Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/hem4vbPwfJDshG0S4qt1MNym7Kc.roa
File: hem4vbPwfJDshG0S4qt1MNym7Kc.roa (raw, json)
Hash identifier: ncPlNJ8p+XWzJ9UvfPlKUZ6M+R5bjLGeVwxh02bxO/k=
Subject key identifier: 85:E9:B8:BD:B3:F0:7C:90:EC:84:6D:12:E2:AB:75:30:DC:A6:EC:A7
Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial: 19F4319F
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/hem4vbPwfJDshG0S4qt1MNym7Kc.roa
Signing time: Sat 01 Jan 2022 14:00:23 +0000
ROA not before: Sat 01 Jan 2022 14:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51407
IP address blocks: 176.67.58.0/24 maxlen: 24
176.67.57.0/24 maxlen: 24
176.67.62.0/24 maxlen: 24
176.67.61.0/24 maxlen: 24
94.73.12.0/23 maxlen: 23
94.73.16.0/23 maxlen: 23
94.73.14.0/23 maxlen: 23
94.73.18.0/23 maxlen: 23
94.73.24.0/23 maxlen: 23
94.73.22.0/23 maxlen: 23
94.73.20.0/23 maxlen: 23
94.73.26.0/23 maxlen: 23
94.73.30.0/23 maxlen: 23
94.73.28.0/23 maxlen: 23
94.73.4.0/23 maxlen: 23
94.73.2.0/23 maxlen: 23
94.73.0.0/19 maxlen: 19
94.73.0.0/23 maxlen: 23
94.73.10.0/23 maxlen: 23
94.73.8.0/23 maxlen: 23
94.73.6.0/23 maxlen: 23
5.43.206.0/23 maxlen: 23
5.43.204.0/23 maxlen: 23
5.43.202.0/23 maxlen: 23
5.43.200.0/23 maxlen: 23
5.43.208.0/23 maxlen: 23
5.43.212.0/23 maxlen: 23
5.43.210.0/23 maxlen: 23
5.43.216.0/23 maxlen: 23
5.43.214.0/23 maxlen: 23
5.43.218.0/23 maxlen: 23
5.43.222.0/23 maxlen: 23
5.43.220.0/23 maxlen: 23
46.43.64.0/23 maxlen: 23
46.43.70.0/23 maxlen: 23
46.43.68.0/23 maxlen: 23
46.43.64.0/18 maxlen: 18
46.43.66.0/23 maxlen: 23
46.43.76.0/23 maxlen: 23
46.43.74.0/23 maxlen: 23
46.43.72.0/23 maxlen: 23
46.43.78.0/23 maxlen: 23
46.43.84.0/23 maxlen: 23
46.43.82.0/23 maxlen: 23
46.43.80.0/23 maxlen: 23
46.43.90.0/23 maxlen: 23
46.43.88.0/23 maxlen: 23
46.43.86.0/23 maxlen: 23
5.43.192.0/19 maxlen: 19
5.43.192.0/23 maxlen: 23
5.43.194.0/23 maxlen: 23
5.43.198.0/23 maxlen: 23
5.43.196.0/23 maxlen: 23
46.43.98.0/23 maxlen: 23
46.43.96.0/23 maxlen: 23
46.43.94.0/23 maxlen: 23
46.43.92.0/23 maxlen: 23
46.43.104.0/23 maxlen: 23
46.43.102.0/23 maxlen: 23
46.43.100.0/23 maxlen: 23
46.43.112.0/23 maxlen: 23
46.43.110.0/23 maxlen: 23
46.43.108.0/23 maxlen: 23
46.43.106.0/23 maxlen: 23
46.43.118.0/23 maxlen: 23
46.43.116.0/23 maxlen: 23
46.43.114.0/23 maxlen: 23
46.43.124.0/23 maxlen: 23
46.43.122.0/23 maxlen: 23
46.43.120.0/23 maxlen: 23
46.43.126.0/23 maxlen: 23
46.244.64.0/23 maxlen: 23
46.244.64.0/19 maxlen: 19
46.244.70.0/23 maxlen: 23
46.244.68.0/23 maxlen: 23
46.244.66.0/23 maxlen: 23
46.244.74.0/23 maxlen: 23
46.244.72.0/23 maxlen: 23
46.244.78.0/23 maxlen: 23
46.244.76.0/23 maxlen: 23
46.244.82.0/23 maxlen: 23
46.244.80.0/23 maxlen: 23
46.244.84.0/23 maxlen: 23
46.244.88.0/23 maxlen: 23
46.244.86.0/23 maxlen: 23
