Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/hr5LN6-25Dg3tXiuytrX77MfJ_c.roa
File: hr5LN6-25Dg3tXiuytrX77MfJ_c.roa (raw, json)
Hash identifier: NV623Xb7aP0y9n3sF9JphqAOwRKLh74WykPueoG4950=
Subject key identifier: 86:BE:4B:37:AF:B6:E4:38:37:B5:78:AE:CA:DA:D7:EF:B3:1F:27:F7
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 093344A4
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/hr5LN6-25Dg3tXiuytrX77MfJ_c.roa
Signing time: Wed 11 May 2022 12:49:02 +0000
ROA not before: Wed 11 May 2022 12:49:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9125
IP address blocks: 188.255.136.0/21 maxlen: 21
188.255.133.0/24 maxlen: 24
188.255.144.0/20 maxlen: 20
193.107.4.0/22 maxlen: 22
188.255.204.0/24 maxlen: 24
188.255.201.0/24 maxlen: 24
188.255.203.0/24 maxlen: 24
188.255.202.0/24 maxlen: 24
109.121.16.0/20 maxlen: 20
109.121.12.0/22 maxlen: 22
109.121.30.0/24 maxlen: 24
188.255.221.0/24 maxlen: 24
188.255.223.0/24 maxlen: 24
188.255.220.0/24 maxlen: 24
188.255.222.0/23 maxlen: 23
188.255.224.0/22 maxlen: 22
109.121.32.0/21 maxlen: 21
188.255.232.0/22 maxlen: 22
109.121.44.0/23 maxlen: 23
109.121.40.0/22 maxlen: 22
188.255.230.0/23 maxlen: 24
188.255.233.0/24 maxlen: 24
188.255.229.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.240.0/23 maxlen: 23
109.121.48.0/21 maxlen: 21
109.121.46.0/23 maxlen: 23
188.255.242.0/23 maxlen: 23
109.121.56.0/22 maxlen: 22
109.121.60.0/22 maxlen: 22
188.255.249.0/24 maxlen: 24
188.255.160.0/20 maxlen: 20
188.255.176.0/20 maxlen: 20
188.255.181.0/24 maxlen: 24
188.255.184.0/23 maxlen: 23
188.255.186.0/23 maxlen: 23
188.255.189.0/24 maxlen: 24
188.255.188.0/24 maxlen: 24
109.121.0.0/18 maxlen: 18
188.255.194.0/24 maxlen: 24
109.121.8.0/22 maxlen: 22
188.255.196.0/22 maxlen: 22
93.186.79.0/24 maxlen: 24
178.253.192.0/21 maxlen: 21
178.253.204.0/23 maxlen: 23
178.253.200.0/22 maxlen: 22
178.253.206.0/24 maxlen: 24
178.253.208.0/23 maxlen: 23
178.253.211.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.224.0/21 maxlen: 21
178.253.220.0/23 maxlen: 23
178.253.223.0/24 maxlen: 24
93.186.70.0/24 maxlen: 24
93.186.69.0/24 maxlen: 24
93.186.66.0/24 maxlen: 24
93.186.73.0/24 maxlen: 24
178.253.232.0/23 maxlen: 23
178.253.239.0/24 maxlen: 24
178.253.234.0/24 maxlen: 24
109.233.186.0/24 maxlen: 24
178.253.243.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.242.0/24 maxlen: 24
178.253.241.0/24 maxlen: 24
109.233.191.0/24 maxlen: 24
109.233.187.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
178.253.247.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
178.253.248.0/21 maxlen: 21
81.18.58.0/24 maxlen: 24
