Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/nviBvkbacC1e-7Ng0_xlwZdsL1c.roa
File: nviBvkbacC1e-7Ng0_xlwZdsL1c.roa (raw, json)
Hash identifier: j+oGDGndGisQn0KtLwjsqjKLoLZ03tHrlPwG1tg++yU=
Subject key identifier: 9E:F8:81:BE:46:DA:70:2D:5E:FB:B3:60:D3:FC:65:C1:97:6C:2F:57
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 018418F5B50DB27895812C561159FF7C8EC4
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/nviBvkbacC1e-7Ng0_xlwZdsL1c.roa
Signing time: Thu 27 Oct 2022 10:21:06 +0000
ROA not before: Thu 27 Oct 2022 10:21:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 43.255.108.0/22 maxlen: 22
103.215.4.0/22 maxlen: 22
182.161.60.0/22 maxlen: 22
213.6.0.0/16 maxlen: 24
188.161.0.0/16 maxlen: 24
46.60.64.0/18 maxlen: 24
185.19.220.0/24 maxlen: 24
185.19.221.0/24 maxlen: 24
185.19.222.0/24 maxlen: 24
185.19.223.0/24 maxlen: 24
45.127.176.0/22 maxlen: 22
45.127.176.0/24 maxlen: 24
45.127.177.0/24 maxlen: 24
45.127.178.0/24 maxlen: 24
45.127.179.0/24 maxlen: 24
188.161.104.0/24 maxlen: 24
188.161.105.0/24 maxlen: 24
188.161.104.0/21 maxlen: 21
188.161.106.0/24 maxlen: 24
188.161.107.0/24 maxlen: 24
188.161.108.0/24 maxlen: 24
188.161.109.0/24 maxlen: 24
188.161.110.0/24 maxlen: 24
188.161.111.0/24 maxlen: 24
158.140.16.0/20 maxlen: 20
158.140.108.0/22 maxlen: 22
158.140.112.0/22 maxlen: 22
158.140.116.0/22 maxlen: 22
158.140.120.0/22 maxlen: 22
158.140.124.0/22 maxlen: 22
43.241.158.0/24 maxlen: 24
43.241.159.0/24 maxlen: 24
43.241.156.0/22 maxlen: 22
43.241.156.0/24 maxlen: 24
43.241.157.0/24 maxlen: 24
103.53.4.0/24 maxlen: 24
103.53.4.0/22 maxlen: 24
158.140.64.0/18 maxlen: 24
103.248.36.0/24 maxlen: 24
103.248.37.0/24 maxlen: 24
103.248.38.0/24 maxlen: 24
193.227.236.0/23 maxlen: 23
103.248.39.0/24 maxlen: 24
45.113.108.0/24 maxlen: 24
45.113.109.0/24 maxlen: 24
45.113.110.0/24 maxlen: 24
45.113.111.0/24 maxlen: 24
45.113.108.0/22 maxlen: 22
158.140.100.0/22 maxlen: 22
158.140.104.0/22 maxlen: 22
5.11.40.0/21 maxlen: 21
5.11.46.0/24 maxlen: 24
5.11.47.0/24 maxlen: 24
103.206.108.0/22 maxlen: 22
176.65.0.0/21 maxlen: 24
176.65.8.0/22 maxlen: 22
103.193.132.0/22 maxlen: 22
103.239.96.0/22 maxlen: 22
103.37.84.0/22 maxlen: 22
103.37.84.0/24 maxlen: 24
103.37.85.0/24 maxlen: 24
103.37.87.0/24 maxlen: 24
103.37.86.0/24 maxlen: 24
86.104.188.0/22 maxlen: 22
113.212.64.0/22 maxlen: 22
203.30.104.0/22 maxlen: 22
103.57.110.0/24 maxlen: 24
103.57.111.0/24 maxlen: 24
103.57.108.0/24 maxlen: 24
103.57.109.0/24 maxlen: 24
