Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zOb2_HO5zRskxPFyzSS-hSw5DM8.roa
File: zOb2_HO5zRskxPFyzSS-hSw5DM8.roa (raw, json)
Hash identifier: 4XQaNsRr6GFfi+YxMOUZCYigJMyzkVOUhsRJD3kphU4=
Subject key identifier: CC:E6:F6:FC:73:B9:CD:1B:24:C4:F1:72:CD:24:BE:85:2C:39:0C:CF
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01849C512DB924DE0C009D9063BF89A796A2
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zOb2_HO5zRskxPFyzSS-hSw5DM8.roa
Signing time: Mon 21 Nov 2022 22:31:16 +0000
ROA not before: Mon 21 Nov 2022 22:31:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9125
IP address blocks: 188.255.139.0/24 maxlen: 24
188.255.138.0/24 maxlen: 24
188.255.137.0/24 maxlen: 24
188.255.136.0/24 maxlen: 24
188.255.133.0/24 maxlen: 24
188.255.142.0/23 maxlen: 23
188.255.144.0/20 maxlen: 20
188.255.145.0/24 maxlen: 24
193.107.4.0/22 maxlen: 22
188.255.204.0/24 maxlen: 24
188.255.201.0/24 maxlen: 24
188.255.203.0/24 maxlen: 24
188.255.202.0/24 maxlen: 24
109.121.16.0/20 maxlen: 20
109.121.12.0/22 maxlen: 22
188.255.211.0/24 maxlen: 24
188.255.209.0/24 maxlen: 24
109.121.30.0/24 maxlen: 24
188.255.214.0/24 maxlen: 24
188.255.216.0/24 maxlen: 24
188.255.223.0/24 maxlen: 24
188.255.220.0/24 maxlen: 24
188.255.226.0/23 maxlen: 23
188.255.222.0/23 maxlen: 23
109.121.32.0/21 maxlen: 21
188.255.225.0/24 maxlen: 24
188.255.232.0/22 maxlen: 22
109.121.44.0/23 maxlen: 23
109.121.40.0/22 maxlen: 22
188.255.230.0/23 maxlen: 24
188.255.233.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.240.0/23 maxlen: 23
109.121.48.0/21 maxlen: 21
109.121.46.0/23 maxlen: 23
188.255.239.0/24 maxlen: 24
188.255.236.0/24 maxlen: 24
109.121.56.0/22 maxlen: 22
188.255.243.0/24 maxlen: 24
188.255.242.0/24 maxlen: 24
109.121.56.0/24 maxlen: 24
109.121.60.0/22 maxlen: 22
188.255.249.0/24 maxlen: 24
188.255.152.0/21 maxlen: 24
188.255.148.0/22 maxlen: 24
188.255.147.0/24 maxlen: 24
188.255.160.0/21 maxlen: 21
188.255.172.0/24 maxlen: 24
188.255.168.0/24 maxlen: 24
188.255.170.0/23 maxlen: 24
188.255.178.0/24 maxlen: 24
188.255.176.0/23 maxlen: 24
188.255.174.0/23 maxlen: 23
188.255.185.0/24 maxlen: 24
188.255.186.0/23 maxlen: 23
188.255.180.0/22 maxlen: 24
188.255.191.0/24 maxlen: 24
109.121.0.0/18 maxlen: 18
188.255.188.0/23 maxlen: 24
188.255.194.0/24 maxlen: 24
109.121.8.0/22 maxlen: 22
188.255.196.0/22 maxlen: 22
93.186.79.0/24 maxlen: 24
178.253.192.0/21 maxlen: 21
178.253.204.0/23 maxlen: 23
178.253.200.0/22 maxlen: 22
178.253.206.0/24 maxlen: 24
178.253.208.0/23 maxlen: 23
178.253.211.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.224.0/21 maxlen: 21
178.253.220.0/23 maxlen: 23
178.253.223.0/24 maxlen: 24
93.186.70.0/24 maxlen: 24
93.186.66.0/24 maxlen: 24
93.186.73.0/24 maxlen: 24
178.253.232.0/23 maxlen: 23
178.253.239.0/24 maxlen: 24
178.253.234.0/24 maxlen: 24
109.233.186.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.242.0/24 maxlen: 24
178.253.241.0/24 maxlen: 24
109.233.191.0/24 maxlen: 24
109.233.187.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
178.253.251.0/24 maxlen: 24
178.253.247.0/24 maxlen: 24
