Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/Anwqt0_tP2t_u0PBPkty34Jiv0k.roa
File: Anwqt0_tP2t_u0PBPkty34Jiv0k.roa (raw, json)
Hash identifier: RNPc9qicoI+87b0jsAiYaRNuo59U8zi/ITe7ZZYmMlM=
Subject key identifier: 02:7C:2A:B7:4F:ED:3F:6B:7F:BB:43:C1:3E:4B:72:DF:82:62:BF:49
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 018AC13F79F1139EBA1F464DC3751DAC64A5
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/Anwqt0_tP2t_u0PBPkty34Jiv0k.roa
Signing time: Sat 23 Sep 2023 08:54:37 +0000
ROA not before: Sat 23 Sep 2023 08:54:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/21 maxlen: 21
5.201.128.0/18 maxlen: 18
5.201.138.0/24 maxlen: 24
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.144.0/23 maxlen: 23
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
92.114.16.0/20 maxlen: 24
92.114.21.0/24 maxlen: 24
5.201.168.0/22 maxlen: 22
92.114.22.0/23 maxlen: 23
92.114.20.0/23 maxlen: 23
92.114.20.0/24 maxlen: 24
92.114.24.0/21 maxlen: 21
89.43.0.0/21 maxlen: 21
89.43.4.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.8.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
89.37.0.0/20 maxlen: 20
89.37.0.0/24 maxlen: 24
89.37.8.0/24 maxlen: 24
89.37.8.0/22 maxlen: 22
92.114.28.0/22 maxlen: 22
92.114.25.0/24 maxlen: 24
5.201.174.0/24 maxlen: 24
185.22.30.0/23 maxlen: 23
185.103.84.0/24 maxlen: 24
185.103.84.0/22 maxlen: 22
185.103.85.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.24.0/22 maxlen: 22
185.135.228.0/22 maxlen: 22
37.156.31.0/24 maxlen: 24
37.156.30.0/23 maxlen: 23
185.182.221.0/24 maxlen: 24
185.182.220.0/22 maxlen: 22
185.182.222.0/23 maxlen: 23
185.182.220.0/24 maxlen: 24
185.176.32.0/22 maxlen: 22
188.213.64.0/20 maxlen: 21
185.136.100.0/22 maxlen: 22
89.37.15.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
94.101.128.0/21 maxlen: 21
94.101.128.0/20 maxlen: 24
185.162.40.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
2a00:5ca0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c1:3f:79:f1:13:9e:ba:1f:46:4d:c3:75:1d:ac:64:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Sep 23 08:54:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=027c2ab74fed3f6b7fbb43c13e4b72df8262bf49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:64:44:3f:28:54:d4:8b:2a:92:69:43:4c:05:
32:ab:95:be:7b:91:56:f1:5c:4e:11:28:93:6c:c7:
13:dc:51:df:ba:a1:a1:85:29:56:fc:2b:32:3f:52:
12:52:ce:37:14:4d:97:3a:16:67:8d:8e:e1:73:76:
45:55:16:7a:43:38:76:af:d9:1d:92:10:e2:96:67:
0a:da:ed:37:90:7e:c3:04:5d:9a:52:e1:48:c0:29:
fe:96:8c:0b:ab:b7:68:82:40:c7:9a:9d:fd:97:55:
ea:bd:46:2b:4f:4b:f2:91:8f:ae:33:40:dc:0c:cc:
33:8f:09:b8:81:37:5b:3b:fc:61:3c:dd:28:8e:1b:
1a:44:1b:91:fb:17:5d:0e:9d:39:4d:e9:7e:1d:4e:
26:b8:2f:27:6b:73:ba:9c:72:bf:ec:f7:f3:1e:bb:
20:e3:5a:58:9d:ab:4f:1d:7d:30:c6:90:29:0d:0f:
4b:c3:22:de:66:de:7b:5a:19:4d:15:51:a1:18:42:
24:a5:87:f0:4d:0a:e9:91:ce:ad:63:a2:32:8e:f1:
6b:63:61:1e:41:12:61:91:91:1e:b7:b0:f8:e0:c9:
44:ff:67:72:14:f4:48:54:26:9f:5a:a0:60:2f:8a:
68:f0:f4:5c:d5:e7:2e:aa:0a:ce:b9:83:d8:a6:49:
57:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7C:2A:B7:4F:ED:3F:6B:7F:BB:43:C1:3E:4B:72:DF:82:62:BF:49
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/Anwqt0_tP2t_u0PBPkty34Jiv0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0-37.156.27.255
37.156.30.0/23
89.37.0.0/20
89.43.0.0-89.43.13.255
92.114.16.0/20
94.101.128.0/20
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
IPv6:
2a00:5ca0::/32
Signature Algorithm: sha256WithRSAEncryption
49:ea:ef:df:43:60:8a:97:f8:c4:3b:49:0b:ea:5a:e5:22:d3:
70:d0:c9:b7:1c:d2:1f:eb:2c:67:f6:6b:56:38:b7:bb:48:42:
ab:81:cc:a3:e0:8e:3d:66:b6:62:27:4c:58:66:f6:0a:61:74:
92:2c:08:94:ba:d4:35:39:15:2c:6c:71:2d:1b:8c:96:df:81:
83:83:9b:75:7c:65:be:f5:ef:87:d5:57:40:b8:51:af:8a:bc:
cd:4a:c0:df:9b:24:57:18:b8:8e:9a:72:20:3b:cc:5d:35:e8:
a2:b1:cb:b5:49:a9:4f:2e:01:16:e8:c5:81:d8:dc:9a:a7:49:
4c:36:bc:c9:62:4b:14:df:a8:a5:19:b6:ad:2b:3f:90:d8:b1:
4a:1a:e0:72:41:6d:b7:45:9c:4d:78:03:5d:ee:aa:ab:b1:e3:
21:d8:08:a3:d6:2e:b2:f9:bb:15:fb:47:cc:c7:6c:ed:39:5d:
8f:ca:b9:36:3e:46:ad:46:91:56:9f:1d:90:72:6c:d7:ab:22:
0c:a0:56:14:01:65:e2:ff:42:35:19:47:6d:e1:57:7f:02:97:
58:e6:2b:81:41:da:31:94:b3:24:21:da:3b:e2:8c:85:23:fa:
01:47:db:92:f4:ff:5c:19:d9:0b:99:15:e8:bf:fe:00:93:b9:
a9:3a:2e:3a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYrBP3nxE566H0ZNw3UdrGSlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4
OTk1YWIwHhcNMjMwOTIzMDg1NDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjdjMmFiNzRmZWQzZjZiN2ZiYjQzYzEzZTRiNzJkZjgyNjJiZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmREPyhU1IsqkmlDTAUyq5W+e5FW
8VxOESiTbMcT3FHfuqGhhSlW/CsyP1ISUs43FE2XOhZnjY7hc3ZFVRZ6Qzh2r9kd
khDilmcK2u03kH7DBF2aUuFIwCn+lowLq7dogkDHmp39l1XqvUYrT0vykY+uM0Dc
DMwzjwm4gTdbO/xhPN0ojhsaRBuR+xddDp05Tel+HU4muC8na3O6nHK/7PfzHrsg
41pYnatPHX0wxpApDQ9LwyLeZt57WhlNFVGhGEIkpYfwTQrpkc6tY6IyjvFrY2Ee
QRJhkZEet7D44MlE/2dyFPRIVCafWqBgL4po8PRc1ecuqgrOuYPYpklXsQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAJ8KrdP7T9rf7tDwT5Lct+CYr9JMB8GA1UdIwQY
MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt
NDBiNmQ2N2ZjZDk0LzEvQW53cXQwX3RQMnRfdTBQQlBrdHkzNEppdjBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0
LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGZBggrBgEFBQcBBwEB/wSBiTCBhjB1BAIAATBvAwQGBcmA
MAwDBAQlnBADBAIlnBgDBAElnB4DBARZJQAwCwMDAFkrAwQBWSsMAwQEXHIQAwQE
XmWAAwQBuRYeAwQCuWdUAwQCuYfkAwQCuYhkAwQCuaIoAwQCua9MAwQCubAgAwQC
ubbcAwQEvNVAMA0EAgACMAcDBQAqAFygMA0GCSqGSIb3DQEBCwUAA4IBAQBJ6u/f
Q2CKl/jEO0kL6lrlItNw0Mm3HNIf6yxn9mtWOLe7SEKrgcyj4I49ZrZiJ0xYZvYK
YXSSLAiUutQ1ORUsbHEtG4yW34GDg5t1fGW+9e+H1VdAuFGvirzNSsDfmyRXGLiO
mnIgO8xdNeiiscu1SalPLgEW6MWB2Nyap0lMNrzJYksU36ilGbatKz+Q2LFKGuBy
QW23RZxNeANd7qqrseMh2Aij1i6y+bsV+0fMx2ztOV2Pyrk2PkatRpFWnx2QcmzX
qyIMoFYUAWXi/0I1GUdt4Vd/ApdY5iuBQdoxlLMkIdo74oyFI/oBR9uS9P9cGdkL
mRXov/4Ak7mpOi46
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:38 2025 by rpki-client