Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jpr4Z0Kmbfp9Z7xXtk7cYH2u9gk.roa
File: jpr4Z0Kmbfp9Z7xXtk7cYH2u9gk.roa (raw, json)
Hash identifier: 5L/uI+nzsbzX6ZeYhVGrqWXqH/1iGrlvKdWsQPW+eHw=
Subject key identifier: 8E:9A:F8:67:42:A6:6D:FA:7D:67:BC:57:B6:4E:DC:60:7D:AE:F6:09
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 088CA70B
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jpr4Z0Kmbfp9Z7xXtk7cYH2u9gk.roa
Signing time: Sat 26 Mar 2022 09:54:30 +0000
ROA not before: Sat 26 Mar 2022 09:54:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52116
IP address blocks: 188.255.130.0/24 maxlen: 24
188.255.208.0/21 maxlen: 21
188.255.216.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.236.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
188.255.239.0/24 maxlen: 24
188.255.246.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.248.0/24 maxlen: 24
188.255.252.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
188.255.190.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
109.233.184.0/23 maxlen: 23
178.253.240.0/24 maxlen: 24
109.233.189.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.55.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.61.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.117.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
178.219.11.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
185.47.88.0/24 maxlen: 24
185.47.89.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
77.105.18.0/23 maxlen: 23
77.105.31.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143435531 (0x88ca70b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 26 09:54:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e9af86742a66dfa7d67bc57b64edc607daef609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e5:3c:36:61:eb:75:a1:51:4f:81:f8:d9:92:
aa:f2:73:1c:04:66:f8:42:bd:55:86:d1:8c:4f:f7:
b0:60:8b:ce:e1:38:84:c4:ef:b2:4c:26:2c:5d:49:
32:79:c2:28:bf:3b:05:6c:25:2a:25:e4:e9:07:70:
e7:f3:f2:a5:bc:e2:bf:a2:6e:02:11:41:17:b5:d4:
95:7c:9d:b9:92:22:67:74:5c:5d:d2:eb:b7:f5:45:
a1:9f:88:d3:2f:df:16:e1:be:e6:89:4b:26:fc:65:
75:2e:3f:33:e4:90:eb:a8:8f:ce:ab:da:97:22:2f:
87:cc:35:2d:58:30:9f:1c:22:16:df:0c:7e:cd:f2:
b7:62:9d:2a:21:9c:36:a2:38:73:0b:8f:9d:e3:8f:
a2:24:98:92:93:bf:e3:44:d6:04:17:02:59:84:b2:
66:83:03:93:1c:30:fd:c0:8f:97:65:02:e6:00:d2:
45:69:bb:f5:90:10:be:d8:e2:a4:b0:4e:56:6e:01:
02:2e:4c:14:0e:64:bb:b6:19:57:43:b4:b8:15:72:
8a:32:c3:e8:d2:30:ec:5a:97:9f:06:e3:7f:15:c3:
46:29:9c:0b:54:d1:69:d5:aa:8c:34:e7:21:53:98:
b9:6d:a7:e9:25:f5:ff:21:cc:e7:8d:e4:63:fe:da:
6f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9A:F8:67:42:A6:6D:FA:7D:67:BC:57:B6:4E:DC:60:7D:AE:F6:09
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jpr4Z0Kmbfp9Z7xXtk7cYH2u9gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.18.0/23
77.105.31.0/24
79.175.103.0/24
79.175.115.0-79.175.118.255
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
109.233.184.0/23
109.233.189.0/24
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0-185.47.90.255
188.215.228.0/24
188.255.130.0/24
