Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/yWhDYgxbL92Fdscr1t9p4gsPDgU.roa
File: yWhDYgxbL92Fdscr1t9p4gsPDgU.roa (raw, json)
Hash identifier: O0s/hw0W/i+rZJuGqNP8GsaGdcHqLLwHJ0872LUuF7s=
Subject key identifier: C9:68:43:62:0C:5B:2F:DD:85:76:C7:2B:D6:DF:69:E2:0B:0F:0E:05
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018432E9E8912575A0943FA514CFF78F0450
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/yWhDYgxbL92Fdscr1t9p4gsPDgU.roa
Signing time: Tue 01 Nov 2022 11:18:20 +0000
ROA not before: Tue 01 Nov 2022 11:18:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9125
IP address blocks: 188.255.139.0/24 maxlen: 24
188.255.137.0/24 maxlen: 24
188.255.136.0/24 maxlen: 24
188.255.133.0/24 maxlen: 24
188.255.142.0/23 maxlen: 23
188.255.144.0/20 maxlen: 20
188.255.145.0/24 maxlen: 24
193.107.4.0/22 maxlen: 22
188.255.204.0/24 maxlen: 24
188.255.201.0/24 maxlen: 24
188.255.203.0/24 maxlen: 24
188.255.202.0/24 maxlen: 24
109.121.16.0/20 maxlen: 20
109.121.12.0/22 maxlen: 22
188.255.211.0/24 maxlen: 24
188.255.209.0/24 maxlen: 24
109.121.30.0/24 maxlen: 24
188.255.214.0/24 maxlen: 24
188.255.216.0/24 maxlen: 24
188.255.223.0/24 maxlen: 24
188.255.220.0/24 maxlen: 24
188.255.226.0/23 maxlen: 23
188.255.222.0/23 maxlen: 23
109.121.32.0/21 maxlen: 21
188.255.225.0/24 maxlen: 24
188.255.232.0/22 maxlen: 22
109.121.44.0/23 maxlen: 23
109.121.40.0/22 maxlen: 22
188.255.230.0/23 maxlen: 24
188.255.233.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.240.0/23 maxlen: 23
109.121.48.0/21 maxlen: 21
109.121.46.0/23 maxlen: 23
188.255.239.0/24 maxlen: 24
188.255.236.0/24 maxlen: 24
109.121.56.0/22 maxlen: 22
188.255.242.0/24 maxlen: 24
109.121.60.0/22 maxlen: 22
188.255.249.0/24 maxlen: 24
188.255.152.0/21 maxlen: 24
188.255.148.0/22 maxlen: 24
188.255.146.0/23 maxlen: 24
188.255.160.0/21 maxlen: 21
188.255.168.0/22 maxlen: 22
188.255.176.0/20 maxlen: 20
188.255.174.0/23 maxlen: 23
188.255.185.0/24 maxlen: 24
188.255.181.0/24 maxlen: 24
188.255.186.0/23 maxlen: 23
188.255.189.0/24 maxlen: 24
188.255.188.0/24 maxlen: 24
109.121.0.0/18 maxlen: 18
188.255.194.0/24 maxlen: 24
109.121.8.0/22 maxlen: 22
188.255.196.0/22 maxlen: 22
93.186.79.0/24 maxlen: 24
178.253.192.0/21 maxlen: 21
178.253.204.0/23 maxlen: 23
178.253.200.0/22 maxlen: 22
178.253.206.0/24 maxlen: 24
178.253.208.0/23 maxlen: 23
178.253.211.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.224.0/21 maxlen: 21
178.253.220.0/23 maxlen: 23
178.253.223.0/24 maxlen: 24
93.186.70.0/24 maxlen: 24
93.186.66.0/24 maxlen: 24
93.186.73.0/24 maxlen: 24
178.253.232.0/23 maxlen: 23
178.253.239.0/24 maxlen: 24
178.253.234.0/24 maxlen: 24
109.233.186.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.242.0/24 maxlen: 24
178.253.241.0/24 maxlen: 24
109.233.191.0/24 maxlen: 24
109.233.187.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
178.253.251.0/24 maxlen: 24
178.253.247.0/24 maxlen: 24
178.253.252.0/22 maxlen: 22
81.18.50.0/24 maxlen: 24
