Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/jIl7TAjbBmyRE7tG0rpcj7P8K5c.roa
File: jIl7TAjbBmyRE7tG0rpcj7P8K5c.roa (raw, json)
Hash identifier: m9tlmHr1WeaXJyBHxhh0jakoTW5boryN78yYAAgKEPo=
Subject key identifier: 8C:89:7B:4C:08:DB:06:6C:91:13:BB:46:D2:BA:5C:8F:B3:FC:2B:97
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 0184289AE8649896EFCDAF14C734EC039AB5
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/jIl7TAjbBmyRE7tG0rpcj7P8K5c.roa
Signing time: Sun 30 Oct 2022 11:15:51 +0000
ROA not before: Sun 30 Oct 2022 11:15:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12975
IP address blocks: 103.215.4.0/22 maxlen: 22
43.255.108.0/22 maxlen: 22
182.161.60.0/22 maxlen: 22
213.6.0.0/16 maxlen: 24
188.161.0.0/16 maxlen: 24
188.161.134.0/23 maxlen: 23
46.60.64.0/18 maxlen: 24
185.19.223.0/24 maxlen: 24
185.19.222.0/24 maxlen: 24
185.19.221.0/24 maxlen: 24
185.19.220.0/24 maxlen: 24
185.19.220.0/22 maxlen: 22
45.127.179.0/24 maxlen: 24
45.127.178.0/24 maxlen: 24
45.127.177.0/24 maxlen: 24
45.127.176.0/24 maxlen: 24
45.127.176.0/22 maxlen: 22
188.161.112.0/22 maxlen: 22
188.161.116.0/22 maxlen: 22
158.140.16.0/20 maxlen: 20
158.140.112.0/22 maxlen: 22
158.140.108.0/22 maxlen: 22
158.140.116.0/22 maxlen: 22
158.140.124.0/22 maxlen: 22
158.140.120.0/22 maxlen: 22
43.241.159.0/24 maxlen: 24
43.241.158.0/24 maxlen: 24
43.241.157.0/24 maxlen: 24
43.241.156.0/24 maxlen: 24
43.241.156.0/22 maxlen: 22
103.53.4.0/24 maxlen: 24
103.53.4.0/22 maxlen: 24
158.140.64.0/22 maxlen: 22
158.140.68.0/23 maxlen: 23
158.140.64.0/18 maxlen: 24
103.248.38.0/24 maxlen: 24
103.248.37.0/24 maxlen: 24
103.248.36.0/24 maxlen: 24
193.227.236.0/23 maxlen: 23
45.113.111.0/24 maxlen: 24
45.113.110.0/24 maxlen: 24
45.113.109.0/24 maxlen: 24
45.113.108.0/24 maxlen: 24
103.248.39.0/24 maxlen: 24
45.113.108.0/22 maxlen: 22
158.140.104.0/22 maxlen: 22
158.140.100.0/22 maxlen: 22
5.11.40.0/21 maxlen: 21
5.11.47.0/24 maxlen: 24
5.11.46.0/24 maxlen: 24
103.206.108.0/22 maxlen: 22
176.65.0.0/21 maxlen: 24
176.65.8.0/22 maxlen: 22
103.193.132.0/22 maxlen: 22
103.239.96.0/22 maxlen: 22
103.37.85.0/24 maxlen: 24
103.37.84.0/24 maxlen: 24
103.37.84.0/22 maxlen: 22
103.37.87.0/24 maxlen: 24
103.37.86.0/24 maxlen: 24
86.104.188.0/22 maxlen: 22
113.212.64.0/22 maxlen: 22
203.30.104.0/22 maxlen: 22
103.57.108.0/22 maxlen: 22
103.57.111.0/24 maxlen: 24
103.57.110.0/24 maxlen: 24
103.57.109.0/24 maxlen: 24
103.57.108.0/24 maxlen: 24
1.179.40.0/21 maxlen: 21
103.206.36.0/22 maxlen: 22
