Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/w0nWSGKyJu9h0kamkw-_M8LnwOQ.roa
File: w0nWSGKyJu9h0kamkw-_M8LnwOQ.roa (raw, json)
Hash identifier: FWSuU9Kv91GJwy3PJhXiazyw8kBYAgV4oB5JeK3swpg=
Subject key identifier: C3:49:D6:48:62:B2:26:EF:61:D2:46:A6:93:0F:BF:33:C2:E7:C0:E4
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0184384719419A9EFB45DA88C55F4C67E14F
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/w0nWSGKyJu9h0kamkw-_M8LnwOQ.roa
Signing time: Wed 02 Nov 2022 12:18:14 +0000
ROA not before: Wed 02 Nov 2022 12:18:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9125
IP address blocks: 188.255.139.0/24 maxlen: 24
188.255.138.0/24 maxlen: 24
188.255.137.0/24 maxlen: 24
188.255.136.0/24 maxlen: 24
188.255.133.0/24 maxlen: 24
188.255.142.0/23 maxlen: 23
188.255.144.0/20 maxlen: 20
188.255.145.0/24 maxlen: 24
193.107.4.0/22 maxlen: 22
188.255.204.0/24 maxlen: 24
188.255.201.0/24 maxlen: 24
188.255.203.0/24 maxlen: 24
188.255.202.0/24 maxlen: 24
109.121.16.0/20 maxlen: 20
109.121.12.0/22 maxlen: 22
188.255.211.0/24 maxlen: 24
188.255.209.0/24 maxlen: 24
109.121.30.0/24 maxlen: 24
188.255.214.0/24 maxlen: 24
188.255.216.0/24 maxlen: 24
188.255.223.0/24 maxlen: 24
188.255.220.0/24 maxlen: 24
188.255.226.0/23 maxlen: 23
188.255.222.0/23 maxlen: 23
109.121.32.0/21 maxlen: 21
188.255.225.0/24 maxlen: 24
188.255.232.0/22 maxlen: 22
109.121.44.0/23 maxlen: 23
109.121.40.0/22 maxlen: 22
188.255.230.0/23 maxlen: 24
188.255.233.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.240.0/23 maxlen: 23
109.121.48.0/21 maxlen: 21
109.121.46.0/23 maxlen: 23
188.255.239.0/24 maxlen: 24
188.255.236.0/24 maxlen: 24
109.121.56.0/22 maxlen: 22
188.255.242.0/24 maxlen: 24
109.121.60.0/22 maxlen: 22
188.255.249.0/24 maxlen: 24
188.255.152.0/21 maxlen: 24
188.255.148.0/22 maxlen: 24
188.255.147.0/24 maxlen: 24
188.255.160.0/21 maxlen: 21
188.255.168.0/22 maxlen: 22
188.255.178.0/24 maxlen: 24
188.255.176.0/23 maxlen: 24
188.255.174.0/23 maxlen: 23
188.255.185.0/24 maxlen: 24
188.255.186.0/23 maxlen: 23
188.255.180.0/22 maxlen: 24
188.255.191.0/24 maxlen: 24
109.121.0.0/18 maxlen: 18
188.255.188.0/23 maxlen: 24
188.255.194.0/24 maxlen: 24
109.121.8.0/22 maxlen: 22
188.255.196.0/22 maxlen: 22
93.186.79.0/24 maxlen: 24
178.253.192.0/21 maxlen: 21
178.253.204.0/23 maxlen: 23
178.253.200.0/22 maxlen: 22
178.253.206.0/24 maxlen: 24
178.253.208.0/23 maxlen: 23
178.253.211.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.224.0/21 maxlen: 21
178.253.220.0/23 maxlen: 23
178.253.223.0/24 maxlen: 24
93.186.70.0/24 maxlen: 24
93.186.66.0/24 maxlen: 24
93.186.73.0/24 maxlen: 24
178.253.232.0/23 maxlen: 23
178.253.239.0/24 maxlen: 24
178.253.234.0/24 maxlen: 24
109.233.186.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.242.0/24 maxlen: 24
178.253.241.0/24 maxlen: 24
109.233.191.0/24 maxlen: 24
109.233.187.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
178.253.251.0/24 maxlen: 24
178.253.247.0/24 maxlen: 24
178.253.252.0/22 maxlen: 22
81.18.50.0/24 maxlen: 24