103.57.108.0/22 maxlen: 22
77.91.148.0/22 maxlen: 24
1.179.40.0/21 maxlen: 21
103.206.36.0/22 maxlen: 22
1.179.72.0/21 maxlen: 21
82.213.0.0/18 maxlen: 24
1.179.88.0/21 maxlen: 21
77.91.128.0/18 maxlen: 24
45.117.40.0/22 maxlen: 22
45.117.42.0/24 maxlen: 24
45.117.43.0/24 maxlen: 24
45.117.40.0/24 maxlen: 24
45.117.41.0/24 maxlen: 24
1.178.112.0/20 maxlen: 20
1.178.128.0/20 maxlen: 20
213.244.117.0/24 maxlen: 24
213.244.115.0/24 maxlen: 24
213.244.116.0/24 maxlen: 24
213.244.124.0/22 maxlen: 22
213.244.121.0/24 maxlen: 24
213.244.122.0/24 maxlen: 24
139.190.176.0/20 maxlen: 20
37.75.208.0/21 maxlen: 21
37.75.211.0/24 maxlen: 24
213.244.70.0/24 maxlen: 24
213.244.71.0/24 maxlen: 24
213.244.70.0/23 maxlen: 24
213.244.64.0/18 maxlen: 24
144.48.236.0/22 maxlen: 22
83.244.75.0/24 maxlen: 24
213.244.76.0/24 maxlen: 24
83.244.78.0/24 maxlen: 24
213.244.72.0/24 maxlen: 24
83.244.73.0/24 maxlen: 24
213.244.73.0/24 maxlen: 24
83.244.74.0/24 maxlen: 24
213.244.72.0/21 maxlen: 24
83.244.79.0/24 maxlen: 24
24.42.64.0/18 maxlen: 18
139.190.128.0/18 maxlen: 24
103.231.104.0/24 maxlen: 24
103.231.105.0/24 maxlen: 24
195.123.162.0/24 maxlen: 24
195.123.160.0/23 maxlen: 23
195.123.160.0/21 maxlen: 21
103.231.107.0/24 maxlen: 24
195.123.161.0/24 maxlen: 24
195.123.163.0/24 maxlen: 24
103.231.106.0/24 maxlen: 24
195.123.160.0/24 maxlen: 24
195.123.164.0/24 maxlen: 24
195.123.165.0/24 maxlen: 24
195.123.166.0/24 maxlen: 24
195.123.167.0/24 maxlen: 24
195.123.112.0/24 maxlen: 24
195.123.113.0/24 maxlen: 24
195.123.114.0/24 maxlen: 24
195.123.115.0/24 maxlen: 24
195.123.116.0/24 maxlen: 24
195.123.117.0/24 maxlen: 24
195.123.118.0/24 maxlen: 24
195.123.112.0/21 maxlen: 21
195.123.119.0/24 maxlen: 24
103.196.120.0/22 maxlen: 22
203.28.19.0/24 maxlen: 24
194.176.98.0/23 maxlen: 24
43.243.95.0/24 maxlen: 24
43.243.92.0/24 maxlen: 24
43.243.93.0/24 maxlen: 24
43.243.94.0/24 maxlen: 24
43.243.92.0/22 maxlen: 22
83.244.0.0/17 maxlen: 24
193.223.252.0/23 maxlen: 23
203.189.236.0/22 maxlen: 22
194.169.188.0/23 maxlen: 23
212.14.224.0/19 maxlen: 24
45.134.203.0/24 maxlen: 24
45.134.202.0/24 maxlen: 24
45.121.104.0/24 maxlen: 24
45.121.105.0/24 maxlen: 24
45.121.104.0/22 maxlen: 22
45.121.106.0/24 maxlen: 24
45.121.107.0/24 maxlen: 24
45.121.106.0/23 maxlen: 23
43.243.24.0/22 maxlen: 22
103.27.144.0/22 maxlen: 22
43.243.32.0/24 maxlen: 24
43.243.34.0/24 maxlen: 24
43.243.35.0/24 maxlen: 24
