Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/j9lM1v7-2gqoLOWKieJ-B3l128k.roa
File: j9lM1v7-2gqoLOWKieJ-B3l128k.roa (raw, json)
Hash identifier: EIsjK5k3LDCPohcZcmL4pGsyGcuOoewJY025MCRwAPk=
Subject key identifier: 8F:D9:4C:D6:FE:FE:DA:0A:A8:2C:E5:8A:89:E2:7E:07:79:75:DB:C9
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01823982B4DB0EDABAA3B994594EDA8F49BF
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/j9lM1v7-2gqoLOWKieJ-B3l128k.roa
Signing time: Tue 26 Jul 2022 07:57:23 +0000
ROA not before: Tue 26 Jul 2022 07:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9125
IP address blocks: 188.255.136.0/21 maxlen: 21
188.255.139.0/24 maxlen: 24
188.255.137.0/24 maxlen: 24
188.255.133.0/24 maxlen: 24
188.255.142.0/23 maxlen: 23
188.255.144.0/20 maxlen: 20
188.255.145.0/24 maxlen: 24
193.107.4.0/22 maxlen: 22
188.255.204.0/24 maxlen: 24
188.255.201.0/24 maxlen: 24
188.255.203.0/24 maxlen: 24
188.255.202.0/24 maxlen: 24
109.121.16.0/20 maxlen: 20
109.121.12.0/22 maxlen: 22
109.121.30.0/24 maxlen: 24
188.255.221.0/24 maxlen: 24
188.255.223.0/24 maxlen: 24
188.255.220.0/24 maxlen: 24
188.255.222.0/23 maxlen: 23
188.255.224.0/22 maxlen: 22
109.121.32.0/21 maxlen: 21
188.255.232.0/22 maxlen: 22
109.121.44.0/23 maxlen: 23
109.121.40.0/22 maxlen: 22
188.255.230.0/23 maxlen: 24
188.255.233.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.240.0/23 maxlen: 23
109.121.48.0/21 maxlen: 21
109.121.46.0/23 maxlen: 23
188.255.242.0/23 maxlen: 23
109.121.56.0/22 maxlen: 22
109.121.60.0/22 maxlen: 22
188.255.249.0/24 maxlen: 24
188.255.152.0/21 maxlen: 24
188.255.148.0/22 maxlen: 24
188.255.146.0/23 maxlen: 24
188.255.160.0/20 maxlen: 20
188.255.176.0/20 maxlen: 20
188.255.181.0/24 maxlen: 24
188.255.184.0/23 maxlen: 23
188.255.186.0/23 maxlen: 23
188.255.189.0/24 maxlen: 24
188.255.188.0/24 maxlen: 24
109.121.0.0/18 maxlen: 18
188.255.194.0/24 maxlen: 24
109.121.8.0/22 maxlen: 22
188.255.196.0/22 maxlen: 22
93.186.79.0/24 maxlen: 24
178.253.192.0/21 maxlen: 21
178.253.204.0/23 maxlen: 23
178.253.200.0/22 maxlen: 22
178.253.206.0/24 maxlen: 24
178.253.208.0/23 maxlen: 23
178.253.211.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.224.0/21 maxlen: 21
178.253.220.0/23 maxlen: 23
178.253.223.0/24 maxlen: 24
93.186.70.0/24 maxlen: 24
93.186.69.0/24 maxlen: 24
93.186.66.0/24 maxlen: 24
93.186.73.0/24 maxlen: 24
178.253.232.0/23 maxlen: 23
178.253.239.0/24 maxlen: 24
178.253.234.0/24 maxlen: 24
109.233.186.0/24 maxlen: 24
178.253.243.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.242.0/24 maxlen: 24
178.253.241.0/24 maxlen: 24
109.233.191.0/24 maxlen: 24
109.233.187.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
178.253.247.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
