Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/qpl7F8Wh04u_Me5nsBJzo0LQMss.roa
File: qpl7F8Wh04u_Me5nsBJzo0LQMss.roa (raw, json)
Hash identifier: m4WE9oLFucQFrtEn0r7GPrt89xqbWWBQ7CMSuglToH0=
Subject key identifier: AA:99:7B:17:C5:A1:D3:8B:BF:31:EE:67:B0:12:73:A3:42:D0:32:CB
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 01842E684E2620CCB37C0B7899BB4AABC953
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/qpl7F8Wh04u_Me5nsBJzo0LQMss.roa
Signing time: Mon 31 Oct 2022 14:18:18 +0000
ROA not before: Mon 31 Oct 2022 14:18:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39010
IP address blocks: 85.112.64.0/24 maxlen: 24
85.112.69.0/24 maxlen: 24
85.112.70.0/24 maxlen: 24
85.112.71.0/24 maxlen: 24
85.112.65.0/24 maxlen: 24
85.112.66.0/24 maxlen: 24
85.112.67.0/24 maxlen: 24
85.112.75.0/24 maxlen: 24
85.112.76.0/24 maxlen: 24
85.112.77.0/24 maxlen: 24
85.112.78.0/24 maxlen: 24
85.112.72.0/24 maxlen: 24
85.112.74.0/24 maxlen: 24
85.112.82.0/24 maxlen: 24
85.112.83.0/24 maxlen: 24
85.112.84.0/24 maxlen: 24
85.112.85.0/24 maxlen: 24
85.112.89.0/24 maxlen: 24
85.112.90.0/24 maxlen: 24
85.112.91.0/24 maxlen: 24
85.112.86.0/24 maxlen: 24
85.112.87.0/24 maxlen: 24
85.112.88.0/24 maxlen: 24
85.112.93.0/24 maxlen: 24
85.112.94.0/24 maxlen: 24
85.112.95.0/24 maxlen: 24
85.112.92.0/24 maxlen: 24
212.98.137.0/24 maxlen: 24
212.98.138.0/24 maxlen: 24
212.98.139.0/24 maxlen: 24
212.98.135.0/24 maxlen: 24
212.98.136.0/24 maxlen: 24
212.98.133.0/24 maxlen: 24
212.98.144.0/24 maxlen: 24
212.98.145.0/24 maxlen: 24
212.98.141.0/24 maxlen: 24
212.98.142.0/24 maxlen: 24
212.98.143.0/24 maxlen: 24
212.98.140.0/24 maxlen: 24
212.98.151.0/24 maxlen: 24
212.98.152.0/24 maxlen: 24
212.98.147.0/24 maxlen: 24
212.98.148.0/24 maxlen: 24
212.98.149.0/24 maxlen: 24
212.98.150.0/24 maxlen: 24
212.98.146.0/24 maxlen: 24
212.98.158.0/24 maxlen: 24
212.98.159.0/24 maxlen: 24
212.98.154.0/24 maxlen: 24
212.98.155.0/24 maxlen: 24
212.98.156.0/24 maxlen: 24
212.98.157.0/24 maxlen: 24
212.98.153.0/24 maxlen: 24
212.98.130.0/24 maxlen: 24
212.98.131.0/24 maxlen: 24
212.98.132.0/24 maxlen: 24
212.98.129.0/24 maxlen: 24
5.57.4.0/24 maxlen: 24
5.57.3.0/24 maxlen: 24
5.57.7.0/24 maxlen: 24
5.57.5.0/24 maxlen: 24
5.57.6.0/24 maxlen: 24
213.204.112.0/24 maxlen: 24
213.204.108.0/24 maxlen: 24
213.204.109.0/24 maxlen: 24
213.204.110.0/24 maxlen: 24
213.204.111.0/24 maxlen: 24
213.204.106.0/24 maxlen: 24