43.243.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:18:f5:b5:0d:b2:78:95:81:2c:56:11:59:ff:7c:8e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Oct 27 10:21:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ef881be46da702d5efbb360d3fc65c1976c2f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bb:24:4f:e2:88:5c:47:d5:99:15:9b:5e:87:
eb:59:bf:90:ed:67:f8:fd:d9:5a:db:94:26:86:ca:
3c:a7:ba:54:4e:9c:44:4c:a3:b0:6b:90:70:7c:ff:
c8:91:3b:86:51:3a:51:3f:43:2e:e3:e3:10:46:b9:
3c:df:ea:32:ed:9e:5f:2e:9d:83:de:7e:c4:5b:02:
9a:24:f9:7a:86:b3:4c:7b:bb:42:e9:c7:db:2e:c5:
0b:28:31:bf:65:6d:38:0e:94:de:cc:cc:fb:a9:fa:
7e:d6:75:86:31:1b:a5:db:d5:4d:f8:39:ee:d0:56:
9b:f1:ef:e8:ca:6e:66:5e:6d:f3:b0:f0:17:de:f1:
69:b5:21:a5:52:f4:ba:50:09:24:92:49:15:85:de:
c3:bb:a4:70:7c:10:a1:62:39:ba:3a:de:1a:37:d7:
84:12:25:ca:c8:c6:6b:e2:7a:5a:2e:93:13:f8:59:
71:87:58:c5:6f:36:f6:f1:cf:b4:e2:cd:5f:46:df:
93:db:5f:2f:fc:66:24:4e:c6:4e:26:9a:35:fa:22:
69:70:fb:ee:3f:08:ce:98:87:53:63:76:ac:ca:ad:
10:c9:5e:03:d6:81:a8:77:7e:b8:bb:b7:8a:20:46:
86:cb:d7:5f:d2:5f:cc:18:16:14:eb:ef:8d:75:47:
92:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F8:81:BE:46:DA:70:2D:5E:FB:B3:60:D3:FC:65:C1:97:6C:2F:57
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/nviBvkbacC1e-7Ng0_xlwZdsL1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.112.0-1.178.143.255
1.179.40.0/21
1.179.72.0/21
1.179.88.0/21
5.11.40.0/21
24.42.64.0/18
37.75.208.0/21
43.241.156.0/22
43.243.24.0/22
43.243.32.0/22
43.243.92.0/22
43.255.108.0/22
45.113.108.0/22
45.117.40.0/22
45.121.104.0/22
45.127.176.0/22
45.134.202.0/23
46.60.64.0/18
77.91.128.0/18
82.213.0.0/18
83.244.0.0/17
86.104.188.0/22
103.27.144.0/22
103.37.84.0/22
103.53.4.0/22
103.57.108.0/22
103.193.132.0/22
103.196.120.0/22
103.206.36.0/22
103.206.108.0/22
103.215.4.0/22
103.231.104.0/22
103.239.96.0/22
103.248.36.0/22
113.212.64.0/22
139.190.128.0/18
144.48.236.0/22
158.140.16.0/20
158.140.64.0/18
176.65.0.0-176.65.11.255
182.161.60.0/22
185.19.220.0/22
188.161.0.0/16
193.223.252.0/23
193.227.236.0/23
194.169.188.0/23
194.176.98.0/23
195.123.112.0/21
195.123.160.0/21
203.28.19.0/24
203.30.104.0/22
203.189.236.0/22
212.14.224.0/19
213.6.0.0/16
213.244.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5c:f2:74:88:f7:2f:90:cd:2a:c0:ae:82:22:74:13:b8:f3:05:
8d:93:eb:bc:d2:66:2e:1e:7d:60:1b:9b:79:c8:f9:f7:c8:71:
69:a8:27:8d:38:f2:de:8f:f9:8b:4e:84:70:84:76:26:13:e7:
70:d2:63:ba:17:a1:d2:35:5c:3d:02:3d:81:c6:4a:86:bf:82:
16:9c:db:5d:b7:e5:74:c4:8a:9b:d8:10:a2:c8:ee:3d:7b:c0:
07:61:e2:6b:b5:9d:13:04:c7:0b:a5:bd:77:b3:44:c0:86:57:
46:61:c5:d2:bc:1a:5d:72:62:88:77:0e:c7:cc:f1:8d:c2:58:
91:37:ec:99:c7:78:5f:f3:3f:e9:26:b9:81:aa:8d:a9:e6:a3:
7e:78:df:0d:4e:f7:c5:c0:f5:cc:be:1d:9d:09:3b:4f:bc:d1:
c2:9f:7d:c1:11:57:8c:84:71:57:56:28:ae:dc:a4:37:a4:cf:
d5:10:47:7c:b3:a5:16:9c:2b:01:f7:f3:35:eb:56:eb:c9:67:
04:77:f8:c6:72:1d:5f:29:a6:ac:88:5d:b1:b2:2c:6a:5f:d7:
c8:bd:c9:a7:65:80:c6:bb:fc:1b:f6:95:01:b0:2f:fa:8c:c2:
31:a9:d7:a5:74:23:39:1a:94:7e:bb:ab:e0:df:20:60:f2:e9:
80:64:27:a8
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgISAYQY9bUNsniVgSxWEVn/fI7EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzdmMjdlYjQ5OTdiM2JlZjlmMjgyNjZhMzk2OTQwNTBm
ZTc0ZjkwHhcNMjIxMDI3MTAyMTA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWY4ODFiZTQ2ZGE3MDJkNWVmYmIzNjBkM2ZjNjVjMTk3NmMyZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLskT+KIXEfVmRWbXofrWb+Q7Wf4
/dla25Qmhso8p7pUTpxETKOwa5BwfP/IkTuGUTpRP0Mu4+MQRrk83+oy7Z5fLp2D
3n7EWwKaJPl6hrNMe7tC6cfbLsULKDG/ZW04DpTezMz7qfp+1nWGMRul29VN+Dnu
0Fab8e/oym5mXm3zsPAX3vFptSGlUvS6UAkkkkkVhd7Du6RwfBChYjm6Ot4aN9eE
EiXKyMZr4npaLpMT+Flxh1jFbzb28c+04s1fRt+T218v/GYkTsZOJpo1+iJpcPvu
PwjOmIdTY3asyq0QyV4D1oGod364u7eKIEaGy9df0l/MGBYU6++NdUeSYwIDAQAB
o4IDZDCCA2AwHQYDVR0OBBYEFJ74gb5G2nAtXvuzYNP8ZcGXbC9XMB8GA1UdIwQY
MBaAFEw38n60mXs7758oJmo5aUBQ/nT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEt
ZWI1YTYyN2U3NmEzLzEvbnZpQnZrYmFjQzFlLTdOZzBfeGx3WmRzTDFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEtZWI1YTYyN2U3NmEz
LzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBeAYIKwYBBQUHAQcBAf8EggFnMIIBYzCCAV8EAgABMIIB
VzAMAwQEAbJwAwQEAbKAAwQDAbMoAwQDAbNIAwQDAbNYAwQDBQsoAwQGGCpAAwQD
JUvQAwQCK/GcAwQCK/MYAwQCK/MgAwQCK/NcAwQCK/9sAwQCLXFsAwQCLXUoAwQC
LXloAwQCLX+wAwQBLYbKAwQGLjxAAwQGTVuAAwQGUtUAAwQHU/QAAwQCVmi8AwQC
ZxuQAwQCZyVUAwQCZzUEAwQCZzlsAwQCZ8GEAwQCZ8R4AwQCZ84kAwQCZ85sAwQC
Z9cEAwQCZ+doAwQCZ+9gAwQCZ/gkAwQCcdRAAwQGi76AAwQCkDDsAwQEnowQAwQG
noxAMAsDAwCwQQMEArBBCAMEArahPAMEArkT3AMDALyhAwQBwd/8AwQBwePsAwQB
wqm8AwQBwrBiAwQDw3twAwQDw3ugAwQAyxwTAwQCyx5oAwQCy73sAwQF1A7gAwMA
1QYDBAbV9EAwDQYJKoZIhvcNAQELBQADggEBAFzydIj3L5DNKsCugiJ0E7jzBY2T
67zSZi4efWAbm3nI+ffIcWmoJ4048t6P+YtOhHCEdiYT53DSY7oXodI1XD0CPYHG
Soa/ghac21235XTEipvYEKLI7j17wAdh4mu1nRMExwulvXezRMCGV0ZhxdK8Gl1y
Yoh3DsfM8Y3CWJE37JnHeF/zP+kmuYGqjanmo3543w1O98XA9cy+HZ0JO0+80cKf
fcERV4yEcVdWKK7cpDekz9UQR3yzpRacKwH38zXrVuvJZwR3+MZyHV8ppqyIXbGy
LGpf18i9yadlgMa7/Bv2lQGwL/qMwjGp16V0IzkalH67q+DfIGDy6YBkJ6g=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:44 2023 by rpki-client on console-ams.rpki-client.org