178.253.248.0/23 maxlen: 23
81.18.58.0/24 maxlen: 24
81.18.54.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
81.18.62.0/24 maxlen: 24
81.18.59.0/24 maxlen: 24
81.18.60.0/24 maxlen: 24
178.219.0.0/22 maxlen: 22
178.219.10.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
178.219.14.0/24 maxlen: 24
77.105.13.0/24 maxlen: 24
77.105.12.0/24 maxlen: 24
77.105.14.0/24 maxlen: 24
77.105.16.0/20 maxlen: 20
77.105.15.0/24 maxlen: 24
77.105.17.0/24 maxlen: 24
77.105.18.0/23 maxlen: 23
77.105.23.0/24 maxlen: 24
77.105.24.0/24 maxlen: 24
77.105.20.0/24 maxlen: 24
77.105.21.0/24 maxlen: 24
77.105.30.0/24 maxlen: 24
77.105.29.0/24 maxlen: 24
77.105.27.0/24 maxlen: 24
77.105.26.0/24 maxlen: 24
77.105.28.0/24 maxlen: 24
77.105.25.0/24 maxlen: 24
77.105.36.0/23 maxlen: 23
77.105.36.0/22 maxlen: 22
77.105.32.0/22 maxlen: 22
77.105.38.0/24 maxlen: 24
77.105.44.0/24 maxlen: 24
77.105.43.0/24 maxlen: 24
77.105.40.0/24 maxlen: 24
77.105.42.0/24 maxlen: 24
77.105.41.0/24 maxlen: 24
77.105.48.0/20 maxlen: 20
77.105.46.0/23 maxlen: 23
77.105.45.0/24 maxlen: 24
77.105.0.0/24 maxlen: 24
77.105.0.0/22 maxlen: 22
77.105.10.0/24 maxlen: 24
77.105.5.0/24 maxlen: 24
77.105.7.0/24 maxlen: 24
77.105.8.0/23 maxlen: 23
46.16.104.0/22 maxlen: 24
46.16.108.0/23 maxlen: 24
46.16.110.0/24 maxlen: 24
212.69.17.0/24 maxlen: 24
212.69.16.0/24 maxlen: 24
212.69.15.0/24 maxlen: 24
212.69.20.0/24 maxlen: 24
212.69.28.0/22 maxlen: 22
212.69.28.0/23 maxlen: 23
212.69.31.0/24 maxlen: 24
194.28.131.0/24 maxlen: 24
194.28.129.0/24 maxlen: 24
212.69.2.0/24 maxlen: 24
212.69.8.0/23 maxlen: 23
79.175.97.0/24 maxlen: 24
79.175.94.0/24 maxlen: 24
79.175.96.0/22 maxlen: 22
79.175.98.0/23 maxlen: 23
79.175.92.0/23 maxlen: 24
79.175.102.0/24 maxlen: 24
79.175.104.0/21 maxlen: 24
79.175.100.0/23 maxlen: 24
79.175.111.0/24 maxlen: 24
79.175.112.0/24 maxlen: 24
79.175.114.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.113.0/24 maxlen: 24
79.175.119.0/24 maxlen: 24
79.175.120.0/22 maxlen: 22
79.175.125.0/24 maxlen: 24
79.175.124.0/24 maxlen: 24
79.175.121.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
79.175.123.0/24 maxlen: 24
79.175.122.0/24 maxlen: 24
79.175.126.0/23 maxlen: 24
188.255.255.0/24 maxlen: 24
79.175.64.0/23 maxlen: 24
79.175.64.0/21 maxlen: 21
79.175.64.0/20 maxlen: 20
79.175.68.0/22 maxlen: 24
79.175.64.0/18 maxlen: 18
79.175.72.0/21 maxlen: 21
79.175.80.0/20 maxlen: 20
79.175.80.0/21 maxlen: 24
79.175.88.0/22 maxlen: 24
80.74.160.0/20 maxlen: 20
2a00:8100::/32 maxlen: 32
2a02:660::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:38:47:19:41:9a:9e:fb:45:da:88:c5:5f:4c:67:e1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Nov 2 12:18:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c349d64862b226ef61d246a6930fbf33c2e7c0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:01:77:2b:fb:52:82:5b:7c:a7:ce:d4:2e:
08:12:fe:cf:a7:ff:a7:9e:b2:e2:2e:25:31:f7:df:
77:f6:58:04:dd:c4:cb:8e:fa:19:be:06:2d:76:be:
28:54:21:6e:8d:a9:70:36:f1:6d:be:98:6b:b7:6a:
8d:cd:0c:4b:9c:a4:99:32:18:e4:b5:0f:3d:c7:54:
ea:a4:e9:de:a5:dd:d7:1a:fa:14:7a:82:c6:33:b7:
08:61:4d:21:9a:49:d8:cc:ad:44:93:22:f2:2f:30:
cb:b9:62:25:bf:8d:a0:de:0f:42:c8:0e:a3:44:98:
f8:57:ae:89:28:99:cd:bb:d7:06:7a:4e:b9:ea:dd:
28:69:d1:12:b0:86:6a:a6:3f:21:24:9d:b2:ff:12:
4b:0a:df:84:74:bc:0b:ff:44:77:70:64:87:0e:7d:
63:f0:24:4c:b7:4e:fa:aa:02:4c:3b:2a:d0:95:fe:
c9:3d:f8:36:c5:23:05:7c:60:75:08:e1:b0:61:b1:
c2:90:82:4b:6a:45:8d:1e:e4:7f:a2:f3:1f:43:c3:
e6:ae:72:f5:e4:9a:10:81:91:fb:10:ef:a8:ab:8d:
76:e2:e0:4d:8f:1f:c8:f2:8e:e2:2c:a1:57:9a:25:
ad:6c:eb:58:bd:94:11:e3:2f:1d:a9:f8:70:31:15:
58:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:49:D6:48:62:B2:26:EF:61:D2:46:A6:93:0F:BF:33:C2:E7:C0:E4
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/w0nWSGKyJu9h0kamkw-_M8LnwOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.104.0-46.16.110.255
77.105.0.0/22
77.105.5.0/24
77.105.7.0-77.105.10.255
77.105.12.0-77.105.63.255
79.175.64.0/18
80.74.160.0/20
81.18.50.0/24
81.18.54.0/24
81.18.58.0-81.18.60.255
81.18.62.0/23
93.186.66.0/24
93.186.70.0/24
93.186.73.0/24
93.186.79.0/24
109.121.0.0/18
109.233.186.0-109.233.188.255
109.233.191.0/24
178.219.0.0/22
178.219.10.0/24
178.219.12.0-178.219.14.255
178.253.192.0-178.253.206.255
178.253.208.0/23
178.253.211.0/24
178.253.217.0/24
178.253.219.0-178.253.221.255
178.253.223.0-178.253.234.255
178.253.239.0/24
178.253.241.0-178.253.242.255
178.253.246.0-178.253.249.255
178.253.251.0-178.253.255.255
188.215.228.0/24
188.255.133.0/24
188.255.136.0/22
188.255.142.0-188.255.171.255
188.255.174.0-188.255.178.255
188.255.180.0/22
188.255.185.0-188.255.189.255
188.255.191.0/24
188.255.194.0/24
188.255.196.0/22
188.255.201.0-188.255.204.255
188.255.209.0/24
188.255.211.0/24
188.255.214.0/24
188.255.216.0/24
188.255.220.0/24
188.255.222.0/23
188.255.225.0-188.255.228.255
188.255.230.0-188.255.236.255
188.255.239.0-188.255.242.255
188.255.249.0/24
188.255.255.0/24
193.107.4.0/22
194.28.129.0/24
194.28.131.0/24
212.69.2.0/24
212.69.8.0/23
212.69.15.0-212.69.17.255
212.69.20.0/24
212.69.28.0/22
IPv6:
2a00:8100::/32
2a02:660::/32
Signature Algorithm: sha256WithRSAEncryption
06:62:12:76:bd:59:68:14:cb:e7:64:d7:24:7a:fc:c5:92:8e:
45:2d:5c:06:20:2b:ca:01:c9:b2:32:30:c2:96:fc:87:86:6d:
c6:44:10:ac:0e:a0:86:58:0b:37:99:d2:ae:a1:3b:1a:98:2f:
28:40:be:8f:20:81:46:e8:28:f1:0c:78:fd:f5:64:73:54:91:
6d:da:51:20:ff:c0:a4:f2:6d:65:90:07:3c:d7:78:3d:86:c8:
26:19:d8:9e:19:18:a8:ab:9d:7c:fc:de:5e:3a:ae:ee:dc:e0:
b5:ef:b9:b2:f5:6d:81:3f:14:99:23:98:47:62:80:ff:88:44:
8e:7d:0b:23:59:dc:b2:8c:8c:e8:78:fe:93:95:46:33:be:c5:
36:dd:92:52:d5:13:36:51:e4:66:ef:3e:07:ab:b7:b1:e9:23:
1e:69:56:aa:47:ec:8e:c3:4d:66:59:39:a1:93:17:7b:af:72:
ca:df:fa:b5:c3:b5:ac:74:7d:b3:8f:97:c1:d8:5c:58:1d:1f:
30:1b:bc:a4:22:15:2b:03:d7:48:e9:6d:f0:03:bb:58:59:9c:
c6:ff:cf:32:a6:59:02:4a:46:59:42:92:16:60:7d:07:c1:1f:
40:b9:2b:2c:33:3a:7e:5c:d3:93:e1:c3:d9:95:7c:29:3e:2e:
01:bf:2b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:27 2024 by rpki-client on console-fra.rpki-client.org