Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/NcznjOztj3E1K4yTJLnHn-qaJ50.roa
File: NcznjOztj3E1K4yTJLnHn-qaJ50.roa (raw, json)
Hash identifier: eWfVOZ52GSoTtE6ha9ydN62FHnhhVk99ep3lTWTsdnE=
Subject key identifier: 35:CC:E7:8C:EC:ED:8F:71:35:2B:8C:93:24:B9:C7:9F:EA:9A:27:9D
Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial: 0184AEE62CD376DCCE09FF9E4CB152A2CF8D
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/NcznjOztj3E1K4yTJLnHn-qaJ50.roa
Signing time: Fri 25 Nov 2022 13:07:10 +0000
ROA not before: Fri 25 Nov 2022 13:07:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45011
IP address blocks: 188.120.160.0/19 maxlen: 19
82.117.96.0/19 maxlen: 19
94.198.64.0/21 maxlen: 21
94.245.16.0/20 maxlen: 20
85.235.0.0/19 maxlen: 19
85.235.17.0/24 maxlen: 24
94.245.48.0/20 maxlen: 20
85.235.24.0/24 maxlen: 24
85.235.18.0/23 maxlen: 23
85.235.20.0/22 maxlen: 22
178.251.240.0/21 maxlen: 21
213.185.12.0/22 maxlen: 22
213.185.16.0/23 maxlen: 23
91.232.59.0/24 maxlen: 24
91.232.60.0/23 maxlen: 23
213.185.20.0/23 maxlen: 23
213.185.24.0/24 maxlen: 24
213.185.26.0/24 maxlen: 24
109.124.128.0/18 maxlen: 18
79.138.0.0/17 maxlen: 17
109.225.64.0/18 maxlen: 18
85.238.192.0/19 maxlen: 19
85.30.0.0/18 maxlen: 18
213.185.4.0/24 maxlen: 24
213.185.6.0/24 maxlen: 24
213.185.7.0/24 maxlen: 24
213.185.8.0/23 maxlen: 23
213.185.10.0/24 maxlen: 24
80.244.64.0/19 maxlen: 19
185.18.164.0/22 maxlen: 22
94.245.0.0/20 maxlen: 20
77.53.0.0/16 maxlen: 16
87.241.64.0/18 maxlen: 18
87.96.128.0/17 maxlen: 17
185.52.180.0/22 maxlen: 22
88.83.32.0/19 maxlen: 19
213.21.64.0/18 maxlen: 18
37.17.248.0/21 maxlen: 21
188.122.128.0/19 maxlen: 19
5.44.192.0/20 maxlen: 20
88.129.0.0/16 maxlen: 16
217.72.54.0/24 maxlen: 24
217.72.56.0/22 maxlen: 22
217.72.52.0/23 maxlen: 23
217.72.60.0/23 maxlen: 23
217.72.62.0/24 maxlen: 24
178.132.248.0/21 maxlen: 21
85.8.0.0/18 maxlen: 18
185.58.144.0/22 maxlen: 22
195.78.224.0/22 maxlen: 22
146.247.80.0/21 maxlen: 21
89.236.2.0/23 maxlen: 23
89.236.4.0/22 maxlen: 22
89.236.0.0/23 maxlen: 23
89.236.8.0/23 maxlen: 23
89.236.11.0/24 maxlen: 24
89.236.17.0/24 maxlen: 24
89.236.15.0/24 maxlen: 24
89.236.18.0/23 maxlen: 23
89.236.20.0/22 maxlen: 22
89.236.24.0/23 maxlen: 23
89.236.26.0/24 maxlen: 24
89.236.35.0/24 maxlen: 24
89.236.36.0/23 maxlen: 23
89.236.38.0/24 maxlen: 24
89.236.47.0/24 maxlen: 24
89.236.48.0/24 maxlen: 24
62.182.0.0/21 maxlen: 21
83.209.0.0/16 maxlen: 16
31.192.192.0/20 maxlen: 20
5.172.144.0/21 maxlen: 21
95.155.192.0/18 maxlen: 18
89.236.53.0/24 maxlen: 24
89.236.54.0/23 maxlen: 23
89.236.56.0/22 maxlen: 22
46.236.64.0/18 maxlen: 18
213.142.0.0/19 maxlen: 19
87.236.88.0/21 maxlen: 21
87.253.64.0/19 maxlen: 19
2a02:7b8::/32 maxlen: 32
