Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/jx7KwDS9Cv1X6I1RrSRi2DvvMJc.roa
File: jx7KwDS9Cv1X6I1RrSRi2DvvMJc.roa (raw, json)
Hash identifier: PRLhYR9ogaVAk5bYC9DcSpjgUGNs5m/S0TaMkG/yf2s=
Subject key identifier: 8F:1E:CA:C0:34:BD:0A:FD:57:E8:8D:51:AD:24:62:D8:3B:EF:30:97
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018B590C8BAC1165B334BEC51A78B818F7E5
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/jx7KwDS9Cv1X6I1RrSRi2DvvMJc.roa
Signing time: Sun 22 Oct 2023 20:21:16 +0000
ROA not before: Sun 22 Oct 2023 20:21:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12880
IP address blocks: 2.188.2.0/24 maxlen: 24
2.188.3.0/24 maxlen: 24
2.188.4.0/24 maxlen: 24
2.188.5.0/24 maxlen: 24
2.188.0.0/16 maxlen: 24
2.188.10.0/24 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.8.0/24 maxlen: 24
2.188.11.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.14.0/24 maxlen: 24
2.188.13.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.12.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.15.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.18.0/24 maxlen: 24
2.188.21.0/24 maxlen: 24
2.188.20.0/24 maxlen: 24
2.188.19.0/24 maxlen: 24
2.188.26.0/23 maxlen: 23
2.188.30.0/24 maxlen: 24
2.188.25.0/24 maxlen: 24
2.188.31.0/24 maxlen: 24
2.188.48.0/22 maxlen: 22
78.39.152.0/24 maxlen: 24
78.39.156.0/24 maxlen: 24
78.39.155.0/24 maxlen: 24
78.39.153.0/24 maxlen: 24
78.39.165.0/24 maxlen: 24
78.39.179.0/24 maxlen: 24
2.189.5.48/28 maxlen: 28
2.188.54.0/24 maxlen: 24
2.188.58.0/24 maxlen: 24
2.188.53.0/24 maxlen: 24
2.188.55.0/24 maxlen: 24
2.188.61.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.188.60.0/24 maxlen: 24
2.188.59.0/24 maxlen: 24
2.188.78.0/24 maxlen: 24
2.188.77.0/24 maxlen: 24
2.188.76.0/24 maxlen: 24
2.188.79.0/24 maxlen: 24
78.38.242.0/24 maxlen: 24
78.38.243.0/24 maxlen: 24
78.38.241.0/24 maxlen: 24
78.38.244.0/24 maxlen: 24
78.38.245.0/24 maxlen: 24
78.38.246.0/24 maxlen: 24
78.38.251.0/24 maxlen: 24
78.38.248.0/24 maxlen: 24
78.38.249.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
78.38.250.0/24 maxlen: 24
78.38.255.0/24 maxlen: 24
78.38.254.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
78.38.193.0/24 maxlen: 24
78.38.201.0/24 maxlen: 24
78.38.209.0/24 maxlen: 24
2.187.0.0/16 maxlen: 24
78.38.220.0/23 maxlen: 23
78.38.240.0/24 maxlen: 24
78.39.128.0/24 maxlen: 24
78.39.130.0/24 maxlen: 24
2.189.5.96/28 maxlen: 28
78.39.43.0/24 maxlen: 24
78.39.40.0/24 maxlen: 24
78.39.47.0/24 maxlen: 24
78.39.51.0/24 maxlen: 24
78.39.48.0/24 maxlen: 24
78.39.49.0/24 maxlen: 24
78.39.46.0/24 maxlen: 24
78.39.50.0/24 maxlen: 24
78.39.55.0/24 maxlen: 24
78.39.56.0/24 maxlen: 24
78.39.57.0/24 maxlen: 24
78.39.53.0/24 maxlen: 24
78.39.58.0/24 maxlen: 24
78.39.54.0/24 maxlen: 24
78.39.59.0/24 maxlen: 24
78.39.62.0/23 maxlen: 24
78.38.32.0/19 maxlen: 19
217.219.236.0/22 maxlen: 22
78.38.0.0/16 maxlen: 24
78.38.160.0/19 maxlen: 19
195.146.37.0/24 maxlen: 24
195.146.32.0/19 maxlen: 19
195.146.32.0/20 maxlen: 20
195.146.36.0/24 maxlen: 24