213.204.107.0/24 maxlen: 24
213.204.115.0/24 maxlen: 24
213.204.116.0/24 maxlen: 24
213.204.117.0/24 maxlen: 24
213.204.118.0/24 maxlen: 24
213.204.113.0/24 maxlen: 24
213.204.114.0/24 maxlen: 24
213.204.122.0/24 maxlen: 24
213.204.123.0/24 maxlen: 24
213.204.124.0/24 maxlen: 24
213.204.125.0/24 maxlen: 24
213.204.119.0/24 maxlen: 24
213.204.120.0/24 maxlen: 24
213.204.121.0/24 maxlen: 24
213.204.126.0/24 maxlen: 24
213.204.127.0/24 maxlen: 24
213.204.64.0/24 maxlen: 24
213.204.70.0/24 maxlen: 24
213.204.71.0/24 maxlen: 24
213.204.67.0/24 maxlen: 24
213.204.68.0/24 maxlen: 24
213.204.69.0/24 maxlen: 24
213.204.65.0/24 maxlen: 24
213.204.66.0/24 maxlen: 24
213.204.77.0/24 maxlen: 24
213.204.78.0/24 maxlen: 24
213.204.74.0/24 maxlen: 24
213.204.75.0/24 maxlen: 24
213.204.76.0/24 maxlen: 24
213.204.76.0/23 maxlen: 23
213.204.72.0/24 maxlen: 24
213.204.73.0/24 maxlen: 24
213.204.81.0/24 maxlen: 24
213.204.82.0/24 maxlen: 24
213.204.83.0/24 maxlen: 24
213.204.79.0/24 maxlen: 24
213.204.80.0/24 maxlen: 24
213.204.84.0/24 maxlen: 24
213.204.85.0/24 maxlen: 24
213.204.91.0/24 maxlen: 24
213.204.88.0/24 maxlen: 24
213.204.89.0/24 maxlen: 24
213.204.90.0/24 maxlen: 24
213.204.86.0/24 maxlen: 24
213.204.87.0/24 maxlen: 24
213.204.98.0/24 maxlen: 24
213.204.94.0/24 maxlen: 24
213.204.95.0/24 maxlen: 24
213.204.97.0/24 maxlen: 24
213.204.92.0/24 maxlen: 24
213.204.93.0/24 maxlen: 24
213.204.105.0/24 maxlen: 24
213.204.101.0/24 maxlen: 24
213.204.102.0/24 maxlen: 24
213.204.103.0/24 maxlen: 24
213.204.104.0/24 maxlen: 24
213.204.99.0/24 maxlen: 24
213.204.100.0/24 maxlen: 24
78.108.164.0/24 maxlen: 24
78.108.165.0/24 maxlen: 24
78.108.166.0/24 maxlen: 24
78.108.161.0/24 maxlen: 24
78.108.162.0/24 maxlen: 24
78.108.163.0/24 maxlen: 24
78.108.160.0/24 maxlen: 24
78.108.171.0/24 maxlen: 24
78.108.172.0/24 maxlen: 24
78.108.167.0/24 maxlen: 24
78.108.169.0/24 maxlen: 24
78.108.170.0/24 maxlen: 24
78.108.174.0/24 maxlen: 24
78.108.175.0/24 maxlen: 24
185.54.62.0/24 maxlen: 24
185.54.63.0/24 maxlen: 24
185.54.60.0/24 maxlen: 24
185.54.61.0/24 maxlen: 24
2a00:1580::/48 maxlen: 48
2a00:1580:5::/48 maxlen: 48
2a00:1580:2::/48 maxlen: 48
2a00:1582:2::/48 maxlen: 48
2a00:1580:4::/48 maxlen: 48
2a00:1580::/29 maxlen: 29
2a00:1582:3007::/48 maxlen: 48