46.244.90.0/23 maxlen: 23
46.244.94.0/23 maxlen: 23
46.244.92.0/23 maxlen: 23
176.67.96.0/19 maxlen: 19
176.67.98.0/23 maxlen: 23
176.67.96.0/23 maxlen: 23
176.67.100.0/23 maxlen: 23
176.67.104.0/23 maxlen: 23
176.67.102.0/23 maxlen: 23
176.67.108.0/23 maxlen: 23
176.67.106.0/23 maxlen: 23
176.67.112.0/23 maxlen: 23
176.67.110.0/23 maxlen: 23
176.67.114.0/23 maxlen: 23
176.67.118.0/23 maxlen: 23
176.67.116.0/23 maxlen: 23
176.67.124.0/23 maxlen: 23
176.67.122.0/23 maxlen: 23
176.67.120.0/23 maxlen: 23
176.67.126.0/23 maxlen: 23
176.67.58.0/23 maxlen: 23
176.67.56.0/23 maxlen: 23
176.67.56.0/21 maxlen: 21
176.67.60.0/23 maxlen: 23
176.67.62.0/23 maxlen: 23
84.242.48.0/20 maxlen: 20
84.242.50.0/23 maxlen: 23
84.242.48.0/23 maxlen: 23
84.242.58.0/23 maxlen: 23
84.242.56.0/23 maxlen: 23
84.242.54.0/23 maxlen: 23
84.242.52.0/23 maxlen: 23
84.242.62.0/23 maxlen: 23
84.242.60.0/23 maxlen: 23
94.73.1.0/24 maxlen: 24
176.65.16.0/20 maxlen: 20
185.17.233.0/24 maxlen: 24
185.17.232.0/24 maxlen: 24
176.65.16.0/23 maxlen: 23
176.65.24.0/23 maxlen: 23
176.65.22.0/23 maxlen: 23
176.65.20.0/23 maxlen: 23
185.17.234.0/24 maxlen: 24
176.65.18.0/23 maxlen: 23
176.65.28.0/23 maxlen: 23
176.65.26.0/23 maxlen: 23
176.65.30.0/23 maxlen: 23
178.130.190.0/23 maxlen: 23
37.76.216.0/23 maxlen: 23
178.130.188.0/23 maxlen: 23
37.76.214.0/23 maxlen: 23
37.76.218.0/23 maxlen: 23
37.76.222.0/23 maxlen: 23
37.76.220.0/23 maxlen: 23
46.43.66.0/24 maxlen: 24
46.43.65.0/24 maxlen: 24
178.130.144.0/20 maxlen: 20
178.130.144.0/23 maxlen: 23
178.130.148.0/23 maxlen: 23
178.130.146.0/23 maxlen: 23
178.130.152.0/23 maxlen: 23
178.130.150.0/23 maxlen: 23
178.130.156.0/23 maxlen: 23
178.130.154.0/23 maxlen: 23
178.130.158.0/23 maxlen: 23
178.130.162.0/23 maxlen: 23
178.130.160.0/23 maxlen: 23
178.130.160.0/19 maxlen: 19
37.76.192.0/23 maxlen: 23
37.76.192.0/19 maxlen: 19
178.130.164.0/23 maxlen: 23
178.130.170.0/23 maxlen: 23
37.76.196.0/23 maxlen: 23
178.130.168.0/23 maxlen: 23
37.76.194.0/23 maxlen: 23
178.130.166.0/23 maxlen: 23
178.130.172.0/23 maxlen: 23
37.76.198.0/23 maxlen: 23
178.130.176.0/23 maxlen: 23
37.76.202.0/23 maxlen: 23
178.130.174.0/23 maxlen: 23
37.76.200.0/23 maxlen: 23
37.76.206.0/23 maxlen: 23
178.130.178.0/23 maxlen: 23
37.76.204.0/23 maxlen: 23
178.130.186.0/23 maxlen: 23
37.76.212.0/23 maxlen: 23
178.130.184.0/23 maxlen: 23
37.76.210.0/23 maxlen: 23
178.130.182.0/23 maxlen: 23
37.76.208.0/23 maxlen: 23
178.130.180.0/23 maxlen: 23
85.184.52.0/23 maxlen: 23
85.184.58.0/23 maxlen: 23
85.184.56.0/23 maxlen: 23
85.184.54.0/23 maxlen: 23
85.184.62.0/23 maxlen: 23
85.184.60.0/23 maxlen: 23
85.184.36.0/23 maxlen: 23
85.184.34.0/23 maxlen: 23
85.184.32.0/23 maxlen: 23
85.184.32.0/19 maxlen: 19
85.184.38.0/23 maxlen: 23