195.146.32.0/24 maxlen: 24
195.146.50.0/24 maxlen: 24
195.146.46.0/23 maxlen: 23
195.146.60.0/24 maxlen: 24
195.146.63.0/24 maxlen: 24
217.219.40.0/22 maxlen: 22
2.178.192.0/18 maxlen: 18
217.219.0.0/16 maxlen: 24
217.219.24.0/21 maxlen: 21
217.219.152.0/21 maxlen: 21
85.185.230.0/23 maxlen: 23
2.189.5.64/28 maxlen: 28
85.185.192.0/22 maxlen: 22
217.218.85.0/24 maxlen: 24
80.191.103.0/24 maxlen: 24
217.218.94.0/24 maxlen: 24
217.218.96.0/19 maxlen: 19
217.218.105.0/24 maxlen: 24
217.218.104.0/24 maxlen: 24
2.178.0.0/19 maxlen: 19
217.218.114.0/24 maxlen: 24
217.218.131.0/24 maxlen: 24
217.218.127.0/24 maxlen: 24
217.218.132.0/24 maxlen: 24
80.191.41.0/24 maxlen: 24
80.191.64.0/23 maxlen: 24
217.218.48.0/21 maxlen: 21
80.191.61.0/24 maxlen: 24
80.191.67.0/24 maxlen: 24
217.218.56.0/24 maxlen: 24
80.191.69.0/24 maxlen: 24
80.191.70.0/24 maxlen: 24
217.218.55.0/24 maxlen: 24
217.218.64.0/24 maxlen: 24
217.218.64.0/18 maxlen: 18
80.191.81.0/24 maxlen: 24
217.218.67.0/24 maxlen: 24
80.191.88.0/21 maxlen: 24
2.189.79.64/27 maxlen: 27
85.185.42.0/24 maxlen: 24
85.185.45.0/24 maxlen: 24
217.218.239.0/24 maxlen: 24
217.218.235.0/24 maxlen: 24
2.189.5.112/28 maxlen: 28
2.178.128.0/18 maxlen: 18
217.218.143.0/24 maxlen: 24
2.178.32.0/19 maxlen: 19
217.218.141.0/24 maxlen: 24
217.218.155.0/24 maxlen: 24
2.178.64.0/18 maxlen: 18
85.185.0.0/16 maxlen: 24
217.218.180.0/24 maxlen: 24
2.185.0.0/16 maxlen: 16
2.177.0.0/17 maxlen: 17
2.177.128.0/17 maxlen: 17
80.191.0.0/24 maxlen: 24
80.191.0.0/16 maxlen: 24
2.191.0.0/16 maxlen: 16
217.218.0.0/16 maxlen: 24
80.191.24.0/24 maxlen: 24
80.191.27.0/24 maxlen: 24
80.191.29.0/24 maxlen: 24
80.191.36.0/24 maxlen: 24
217.218.21.0/24 maxlen: 24
80.191.32.0/24 maxlen: 24
2.189.5.32/28 maxlen: 28
2.182.248.0/22 maxlen: 22
2.182.214.0/23 maxlen: 23
2.189.79.32/27 maxlen: 27
2.176.192.0/18 maxlen: 18
2.189.5.80/28 maxlen: 28
2.176.0.0/12 maxlen: 12
2.189.7.0/24 maxlen: 24
2.189.0.0/16 maxlen: 24
2.188.183.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.186.0/24 maxlen: 24
2.188.192.0/18 maxlen: 18
2.182.0.0/16 maxlen: 24
2.189.78.0/24 maxlen: 24
2.189.77.0/24 maxlen: 24
2.189.79.0/24 maxlen: 24
2.189.4.0/28 maxlen: 28
2.182.96.0/19 maxlen: 19
2.189.44.0/24 maxlen: 24
2.189.45.0/24 maxlen: 24
2.189.59.0/24 maxlen: 24
2001:4188::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:59:0c:8b:ac:11:65:b3:34:be:c5:1a:78:b8:18:f7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Oct 22 20:21:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f1ecac034bd0afd57e88d51ad2462d83bef3097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:48:41:6a:52:93:36:91:1a:91:30:33:b0:d8:
72:de:99:4d:43:9e:74:f8:70:ff:f1:05:d5:18:43:
15:2a:c0:b7:f5:dc:ff:8a:73:f2:ec:49:ae:82:36:
06:76:04:a8:69:17:26:fd:96:0d:8d:cc:9f:1f:2d:
91:81:36:9e:d0:ac:d3:b3:05:3d:07:cf:d5:7c:d8:
00:da:89:2c:50:20:f4:29:d8:e9:05:e2:a2:58:00:
f9:1d:22:a8:ac:2b:a7:01:13:df:7c:24:47:77:7b:
ca:42:93:fa:45:54:07:33:e9:fc:63:d3:3e:73:22:
ec:03:f8:31:da:4c:04:38:33:49:bf:bd:23:df:8e:
2f:be:7f:20:32:6c:84:0c:f1:c6:2f:8f:93:da:4b:
dd:48:4e:63:c9:0e:f4:a5:09:71:86:5c:21:85:a2:
58:df:38:3f:f0:0f:89:0a:f3:5d:5b:1e:ad:b1:97:
13:ec:96:8b:1b:e9:f4:5b:8b:6a:c9:d1:c3:fa:1a:
8d:73:ea:fd:52:6a:36:e1:68:14:94:91:34:b9:d2:
83:4b:32:b8:5f:73:5b:31:b1:cf:16:09:40:84:31:
7b:df:cc:50:e7:5c:86:99:32:3d:34:5e:7e:33:fe:
b0:5d:f7:3e:f9:ba:8e:9b:21:fd:d1:f7:df:3a:9d:
a7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1E:CA:C0:34:BD:0A:FD:57:E8:8D:51:AD:24:62:D8:3B:EF:30:97
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/jx7KwDS9Cv1X6I1RrSRi2DvvMJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/12
78.38.0.0/15
80.191.0.0/16
85.185.0.0/16
195.146.32.0/19
217.218.0.0/15
IPv6:
2001:4188::/48
Signature Algorithm: sha256WithRSAEncryption
1b:85:28:2a:e9:96:e3:54:b0:20:58:de:4d:b8:10:fb:44:8a:
00:79:a7:83:5b:87:dd:e8:64:d4:b6:51:0b:ef:a3:f7:53:53:
fe:79:03:ca:c1:92:fd:94:ed:3a:c4:a3:a2:b0:65:2d:94:df:
12:c9:54:5a:80:32:56:68:15:40:07:fe:55:b5:8e:04:c1:3b:
da:c1:54:a6:84:69:f3:b1:44:d0:9b:00:7b:14:80:1f:e1:c0:
32:fe:43:88:d3:ba:43:eb:c6:37:59:27:a3:56:db:c2:c2:fe:
db:ed:7b:5d:52:48:8b:d5:69:6c:9e:92:e7:bd:7c:f0:ea:e2:
8e:b7:03:e9:0a:a3:10:15:98:f9:d4:46:35:d1:16:21:5d:26:
ff:3b:30:cb:39:f7:2b:7c:9f:2e:f5:e8:36:ef:54:b9:d4:fc:
23:18:78:77:52:d6:09:53:ed:88:4c:40:d2:21:77:f0:7b:1f:
67:e9:d6:98:77:1f:ff:c7:f0:12:4b:dd:5f:f8:cc:09:35:2e:
d1:c7:1e:ef:9a:d5:f2:9f:1a:14:b1:dc:af:6e:86:2b:b5:2d:
b4:a7:e2:a4:86:ba:23:3c:4c:2a:4e:fe:78:ae:9f:9a:c5:7a:
70:44:68:be:83:1a:6f:d1:7c:7a:36:dd:c7:bb:c2:39:cd:7e:
53:3a:39:fb
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYtZDIusEWWzNL7FGni4GPflMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy
NjBhZTUwHhcNMjMxMDIyMjAyMTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjFlY2FjMDM0YmQwYWZkNTdlODhkNTFhZDI0NjJkODNiZWYzMDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2khBalKTNpEakTAzsNhy3plNQ550
+HD/8QXVGEMVKsC39dz/inPy7EmugjYGdgSoaRcm/ZYNjcyfHy2RgTae0KzTswU9
B8/VfNgA2oksUCD0KdjpBeKiWAD5HSKorCunARPffCRHd3vKQpP6RVQHM+n8Y9M+
cyLsA/gx2kwEODNJv70j344vvn8gMmyEDPHGL4+T2kvdSE5jyQ70pQlxhlwhhaJY
3zg/8A+JCvNdWx6tsZcT7JaLG+n0W4tqydHD+hqNc+r9Umo24WgUlJE0udKDSzK4
X3NbMbHPFglAhDF738xQ51yGmTI9NF5+M/6wXfc++bqOmyH90fffOp2niQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFI8eysA0vQr9V+iNUa0kYtg77zCXMB8GA1UdIwQY
MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt
Zjc0ZDk1MTg1NzZjLzEvang3S3dEUzlDdjFYNkkxUnJTUmkyRHZ2TUpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj
LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAlBAIAATAfAwMEArADAwFO
JgMDAFC/AwMAVbkDBAXDkiADAwHZ2jAPBAIAAjAJAwcAIAFBiAAAMA0GCSqGSIb3
DQEBCwUAA4IBAQAbhSgq6ZbjVLAgWN5NuBD7RIoAeaeDW4fd6GTUtlEL76P3U1P+
eQPKwZL9lO06xKOisGUtlN8SyVRagDJWaBVAB/5VtY4EwTvawVSmhGnzsUTQmwB7
FIAf4cAy/kOI07pD68Y3WSejVtvCwv7b7XtdUkiL1WlsnpLnvXzw6uKOtwPpCqMQ
FZj51EY10RYhXSb/OzDLOfcrfJ8u9eg271S51PwjGHh3UtYJU+2ITEDSIXfwex9n
6daYdx//x/ASS91f+MwJNS7Rxx7vmtXynxoUsdyvboYrtS20p+KkhrojPEwqTv54
rp+axXpwRGi+gxpv0Xx6Nt3Hu8I5zX5TOjn7
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:14:12 2025 by rpki-client