2a00:1582:300f:f::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2e:68:4e:26:20:cc:b3:7c:0b:78:99:bb:4a:ab:c9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Oct 31 14:18:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa997b17c5a1d38bbf31ee67b01273a342d032cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6c:82:26:75:b5:1b:4c:5d:70:36:7b:84:20:
90:0a:26:1f:f8:b2:95:95:1c:8c:d4:59:63:f4:3b:
01:d1:50:76:b3:45:7e:9e:67:e4:aa:0f:06:a2:93:
0a:4f:11:fd:b5:3f:a5:3a:63:5b:71:51:e1:59:94:
19:1d:85:1b:0a:16:52:df:6e:2a:da:78:62:5d:5f:
f3:f9:92:3d:4e:fa:cc:f5:ce:08:eb:55:82:67:3d:
69:89:17:2e:78:19:cd:56:1e:cf:14:e5:e0:1a:01:
d7:5b:1e:29:60:b0:32:5f:01:2e:1f:3b:f5:f4:1d:
f6:10:fc:7d:6d:75:8d:32:d6:d3:75:a6:b4:bb:81:
4b:fa:15:49:64:20:c7:e9:51:48:98:b0:21:e8:f0:
ac:ae:8d:9e:79:f5:89:4f:2c:08:ce:f1:73:d1:f4:
e9:0a:23:40:5c:72:19:4c:d9:d4:df:a0:52:e9:b8:
90:f7:2e:49:c1:6b:47:fe:c7:07:12:c2:ab:ad:c9:
c7:c6:e6:cf:0b:c1:36:ac:a3:8f:3b:17:29:15:61:
ef:a9:1d:8f:74:cd:83:6c:5a:02:df:f9:b9:ed:81:
48:ec:6a:fc:4f:52:d5:84:43:96:fd:66:6e:bb:e6:
70:1b:53:8e:b6:2b:47:42:f7:a9:c1:59:94:30:57:
de:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:99:7B:17:C5:A1:D3:8B:BF:31:EE:67:B0:12:73:A3:42:D0:32:CB
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/qpl7F8Wh04u_Me5nsBJzo0LQMss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.3.0-5.57.7.255
78.108.160.0/21
78.108.169.0-78.108.172.255
78.108.174.0/23
85.112.64.0/22
85.112.69.0-85.112.72.255
85.112.74.0-85.112.78.255
85.112.82.0-85.112.95.255
185.54.60.0/22
212.98.129.0-212.98.133.255
212.98.135.0-212.98.159.255
213.204.64.0/19
213.204.97.0-213.204.127.255
IPv6:
2a00:1580::/29
Signature Algorithm: sha256WithRSAEncryption
43:b6:2d:90:e5:d4:c8:49:72:a3:0b:69:6b:ae:45:18:ab:e0:
45:7a:74:70:5d:52:19:12:0d:1c:03:6b:20:5d:b4:3f:5b:53:
fb:eb:35:c3:c4:f6:a4:59:de:35:77:ce:61:28:83:6a:ee:f4:
ea:9b:05:57:94:2d:c4:4e:1f:c3:3b:a3:b7:aa:de:f3:2a:5a:
04:af:5d:7d:23:d8:c0:45:8a:80:0d:a3:80:d3:69:39:d7:e0:
cd:61:00:1c:a6:5f:1e:ca:9e:9e:bc:23:b2:3e:f7:6e:1f:3f:
94:b2:3d:5d:6f:30:af:c6:c9:3d:c1:1c:77:b7:b3:ea:93:c9:
9f:08:23:06:2b:ce:bf:7c:54:e0:4d:30:50:22:a6:5b:b6:46:
20:ce:d8:f4:68:f6:4b:f4:a5:de:65:1d:11:0b:81:4a:61:22:
46:cc:f0:18:e5:6a:55:0b:8d:01:32:03:f7:90:93:13:79:07:
07:1a:98:a4:07:cb:d9:07:73:35:64:da:0b:d6:f6:3c:b8:ad:
0d:3d:82:06:29:97:5d:8d:95:52:73:39:ee:34:a3:cb:7d:3b:
62:07:ca:7d:5a:cd:b8:5e:63:41:a7:40:40:0d:4c:d0:35:f5:
3f:29:3f:ef:a2:08:97:44:f9:ba:7a:a6:b1:b1:d0:c7:d6:4c:
a1:4d:8e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:02 2023 by rpki-client on console-fra.rpki-client.org