:E0:5C
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 08DFA06B
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PYHOJdoeHJXqSi0IpZOVCmBI4Fw.roa
Signing time: Mon 11 Apr 2022 06:52:53 +0000
ROA not before: Mon 11 Apr 2022 06:52:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9125
IP address blocks: 188.255.136.0/21 maxlen: 21
188.255.133.0/24 maxlen: 24
188.255.144.0/20 maxlen: 20
193.107.4.0/22 maxlen: 22
188.255.204.0/24 maxlen: 24
188.255.201.0/24 maxlen: 24
188.255.203.0/24 maxlen: 24
188.255.202.0/24 maxlen: 24
109.121.16.0/20 maxlen: 20
109.121.12.0/22 maxlen: 22
109.121.30.0/24 maxlen: 24
188.255.221.0/24 maxlen: 24
188.255.223.0/24 maxlen: 24
188.255.220.0/24 maxlen: 24
188.255.222.0/23 maxlen: 23
188.255.224.0/22 maxlen: 22
109.121.32.0/21 maxlen: 21
188.255.232.0/22 maxlen: 22
109.121.44.0/23 maxlen: 23
109.121.40.0/22 maxlen: 22
188.255.230.0/23 maxlen: 24
188.255.233.0/24 maxlen: 24
188.255.229.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.240.0/23 maxlen: 23
109.121.48.0/21 maxlen: 21
109.121.46.0/23 maxlen: 23
188.255.242.0/23 maxlen: 23
109.121.56.0/22 maxlen: 22
109.121.60.0/22 maxlen: 22
188.255.249.0/24 maxlen: 24
188.255.160.0/20 maxlen: 20
188.255.176.0/20 maxlen: 20
188.255.181.0/24 maxlen: 24
188.255.184.0/23 maxlen: 23
188.255.186.0/23 maxlen: 23
188.255.189.0/24 maxlen: 24
188.255.188.0/24 maxlen: 24
109.121.0.0/18 maxlen: 18
188.255.194.0/24 maxlen: 24
109.121.8.0/22 maxlen: 22
188.255.196.0/22 maxlen: 22
93.186.79.0/24 maxlen: 24
178.253.192.0/21 maxlen: 21
178.253.204.0/23 maxlen: 23
178.253.200.0/22 maxlen: 22
178.253.206.0/24 maxlen: 24
178.253.208.0/23 maxlen: 23
178.253.211.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.224.0/21 maxlen: 21
178.253.220.0/23 maxlen: 23
178.253.223.0/24 maxlen: 24
93.186.70.0/24 maxlen: 24
93.186.69.0/24 maxlen: 24
93.186.66.0/24 maxlen: 24
93.186.73.0/24 maxlen: 24
178.253.232.0/23 maxlen: 23
178.253.239.0/24 maxlen: 24
178.253.234.0/24 maxlen: 24
109.233.186.0/24 maxlen: 24
178.253.243.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.242.0/24 maxlen: 24
178.253.241.0/24 maxlen: 24
109.233.191.0/24 maxlen: 24
109.233.187.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
178.253.247.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
178.253.248.0/21 maxlen: 21
81.18.58.0/24 maxlen: 24
81.18.54.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
81.18.62.0/24 maxlen: 24