1.179.72.0/21 maxlen: 21
82.213.0.0/18 maxlen: 24
1.179.88.0/21 maxlen: 21
77.91.128.0/18 maxlen: 24
77.91.128.0/21 maxlen: 21
77.91.136.0/21 maxlen: 21
45.117.40.0/22 maxlen: 22
45.117.43.0/24 maxlen: 24
45.117.42.0/24 maxlen: 24
45.117.41.0/24 maxlen: 24
45.117.40.0/24 maxlen: 24
1.178.112.0/20 maxlen: 20
1.178.128.0/20 maxlen: 20
213.244.121.0/24 maxlen: 24
139.190.176.0/20 maxlen: 20
37.75.208.0/21 maxlen: 21
37.75.211.0/24 maxlen: 24
213.244.71.0/24 maxlen: 24
213.244.70.0/24 maxlen: 24
213.244.70.0/23 maxlen: 24
213.244.64.0/18 maxlen: 24
144.48.236.0/22 maxlen: 22
83.244.78.0/24 maxlen: 24
213.244.76.0/24 maxlen: 24
83.244.75.0/24 maxlen: 24
83.244.74.0/24 maxlen: 24
213.244.73.0/24 maxlen: 24
83.244.73.0/24 maxlen: 24
213.244.72.0/24 maxlen: 24
213.244.72.0/21 maxlen: 24
83.244.79.0/24 maxlen: 24
24.42.64.0/18 maxlen: 18
139.190.128.0/18 maxlen: 24
103.231.105.0/24 maxlen: 24
103.231.104.0/24 maxlen: 24
195.123.163.0/24 maxlen: 24
195.123.160.0/21 maxlen: 21
195.123.160.0/23 maxlen: 23
195.123.160.0/24 maxlen: 24
195.123.166.0/24 maxlen: 24
195.123.165.0/24 maxlen: 24
195.123.164.0/24 maxlen: 24
195.123.162.0/24 maxlen: 24
103.231.107.0/24 maxlen: 24
103.231.106.0/24 maxlen: 24
195.123.161.0/24 maxlen: 24
195.123.167.0/24 maxlen: 24
195.123.112.0/24 maxlen: 24
195.123.118.0/24 maxlen: 24
195.123.117.0/24 maxlen: 24
195.123.116.0/24 maxlen: 24
195.123.115.0/24 maxlen: 24
195.123.114.0/24 maxlen: 24
195.123.113.0/24 maxlen: 24
195.123.112.0/21 maxlen: 21
195.123.119.0/24 maxlen: 24
103.196.120.0/22 maxlen: 22
203.28.19.0/24 maxlen: 24
194.176.98.0/23 maxlen: 23
43.243.95.0/24 maxlen: 24
43.243.94.0/24 maxlen: 24
43.243.93.0/24 maxlen: 24
43.243.92.0/24 maxlen: 24
43.243.92.0/22 maxlen: 22
83.244.0.0/17 maxlen: 24
193.223.252.0/23 maxlen: 23
203.189.236.0/22 maxlen: 22
194.169.188.0/23 maxlen: 23
212.14.224.0/19 maxlen: 24
45.134.202.0/23 maxlen: 23
45.134.203.0/24 maxlen: 24
45.134.202.0/24 maxlen: 24
45.121.104.0/22 maxlen: 22
45.121.105.0/24 maxlen: 24
45.121.106.0/23 maxlen: 23
43.243.24.0/22 maxlen: 22
103.27.144.0/22 maxlen: 22
43.243.32.0/22 maxlen: 22
43.243.35.0/24 maxlen: 24
43.243.34.0/24 maxlen: 24
43.243.32.0/24 maxlen: 24
2a00:d2c0:1e::/48 maxlen: 48
2a00:d2c0:32::/48 maxlen: 48
2a00:d2c0:4::/48 maxlen: 48
2a00:d2c0:31::/48 maxlen: 48
2a00:d2c0:1d::/48 maxlen: 48
2a00:d2c0:33::/48 maxlen: 48
2a00:d2c0:30::/48 maxlen: 48