178.253.248.0/21 maxlen: 21
81.18.58.0/24 maxlen: 24
81.18.54.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
81.18.62.0/24 maxlen: 24
81.18.59.0/24 maxlen: 24
81.18.60.0/24 maxlen: 24
178.219.0.0/22 maxlen: 22
178.219.10.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
178.219.14.0/24 maxlen: 24
77.105.13.0/24 maxlen: 24
77.105.12.0/24 maxlen: 24
77.105.14.0/24 maxlen: 24
77.105.16.0/20 maxlen: 20
77.105.15.0/24 maxlen: 24
77.105.17.0/24 maxlen: 24
77.105.23.0/24 maxlen: 24
77.105.24.0/24 maxlen: 24
77.105.20.0/24 maxlen: 24
77.105.21.0/24 maxlen: 24
77.105.30.0/24 maxlen: 24
77.105.29.0/24 maxlen: 24
77.105.27.0/24 maxlen: 24
77.105.26.0/24 maxlen: 24
77.105.28.0/24 maxlen: 24
77.105.25.0/24 maxlen: 24
77.105.36.0/23 maxlen: 23
77.105.36.0/22 maxlen: 22
77.105.32.0/22 maxlen: 22
77.105.32.0/19 maxlen: 19
77.105.38.0/24 maxlen: 24
77.105.48.0/20 maxlen: 20
77.105.0.0/24 maxlen: 24
77.105.0.0/22 maxlen: 22
77.105.11.0/24 maxlen: 24
77.105.10.0/24 maxlen: 24
77.105.5.0/24 maxlen: 24
77.105.7.0/24 maxlen: 24
77.105.8.0/23 maxlen: 23
46.16.104.0/21 maxlen: 21
212.69.17.0/24 maxlen: 24
212.69.16.0/24 maxlen: 24
212.69.15.0/24 maxlen: 24
212.69.20.0/24 maxlen: 24
212.69.28.0/22 maxlen: 22
212.69.28.0/23 maxlen: 23
212.69.31.0/24 maxlen: 24
194.28.131.0/24 maxlen: 24
194.28.128.0/23 maxlen: 23
212.69.2.0/24 maxlen: 24
212.69.8.0/23 maxlen: 23
79.175.97.0/24 maxlen: 24
79.175.94.0/24 maxlen: 24
79.175.96.0/22 maxlen: 22
79.175.98.0/23 maxlen: 23
79.175.92.0/23 maxlen: 24
79.175.102.0/24 maxlen: 24
79.175.104.0/21 maxlen: 24
79.175.100.0/23 maxlen: 24
79.175.111.0/24 maxlen: 24
79.175.112.0/24 maxlen: 24
79.175.114.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.113.0/24 maxlen: 24
79.175.119.0/24 maxlen: 24
79.175.120.0/22 maxlen: 22
79.175.125.0/24 maxlen: 24
79.175.124.0/24 maxlen: 24
79.175.121.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
79.175.123.0/24 maxlen: 24
79.175.122.0/24 maxlen: 24
79.175.126.0/23 maxlen: 24
188.255.255.0/24 maxlen: 24
79.175.64.0/23 maxlen: 24
79.175.64.0/21 maxlen: 21
79.175.64.0/20 maxlen: 20
79.175.68.0/22 maxlen: 24
79.175.64.0/18 maxlen: 18
79.175.72.0/21 maxlen: 21
79.175.80.0/20 maxlen: 20
79.175.80.0/21 maxlen: 24
79.175.88.0/22 maxlen: 24
80.74.160.0/20 maxlen: 20
2a00:8100::/32 maxlen: 32
2a02:660::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:39:82:b4:db:0e:da:ba:a3:b9:94:59:4e:da:8f:49:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 26 07:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fd94cd6fefeda0aa82ce58a89e27e077975dbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:17:f9:a0:de:99:3d:1f:28:25:c0:f0:a6:
5f:62:62:c7:a8:ce:38:b1:ad:8f:b0:df:a3:a2:a9:
30:a0:e7:d2:87:f5:03:37:39:bb:c7:4d:5b:2b:d5:
0f:91:b1:85:24:45:d2:de:21:e0:f0:60:3b:aa:b5:
5a:e5:8c:cb:4a:e3:1d:25:d9:d5:87:98:86:f8:16:
ed:f9:a3:8b:4e:2e:07:ad:99:40:4e:6c:65:57:6d:
ec:e7:28:4d:99:8b:5b:d9:4b:3b:d3:57:19:41:ec:
b7:5d:99:6d:7d:08:93:2c:be:02:ed:97:df:fc:f0:
4e:1a:95:bc:dc:0c:f9:1d:e1:38:73:31:d9:1c:36:
17:2b:4d:42:bb:27:d2:f9:b0:ae:55:fd:2c:1d:9f:
8d:e4:d3:99:3b:6c:32:8d:0c:a0:61:e7:fb:80:97:
8c:2a:57:c9:d7:94:be:49:b3:3d:f5:55:29:d7:c9:
3b:47:01:79:4a:99:09:d7:9b:8d:e2:0f:d8:b4:a3:
e1:00:21:5c:98:98:ab:bb:d3:5b:be:3e:8c:13:70:
c0:fd:62:5f:01:c0:d1:e2:7f:1e:a2:b9:0f:07:21:
c6:87:d6:c8:d6:c8:33:e1:0b:30:5c:1f:8f:72:df:
bc:f0:df:a1:30:02:e4:a6:02:64:89:8e:d6:4a:cf:
32:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D9:4C:D6:FE:FE:DA:0A:A8:2C:E5:8A:89:E2:7E:07:79:75:DB:C9
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/j9lM1v7-2gqoLOWKieJ-B3l128k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.104.0/21
77.105.0.0/22
77.105.5.0/24
77.105.7.0-77.105.63.255
79.175.64.0/18
80.74.160.0/20
81.18.50.0/24
81.18.54.0/24
81.18.58.0-81.18.60.255
81.18.62.0/23
93.186.66.0/24
93.186.69.0-93.186.70.255
93.186.73.0/24
93.186.79.0/24
109.121.0.0/18
109.233.186.0-109.233.188.255
109.233.191.0/24
178.219.0.0/22
178.219.10.0/24
178.219.12.0-178.219.14.255
178.253.192.0-178.253.206.255
178.253.208.0/23
178.253.211.0/24
178.253.217.0/24
178.253.219.0-178.253.221.255
178.253.223.0-178.253.234.255
178.253.239.0/24
178.253.241.0-178.253.243.255
178.253.246.0-178.253.255.255
188.215.228.0/24
188.255.133.0/24
188.255.136.0-188.255.191.255
188.255.194.0/24
188.255.196.0/22
188.255.201.0-188.255.204.255
188.255.220.0-188.255.228.255
188.255.230.0-188.255.235.255
188.255.240.0/22
188.255.249.0/24
188.255.255.0/24
193.107.4.0/22
194.28.128.0/23
194.28.131.0/24
212.69.2.0/24
212.69.8.0/23
212.69.15.0-212.69.17.255
212.69.20.0/24
212.69.28.0/22
IPv6:
2a00:8100::/32
2a02:660::/32
Signature Algorithm: sha256WithRSAEncryption
30:34:fe:0d:85:be:53:9f:97:01:29:e9:b8:bf:e5:e4:e2:cf:
cc:47:4f:00:bc:fc:c9:02:c2:91:9a:cf:78:d9:c9:da:1f:12:
34:3a:51:6b:6c:a1:ff:00:8d:27:4e:f0:b7:11:88:3a:a1:c1:
33:e1:5f:3e:3f:69:55:87:82:f3:5d:08:d3:12:a2:a1:22:15:
60:d2:83:61:c6:bd:10:b2:af:db:59:b4:e8:d5:7a:a9:ef:9f:
48:7c:b8:ef:e6:be:92:bd:25:f2:be:11:07:37:f4:49:bf:b4:
4a:04:1e:9e:84:f7:83:dd:4d:08:e5:3a:fe:08:31:c3:cf:d1:
cf:8d:02:19:28:00:32:92:6b:52:ae:a9:89:36:a8:17:a3:34:
22:97:15:7b:1c:46:c5:0b:17:23:27:44:87:30:9c:4a:ca:ac:
a9:45:8e:d6:46:0e:ef:93:2b:06:ca:65:67:a3:89:62:a8:ed:
79:53:67:1f:2c:6f:9d:07:28:df:8b:67:38:ef:93:ce:cc:33:
b3:b9:f7:29:68:5a:0a:70:72:bf:30:15:55:8e:f7:84:c1:c8:
93:35:e8:7f:89:2a:11:5e:73:4c:1f:b2:58:d9:bd:e3:cd:72:
b4:05:77:94:58:a8:44:55:a2:2f:8d:18:97:3a:5a:a6:10:78:
94:57:e9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org