85.184.44.0/23 maxlen: 23
85.184.42.0/23 maxlen: 23
85.184.40.0/23 maxlen: 23
85.184.50.0/23 maxlen: 23
85.184.48.0/23 maxlen: 23
85.184.46.0/23 maxlen: 23
2a04:940::/29 maxlen: 29
2a04:940:1600::/48 maxlen: 48
2a04:940:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435433887 (0x19f4319f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
Validity
Not Before: Jan 1 14:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85e9b8bdb3f07c90ec846d12e2ab7530dca6eca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:ab:9d:7f:67:74:92:2f:5b:c8:c9:79:5d:
77:d2:f0:7e:59:fb:8e:78:4d:c1:0c:ad:ff:80:f0:
10:a9:db:47:8c:8f:aa:28:21:88:9e:72:d8:df:8d:
12:fe:1b:6f:55:38:49:1f:6f:70:f7:c2:77:72:3a:
5c:05:55:2d:fd:1c:03:db:87:bb:46:f3:66:b4:12:
26:d6:e5:15:97:53:47:d5:61:c5:47:7b:98:c1:6c:
82:92:6f:90:b7:c8:f3:bf:77:be:5f:de:60:76:6a:
2f:fe:04:46:e7:1b:40:42:a2:ab:c5:6f:14:77:f8:
23:6c:5f:c1:b7:e8:21:c3:ed:34:b4:0d:30:13:dc:
c2:d5:1d:ec:20:15:62:50:4a:97:1a:43:34:37:c5:
53:d2:27:f6:b7:ae:be:a0:fe:f9:cf:5d:c3:b8:d4:
16:93:38:71:43:88:46:4e:a1:15:91:96:81:12:c8:
64:3f:6f:dd:d4:a3:c8:4d:0f:6c:b7:df:d9:80:1a:
c8:c8:55:76:c8:f5:f2:84:57:81:75:27:26:78:90:
06:e4:a7:30:2f:cb:18:f3:3f:b0:55:a4:3d:35:5b:
87:a0:2c:c3:c5:ad:2a:64:54:c1:3a:49:d7:74:4e:
a1:9b:71:d7:6e:7a:6d:d2:b6:83:6a:f1:9d:47:4e:
73:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E9:B8:BD:B3:F0:7C:90:EC:84:6D:12:E2:AB:75:30:DC:A6:EC:A7
X509v3 Authority Key Identifier:
keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/hem4vbPwfJDshG0S4qt1MNym7Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.43.192.0/19
37.76.192.0/19
46.43.64.0/18
46.244.64.0/19
84.242.48.0/20
85.184.32.0/19
94.73.0.0/19
176.65.16.0/20
176.67.56.0/21
176.67.96.0/19
178.130.144.0-178.130.191.255
185.17.232.0-185.17.234.255
IPv6:
2a04:940::/29
Signature Algorithm: sha256WithRSAEncryption
5c:3a:29:40:77:1f:94:75:5c:bc:30:3c:61:b3:ac:82:65:d8:
5a:ff:16:d9:fe:fe:9c:1c:fa:c0:6a:8b:78:81:6f:b8:9c:db:
aa:ab:d0:af:15:20:fc:0e:03:6d:48:3b:c2:93:d5:8d:c5:b5:
c4:e1:e3:15:db:8b:bd:96:59:6b:f7:b3:e3:fc:f5:94:bd:ad:
ad:a3:d4:e7:ca:c2:3d:dd:7b:11:ef:de:eb:b1:b0:e5:8b:7f:
cf:9f:94:5b:e2:f9:77:be:09:07:31:6c:bf:19:9f:64:e8:48:
7b:94:86:70:ec:4b:48:4e:4c:c0:9f:49:a9:92:b9:83:7e:a0:
9a:2c:c6:46:68:76:12:68:17:68:39:e6:c4:cb:b4:19:52:83:
11:73:d8:fa:20:f3:c9:a3:bc:da:16:d6:bf:bb:2b:4e:83:45:
a6:19:3f:93:54:0a:1d:01:3c:0e:b9:07:b8:b2:77:98:e9:6c:
96:bd:e5:05:a3:b9:e5:4a:64:aa:9d:fe:e6:34:a8:88:fb:0f:
d9:7f:e4:ac:1f:06:c4:a8:de:9c:e1:b4:09:f0:8e:ac:8b:d0:
31:22:4f:77:dc:5a:5f:54:2a:8f:34:f0:1e:04:3d:39:7b:47:
e0:9a:ab:1e:d6:35:3e:0b:8e:89:b2:60:03:44:b1:d6:4a:fd:
74:44:76:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:46 2023 by rpki-client on console-ams.rpki-client.org