Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Y5U5WA9-i33koL7jtYc7oaCRrdg.roa
File: Y5U5WA9-i33koL7jtYc7oaCRrdg.roa (raw, json)
Hash identifier: yaCmL5Q0o9A6g5liv3RYUMl9NVNWwskilgERShbUKP8=
Subject key identifier: 63:95:39:58:0F:7E:8B:7D:E4:A0:BE:E3:B5:87:3B:A1:A0:91:AD:D8
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 08D2ADB3
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Y5U5WA9-i33koL7jtYc7oaCRrdg.roa
Signing time: Thu 07 Apr 2022 10:48:23 +0000
ROA not before: Thu 07 Apr 2022 10:48:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9125
IP address blocks: 188.255.136.0/21 maxlen: 21
188.255.133.0/24 maxlen: 24
188.255.144.0/20 maxlen: 20
193.107.4.0/22 maxlen: 22
188.255.204.0/24 maxlen: 24
188.255.201.0/24 maxlen: 24
188.255.203.0/24 maxlen: 24
188.255.202.0/24 maxlen: 24
109.121.16.0/20 maxlen: 20
109.121.12.0/22 maxlen: 22
109.121.30.0/24 maxlen: 24
188.255.221.0/24 maxlen: 24
188.255.223.0/24 maxlen: 24
188.255.220.0/24 maxlen: 24
188.255.222.0/23 maxlen: 23
188.255.224.0/22 maxlen: 22
109.121.32.0/21 maxlen: 21
188.255.232.0/22 maxlen: 22
109.121.44.0/23 maxlen: 23
109.121.40.0/22 maxlen: 22
188.255.230.0/23 maxlen: 24
188.255.233.0/24 maxlen: 24
188.255.229.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.240.0/23 maxlen: 23
109.121.48.0/21 maxlen: 21
109.121.46.0/23 maxlen: 23
188.255.242.0/23 maxlen: 23
109.121.56.0/22 maxlen: 22
109.121.60.0/22 maxlen: 22
188.255.249.0/24 maxlen: 24
188.255.160.0/20 maxlen: 20
188.255.176.0/20 maxlen: 20
188.255.181.0/24 maxlen: 24
188.255.184.0/23 maxlen: 23
188.255.186.0/23 maxlen: 23
188.255.189.0/24 maxlen: 24
188.255.188.0/24 maxlen: 24
109.121.0.0/18 maxlen: 18
188.255.194.0/24 maxlen: 24
109.121.8.0/22 maxlen: 22
188.255.196.0/22 maxlen: 22
93.186.79.0/24 maxlen: 24
178.253.192.0/21 maxlen: 21
178.253.204.0/23 maxlen: 23
178.253.200.0/22 maxlen: 22
178.253.206.0/24 maxlen: 24
178.253.208.0/23 maxlen: 23
178.253.211.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.224.0/21 maxlen: 21
178.253.220.0/23 maxlen: 23
178.253.223.0/24 maxlen: 24
93.186.70.0/24 maxlen: 24
93.186.69.0/24 maxlen: 24
93.186.66.0/24 maxlen: 24
93.186.73.0/24 maxlen: 24
178.253.232.0/23 maxlen: 23
178.253.239.0/24 maxlen: 24
178.253.234.0/24 maxlen: 24
109.233.186.0/24 maxlen: 24
178.253.243.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.242.0/24 maxlen: 24
178.253.241.0/24 maxlen: 24
109.233.191.0/24 maxlen: 24
109.233.187.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
178.253.247.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
178.253.248.0/21 maxlen: 21
81.18.58.0/24 maxlen: 24