178.253.248.0/23 maxlen: 23
81.18.58.0/24 maxlen: 24
81.18.54.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
81.18.62.0/24 maxlen: 24
81.18.59.0/24 maxlen: 24
81.18.60.0/24 maxlen: 24
178.219.0.0/22 maxlen: 22
178.219.10.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
178.219.14.0/24 maxlen: 24
77.105.13.0/24 maxlen: 24
77.105.12.0/24 maxlen: 24
77.105.14.0/24 maxlen: 24
77.105.16.0/20 maxlen: 20
77.105.15.0/24 maxlen: 24
77.105.17.0/24 maxlen: 24
77.105.18.0/23 maxlen: 23
77.105.23.0/24 maxlen: 24
77.105.24.0/24 maxlen: 24
77.105.20.0/24 maxlen: 24
77.105.21.0/24 maxlen: 24
77.105.30.0/24 maxlen: 24
77.105.29.0/24 maxlen: 24
77.105.27.0/24 maxlen: 24
77.105.26.0/24 maxlen: 24
77.105.28.0/24 maxlen: 24
77.105.25.0/24 maxlen: 24
77.105.36.0/23 maxlen: 23
77.105.36.0/22 maxlen: 22
77.105.32.0/22 maxlen: 22
77.105.38.0/24 maxlen: 24
77.105.44.0/24 maxlen: 24
77.105.43.0/24 maxlen: 24
77.105.40.0/24 maxlen: 24
77.105.42.0/24 maxlen: 24
77.105.41.0/24 maxlen: 24
77.105.48.0/20 maxlen: 20
77.105.46.0/23 maxlen: 23
77.105.45.0/24 maxlen: 24
77.105.0.0/24 maxlen: 24
77.105.0.0/22 maxlen: 22
77.105.10.0/24 maxlen: 24
77.105.5.0/24 maxlen: 24
77.105.7.0/24 maxlen: 24
77.105.8.0/23 maxlen: 23
46.16.104.0/22 maxlen: 24
46.16.108.0/23 maxlen: 24
46.16.110.0/24 maxlen: 24
212.69.17.0/24 maxlen: 24
212.69.16.0/24 maxlen: 24
212.69.15.0/24 maxlen: 24
212.69.20.0/24 maxlen: 24
212.69.28.0/22 maxlen: 22
212.69.28.0/23 maxlen: 23
212.69.31.0/24 maxlen: 24
194.28.131.0/24 maxlen: 24
194.28.129.0/24 maxlen: 24
212.69.2.0/24 maxlen: 24
212.69.8.0/23 maxlen: 23
79.175.97.0/24 maxlen: 24
79.175.94.0/24 maxlen: 24
79.175.96.0/22 maxlen: 22
79.175.98.0/23 maxlen: 23
79.175.92.0/23 maxlen: 24
79.175.102.0/24 maxlen: 24
79.175.104.0/21 maxlen: 24
79.175.100.0/23 maxlen: 24
79.175.111.0/24 maxlen: 24
79.175.112.0/24 maxlen: 24
79.175.114.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.113.0/24 maxlen: 24
79.175.119.0/24 maxlen: 24
79.175.120.0/22 maxlen: 22
79.175.125.0/24 maxlen: 24
79.175.124.0/24 maxlen: 24
79.175.121.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
79.175.123.0/24 maxlen: 24
79.175.122.0/24 maxlen: 24
79.175.126.0/23 maxlen: 24
188.255.255.0/24 maxlen: 24
79.175.64.0/23 maxlen: 24
79.175.64.0/21 maxlen: 21
79.175.64.0/20 maxlen: 20
79.175.68.0/22 maxlen: 24
79.175.64.0/18 maxlen: 18
79.175.72.0/21 maxlen: 21
79.175.80.0/20 maxlen: 20
79.175.80.0/21 maxlen: 24
79.175.88.0/22 maxlen: 24
80.74.160.0/20 maxlen: 20
2a00:8100::/32 maxlen: 32
2a02:660::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:32:e9:e8:91:25:75:a0:94:3f:a5:14:cf:f7:8f:04:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Nov 1 11:18:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c96843620c5b2fdd8576c72bd6df69e20b0f0e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:30:99:7f:77:bc:e6:c6:a8:aa:4e:fd:09:45:
d0:34:0a:59:41:b4:ef:05:69:47:ea:60:e3:f6:21:
a8:96:0e:76:40:93:84:7c:2e:06:07:66:c6:60:ea:
77:ab:dd:60:f3:ed:d8:b9:7a:b0:85:43:91:87:d4:
9c:67:c6:96:36:13:c1:10:05:80:16:fb:66:d2:84:
ba:1f:1a:7d:e7:b1:a6:07:06:e2:ca:e7:cb:f6:ab:
15:16:39:bb:74:6a:f5:45:26:f5:03:8d:9e:92:42:
fa:cc:9d:75:db:40:84:8c:3a:e8:5c:14:d6:db:a9:
75:2e:87:04:69:a3:00:87:e2:d8:9b:1e:c9:bd:84:
c3:48:03:a6:26:b6:a4:4c:6c:45:9a:e3:0f:f1:0c:
70:68:41:ef:07:c4:ec:c8:86:26:b6:72:56:c2:9c:
b8:5c:c7:9c:d9:94:cf:a8:bd:e4:30:13:bf:cb:36:
c5:fa:9e:9d:0e:00:57:c2:35:60:67:4c:0c:11:b5:
61:cd:c8:25:2c:69:a5:bf:b3:f1:5a:3e:49:79:02:
10:30:60:a7:78:93:e9:0a:bf:27:a3:a2:65:8f:e7:
69:4d:eb:ee:44:3e:f9:0c:9d:18:41:4f:9f:18:5b:
2f:a5:82:a2:3d:bf:cb:03:89:35:86:4b:82:cb:13:
84:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:68:43:62:0C:5B:2F:DD:85:76:C7:2B:D6:DF:69:E2:0B:0F:0E:05
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/yWhDYgxbL92Fdscr1t9p4gsPDgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.104.0-46.16.110.255
77.105.0.0/22
77.105.5.0/24
77.105.7.0-77.105.10.255
77.105.12.0-77.105.63.255
79.175.64.0/18
80.74.160.0/20
81.18.50.0/24
81.18.54.0/24
81.18.58.0-81.18.60.255
81.18.62.0/23
93.186.66.0/24
93.186.70.0/24
93.186.73.0/24
93.186.79.0/24
109.121.0.0/18
109.233.186.0-109.233.188.255
109.233.191.0/24
178.219.0.0/22
178.219.10.0/24
178.219.12.0-178.219.14.255
178.253.192.0-178.253.206.255
178.253.208.0/23
178.253.211.0/24
178.253.217.0/24
178.253.219.0-178.253.221.255
178.253.223.0-178.253.234.255
178.253.239.0/24
178.253.241.0-178.253.242.255
178.253.246.0-178.253.249.255
178.253.251.0-178.253.255.255
188.215.228.0/24
188.255.133.0/24
188.255.136.0/23
188.255.139.0/24
188.255.142.0-188.255.171.255
188.255.174.0-188.255.191.255
188.255.194.0/24
188.255.196.0/22
188.255.201.0-188.255.204.255
188.255.209.0/24
188.255.211.0/24
188.255.214.0/24
188.255.216.0/24
188.255.220.0/24
188.255.222.0/23
188.255.225.0-188.255.228.255
188.255.230.0-188.255.236.255
188.255.239.0-188.255.242.255
188.255.249.0/24
188.255.255.0/24
193.107.4.0/22
194.28.129.0/24
194.28.131.0/24
212.69.2.0/24
212.69.8.0/23
212.69.15.0-212.69.17.255
212.69.20.0/24
212.69.28.0/22
IPv6:
2a00:8100::/32
2a02:660::/32
Signature Algorithm: sha256WithRSAEncryption
a9:25:cf:09:2f:3a:3e:f3:0f:f6:2f:4d:ba:72:b0:f1:21:68:
c1:aa:c1:02:6f:2e:d5:81:62:00:4d:a5:65:12:28:fe:fd:30:
77:5a:4b:39:46:f9:0e:9e:3e:1c:4d:73:fa:5a:01:02:61:15:
5e:32:ca:31:08:41:46:27:b2:09:70:41:df:a2:a8:88:8d:ef:
83:e0:04:cc:4e:6e:08:f1:50:f6:98:7c:d0:95:0c:91:68:38:
b6:3d:7c:c0:75:f6:70:75:28:8f:a6:42:18:90:8e:aa:46:58:
48:3e:4e:23:a6:5e:34:7b:b0:98:4a:8d:64:38:2e:f6:03:21:
e8:75:27:b4:bb:4c:c1:c0:75:d3:de:0a:bf:f5:fb:9c:ed:83:
34:9d:dd:5c:44:94:6d:98:14:8b:63:80:78:a1:37:9d:06:a9:
9b:b1:c7:83:7a:c6:25:77:26:6c:4b:44:e5:4c:29:60:f1:a8:
c7:07:a0:1f:3b:b6:76:8d:d0:a4:ee:67:64:64:d3:5a:94:2c:
dd:d8:e6:3f:d6:0c:68:27:ec:55:d1:42:d7:f8:05:01:3c:26:
4b:9f:5d:18:63:d8:54:70:aa:e4:b3:50:ed:76:01:11:f6:f1:
c2:b4:5b:7f:d4:c1:d4:61:53:68:1d:c7:75:09:4c:3b:9e:5e:
95:e7:a7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-fra.rpki-client.org