188.255.190.0/24
188.255.208.0-188.255.216.255
188.255.219.0/24
188.255.236.0/24
188.255.238.0/23
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:18:44:7e:df:3a:4d:da:33:99:b5:ce:6b:c2:aa:6c:c7:3b:
f5:a2:24:a3:4c:05:40:c4:f7:3a:ce:65:e7:8c:5c:02:e6:10:
ce:8a:5a:82:1f:83:3e:94:97:8c:3a:aa:46:25:c7:47:b3:5b:
63:91:fa:8d:e4:b8:e8:9a:6d:80:33:0b:92:ff:be:ed:42:ec:
93:c0:45:66:28:d6:91:f3:1e:11:f1:32:a0:84:13:6f:67:7f:
f9:12:bd:df:de:b7:da:b1:9d:42:7f:f2:e7:c9:92:aa:6d:95:
4a:f3:84:50:52:f6:46:cb:b2:70:74:c5:2b:c3:7f:6b:7f:ac:
ca:5a:8c:b0:a1:3f:3c:1d:b8:af:fc:20:d7:62:ce:83:e2:f8:
e4:39:ab:e9:95:68:49:3d:b0:e0:30:0f:90:87:1f:57:8d:eb:
4b:9e:12:59:5d:35:ce:f6:c4:3f:bd:92:70:e9:45:a0:b7:c5:
af:ec:14:98:8b:ab:2f:e8:59:eb:34:a2:c2:24:32:3a:b2:ed:
a4:a7:da:bc:7f:30:c0:47:32:47:16:19:0e:ba:73:71:e2:38:
c1:f0:f2:61:d8:7c:9d:f0:05:6c:aa:e5:1c:94:3d:64:ae:1c:
bd:e2:d9:62:68:8c:a3:20:11:27:90:18:c1:89:c4:14:1b:42:
9c:f1:d6:52
-----BEGIN CERTIFICATE-----
MIIGCzCCBPOgAwIBAgIECIynCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
Zjg0ZTQ3MzhhNzBlYTM5YzA4Y2VmMjEwNDMyYWUzOTllYzdlOTE1MB4XDTIyMDMy
NjA5NTQzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGU5YWY4Njc0MmE2
NmRmYTdkNjdiYzU3YjY0ZWRjNjA3ZGFlZjYwOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ3lPDZh63WhUU+B+NmSqvJzHARm+EK9VYbRjE/3sGCLzuE4
hMTvskwmLF1JMnnCKL87BWwlKiXk6Qdw5/Pypbziv6JuAhFBF7XUlXyduZIiZ3Rc
XdLrt/VFoZ+I0y/fFuG+5olLJvxldS4/M+SQ66iPzqvalyIvh8w1LVgwnxwiFt8M
fs3yt2KdKiGcNqI4cwuPneOPoiSYkpO/40TWBBcCWYSyZoMDkxww/cCPl2UC5gDS
RWm79ZAQvtjipLBOVm4BAi5MFA5ku7YZV0O0uBVyijLD6NIw7FqXnwbjfxXDRimc
C1TRadWqjDTnIVOYuW2n6SX1/yHM543kY/7ab3sCAwEAAaOCAyUwggMhMB0GA1Ud
DgQWBBSOmvhnQqZt+n1nvFe2Ttxgfa72CTAfBgNVHSMEGDAWgBRvhORzinDqOcCM
7yEEMq45nsfpFTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2I0VGtjNHB3NmpuQWpPOGhCREt1T1o3SDZSVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzYvZGRmOGIzLTFjMDgtNDk1Yy04ZGRmLWZhZTVkYmVkM2IxYi8x
L2pwcjRaMEttYmZwOVo3eFh0azdjWUgydTlnay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYv
ZGRmOGIzLTFjMDgtNDk1Yy04ZGRmLWZhZTVkYmVkM2IxYi8xL2I0VGtjNHB3Nmpu
QWpPOGhCREt1T1o3SDZSVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
ATkGCCsGAQUFBwEHAQH/BIIBKDCCASQwggEgBAIAATCCARgDBAFNaRIDBABNaR8D
BABPr2cwDAMEAE+vcwMEAE+vdgMEAFBKrTAMAwQAURIxAwQAURIyAwQBURI0AwQA
URI3AwQAURI9AwQAXbpAAwQAXbpDMAwDBABdukcDBABdukgDBAFt6bgDBABt6b0D
BAGy2wgDBACy2wsDBACy/c8DBACy/dIwDAMEALL91QMEALL91gMEALL92wMEALL9
3gMEALL97AMEALL98DAMAwQDuS9YAwQAuS9aAwQAvNfkAwQAvP+CAwQAvP++MAwD
BAS8/9ADBAC8/9gDBAC8/9sDBAC8/+wDBAG8/+4wDAMEArz/9AMEALz/+DAMAwQB
vP/6AwQAvP/8AwQBvP/+AwQB1EUGAwQB1EUMMA0GCSqGSIb3DQEBCwUAA4IBAQBc
GER+3zpN2jOZtc5rwqpsxzv1oiSjTAVAxPc6zmXnjFwC5hDOilqCH4M+lJeMOqpG
JcdHs1tjkfqN5Ljomm2AMwuS/77tQuyTwEVmKNaR8x4R8TKghBNvZ3/5Er3f3rfa
sZ1Cf/LnyZKqbZVK84RQUvZGy7JwdMUrw39rf6zKWoywoT88Hbiv/CDXYs6D4vjk
OavplWhJPbDgMA+Qhx9XjetLnhJZXTXO9sQ/vZJw6UWgt8Wv7BSYi6sv6FnrNKLC
JDI6su2kp9q8fzDARzJHFhkOunNx4jjB8PJh2Hyd8AVsquUclD1krhy94tliaIyj
IBEnkBjBicQUG0Kc8dZS
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:20 2023 by rpki-client on console-ams.rpki-client.org