178.253.252.0/22 maxlen: 22
81.18.50.0/24 maxlen: 24
178.253.248.0/23 maxlen: 23
81.18.58.0/24 maxlen: 24
81.18.54.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
81.18.62.0/24 maxlen: 24
81.18.59.0/24 maxlen: 24
81.18.60.0/24 maxlen: 24
178.219.0.0/22 maxlen: 22
178.219.10.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
178.219.14.0/24 maxlen: 24
77.105.13.0/24 maxlen: 24
77.105.12.0/24 maxlen: 24
77.105.14.0/24 maxlen: 24
77.105.16.0/20 maxlen: 20
77.105.15.0/24 maxlen: 24
77.105.17.0/24 maxlen: 24
77.105.18.0/23 maxlen: 23
77.105.23.0/24 maxlen: 24
77.105.24.0/24 maxlen: 24
77.105.20.0/24 maxlen: 24
77.105.21.0/24 maxlen: 24
77.105.30.0/24 maxlen: 24
77.105.29.0/24 maxlen: 24
77.105.27.0/24 maxlen: 24
77.105.26.0/24 maxlen: 24
77.105.28.0/24 maxlen: 24
77.105.25.0/24 maxlen: 24
77.105.36.0/23 maxlen: 23
77.105.36.0/22 maxlen: 22
77.105.32.0/22 maxlen: 22
77.105.38.0/24 maxlen: 24
77.105.44.0/24 maxlen: 24
77.105.43.0/24 maxlen: 24
77.105.40.0/24 maxlen: 24
77.105.42.0/24 maxlen: 24
77.105.41.0/24 maxlen: 24
77.105.48.0/20 maxlen: 20
77.105.46.0/23 maxlen: 23
77.105.45.0/24 maxlen: 24
77.105.0.0/24 maxlen: 24
77.105.0.0/22 maxlen: 22
77.105.10.0/24 maxlen: 24
77.105.5.0/24 maxlen: 24
77.105.7.0/24 maxlen: 24
77.105.8.0/23 maxlen: 23
46.16.104.0/22 maxlen: 24
46.16.108.0/23 maxlen: 24
46.16.111.0/24 maxlen: 24
46.16.110.0/24 maxlen: 24
212.69.17.0/24 maxlen: 24
212.69.16.0/24 maxlen: 24
212.69.15.0/24 maxlen: 24
212.69.20.0/24 maxlen: 24
212.69.28.0/22 maxlen: 22
212.69.28.0/23 maxlen: 23
212.69.31.0/24 maxlen: 24
194.28.131.0/24 maxlen: 24
194.28.129.0/24 maxlen: 24
212.69.2.0/24 maxlen: 24
212.69.8.0/23 maxlen: 23
79.175.97.0/24 maxlen: 24
79.175.94.0/24 maxlen: 24
79.175.96.0/22 maxlen: 22
79.175.98.0/23 maxlen: 23
79.175.92.0/23 maxlen: 24
79.175.102.0/24 maxlen: 24
79.175.104.0/21 maxlen: 24
79.175.100.0/23 maxlen: 24
79.175.111.0/24 maxlen: 24
79.175.112.0/24 maxlen: 24
79.175.114.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.113.0/24 maxlen: 24
79.175.119.0/24 maxlen: 24
79.175.120.0/22 maxlen: 22
79.175.125.0/24 maxlen: 24
79.175.124.0/24 maxlen: 24
79.175.121.0/24 maxlen: 24
188.215.228.0/24 maxlen: 24
79.175.123.0/24 maxlen: 24
79.175.122.0/24 maxlen: 24
79.175.126.0/23 maxlen: 24
188.255.255.0/24 maxlen: 24
79.175.64.0/23 maxlen: 24
79.175.64.0/20 maxlen: 20
79.175.64.0/21 maxlen: 21
79.175.68.0/22 maxlen: 24
79.175.64.0/18 maxlen: 18
79.175.72.0/21 maxlen: 21
79.175.80.0/20 maxlen: 20
79.175.80.0/21 maxlen: 24
79.175.88.0/22 maxlen: 24
80.74.160.0/20 maxlen: 20
2a00:8100::/32 maxlen: 32
2a02:660::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9c:51:2d:b9:24:de:0c:00:9d:90:63:bf:89:a7:96:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Nov 21 22:31:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cce6f6fc73b9cd1b24c4f172cd24be852c390ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:76:21:e2:1d:76:51:b3:8e:86:82:43:4c:0f:
53:04:ac:05:f8:dc:45:56:58:f8:9c:53:3d:2f:b7:
d0:e6:30:3c:f5:67:cc:70:4a:b7:07:22:20:0e:b8:
9b:2e:08:6b:8f:90:e6:11:5f:07:6a:d6:16:5f:65:
2c:ec:36:f5:11:53:0a:d5:ed:b3:31:df:ec:e2:e4:
80:a1:cd:f4:72:82:86:ec:64:8d:f7:ae:62:36:1e:
d6:b6:bf:bd:a1:90:e9:1d:f3:d8:4f:46:2f:d2:7d:
44:9f:69:2d:6c:c0:02:22:e0:56:a3:ba:8b:ac:ee:
da:e7:51:05:ba:3d:27:f1:a0:b3:17:68:40:71:c2:
67:64:be:6a:5c:7d:8c:d2:d4:6c:b3:ca:14:fa:53:
46:2a:9a:95:df:57:c8:bc:23:37:de:9e:b5:77:61:
23:3f:05:9e:e0:4e:71:23:95:5b:5f:de:b1:b9:cc:
0d:0f:f8:8c:ca:1a:6b:c5:1f:90:4c:bf:06:d3:9c:
c4:b9:8c:31:e1:3a:6f:54:64:7e:5f:7e:a7:a9:40:
41:be:26:ac:78:c5:88:b1:22:bf:e6:22:c0:07:c4:
c2:6f:44:17:6e:ef:84:c2:54:ee:d8:43:53:21:c5:
21:80:40:d8:b7:54:28:1d:c9:b5:74:38:5a:5e:e7:
63:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E6:F6:FC:73:B9:CD:1B:24:C4:F1:72:CD:24:BE:85:2C:39:0C:CF
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zOb2_HO5zRskxPFyzSS-hSw5DM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.104.0/21
77.105.0.0/22
77.105.5.0/24
77.105.7.0-77.105.10.255
77.105.12.0-77.105.63.255
79.175.64.0/18
80.74.160.0/20
81.18.50.0/24
81.18.54.0/24
81.18.58.0-81.18.60.255
81.18.62.0/23
93.186.66.0/24
93.186.70.0/24
93.186.73.0/24
93.186.79.0/24
109.121.0.0/18
109.233.186.0-109.233.188.255
109.233.191.0/24
178.219.0.0/22
178.219.10.0/24
178.219.12.0-178.219.14.255
178.253.192.0-178.253.206.255
178.253.208.0/23
178.253.211.0/24
178.253.217.0/24
178.253.219.0-178.253.221.255
178.253.223.0-178.253.234.255
178.253.239.0/24
178.253.241.0-178.253.242.255
178.253.246.0-178.253.249.255
178.253.251.0-178.253.255.255
188.215.228.0/24
188.255.133.0/24
188.255.136.0/22
188.255.142.0-188.255.168.255
188.255.170.0-188.255.172.255
188.255.174.0-188.255.178.255
188.255.180.0/22
188.255.185.0-188.255.189.255
188.255.191.0/24
188.255.194.0/24
188.255.196.0/22
188.255.201.0-188.255.204.255
188.255.209.0/24
188.255.211.0/24
188.255.214.0/24
188.255.216.0/24
188.255.220.0/24
188.255.222.0/23
188.255.225.0-188.255.228.255
188.255.230.0-188.255.236.255
188.255.239.0-188.255.243.255
188.255.249.0/24
188.255.255.0/24
193.107.4.0/22
194.28.129.0/24
194.28.131.0/24
212.69.2.0/24
212.69.8.0/23
212.69.15.0-212.69.17.255
212.69.20.0/24
212.69.28.0/22
IPv6:
2a00:8100::/32
2a02:660::/32
Signature Algorithm: sha256WithRSAEncryption
65:f1:8b:c4:dc:b4:83:40:fb:5a:54:a2:47:03:d1:c3:35:93:
66:69:7e:9e:b3:6b:00:e6:f0:70:af:87:93:cc:a2:64:37:a8:
e5:48:ce:1b:ce:5e:bb:9a:75:15:42:0c:c7:90:cb:3c:34:20:
93:48:09:ba:ad:9b:4e:48:8b:69:42:a4:f9:40:3f:b3:a3:98:
9a:ee:af:3d:0e:01:6f:04:66:99:02:af:44:4b:0b:c1:87:a4:
f3:63:1f:ab:b2:4d:d5:75:ce:32:2d:6c:a4:c9:2f:aa:a0:ba:
87:5c:63:10:dc:78:2b:fb:15:ff:e9:b6:ee:ce:18:9f:cd:a4:
3c:ed:20:fc:b0:7e:68:5a:2c:fc:a5:7d:e4:73:54:35:88:9c:
f2:1a:f3:fe:8e:20:6d:c7:9c:cd:e8:5d:50:88:27:52:c2:42:
a9:23:18:eb:93:8c:8d:31:6b:3e:98:94:2f:f5:2a:1c:3b:ed:
65:9a:02:a1:a0:7a:14:8a:b1:b6:14:61:02:5d:af:d2:b3:d6:
77:16:c6:3a:3c:83:7b:3f:aa:77:6a:08:d3:66:fd:2f:04:af:
4c:eb:5a:72:bb:50:37:21:46:fa:3e:1e:42:fa:6f:8c:6d:b3:
8e:9b:3f:77:c0:bb:ed:f6:b1:a8:56:df:e8:2e:63:e9:89:b3:
ae:66:3d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:27 2024 by rpki-client on console-fra.rpki-client.org