81.18.59.0/24 maxlen: 24
81.18.60.0/24 maxlen: 24
178.219.0.0/22 maxlen: 22
178.219.10.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
178.219.14.0/24 maxlen: 24
77.105.13.0/24 maxlen: 24
77.105.12.0/24 maxlen: 24
77.105.14.0/24 maxlen: 24
77.105.16.0/20 maxlen: 20
77.105.15.0/24 maxlen: 24
77.105.17.0/24 maxlen: 24
77.105.23.0/24 maxlen: 24
77.105.24.0/24 maxlen: 24
77.105.20.0/24 maxlen: 24
77.105.21.0/24 maxlen: 24
77.105.30.0/24 maxlen: 24
77.105.29.0/24 maxlen: 24
77.105.27.0/24 maxlen: 24
77.105.26.0/24 maxlen: 24
77.105.28.0/24 maxlen: 24
77.105.25.0/24 maxlen: 24
77.105.36.0/23 maxlen: 23
77.105.36.0/22 maxlen: 22
77.105.32.0/19 maxlen: 19
77.105.32.0/22 maxlen: 22
77.105.38.0/24 maxlen: 24
77.105.48.0/20 maxlen: 20
77.105.0.0/24 maxlen: 24
77.105.4.0/22 maxlen: 22
77.105.0.0/22 maxlen: 22
77.105.8.0/24 maxlen: 24
77.105.11.0/24 maxlen: 24
77.105.10.0/24 maxlen: 24
77.105.6.0/24 maxlen: 24
77.105.5.0/24 maxlen: 24
77.105.7.0/24 maxlen: 24
77.105.8.0/23 maxlen: 23
46.16.104.0/21 maxlen: 21
212.69.17.0/24 maxlen: 24
212.69.14.0/24 maxlen: 24
212.69.16.0/24 maxlen: 24
212.69.15.0/24 maxlen: 24
212.69.20.0/24 maxlen: 24
212.69.28.0/22 maxlen: 22
212.69.28.0/23 maxlen: 23
212.69.31.0/24 maxlen: 24
194.28.131.0/24 maxlen: 24
194.28.128.0/23 maxlen: 23
212.69.2.0/24 maxlen: 24
212.69.8.0/23 maxlen: 23
79.175.96.0/22 maxlen: 22
79.175.102.0/24 maxlen: 24
79.175.104.0/21 maxlen: 24
79.175.100.0/23 maxlen: 24
79.175.111.0/24 maxlen: 24
79.175.112.0/24 maxlen: 24
79.175.114.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.113.0/24 maxlen: 24
79.175.119.0/24 maxlen: 24
79.175.120.0/22 maxlen: 22
79.175.125.0/24 maxlen: 24
79.175.124.0/24 maxlen: 24
79.175.121.0/24 maxlen: 24
79.175.126.0/23 maxlen: 24
188.255.255.0/24 maxlen: 24
79.175.64.0/20 maxlen: 20
79.175.64.0/21 maxlen: 21
79.175.64.0/18 maxlen: 18
79.175.72.0/21 maxlen: 21
79.175.80.0/20 maxlen: 20
185.47.91.0/24 maxlen: 24
80.74.160.0/20 maxlen: 20
2a00:8100::/32 maxlen: 32
2a02:660::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148873323 (0x8dfa06b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 11 06:52:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d81ce25da1e1c95ea4a2d08a593950a6048e05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c3:19:ff:5a:bb:94:40:b0:1f:eb:3a:86:34:
86:5e:aa:24:f8:4e:62:8b:ef:c0:d8:e2:d7:5c:4d:
7d:e7:d7:64:14:c5:50:32:a1:6b:2c:dc:12:b9:0b:
34:60:e9:85:50:f0:1a:8f:cc:a7:23:48:47:31:2b:
64:88:50:3f:8c:3c:5b:eb:3d:6e:07:c7:45:c3:54:
bf:20:d8:07:81:39:00:6b:f4:f5:14:6c:c7:bf:5e:
c6:5c:11:fa:97:6d:33:38:d4:b3:13:33:bb:19:69:
27:29:6a:62:42:cc:79:d7:54:17:ac:de:60:7e:95:
5c:2c:98:c1:b0:45:38:42:3a:46:5b:ce:a2:76:4d:
e8:ef:bd:4b:02:d6:cc:9a:97:ed:ac:47:43:52:6e:
f4:bd:ee:7f:f7:6c:6c:c4:a0:7f:f0:1d:33:d0:e8:
e1:bf:17:68:3d:83:63:2b:57:22:a4:48:96:64:d5:
11:92:01:5c:e5:4a:0b:01:46:3f:cd:66:85:3d:be:
97:3b:7c:9e:2e:88:f9:b9:4f:b9:5c:6a:b6:52:36:
be:0b:65:d5:24:54:1d:86:39:3e:1b:1f:fa:6f:02:
59:33:82:74:3d:01:9c:0d:ef:db:7f:70:f6:45:a3:
bc:62:e3:e8:09:b8:ff:17:60:76:5f:33:5a:00:ab:
d0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:81:CE:25:DA:1E:1C:95:EA:4A:2D:08:A5:93:95:0A:60:48:E0:5C
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PYHOJdoeHJXqSi0IpZOVCmBI4Fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.104.0/21
77.105.0.0/18
79.175.64.0/18
80.74.160.0/20
81.18.50.0/24
81.18.54.0/24
81.18.58.0-81.18.60.255
81.18.62.0/23
93.186.66.0/24
93.186.69.0-93.186.70.255
93.186.73.0/24
93.186.79.0/24
109.121.0.0/18
109.233.186.0-109.233.188.255
109.233.191.0/24
178.219.0.0/22
178.219.10.0/24
178.219.12.0-178.219.14.255
178.253.192.0-178.253.206.255
178.253.208.0/23
178.253.211.0/24
178.253.217.0/24
178.253.219.0-178.253.221.255
178.253.223.0-178.253.234.255
178.253.239.0/24
178.253.241.0-178.253.243.255
178.253.246.0-178.253.255.255
185.47.91.0/24
188.255.133.0/24
188.255.136.0-188.255.191.255
188.255.194.0/24
188.255.196.0/22
188.255.201.0-188.255.204.255
188.255.220.0-188.255.235.255
188.255.240.0/22
188.255.249.0/24
188.255.255.0/24
193.107.4.0/22
194.28.128.0/23
194.28.131.0/24
212.69.2.0/24
212.69.8.0/23
212.69.14.0-212.69.17.255
212.69.20.0/24
212.69.28.0/22
IPv6:
2a00:8100::/32
2a02:660::/32
Signature Algorithm: sha256WithRSAEncryption
a0:83:8b:0c:73:c0:09:64:04:3f:e9:06:95:04:b6:c9:42:6b:
2b:4d:e8:6d:f0:30:f4:ac:92:0d:75:c0:48:81:3f:ce:5f:7a:
dd:e1:b8:d9:a9:06:79:0b:27:04:9b:f8:5c:4c:cb:6b:b2:4e:
6a:de:87:e4:11:db:32:d7:39:d1:9e:f3:91:1a:04:b1:43:f6:
49:27:f7:88:15:73:21:24:29:a1:cc:13:48:86:b3:50:0e:bf:
7c:ea:08:43:f1:a2:63:d1:6b:b5:0e:85:22:cb:38:ec:7c:84:
54:3c:da:c7:64:dc:6b:30:99:da:30:a0:63:76:3e:01:d4:e1:
20:9f:e1:2c:68:29:be:25:6c:64:8c:a9:c0:04:2d:d4:f4:99:
4e:6e:4c:36:6b:97:92:59:28:88:ed:d5:8d:66:ea:04:b7:0a:
ab:58:09:cf:f4:35:f2:92:83:38:5b:48:92:2d:97:24:bf:3d:
3c:5e:a5:14:1a:90:41:2a:97:96:b8:1a:1d:29:28:58:5b:1b:
b8:7e:70:09:c5:46:d8:2a:3e:04:7e:8e:70:94:0e:ef:d2:63:
ae:35:13:71:2d:85:2f:ed:a7:b7:de:28:eb:81:41:77:bf:44:
56:6d:c5:6d:21:a3:e4:d6:96:36:2e:20:15:ac:02:b3:c2:12:
68:bb:7a:3e
-----BEGIN CERTIFICATE-----
MIIGfjCCBWagAwIBAgIECN+gazANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
Zjg0ZTQ3MzhhNzBlYTM5YzA4Y2VmMjEwNDMyYWUzOTllYzdlOTE1MB4XDTIyMDQx
MTA2NTI1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2Q4MWNlMjVkYTFl
MWM5NWVhNGEyZDA4YTU5Mzk1MGE2MDQ4ZTA1YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPPDGf9au5RAsB/rOoY0hl6qJPhOYovvwNji11xNfefXZBTF
UDKhayzcErkLNGDphVDwGo/MpyNIRzErZIhQP4w8W+s9bgfHRcNUvyDYB4E5AGv0
9RRsx79exlwR+pdtMzjUsxMzuxlpJylqYkLMeddUF6zeYH6VXCyYwbBFOEI6RlvO
onZN6O+9SwLWzJqX7axHQ1Ju9L3uf/dsbMSgf/AdM9Do4b8XaD2DYytXIqRIlmTV
EZIBXOVKCwFGP81mhT2+lzt8ni6I+blPuVxqtlI2vgtl1SRUHYY5Phsf+m8CWTOC
dD0BnA3v239w9kWjvGLj6Am4/xdgdl8zWgCr0A8CAwEAAaOCA5gwggOUMB0GA1Ud
DgQWBBQ9gc4l2h4clepKLQilk5UKYEjgXDAfBgNVHSMEGDAWgBRvhORzinDqOcCM
7yEEMq45nsfpFTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2I0VGtjNHB3NmpuQWpPOGhCREt1T1o3SDZSVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzYvZGRmOGIzLTFjMDgtNDk1Yy04ZGRmLWZhZTVkYmVkM2IxYi8x
L1BZSE9KZG9lSEpYcVNpMElwWk9WQ21CSTRGdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYv
ZGRmOGIzLTFjMDgtNDk1Yy04ZGRmLWZhZTVkYmVkM2IxYi8xL2I0VGtjNHB3Nmpu
QWpPOGhCREt1T1o3SDZSVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AawGCCsGAQUFBwEHAQH/BIIBmzCCAZcwggF9BAIAATCCAXUDBAMuEGgDBAZNaQAD
BAZPr0ADBARQSqADBABREjIDBABREjYwDAMEAVESOgMEAFESPAMEAVESPgMEAF26
QjAMAwQAXbpFAwQAXbpGAwQAXbpJAwQAXbpPAwQGbXkAMAwDBAFt6boDBABt6bwD
BABt6b8DBAKy2wADBACy2wowDAMEArLbDAMEALLbDjAMAwQGsv3AAwQAsv3OAwQB
sv3QAwQAsv3TAwQAsv3ZMAwDBACy/dsDBAGy/dwwDAMEALL93wMEALL96gMEALL9
7zAMAwQAsv3xAwQCsv3wMAsDBAGy/fYDAwGy/AMEALkvWwMEALz/hTAMAwQDvP+I
AwQGvP+AAwQAvP/CAwQCvP/EMAwDBAC8/8kDBAC8/8wwDAMEArz/3AMEArz/6AME
Arz/8AMEALz/+QMEALz//wMEAsFrBAMEAcIcgAMEAMIcgwMEANRFAgMEAdRFCDAM
AwQB1EUOAwQB1EUQAwQA1EUUAwQC1EUcMBQEAgACMA4DBQAqAIEAAwUAKgIGYDAN
BgkqhkiG9w0BAQsFAAOCAQEAoIOLDHPACWQEP+kGlQS2yUJrK03obfAw9KySDXXA
SIE/zl963eG42akGeQsnBJv4XEzLa7JOat6H5BHbMtc50Z7zkRoEsUP2SSf3iBVz
ISQpocwTSIazUA6/fOoIQ/GiY9FrtQ6FIss47HyEVDzax2TcazCZ2jCgY3Y+AdTh
IJ/hLGgpviVsZIypwAQt1PSZTm5MNmuXklkoiO3VjWbqBLcKq1gJz/Q18pKDOFtI
ki2XJL89PF6lFBqQQSqXlrgaHSkoWFsbuH5wCcVG2Co+BH6OcJQO79JjrjUTcS2F
L+2nt94o64FBd79EVm3FbSGj5NaWNi4gFawCs8ISaLt6Pg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-fra.rpki-client.org