2a00:8280::/32 maxlen: 32
2a02:23c0::/32 maxlen: 32
2a01:b700::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ae:e6:2c:d3:76:dc:ce:09:ff:9e:4c:b1:52:a2:cf:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Validity
Not Before: Nov 25 13:07:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35cce78ceced8f71352b8c9324b9c79fea9a279d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:b5:f7:ea:ae:de:7d:73:9e:d1:b5:11:4b:
f7:b1:2d:46:5b:66:47:86:48:37:1f:1c:1e:a4:53:
8a:b4:10:34:da:19:d2:e1:d0:e2:c2:11:6b:50:3b:
f5:1c:81:b7:b2:44:b7:ad:12:d9:49:46:de:b8:9b:
2f:3e:bf:60:d5:57:3d:a1:f3:5e:40:bc:28:c2:ab:
f5:9c:f0:a8:a6:a4:11:15:5f:e0:7a:bd:03:bf:6b:
16:4a:fc:5d:6f:c0:3c:05:c5:7d:59:30:48:b0:0f:
45:ca:73:50:c8:38:fd:a0:63:22:5e:39:16:24:11:
fc:ec:18:53:c5:58:91:1f:37:62:55:e8:5d:25:11:
fe:2d:30:ba:33:48:ba:78:13:cf:23:07:4a:71:9b:
24:ae:fb:58:17:a4:a5:1b:34:a3:f0:9e:33:38:a8:
e8:73:7f:86:f1:ed:81:b8:44:81:9b:54:f3:18:e9:
e9:59:c6:3b:52:1f:41:8d:0e:f6:ed:e9:6c:0b:5e:
96:d5:14:c3:07:48:90:80:89:4d:43:f0:cc:dd:ca:
ab:0d:5c:b5:e7:4a:d7:31:08:5e:f7:23:27:b7:30:
79:f3:95:eb:cb:4f:11:8c:97:bf:68:d7:43:e6:ba:
9b:81:bd:b1:82:7b:5a:70:4a:34:52:b6:e3:a0:3a:
90:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CC:E7:8C:EC:ED:8F:71:35:2B:8C:93:24:B9:C7:9F:EA:9A:27:9D
X509v3 Authority Key Identifier:
keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/NcznjOztj3E1K4yTJLnHn-qaJ50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.192.0/20
5.172.144.0/21
31.192.192.0/20
37.17.248.0/21
46.236.64.0/18
62.182.0.0/21
77.53.0.0/16
79.138.0.0/17
80.244.64.0/19
82.117.96.0/19
83.209.0.0/16
85.8.0.0/18
85.30.0.0/18
85.235.0.0/19
85.238.192.0/19
87.96.128.0/17
87.236.88.0/21
87.241.64.0/18
87.253.64.0/19
88.83.32.0/19
88.129.0.0/16
89.236.0.0-89.236.9.255
89.236.11.0/24
89.236.15.0/24
89.236.17.0-89.236.26.255
89.236.35.0-89.236.38.255
89.236.47.0-89.236.48.255
89.236.53.0-89.236.59.255
91.232.59.0-91.232.61.255
94.198.64.0/21
94.245.0.0/19
94.245.48.0/20
95.155.192.0/18
109.124.128.0/18
109.225.64.0/18
146.247.80.0/21
178.132.248.0/21
178.251.240.0/21
185.18.164.0/22
185.52.180.0/22
185.58.144.0/22
188.120.160.0/19
188.122.128.0/19
195.78.224.0/22
213.21.64.0/18
213.142.0.0/19
213.185.4.0/24
213.185.6.0-213.185.10.255
213.185.12.0-213.185.17.255
213.185.20.0/23
213.185.24.0/24
213.185.26.0/24
217.72.52.0-217.72.54.255
217.72.56.0-217.72.62.255
IPv6:
2a00:8280::/32
2a01:b700::/32
2a02:7b8::/32
2a02:23c0::/32
Signature Algorithm: sha256WithRSAEncryption
37:6e:6b:cf:ff:d5:07:4a:d4:bd:ae:c1:4d:c9:22:a9:a1:49:
06:8e:98:d6:bf:0a:c6:1e:a0:44:2e:ff:7d:56:6d:af:50:1d:
6b:38:8b:88:54:7f:5b:52:7b:bc:e7:8f:96:f6:b7:66:7d:4a:
b0:e1:f5:af:53:02:16:2d:83:4c:93:4f:ca:23:0f:48:76:a4:
a7:39:e4:11:06:e8:b0:4c:f7:6c:fe:e2:90:7e:81:e4:4a:d4:
0f:5e:d6:cc:e2:21:01:c3:6b:36:c7:c2:01:f7:9a:54:af:dd:
ca:fa:f5:b8:95:d2:80:77:63:3e:fc:af:1b:04:93:0a:b7:08:
7f:72:af:d6:2d:cf:dd:58:3e:db:32:ea:25:b1:6c:2a:a8:d8:
0f:fe:0e:0b:b2:1e:0c:35:69:a6:e3:42:e9:62:60:a0:e5:88:
16:3c:5f:17:8e:a0:b8:0d:60:90:8d:de:f8:0d:a8:9c:4b:2b:
67:ab:db:fe:8b:28:8d:7d:73:94:2d:c7:1b:15:0f:cf:a5:1b:
77:10:01:74:e8:bd:8f:0b:51:3e:f4:2a:24:77:74:cb:61:70:
e5:63:0b:33:b5:f8:09:4a:be:ae:1b:62:69:db:9e:99:8f:bf:
e3:5c:24:a2:9b:00:f7:71:39:bb:ea:5d:c9:b1:02:46:80:c0:
2a:c4:ed:f2
-----BEGIN CERTIFICATE-----
MIIGtTCCBZ2gAwIBAgISAYSu5izTdtzOCf+eTLFSos+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTEzMDhlYWQ2YWRiMWQwODVlN2U1OTEwYTBjYjJkZTU2
YWEzMmUwHhcNMjIxMTI1MTMwNzEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWNjZTc4Y2VjZWQ4ZjcxMzUyYjhjOTMyNGI5Yzc5ZmVhOWEyNzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFa19+qu3n1zntG1EUv3sS1GW2ZH
hkg3HxwepFOKtBA02hnS4dDiwhFrUDv1HIG3skS3rRLZSUbeuJsvPr9g1Vc9ofNe
QLwowqv1nPCopqQRFV/ger0Dv2sWSvxdb8A8BcV9WTBIsA9FynNQyDj9oGMiXjkW
JBH87BhTxViRHzdiVehdJRH+LTC6M0i6eBPPIwdKcZskrvtYF6SlGzSj8J4zOKjo
c3+G8e2BuESBm1TzGOnpWcY7Uh9BjQ727elsC16W1RTDB0iQgIlNQ/DM3cqrDVy1
50rXMQhe9yMntzB585Xry08RjJe/aNdD5rqbgb2xgntacEo0UrbjoDqQdQIDAQAB
o4IDwTCCA70wHQYDVR0OBBYEFDXM54zs7Y9xNSuMkyS5x5/qmiedMB8GA1UdIwQY
MBaAFAzhMI6tatsdCF5+WRCgyy3laqMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUt
YjBiYWQxOGYwMmQwLzEvTmN6bmpPenRqM0UxSzR5VEpMbkhuLXFhSjUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUtYjBiYWQxOGYwMmQw
LzEvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB1QYIKwYBBQUHAQcBAf8EggHEMIIBwDCCAZgEAgABMIIB
kAMEBAUswAMEAwWskAMEBB/AwAMEAyUR+AMEBi7sQAMEAz62AAMDAE01AwQHT4oA
AwQFUPRAAwQFUnVgAwMAU9EDBAZVCAADBAZVHgADBAVV6wADBAVV7sADBAdXYIAD
BANX7FgDBAZX8UADBAVX/UADBAVYUyADAwBYgTALAwMCWewDBAFZ7AgDBABZ7AsD
BABZ7A8wDAMEAFnsEQMEAFnsGjAMAwQAWewjAwQAWewmMAwDBABZ7C8DBABZ7DAw
DAMEAFnsNQMEAlnsODAMAwQAW+g7AwQBW+g8AwQDXsZAAwQFXvUAAwQEXvUwAwQG
X5vAAwQGbXyAAwQGbeFAAwQDkvdQAwQDsoT4AwQDsvvwAwQCuRKkAwQCuTS0AwQC
uTqQAwQFvHigAwQFvHqAAwQCw07gAwQG1RVAAwQF1Y4AAwQA1bkEMAwDBAHVuQYD
BADVuQowDAMEAtW5DAMEAdW5EAMEAdW5FAMEANW5GAMEANW5GjAMAwQC2Ug0AwQA
2Ug2MAwDBAPZSDgDBADZSD4wIgQCAAIwHAMFACoAgoADBQAqAbcAAwUAKgIHuAMF
ACoCI8AwDQYJKoZIhvcNAQELBQADggEBADdua8//1QdK1L2uwU3JIqmhSQaOmNa/
CsYeoEQu/31Wba9QHWs4i4hUf1tSe7znj5b2t2Z9SrDh9a9TAhYtg0yTT8ojD0h2
pKc55BEG6LBM92z+4pB+geRK1A9e1sziIQHDazbHwgH3mlSv3cr69biV0oB3Yz78
rxsEkwq3CH9yr9Ytz91YPtsy6iWxbCqo2A/+DguyHgw1aabjQuliYKDliBY8XxeO
oLgNYJCN3vgNqJxLK2er2/6LKI19c5QtxxsVD8+lG3cQAXTovY8LUT70KiR3dMth
cOVjCzO1+AlKvq4bYmnbnpmPv+NcJKKbAPdxObvqXcmxAkaAwCrE7fI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:06 2023 by rpki-client on console-fra.rpki-client.org