Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/kJn2ayiS98FrIJ_EaxYIr-cIZLE.roa
File: kJn2ayiS98FrIJ_EaxYIr-cIZLE.roa (raw, json)
Hash identifier: VQNXVn9FeNX18JeHU8CX/ElGmR2WR6f8J6Z9APPwiHc=
Subject key identifier: 90:99:F6:6B:28:92:F7:C1:6B:20:9F:C4:6B:16:08:AF:E7:08:64:B1
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 0189AC06643EEFF225272C64155331384A27
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/kJn2ayiS98FrIJ_EaxYIr-cIZLE.roa
Signing time: Mon 31 Jul 2023 12:57:27 +0000
ROA not before: Mon 31 Jul 2023 12:57:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12880
IP address blocks: 2.188.2.0/24 maxlen: 24
2.188.3.0/24 maxlen: 24
2.188.4.0/24 maxlen: 24
2.188.5.0/24 maxlen: 24
2.188.0.0/16 maxlen: 24
2.188.10.0/24 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.8.0/24 maxlen: 24
2.188.11.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.14.0/24 maxlen: 24
2.188.13.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.12.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.15.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.18.0/24 maxlen: 24
2.188.21.0/24 maxlen: 24
2.188.20.0/24 maxlen: 24
2.188.19.0/24 maxlen: 24
2.188.26.0/23 maxlen: 23
2.188.30.0/24 maxlen: 24
2.188.25.0/24 maxlen: 24
2.188.31.0/24 maxlen: 24
2.188.48.0/22 maxlen: 22
78.39.152.0/24 maxlen: 24
78.39.156.0/24 maxlen: 24
78.39.155.0/24 maxlen: 24
78.39.153.0/24 maxlen: 24
78.39.165.0/24 maxlen: 24
78.39.179.0/24 maxlen: 24
2.189.5.48/28 maxlen: 28
2.188.54.0/24 maxlen: 24
2.188.58.0/24 maxlen: 24
2.188.53.0/24 maxlen: 24
2.188.55.0/24 maxlen: 24
2.188.61.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.188.60.0/24 maxlen: 24
2.188.59.0/24 maxlen: 24
2.188.78.0/24 maxlen: 24
2.188.77.0/24 maxlen: 24
2.188.76.0/24 maxlen: 24
2.188.79.0/24 maxlen: 24
78.38.242.0/24 maxlen: 24
78.38.243.0/24 maxlen: 24
78.38.241.0/24 maxlen: 24
78.38.244.0/24 maxlen: 24
78.38.245.0/24 maxlen: 24
78.38.246.0/24 maxlen: 24
78.38.251.0/24 maxlen: 24
78.38.248.0/24 maxlen: 24
78.38.249.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
78.38.250.0/24 maxlen: 24
78.38.255.0/24 maxlen: 24
78.38.254.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
78.38.193.0/24 maxlen: 24
78.38.201.0/24 maxlen: 24
78.38.209.0/24 maxlen: 24
2.187.0.0/16 maxlen: 24
78.38.220.0/23 maxlen: 23
78.38.240.0/24 maxlen: 24
78.39.128.0/24 maxlen: 24
78.39.130.0/24 maxlen: 24
2.189.5.96/28 maxlen: 28
78.39.43.0/24 maxlen: 24
78.39.40.0/24 maxlen: 24
78.39.47.0/24 maxlen: 24
78.39.51.0/24 maxlen: 24
78.39.48.0/24 maxlen: 24
78.39.49.0/24 maxlen: 24
78.39.46.0/24 maxlen: 24
78.39.50.0/24 maxlen: 24
78.39.55.0/24 maxlen: 24
78.39.56.0/24 maxlen: 24
78.39.57.0/24 maxlen: 24
78.39.53.0/24 maxlen: 24
78.39.58.0/24 maxlen: 24
78.39.54.0/24 maxlen: 24
78.39.59.0/24 maxlen: 24
78.39.62.0/23 maxlen: 24
78.38.32.0/19 maxlen: 19
217.219.236.0/22 maxlen: 22
78.38.0.0/16 maxlen: 24
78.38.160.0/19 maxlen: 19
195.146.37.0/24 maxlen: 24
195.146.32.0/19 maxlen: 19
195.146.32.0/20 maxlen: 20