2a00:d2c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:28:9a:e8:64:98:96:ef:cd:af:14:c7:34:ec:03:9a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Oct 30 11:15:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c897b4c08db066c9113bb46d2ba5c8fb3fc2b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f4:ea:02:2d:93:ff:24:65:cc:8f:4a:5f:35:
32:7c:ff:0e:31:b5:f4:64:b5:30:5f:08:f8:31:01:
ac:31:04:2f:24:f9:23:4b:a4:8d:f2:18:43:ce:2a:
18:2f:57:dd:3b:f7:8f:74:d9:ac:8b:fa:01:b7:97:
86:fa:1c:b3:e9:0e:97:ff:91:63:71:be:25:99:28:
d4:5d:a1:09:1c:89:64:17:97:82:da:69:75:3f:45:
67:f7:4d:72:d1:ff:4f:e7:7e:16:fa:18:71:82:8e:
1d:bf:fd:ed:9d:dd:e5:95:90:c4:06:f5:e2:10:7e:
aa:b3:65:ed:ef:1f:7e:64:f0:cd:f3:8d:71:88:2b:
b9:c9:5e:37:ba:c1:45:62:8e:dc:20:99:22:de:ca:
f5:2f:95:28:20:3a:0e:4e:03:93:f2:4d:69:09:11:
06:39:a6:8d:0f:63:d6:ac:0b:e8:da:99:80:22:a5:
9e:8e:ea:2e:eb:a8:90:9c:b5:78:05:3b:24:00:fd:
89:6d:47:a6:d6:69:06:79:5b:06:38:03:b0:66:bc:
01:0d:d4:8e:bd:91:8b:c9:60:46:ac:0f:40:7d:cd:
eb:c8:14:ee:48:7a:64:0c:c5:11:35:4c:05:47:d1:
e0:d9:bb:f3:7b:68:46:f7:0c:6a:66:4a:83:72:7f:
f8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:89:7B:4C:08:DB:06:6C:91:13:BB:46:D2:BA:5C:8F:B3:FC:2B:97
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/jIl7TAjbBmyRE7tG0rpcj7P8K5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.112.0-1.178.143.255
1.179.40.0/21
1.179.72.0/21
1.179.88.0/21
5.11.40.0/21
24.42.64.0/18
37.75.208.0/21
43.241.156.0/22
43.243.24.0/22
43.243.32.0/22
43.243.92.0/22
43.255.108.0/22
45.113.108.0/22
45.117.40.0/22
45.121.104.0/22
45.127.176.0/22
45.134.202.0/23
46.60.64.0/18
77.91.128.0/18
82.213.0.0/18
83.244.0.0/17
86.104.188.0/22
103.27.144.0/22
103.37.84.0/22
103.53.4.0/22
103.57.108.0/22
103.193.132.0/22
103.196.120.0/22
103.206.36.0/22
103.206.108.0/22
103.215.4.0/22
103.231.104.0/22
103.239.96.0/22
103.248.36.0/22
113.212.64.0/22
139.190.128.0/18
144.48.236.0/22
158.140.16.0/20
158.140.64.0/18
176.65.0.0-176.65.11.255
182.161.60.0/22
185.19.220.0/22
188.161.0.0/16
193.223.252.0/23
193.227.236.0/23
194.169.188.0/23
194.176.98.0/23
195.123.112.0/21
195.123.160.0/21
203.28.19.0/24
203.30.104.0/22
203.189.236.0/22
212.14.224.0/19
213.6.0.0/16
213.244.64.0/18
IPv6:
2a00:d2c0::/32
Signature Algorithm: sha256WithRSAEncryption
5b:6e:82:2c:33:ed:29:74:c2:bc:f0:cb:c5:16:c5:b1:a1:3a:
21:09:f1:99:cf:be:74:70:69:a7:e0:9e:ac:de:c2:a6:b4:7f:
dd:65:39:98:2f:79:59:23:c7:5d:2d:62:da:8e:36:e1:6f:3c:
00:98:7d:bf:7a:d6:26:89:32:c1:72:6e:4c:6a:1a:07:93:e2:
22:67:4e:4e:73:2b:09:78:b0:a3:57:6f:96:63:06:a8:e1:92:
5a:96:68:5d:05:f6:7c:be:1f:a1:fb:61:0a:1a:9d:62:93:c7:
ee:fb:16:ec:92:29:ce:9b:e7:9c:b4:57:48:4f:fc:14:10:23:
19:e2:37:2d:37:1c:d9:ab:99:65:fe:d5:6c:21:fe:3a:26:45:
ff:c3:3a:39:5e:13:35:ce:cc:e5:cc:28:e5:d2:61:92:3b:b4:
8b:aa:f9:af:6a:32:8d:24:f6:0c:90:95:18:21:b9:1f:9d:dd:
50:99:3b:94:f4:62:f6:87:ce:29:c1:ed:87:6d:91:55:2b:4b:
7f:29:19:f7:48:2e:db:b3:1b:da:87:70:3b:12:cb:72:ed:f8:
80:55:bd:72:5d:d8:8b:ad:63:b6:3c:23:be:dd:11:d4:d8:89:
b9:9d:b9:4d:4a:a9:7d:c4:e6:48:c8:6a:33:46:d7:53:cf:f2:
4f:64:2e:d5
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgISAYQomuhkmJbvza8UxzTsA5q1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzdmMjdlYjQ5OTdiM2JlZjlmMjgyNjZhMzk2OTQwNTBm
ZTc0ZjkwHhcNMjIxMDMwMTExNTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Yzg5N2I0YzA4ZGIwNjZjOTExM2JiNDZkMmJhNWM4ZmIzZmMyYjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/TqAi2T/yRlzI9KXzUyfP8OMbX0
ZLUwXwj4MQGsMQQvJPkjS6SN8hhDzioYL1fdO/ePdNmsi/oBt5eG+hyz6Q6X/5Fj
cb4lmSjUXaEJHIlkF5eC2ml1P0Vn901y0f9P534W+hhxgo4dv/3tnd3llZDEBvXi
EH6qs2Xt7x9+ZPDN841xiCu5yV43usFFYo7cIJki3sr1L5UoIDoOTgOT8k1pCREG
OaaND2PWrAvo2pmAIqWejuou66iQnLV4BTskAP2JbUem1mkGeVsGOAOwZrwBDdSO
vZGLyWBGrA9Afc3ryBTuSHpkDMURNUwFR9Hg2bvze2hG9wxqZkqDcn/4nwIDAQAB
o4IDczCCA28wHQYDVR0OBBYEFIyJe0wI2wZskRO7RtK6XI+z/CuXMB8GA1UdIwQY
MBaAFEw38n60mXs7758oJmo5aUBQ/nT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEt
ZWI1YTYyN2U3NmEzLzEvaklsN1RBamJCbXlSRTd0RzBycGNqN1A4SzVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEtZWI1YTYyN2U3NmEz
LzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBhwYIKwYBBQUHAQcBAf8EggF2MIIBcjCCAV8EAgABMIIB
VzAMAwQEAbJwAwQEAbKAAwQDAbMoAwQDAbNIAwQDAbNYAwQDBQsoAwQGGCpAAwQD
JUvQAwQCK/GcAwQCK/MYAwQCK/MgAwQCK/NcAwQCK/9sAwQCLXFsAwQCLXUoAwQC
LXloAwQCLX+wAwQBLYbKAwQGLjxAAwQGTVuAAwQGUtUAAwQHU/QAAwQCVmi8AwQC
ZxuQAwQCZyVUAwQCZzUEAwQCZzlsAwQCZ8GEAwQCZ8R4AwQCZ84kAwQCZ85sAwQC
Z9cEAwQCZ+doAwQCZ+9gAwQCZ/gkAwQCcdRAAwQGi76AAwQCkDDsAwQEnowQAwQG
noxAMAsDAwCwQQMEArBBCAMEArahPAMEArkT3AMDALyhAwQBwd/8AwQBwePsAwQB
wqm8AwQBwrBiAwQDw3twAwQDw3ugAwQAyxwTAwQCyx5oAwQCy73sAwQF1A7gAwMA
1QYDBAbV9EAwDQQCAAIwBwMFACoA0sAwDQYJKoZIhvcNAQELBQADggEBAFtugiwz
7Sl0wrzwy8UWxbGhOiEJ8ZnPvnRwaafgnqzewqa0f91lOZgveVkjx10tYtqONuFv
PACYfb961iaJMsFybkxqGgeT4iJnTk5zKwl4sKNXb5ZjBqjhklqWaF0F9ny+H6H7
YQoanWKTx+77FuySKc6b55y0V0hP/BQQIxniNy03HNmrmWX+1Wwh/jomRf/DOjle
EzXOzOXMKOXSYZI7tIuq+a9qMo0k9gyQlRghuR+d3VCZO5T0YvaHzinB7YdtkVUr
S38pGfdILtuzG9qHcDsSy3Lt+IBVvXJd2IutY7Y8I77dEdTYibmduU1KqX3E5kjI
ajNG11PP8k9kLtU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:10 2024 by rpki-client on console-ams.rpki-client.org