81.18.54.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
81.18.62.0/24 maxlen: 24
81.18.59.0/24 maxlen: 24
81.18.60.0/24 maxlen: 24
178.219.0.0/22 maxlen: 22
178.219.10.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
178.219.14.0/24 maxlen: 24
77.105.13.0/24 maxlen: 24
77.105.12.0/24 maxlen: 24
77.105.14.0/24 maxlen: 24
77.105.16.0/20 maxlen: 20
77.105.15.0/24 maxlen: 24
77.105.17.0/24 maxlen: 24
77.105.23.0/24 maxlen: 24
77.105.24.0/24 maxlen: 24
77.105.20.0/24 maxlen: 24
77.105.21.0/24 maxlen: 24
77.105.30.0/24 maxlen: 24
77.105.29.0/24 maxlen: 24
77.105.27.0/24 maxlen: 24
77.105.26.0/24 maxlen: 24
77.105.28.0/24 maxlen: 24
77.105.25.0/24 maxlen: 24
77.105.36.0/23 maxlen: 23
77.105.36.0/22 maxlen: 22
77.105.32.0/22 maxlen: 22
77.105.32.0/19 maxlen: 19
77.105.38.0/24 maxlen: 24
77.105.48.0/20 maxlen: 20
77.105.0.0/24 maxlen: 24
77.105.4.0/22 maxlen: 22
77.105.0.0/22 maxlen: 22
77.105.8.0/24 maxlen: 24
77.105.11.0/24 maxlen: 24
77.105.10.0/24 maxlen: 24
77.105.6.0/24 maxlen: 24
77.105.5.0/24 maxlen: 24
77.105.7.0/24 maxlen: 24
77.105.8.0/23 maxlen: 23
46.16.104.0/21 maxlen: 21
212.69.17.0/24 maxlen: 24
212.69.14.0/24 maxlen: 24
212.69.16.0/24 maxlen: 24
212.69.15.0/24 maxlen: 24
212.69.20.0/24 maxlen: 24
212.69.28.0/22 maxlen: 22
212.69.28.0/23 maxlen: 23
212.69.31.0/24 maxlen: 24
194.28.131.0/24 maxlen: 24
194.28.128.0/23 maxlen: 23
212.69.2.0/24 maxlen: 24
212.69.8.0/23 maxlen: 23
79.175.96.0/22 maxlen: 22
79.175.102.0/24 maxlen: 24
79.175.104.0/21 maxlen: 24
79.175.100.0/23 maxlen: 24
79.175.111.0/24 maxlen: 24
79.175.112.0/24 maxlen: 24
79.175.114.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.113.0/24 maxlen: 24
79.175.119.0/24 maxlen: 24
79.175.120.0/22 maxlen: 22
79.175.125.0/24 maxlen: 24
79.175.124.0/24 maxlen: 24
79.175.121.0/24 maxlen: 24
79.175.123.0/24 maxlen: 24
79.175.122.0/24 maxlen: 24
79.175.126.0/23 maxlen: 24
188.255.255.0/24 maxlen: 24
79.175.64.0/21 maxlen: 21
79.175.64.0/20 maxlen: 20
79.175.64.0/18 maxlen: 18
79.175.72.0/21 maxlen: 21
79.175.80.0/20 maxlen: 20
185.47.91.0/24 maxlen: 24
80.74.160.0/20 maxlen: 20
2a00:8100::/32 maxlen: 32
2a02:660::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154354852 (0x93344a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 11 12:49:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86be4b37afb6e43837b578aecadad7efb31f27f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:62:2c:a8:90:85:bc:c3:55:43:a4:2e:bc:
9c:e9:a2:2c:bc:96:01:e8:f6:19:ee:93:8f:99:9c:
98:3d:be:66:62:d5:13:24:db:20:3a:8a:cd:a8:14:
f4:4d:a1:de:71:36:4a:0b:a0:9f:87:f3:fc:64:9d:
f0:6a:86:eb:af:07:49:df:f4:88:0f:0e:87:27:77:
ef:d4:90:25:ca:16:32:e7:69:e2:59:28:88:b2:16:
c1:d8:9d:8e:37:46:9c:73:9e:cc:c7:e6:08:9c:28:
d4:98:d2:fc:cf:f1:3e:df:ea:0f:d5:da:37:01:76:
2b:8c:3b:9d:b5:0c:80:38:a1:ee:67:42:74:7f:4b:
0c:48:aa:44:39:d2:b0:b9:a2:89:c1:5c:85:50:1d:
8f:42:67:f2:07:52:f7:20:69:50:1d:e2:8d:93:93:
02:b8:c3:fd:e0:4e:d4:06:10:7f:65:c7:7e:10:0b:
f3:dd:91:94:43:26:93:cc:bd:bb:1c:02:aa:25:48:
5f:60:4e:03:03:1e:b2:95:b9:d6:e0:1f:dc:c6:e4:
d7:bd:62:ea:e3:c8:f7:1d:5c:fd:e5:54:10:b6:45:
c7:f8:97:c1:88:5c:e4:6f:f5:9b:6f:71:bd:17:7c:
1e:69:18:ed:7c:89:1f:89:c0:e0:65:27:d6:aa:a3:
15:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BE:4B:37:AF:B6:E4:38:37:B5:78:AE:CA:DA:D7:EF:B3:1F:27:F7
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/hr5LN6-25Dg3tXiuytrX77MfJ_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.104.0/21
77.105.0.0/18
79.175.64.0/18
80.74.160.0/20
81.18.50.0/24
81.18.54.0/24
81.18.58.0-81.18.60.255
81.18.62.0/23
93.186.66.0/24
93.186.69.0-93.186.70.255
93.186.73.0/24
93.186.79.0/24
109.121.0.0/18
109.233.186.0-109.233.188.255
109.233.191.0/24
178.219.0.0/22
178.219.10.0/24
178.219.12.0-178.219.14.255
178.253.192.0-178.253.206.255
178.253.208.0/23
178.253.211.0/24
178.253.217.0/24
178.253.219.0-178.253.221.255
178.253.223.0-178.253.234.255
178.253.239.0/24
178.253.241.0-178.253.243.255
178.253.246.0-178.253.255.255
185.47.91.0/24
188.255.133.0/24
188.255.136.0-188.255.191.255
188.255.194.0/24
188.255.196.0/22
188.255.201.0-188.255.204.255
188.255.220.0-188.255.235.255
188.255.240.0/22
188.255.249.0/24
188.255.255.0/24
193.107.4.0/22
194.28.128.0/23
194.28.131.0/24
212.69.2.0/24
212.69.8.0/23
212.69.14.0-212.69.17.255
212.69.20.0/24
212.69.28.0/22
IPv6:
2a00:8100::/32
2a02:660::/32
Signature Algorithm: sha256WithRSAEncryption
3e:8f:23:79:da:a9:d2:00:4e:da:e9:3e:05:9b:2c:d6:b6:61:
c4:f1:d9:63:a8:62:93:dd:e7:99:e1:0b:36:c3:3d:2f:ae:73:
ae:8c:31:50:b1:a6:3e:0c:2c:d6:a8:07:97:8a:bd:2c:ed:f4:
d3:84:65:8c:90:00:37:a5:6f:8c:00:88:ea:b1:35:e7:3b:6a:
ee:33:47:21:95:5d:ea:55:81:b7:c9:b7:f1:c8:00:c7:6c:61:
af:6a:05:09:97:7e:2f:d9:ce:80:71:31:6b:22:0e:bc:05:61:
69:f8:9c:80:3d:d4:29:83:8f:10:ec:f2:d5:8a:9b:3d:f6:5f:
4a:94:57:55:ea:80:2a:6a:1e:42:aa:14:30:cf:06:f1:eb:70:
00:aa:00:33:66:31:a7:5d:be:8a:2f:13:05:79:6e:b7:c3:35:
01:33:3e:02:e9:29:d3:e8:fd:25:82:70:72:42:ca:06:5a:fc:
74:61:82:5e:c2:6d:0e:55:28:7a:26:80:4a:b4:59:c5:7d:55:
6d:36:30:38:09:51:d3:9c:71:10:e9:5e:f2:d5:58:01:63:12:
72:eb:fc:96:85:c1:01:e0:66:50:fc:a3:f5:3d:1e:23:25:64:
24:ac:6e:1a:36:57:92:1c:b5:dc:7a:35:33:2c:c0:a8:e3:82:
46:14:23:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org