Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b3egqK1rEcyJvnWZz345OLq-u3A.roa
File: b3egqK1rEcyJvnWZz345OLq-u3A.roa (raw, json)
Hash identifier: /VbO187gphw8GJaddVcFKNhC9t/7YIxrCpyTGXmJ/Sg=
Subject key identifier: 6F:77:A0:A8:AD:6B:11:CC:89:BE:75:99:CF:7E:39:38:BA:BE:BB:70
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01822FFC55A8263E68DDEC2A91FA2FF3042A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b3egqK1rEcyJvnWZz345OLq-u3A.roa
Signing time: Sun 24 Jul 2022 11:34:02 +0000
ROA not before: Sun 24 Jul 2022 11:34:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9125
IP address blocks: 188.255.136.0/21 maxlen: 21
188.255.139.0/24 maxlen: 24
188.255.137.0/24 maxlen: 24
188.255.133.0/24 maxlen: 24
188.255.142.0/23 maxlen: 23
188.255.144.0/20 maxlen: 20
188.255.145.0/24 maxlen: 24
193.107.4.0/22 maxlen: 22
188.255.204.0/24 maxlen: 24
188.255.201.0/24 maxlen: 24
188.255.203.0/24 maxlen: 24
188.255.202.0/24 maxlen: 24
109.121.16.0/20 maxlen: 20
109.121.12.0/22 maxlen: 22
109.121.30.0/24 maxlen: 24
188.255.221.0/24 maxlen: 24
188.255.223.0/24 maxlen: 24
188.255.220.0/24 maxlen: 24
188.255.222.0/23 maxlen: 23
188.255.224.0/22 maxlen: 22
109.121.32.0/21 maxlen: 21
188.255.232.0/22 maxlen: 22
109.121.44.0/23 maxlen: 23
109.121.40.0/22 maxlen: 22
188.255.230.0/23 maxlen: 24
188.255.233.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.240.0/23 maxlen: 23
109.121.48.0/21 maxlen: 21
109.121.46.0/23 maxlen: 23
188.255.242.0/23 maxlen: 23
109.121.56.0/22 maxlen: 22
109.121.60.0/22 maxlen: 22
188.255.249.0/24 maxlen: 24
188.255.152.0/21 maxlen: 24
188.255.148.0/22 maxlen: 24
188.255.146.0/23 maxlen: 24
188.255.160.0/20 maxlen: 20
188.255.176.0/20 maxlen: 20
188.255.181.0/24 maxlen: 24
188.255.184.0/23 maxlen: 23
188.255.186.0/23 maxlen: 23
188.255.189.0/24 maxlen: 24
188.255.188.0/24 maxlen: 24
109.121.0.0/18 maxlen: 18
188.255.194.0/24 maxlen: 24
109.121.8.0/22 maxlen: 22
188.255.196.0/22 maxlen: 22
93.186.79.0/24 maxlen: 24
178.253.192.0/21 maxlen: 21
178.253.204.0/23 maxlen: 23
178.253.200.0/22 maxlen: 22
178.253.206.0/24 maxlen: 24
178.253.208.0/23 maxlen: 23
178.253.211.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.224.0/21 maxlen: 21
178.253.220.0/23 maxlen: 23
178.253.223.0/24 maxlen: 24
93.186.70.0/24 maxlen: 24
93.186.69.0/24 maxlen: 24
93.186.66.0/24 maxlen: 24
93.186.73.0/24 maxlen: 24
178.253.232.0/23 maxlen: 23
178.253.239.0/24 maxlen: 24
178.253.234.0/24 maxlen: 24
109.233.186.0/24 maxlen: 24
178.253.243.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.242.0/24 maxlen: 24
178.253.241.0/24 maxlen: 24
109.233.191.0/24 maxlen: 24
109.233.187.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
178.253.247.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