81.18.54.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
81.18.62.0/24 maxlen: 24
81.18.59.0/24 maxlen: 24
81.18.60.0/24 maxlen: 24
178.219.0.0/22 maxlen: 22
178.219.10.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
178.219.14.0/24 maxlen: 24
77.105.13.0/24 maxlen: 24
77.105.12.0/24 maxlen: 24
77.105.14.0/24 maxlen: 24
77.105.16.0/20 maxlen: 20
77.105.15.0/24 maxlen: 24
77.105.17.0/24 maxlen: 24
77.105.23.0/24 maxlen: 24
77.105.24.0/24 maxlen: 24
77.105.20.0/24 maxlen: 24
77.105.21.0/24 maxlen: 24
77.105.30.0/24 maxlen: 24
77.105.29.0/24 maxlen: 24
77.105.27.0/24 maxlen: 24
77.105.26.0/24 maxlen: 24
77.105.28.0/24 maxlen: 24
77.105.25.0/24 maxlen: 24
77.105.36.0/23 maxlen: 23
77.105.36.0/22 maxlen: 22
77.105.32.0/22 maxlen: 22
77.105.32.0/19 maxlen: 19
77.105.38.0/24 maxlen: 24
77.105.48.0/20 maxlen: 20
77.105.0.0/24 maxlen: 24
77.105.4.0/22 maxlen: 22
77.105.0.0/22 maxlen: 22
77.105.8.0/24 maxlen: 24
77.105.11.0/24 maxlen: 24
77.105.10.0/24 maxlen: 24
77.105.6.0/24 maxlen: 24
77.105.5.0/24 maxlen: 24
77.105.7.0/24 maxlen: 24
77.105.8.0/23 maxlen: 23
46.16.104.0/21 maxlen: 21
212.69.17.0/24 maxlen: 24
212.69.14.0/24 maxlen: 24
212.69.16.0/24 maxlen: 24
212.69.15.0/24 maxlen: 24
212.69.20.0/24 maxlen: 24
212.69.28.0/22 maxlen: 22
212.69.28.0/23 maxlen: 23
212.69.31.0/24 maxlen: 24
194.28.131.0/24 maxlen: 24
194.28.128.0/23 maxlen: 23
212.69.2.0/24 maxlen: 24
212.69.8.0/23 maxlen: 23
79.175.96.0/22 maxlen: 22
79.175.102.0/24 maxlen: 24
79.175.104.0/21 maxlen: 24
79.175.100.0/23 maxlen: 24
79.175.111.0/24 maxlen: 24
79.175.112.0/24 maxlen: 24
79.175.114.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.113.0/24 maxlen: 24
79.175.119.0/24 maxlen: 24
79.175.120.0/22 maxlen: 22
79.175.125.0/24 maxlen: 24
79.175.124.0/24 maxlen: 24
79.175.121.0/24 maxlen: 24
79.175.126.0/23 maxlen: 24
188.255.255.0/24 maxlen: 24
79.175.64.0/21 maxlen: 21
79.175.64.0/20 maxlen: 20
79.175.72.0/21 maxlen: 21
79.175.80.0/20 maxlen: 20
185.47.91.0/24 maxlen: 24
80.74.160.0/20 maxlen: 20
2a00:8100::/32 maxlen: 32
2a02:660::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148024755 (0x8d2adb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 7 10:48:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=639539580f7e8b7de4a0bee3b5873ba1a091add8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:d1:9a:de:38:4a:ce:e3:8b:48:26:8e:f0:
88:d0:7b:8f:05:da:52:9b:53:18:2d:9c:c9:98:c1:
2f:ea:81:54:8b:23:0d:f0:3f:20:32:e8:29:61:34:
91:af:9a:14:75:38:4e:63:ad:95:ef:6d:52:d4:57:
44:b4:4f:ae:55:5e:b8:86:71:42:3e:fd:7a:39:f4:
63:93:f1:20:14:e0:25:0b:47:3f:0d:30:c7:c4:31:
d5:a6:0a:a1:bb:46:3c:ad:8f:b6:c0:fb:f3:a1:01:
56:9e:41:44:b6:39:2c:9b:df:38:17:a0:38:d0:09:
42:3e:7a:9c:a4:73:8c:36:24:c3:3b:27:40:e8:60:
b3:24:c4:ba:5e:05:bc:cb:2d:02:57:48:8f:2d:1a:
2d:91:b0:4a:f6:d7:76:6e:37:83:05:69:9e:ab:67:
75:92:8d:63:a7:3f:03:88:f8:38:c5:71:94:11:d6:
c8:17:7e:ac:b3:35:fd:cb:ad:f4:d2:28:09:88:1d:
ec:d5:b0:88:7b:25:4f:54:5e:c3:98:3d:ec:02:f3:
6f:38:9f:47:b7:14:87:9b:66:19:5d:7f:59:0c:b8:
54:c5:9b:be:0c:93:b3:85:bb:d1:05:51:22:9c:6f:
83:0c:c4:a0:30:09:16:d4:58:4a:af:c0:75:2b:e5:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:95:39:58:0F:7E:8B:7D:E4:A0:BE:E3:B5:87:3B:A1:A0:91:AD:D8
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Y5U5WA9-i33koL7jtYc7oaCRrdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.104.0/21
77.105.0.0/18
79.175.64.0-79.175.102.255
79.175.104.0-79.175.114.255
79.175.116.0/24
79.175.119.0-79.175.127.255
80.74.160.0/20
81.18.50.0/24
81.18.54.0/24
81.18.58.0-81.18.60.255
81.18.62.0/23
93.186.66.0/24
93.186.69.0-93.186.70.255
93.186.73.0/24
93.186.79.0/24
109.121.0.0/18
109.233.186.0-109.233.188.255
109.233.191.0/24
178.219.0.0/22
178.219.10.0/24
178.219.12.0-178.219.14.255
178.253.192.0-178.253.206.255
178.253.208.0/23
178.253.211.0/24
178.253.217.0/24
178.253.219.0-178.253.221.255
178.253.223.0-178.253.234.255
178.253.239.0/24
178.253.241.0-178.253.243.255
178.253.246.0-178.253.255.255
185.47.91.0/24
188.255.133.0/24
188.255.136.0-188.255.191.255
188.255.194.0/24
188.255.196.0/22
188.255.201.0-188.255.204.255
188.255.220.0-188.255.235.255
188.255.240.0/22
188.255.249.0/24
188.255.255.0/24
193.107.4.0/22
194.28.128.0/23
194.28.131.0/24
212.69.2.0/24
212.69.8.0/23
212.69.14.0-212.69.17.255
212.69.20.0/24
212.69.28.0/22
IPv6:
2a00:8100::/32
2a02:660::/32
Signature Algorithm: sha256WithRSAEncryption
6e:62:1d:89:3e:3f:c9:6e:99:e2:90:46:d5:80:e6:77:84:7c:
ed:1b:62:35:be:31:63:d7:26:cb:42:ba:e6:c2:40:b3:98:9a:
73:6a:5f:a0:2a:ed:0f:99:de:23:65:04:63:26:0d:13:96:58:
1d:5c:25:37:13:61:95:36:89:74:9f:b3:54:61:6b:10:61:dd:
47:9b:96:c0:1c:5c:78:7b:e8:49:84:61:d9:ee:6c:d5:ce:f1:
0b:df:2e:66:b4:13:0a:4f:26:ff:c6:69:3d:fb:e9:53:83:bd:
13:87:e7:34:a5:f2:e6:c7:ab:f8:fc:61:e1:e2:ea:7d:21:02:
87:14:5b:55:51:f2:59:e0:56:e2:aa:61:21:e6:52:d6:2d:4a:
21:69:33:0f:93:ee:b3:4d:4c:6a:20:a8:91:d8:a1:1f:3f:01:
74:9b:32:2f:88:60:9d:9c:93:ed:1c:4b:ca:33:11:64:67:db:
f2:e5:4c:9f:bf:e1:25:90:9c:11:d2:3b:c8:c4:d4:04:22:03:
d6:21:a4:3c:19:b9:d8:1e:37:c8:b3:13:56:f6:6b:8c:eb:2e:
07:fe:69:d8:70:c0:79:31:0b:9c:a1:5f:25:0e:af:c8:9d:89:
19:9f:cc:79:0b:45:f2:63:7c:cb:52:3d:ae:e8:35:2c:f4:4c:
48:ac:4a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org