195.146.36.0/24 maxlen: 24
195.146.32.0/24 maxlen: 24
195.146.50.0/24 maxlen: 24
195.146.46.0/23 maxlen: 23
195.146.60.0/24 maxlen: 24
195.146.63.0/24 maxlen: 24
217.219.40.0/22 maxlen: 22
2.178.192.0/18 maxlen: 18
217.219.0.0/16 maxlen: 24
217.219.24.0/21 maxlen: 21
217.219.152.0/21 maxlen: 21
85.185.230.0/23 maxlen: 23
2.189.5.64/28 maxlen: 28
85.185.192.0/22 maxlen: 22
217.218.85.0/24 maxlen: 24
80.191.103.0/24 maxlen: 24
217.218.94.0/24 maxlen: 24
217.218.96.0/19 maxlen: 19
217.218.105.0/24 maxlen: 24
217.218.104.0/24 maxlen: 24
2.178.0.0/19 maxlen: 19
217.218.114.0/24 maxlen: 24
217.218.131.0/24 maxlen: 24
217.218.127.0/24 maxlen: 24
217.218.132.0/24 maxlen: 24
80.191.41.0/24 maxlen: 24
80.191.64.0/23 maxlen: 24
217.218.48.0/21 maxlen: 21
80.191.61.0/24 maxlen: 24
80.191.67.0/24 maxlen: 24
217.218.56.0/24 maxlen: 24
80.191.69.0/24 maxlen: 24
80.191.70.0/24 maxlen: 24
217.218.55.0/24 maxlen: 24
217.218.64.0/24 maxlen: 24
217.218.64.0/18 maxlen: 18
80.191.81.0/24 maxlen: 24
217.218.67.0/24 maxlen: 24
80.191.88.0/21 maxlen: 24
2.189.79.64/27 maxlen: 27
85.185.42.0/24 maxlen: 24
85.185.45.0/24 maxlen: 24
217.218.239.0/24 maxlen: 24
217.218.235.0/24 maxlen: 24
2.189.5.112/28 maxlen: 28
2.178.128.0/18 maxlen: 18
217.218.143.0/24 maxlen: 24
2.178.32.0/19 maxlen: 19
217.218.141.0/24 maxlen: 24
217.218.155.0/24 maxlen: 24
2.178.64.0/18 maxlen: 18
85.185.0.0/16 maxlen: 24
217.218.180.0/24 maxlen: 24
2.185.0.0/16 maxlen: 16
2.177.0.0/17 maxlen: 17
2.177.128.0/17 maxlen: 17
80.191.0.0/24 maxlen: 24
80.191.0.0/16 maxlen: 24
2.191.0.0/16 maxlen: 16
217.218.0.0/16 maxlen: 24
80.191.24.0/24 maxlen: 24
80.191.27.0/24 maxlen: 24
80.191.29.0/24 maxlen: 24
80.191.36.0/24 maxlen: 24
217.218.21.0/24 maxlen: 24
80.191.32.0/24 maxlen: 24
2.189.5.32/28 maxlen: 28
2.182.248.0/22 maxlen: 22
2.182.214.0/23 maxlen: 23
2.189.79.32/27 maxlen: 27
2.176.192.0/18 maxlen: 18
2.189.5.80/28 maxlen: 28
2.176.0.0/12 maxlen: 12
2.189.7.0/24 maxlen: 24
2.189.0.0/16 maxlen: 24
2.188.183.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.186.0/24 maxlen: 24
2.188.192.0/18 maxlen: 18
2.189.78.0/24 maxlen: 24
2.189.77.0/24 maxlen: 24
2.189.79.0/24 maxlen: 24
2.182.96.0/19 maxlen: 19
2.189.44.0/24 maxlen: 24
2.189.45.0/24 maxlen: 24
2.189.59.0/24 maxlen: 24
2001:4188::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ac:06:64:3e:ef:f2:25:27:2c:64:15:53:31:38:4a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jul 31 12:57:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9099f66b2892f7c16b209fc46b1608afe70864b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cc:74:b9:71:7e:bf:30:10:b6:34:80:1c:50:
47:5b:83:89:58:c8:a9:6b:31:71:a7:9c:62:ca:60:
29:8a:78:c9:f7:a5:66:ab:81:18:1a:9c:ed:46:67:
71:5a:a2:b4:c8:88:6d:e4:5c:0f:bf:d3:ac:af:1a:
a7:ac:ed:36:b2:3c:f6:00:31:44:e4:d1:79:01:4b:
10:28:e9:40:4c:50:dc:a7:b7:b4:e1:0d:f3:02:59:
6e:dd:65:fb:18:a4:fa:ad:04:3c:5c:95:91:a3:0e:
01:94:4e:e7:70:08:02:a9:61:46:16:36:e2:e7:08:
56:4a:c8:29:53:fa:3b:46:76:e8:83:f1:ae:c7:20:
9c:2c:a7:e2:0c:06:38:7a:1f:1e:43:7b:e3:8d:d6:
4d:4e:ea:9c:8b:ab:66:88:07:34:03:85:68:54:80:
b5:3a:b9:99:3b:ae:b7:30:ea:ce:71:d1:cc:ec:4d:
5b:9e:4b:4f:16:3d:07:93:40:3c:17:72:00:2c:7e:
3a:53:63:b6:87:4b:11:c0:ea:a2:53:a0:51:f2:17:
0f:ef:18:3d:5f:48:48:f9:22:07:4f:e5:51:4a:96:
3d:21:f9:0c:ca:67:39:8b:89:89:c4:ec:c9:e8:1c:
c3:80:f9:6e:ce:6e:18:7f:83:a9:31:5d:78:cb:6e:
ae:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:99:F6:6B:28:92:F7:C1:6B:20:9F:C4:6B:16:08:AF:E7:08:64:B1
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/kJn2ayiS98FrIJ_EaxYIr-cIZLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/12
78.38.0.0/15
80.191.0.0/16
85.185.0.0/16
195.146.32.0/19
217.218.0.0/15
IPv6:
2001:4188::/48
Signature Algorithm: sha256WithRSAEncryption
a2:d5:bd:46:4b:f0:04:c7:f8:bf:47:6a:20:ef:31:8d:39:4b:
65:81:8b:fd:1f:7f:0c:f4:1c:e7:0f:61:0c:f2:20:02:82:e5:
54:76:7b:f2:ac:2c:96:5d:86:43:c6:1a:25:96:93:7a:b5:0a:
2a:53:56:01:60:3a:34:be:d2:41:09:1d:a8:b9:15:4a:a5:6d:
c8:59:31:f5:56:78:0a:64:19:40:a3:5b:ba:f2:2c:30:41:71:
7a:d7:b4:ea:f2:f8:20:81:4a:84:15:4a:9a:17:e4:d9:aa:59:
e7:32:81:bb:d9:34:05:af:8b:0a:87:5d:2e:33:cc:6f:04:14:
23:c5:4e:1c:44:66:91:5e:c9:e1:43:dd:ba:9f:59:0e:6f:6a:
8e:e3:a4:ca:31:22:f7:d7:7f:80:7e:c5:20:5f:e7:55:84:1f:
4f:0a:33:c9:d9:1b:b6:5b:94:49:e8:19:1c:ad:e3:9b:0b:dd:
df:02:d6:9d:6e:83:b9:53:58:44:25:49:7d:d2:96:15:95:51:
7b:a5:0b:7a:b0:18:b8:f3:db:47:b0:41:f7:e5:76:5a:3d:06:
d2:c2:b2:ef:22:1b:73:48:7c:2d:b6:53:a0:c0:ec:fc:fd:6a:
c5:ed:dd:7e:84:db:32:b5:69:9a:06:e1:4f:08:57:4c:22:31:
df:9b:57:f6
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYmsBmQ+7/IlJyxkFVMxOEonMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy
NjBhZTUwHhcNMjMwNzMxMTI1NzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDk5ZjY2YjI4OTJmN2MxNmIyMDlmYzQ2YjE2MDhhZmU3MDg2NGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cx0uXF+vzAQtjSAHFBHW4OJWMip
azFxp5xiymApinjJ96Vmq4EYGpztRmdxWqK0yIht5FwPv9OsrxqnrO02sjz2ADFE
5NF5AUsQKOlATFDcp7e04Q3zAllu3WX7GKT6rQQ8XJWRow4BlE7ncAgCqWFGFjbi
5whWSsgpU/o7Rnbog/GuxyCcLKfiDAY4eh8eQ3vjjdZNTuqci6tmiAc0A4VoVIC1
OrmZO663MOrOcdHM7E1bnktPFj0Hk0A8F3IALH46U2O2h0sRwOqiU6BR8hcP7xg9
X0hI+SIHT+VRSpY9IfkMymc5i4mJxOzJ6BzDgPluzm4Yf4OpMV14y26uNwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFJCZ9msokvfBayCfxGsWCK/nCGSxMB8GA1UdIwQY
MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt
Zjc0ZDk1MTg1NzZjLzEva0puMmF5aVM5OEZySUpfRWF4WUlyLWNJWkxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj
LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAlBAIAATAfAwMEArADAwFO
JgMDAFC/AwMAVbkDBAXDkiADAwHZ2jAPBAIAAjAJAwcAIAFBiAAAMA0GCSqGSIb3
DQEBCwUAA4IBAQCi1b1GS/AEx/i/R2og7zGNOUtlgYv9H38M9BznD2EM8iACguVU
dnvyrCyWXYZDxhollpN6tQoqU1YBYDo0vtJBCR2ouRVKpW3IWTH1VngKZBlAo1u6
8iwwQXF617Tq8vgggUqEFUqaF+TZqlnnMoG72TQFr4sKh10uM8xvBBQjxU4cRGaR
XsnhQ926n1kOb2qO46TKMSL313+AfsUgX+dVhB9PCjPJ2Ru2W5RJ6BkcreObC93f
AtadboO5U1hEJUl90pYVlVF7pQt6sBi489tHsEH35XZaPQbSwrLvIhtzSHwttlOg
wOz8/WrF7d1+hNsytWmaBuFPCFdMIjHfm1f2
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:12 2025 by rpki-client