178.253.248.0/21 maxlen: 21
81.18.58.0/24 maxlen: 24
81.18.54.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
81.18.62.0/24 maxlen: 24
81.18.59.0/24 maxlen: 24
81.18.60.0/24 maxlen: 24
178.219.0.0/22 maxlen: 22
178.219.10.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
178.219.14.0/24 maxlen: 24
77.105.13.0/24 maxlen: 24
77.105.12.0/24 maxlen: 24
77.105.14.0/24 maxlen: 24
77.105.16.0/20 maxlen: 20
77.105.15.0/24 maxlen: 24
77.105.17.0/24 maxlen: 24
77.105.23.0/24 maxlen: 24
77.105.24.0/24 maxlen: 24
77.105.20.0/24 maxlen: 24
77.105.21.0/24 maxlen: 24
77.105.30.0/24 maxlen: 24
77.105.29.0/24 maxlen: 24
77.105.27.0/24 maxlen: 24
77.105.26.0/24 maxlen: 24
77.105.28.0/24 maxlen: 24
77.105.25.0/24 maxlen: 24
77.105.36.0/23 maxlen: 23
77.105.36.0/22 maxlen: 22
77.105.32.0/19 maxlen: 19
77.105.32.0/22 maxlen: 22
77.105.38.0/24 maxlen: 24
77.105.48.0/20 maxlen: 20
77.105.0.0/24 maxlen: 24
77.105.0.0/22 maxlen: 22
77.105.11.0/24 maxlen: 24
77.105.10.0/24 maxlen: 24
77.105.5.0/24 maxlen: 24
77.105.7.0/24 maxlen: 24
77.105.8.0/23 maxlen: 23
46.16.104.0/21 maxlen: 21
212.69.17.0/24 maxlen: 24
212.69.16.0/24 maxlen: 24
212.69.15.0/24 maxlen: 24
212.69.20.0/24 maxlen: 24
212.69.28.0/22 maxlen: 22
212.69.28.0/23 maxlen: 23
212.69.31.0/24 maxlen: 24
194.28.131.0/24 maxlen: 24
194.28.128.0/23 maxlen: 23
212.69.2.0/24 maxlen: 24
212.69.8.0/23 maxlen: 23
79.175.97.0/24 maxlen: 24
79.175.94.0/24 maxlen: 24
79.175.96.0/22 maxlen: 22
79.175.98.0/23 maxlen: 23
79.175.92.0/23 maxlen: 24
79.175.102.0/24 maxlen: 24
79.175.104.0/21 maxlen: 24
79.175.100.0/23 maxlen: 24
79.175.111.0/24 maxlen: 24
79.175.112.0/24 maxlen: 24
79.175.114.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.113.0/24 maxlen: 24
79.175.119.0/24 maxlen: 24
79.175.120.0/22 maxlen: 22
79.175.125.0/24 maxlen: 24
79.175.124.0/24 maxlen: 24
79.175.121.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
79.175.123.0/24 maxlen: 24
79.175.122.0/24 maxlen: 24
79.175.126.0/23 maxlen: 24
188.255.255.0/24 maxlen: 24
79.175.64.0/23 maxlen: 24
79.175.64.0/20 maxlen: 20
79.175.64.0/21 maxlen: 21
79.175.68.0/22 maxlen: 24
79.175.64.0/18 maxlen: 18
79.175.72.0/21 maxlen: 21
79.175.80.0/20 maxlen: 20
79.175.80.0/21 maxlen: 24
185.47.91.0/24 maxlen: 24
79.175.88.0/22 maxlen: 24
80.74.160.0/20 maxlen: 20
2a00:8100::/32 maxlen: 32
2a02:660::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2f:fc:55:a8:26:3e:68:dd:ec:2a:91:fa:2f:f3:04:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 24 11:34:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f77a0a8ad6b11cc89be7599cf7e3938babebb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ee:c3:57:26:b1:0c:24:ed:61:6b:d6:80:6b:
2d:ad:9c:3e:26:2b:2b:ea:3d:42:4d:91:8b:dc:0b:
c0:38:06:e3:9a:8f:56:a6:bd:f9:48:01:3a:56:29:
3e:d3:16:32:4e:de:b2:95:97:2a:09:0d:7e:e7:4d:
e6:b4:0e:29:f1:32:99:4c:cc:7e:e9:1e:71:d7:6f:
44:38:c1:c9:40:15:57:75:c4:c1:a1:cd:1e:d2:21:
7a:ed:33:26:7d:49:eb:50:61:75:58:72:3c:f2:78:
08:8e:17:f8:28:83:d9:3d:a2:5a:1f:6a:33:02:49:
47:3f:20:24:98:d0:c7:54:47:1f:7f:84:f6:e9:db:
67:cd:1e:28:bb:66:87:89:07:78:8c:b7:87:1b:5e:
54:f5:ff:cc:7e:53:c5:66:3b:e3:45:a7:c3:ff:4b:
2a:53:4c:7e:a1:5b:e6:ea:00:4d:c5:e8:40:f9:f5:
df:4a:6e:97:b8:59:fe:8a:48:56:b2:d2:3a:07:b5:
42:8d:fa:e5:7d:af:e2:42:06:9b:64:49:99:d5:89:
5f:e9:ab:29:94:dc:97:15:c4:fc:11:37:2e:0e:0f:
52:6c:07:15:6a:31:ae:dc:b4:d3:44:2f:42:c1:62:
9e:f2:d3:e0:49:8c:06:40:17:ac:2d:16:56:3d:cc:
4e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:77:A0:A8:AD:6B:11:CC:89:BE:75:99:CF:7E:39:38:BA:BE:BB:70
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b3egqK1rEcyJvnWZz345OLq-u3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.104.0/21
77.105.0.0/22
77.105.5.0/24
77.105.7.0-77.105.63.255
79.175.64.0/18
80.74.160.0/20
81.18.50.0/24
81.18.54.0/24
81.18.58.0-81.18.60.255
81.18.62.0/23
93.186.66.0/24
93.186.69.0-93.186.70.255
93.186.73.0/24
93.186.79.0/24
109.121.0.0/18
109.233.186.0-109.233.188.255
109.233.191.0/24
178.219.0.0/22
178.219.10.0/24
178.219.12.0-178.219.14.255
178.253.192.0-178.253.206.255
178.253.208.0/23
178.253.211.0/24
178.253.217.0/24
178.253.219.0-178.253.221.255
178.253.223.0-178.253.234.255
178.253.239.0/24
178.253.241.0-178.253.243.255
178.253.246.0-178.253.255.255
185.47.91.0/24
188.215.228.0/24
188.255.133.0/24
188.255.136.0-188.255.191.255
188.255.194.0/24
188.255.196.0/22
188.255.201.0-188.255.204.255
188.255.220.0-188.255.228.255
188.255.230.0-188.255.235.255
188.255.240.0/22
188.255.249.0/24
188.255.255.0/24
193.107.4.0/22
194.28.128.0/23
194.28.131.0/24
212.69.2.0/24
212.69.8.0/23
212.69.15.0-212.69.17.255
212.69.20.0/24
212.69.28.0/22
IPv6:
2a00:8100::/32
2a02:660::/32
Signature Algorithm: sha256WithRSAEncryption
91:fb:19:23:54:36:74:3f:47:22:c4:0e:85:6d:6b:ff:cc:dd:
57:33:b9:75:a0:83:e8:36:b4:e2:6a:89:cf:1a:15:60:c3:24:
c8:79:47:ee:93:f3:31:b7:e5:a3:bd:c8:b3:15:14:6c:d6:df:
48:70:42:18:bc:fa:f7:24:70:65:8d:10:26:22:e4:d3:25:ad:
03:23:ea:2b:21:8d:cf:f2:88:dd:93:c7:48:fa:a7:09:0e:ff:
08:87:e2:32:85:c2:a7:9c:c4:33:4a:e5:1c:d5:c8:f4:53:9f:
72:a2:78:a4:48:ad:bb:0f:19:ce:a7:ff:16:a0:28:4e:c6:06:
b4:7c:ab:9a:a4:c9:d4:1e:9d:9f:aa:7e:82:46:53:a0:1d:0b:
e4:f3:93:e8:18:9c:8b:ea:59:59:7a:f4:45:c8:e0:93:9d:59:
aa:fd:e3:96:8e:92:19:2f:20:d7:eb:37:9c:23:d6:02:91:03:
e1:9a:0f:02:c1:1c:9c:00:94:59:72:94:20:23:bf:b9:a7:22:
87:8a:9b:a6:36:fa:9a:f9:9a:92:05:0e:ca:37:e8:fa:5c:c9:
ec:9f:25:98:ac:cc:30:2c:f2:26:68:d5:65:de:f7:c6:0a:0b:
0a:5c:e5:1a:93:fa:01:5f:96:b2:fa:3f:bb:50:af:51:d0:73:
d4:3a:e6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org