Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/gYXh4WbzgZTtz4sHFoLIHvUq22U.roa
File: gYXh4WbzgZTtz4sHFoLIHvUq22U.roa (raw, json)
Hash identifier: +8KPXXi2Gf9LqR6amiWO5kAOr74qiJ4hVY8zAmt0aQY=
Subject key identifier: 81:85:E1:E1:66:F3:81:94:ED:CF:8B:07:16:82:C8:1E:F5:2A:DB:65
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 01857321C515FBE37F1509C3743AC0561D98
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/gYXh4WbzgZTtz4sHFoLIHvUq22U.roa
Signing time: Mon 02 Jan 2023 15:37:51 +0000
ROA not before: Mon 02 Jan 2023 15:37:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8680
IP address blocks: 89.33.15.0/24 maxlen: 24
89.43.49.0/24 maxlen: 24
85.204.192.0/24 maxlen: 24
217.19.128.0/20 maxlen: 24
89.40.64.0/24 maxlen: 24
86.104.64.0/24 maxlen: 24
89.43.172.0/23 maxlen: 24
86.104.12.0/24 maxlen: 24
212.30.4.0/24 maxlen: 24
92.114.55.0/24 maxlen: 24
212.30.0.0/19 maxlen: 24
212.30.9.0/24 maxlen: 24
212.30.8.0/24 maxlen: 24
212.30.16.0/24 maxlen: 24
188.241.17.0/24 maxlen: 24
91.190.160.0/21 maxlen: 24
89.42.115.0/24 maxlen: 24
188.214.59.0/24 maxlen: 24
37.72.152.0/21 maxlen: 24
37.72.158.0/24 maxlen: 24
37.72.156.0/23 maxlen: 23
85.204.135.0/24 maxlen: 24
85.204.144.0/24 maxlen: 24
89.32.207.0/24 maxlen: 24
85.204.71.0/24 maxlen: 24
89.42.174.0/23 maxlen: 24
89.42.179.0/24 maxlen: 24
93.187.144.0/21 maxlen: 24
84.247.1.0/24 maxlen: 24
89.35.82.0/23 maxlen: 24
62.68.160.0/19 maxlen: 24
62.68.160.0/21 maxlen: 21
62.68.168.0/23 maxlen: 23
62.68.170.0/24 maxlen: 24
62.68.172.0/22 maxlen: 22
62.68.178.0/23 maxlen: 23
62.68.176.0/23 maxlen: 23
62.68.176.0/20 maxlen: 20
62.68.185.0/24 maxlen: 24
62.68.184.0/24 maxlen: 24
62.68.181.0/24 maxlen: 24
62.68.183.0/24 maxlen: 24
62.68.182.0/24 maxlen: 24
62.68.180.0/24 maxlen: 24
62.68.188.0/22 maxlen: 22
46.102.107.0/24 maxlen: 24
93.114.188.0/23 maxlen: 24
185.3.100.0/22 maxlen: 24
89.37.59.0/24 maxlen: 24
89.44.107.0/24 maxlen: 24
88.81.128.0/19 maxlen: 24
88.81.157.0/24 maxlen: 24
89.47.253.0/24 maxlen: 24
89.47.248.0/24 maxlen: 24
77.81.75.0/24 maxlen: 24
78.111.192.0/20 maxlen: 24
86.105.10.0/23 maxlen: 24
2a02:7380::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:c5:15:fb:e3:7f:15:09:c3:74:3a:c0:56:1d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Jan 2 15:37:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8185e1e166f38194edcf8b071682c81ef52adb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7c:24:d4:c0:db:66:97:e8:9e:8e:f7:04:09:
54:86:2e:53:43:94:9a:43:8d:e7:6f:86:17:6b:aa:
74:df:22:22:df:22:5e:54:79:0c:25:d0:16:32:d0:
81:b3:dd:9a:8d:43:23:67:56:91:80:b4:3d:44:0c:
c7:48:b3:6f:f2:85:5d:48:a4:7a:4f:8f:a2:97:d4:
b2:54:69:f6:40:8c:18:81:9f:d5:78:02:41:23:b8:
4a:2a:f0:a1:31:4c:90:73:75:ce:06:ff:ea:58:46:
ff:0d:cc:40:a0:d3:35:aa:ac:38:5a:91:43:4a:04:
00:3a:7c:49:a8:75:6d:c6:24:83:9c:da:c8:62:70:
9f:ae:72:62:9c:ce:8d:0f:b9:95:84:5c:22:ff:bf:
dc:43:74:b6:49:17:bc:50:f6:73:72:ca:97:51:ca:
e3:1d:31:76:56:25:ff:37:9e:fd:85:7f:f0:be:ae:
50:73:d3:5e:db:65:32:42:09:5d:97:2f:ee:bc:7e:
2d:c3:56:60:92:b2:6c:0d:0e:11:82:30:2e:d5:91:
c6:fc:1d:53:7a:d3:71:98:90:40:ff:6a:2e:f8:74:
e3:25:9d:e5:07:ed:83:56:24:ec:b1:af:7e:da:0e:
83:03:1c:d5:ab:32:82:7f:bf:9f:cf:95:e1:c5:d7:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:85:E1:E1:66:F3:81:94:ED:CF:8B:07:16:82:C8:1E:F5:2A:DB:65
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/gYXh4WbzgZTtz4sHFoLIHvUq22U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.152.0/21
46.102.107.0/24
62.68.160.0/19
77.81.75.0/24
78.111.192.0/20
84.247.1.0/24
85.204.71.0/24
85.204.135.0/24
85.204.144.0/24
85.204.192.0/24
86.104.12.0/24
86.104.64.0/24
86.105.10.0/23
88.81.128.0/19
89.32.207.0/24
89.33.15.0/24
89.35.82.0/23
89.37.59.0/24
89.40.64.0/24
89.42.115.0/24
89.42.174.0/23
89.42.179.0/24
89.43.49.0/24
89.43.172.0/23
89.44.107.0/24
89.47.248.0/24
89.47.253.0/24
91.190.160.0/21
92.114.55.0/24
93.114.188.0/23
93.187.144.0/21
185.3.100.0/22
188.214.59.0/24
188.241.17.0/24
212.30.0.0/19
217.19.128.0/20
IPv6:
2a02:7380::/32
Signature Algorithm: sha256WithRSAEncryption
3f:7e:9f:1b:84:2e:ab:5c:16:2e:8d:38:da:2b:b5:c8:4d:e2:
3c:31:f2:70:1b:67:5d:ff:bd:d8:1e:41:5a:a4:82:40:ec:86:
45:49:14:31:2a:13:5b:05:fb:74:99:0e:5c:c1:ef:37:3b:37:
9d:b6:64:be:0a:f0:eb:e5:ff:1a:38:f4:58:20:91:8c:37:4b:
dc:a9:8b:37:13:e4:7a:11:e6:83:52:0e:eb:a0:d1:2c:05:e7:
5c:0e:1b:03:31:71:a0:d2:6d:f8:d6:17:71:f1:1a:69:13:95:
c9:87:c5:42:b0:3c:99:7b:8b:a5:ce:ef:e5:d7:69:27:9b:1b:
f0:43:40:73:92:8b:51:f1:67:c2:59:ec:9f:2b:f3:b2:7a:c2:
b0:a5:ef:e2:fd:d5:14:9e:4d:3d:2c:07:79:a1:f1:a3:c8:30:
3c:a5:16:7b:23:fd:68:9f:a6:c2:c9:6a:b5:c9:16:0c:64:0e:
f6:d7:4a:3c:03:46:e1:01:6a:85:0c:73:fb:f8:31:06:a2:6c:
15:62:1a:b1:05:f1:e8:e6:ca:09:c7:5b:ca:6b:a7:05:7a:6f:
59:96:61:b6:f7:35:7b:b8:b4:8c:ac:58:e6:2e:f7:31:78:14:
5a:d1:62:5b:92:29:ae:8b:62:e8:e9:8b:a5:14:10:8b:6f:18:
11:7e:44:7f
-----BEGIN CERTIFICATE-----
MIIF5DCCBMygAwIBAgISAYVzIcUV++N/FQnDdDrAVh2YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMjYyNWJkZmZhOTQzN2RjMmI5NmQ4YWUwMjMxMDBiYzg4
ZTZmZTMwHhcNMjMwMTAyMTUzNzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTg1ZTFlMTY2ZjM4MTk0ZWRjZjhiMDcxNjgyYzgxZWY1MmFkYjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHwk1MDbZpfono73BAlUhi5TQ5Sa
Q43nb4YXa6p03yIi3yJeVHkMJdAWMtCBs92ajUMjZ1aRgLQ9RAzHSLNv8oVdSKR6
T4+il9SyVGn2QIwYgZ/VeAJBI7hKKvChMUyQc3XOBv/qWEb/DcxAoNM1qqw4WpFD
SgQAOnxJqHVtxiSDnNrIYnCfrnJinM6ND7mVhFwi/7/cQ3S2SRe8UPZzcsqXUcrj
HTF2ViX/N579hX/wvq5Qc9Ne22UyQgldly/uvH4tw1ZgkrJsDQ4RgjAu1ZHG/B1T
etNxmJBA/2ou+HTjJZ3lB+2DViTssa9+2g6DAxzVqzKCf7+fz5XhxdedSwIDAQAB
o4IC8DCCAuwwHQYDVR0OBBYEFIGF4eFm84GU7c+LBxaCyB71KttlMB8GA1UdIwQY
MBaAFAwmJb3/qUN9wrltiuAjEAvIjm/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRENZbHZmLXBRMzNDdVcySzRDTVFDOGlPYi1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85Yzc4YjktZGEzOS00NTBmLWJiOTYt
MDc4MDRhZmY0OTBmLzEvZ1lYaDRXYnpnWlR0ejRzSEZvTElIdlVxMjJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC85Yzc4YjktZGEzOS00NTBmLWJiOTYtMDc4MDRhZmY0OTBm
LzEvRENZbHZmLXBRMzNDdVcySzRDTVFDOGlPYi1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBBAYIKwYBBQUHAQcBAf8EgfQwgfEwgd8EAgABMIHYAwQD
JUiYAwQALmZrAwQFPkSgAwQATVFLAwQETm/AAwQAVPcBAwQAVcxHAwQAVcyHAwQA
VcyQAwQAVczAAwQAVmgMAwQAVmhAAwQBVmkKAwQFWFGAAwQAWSDPAwQAWSEPAwQB
WSNSAwQAWSU7AwQAWShAAwQAWSpzAwQBWSquAwQAWSqzAwQAWSsxAwQBWSusAwQA
WSxrAwQAWS/4AwQAWS/9AwQDW76gAwQAXHI3AwQBXXK8AwQDXbuQAwQCuQNkAwQA
vNY7AwQAvPERAwQF1B4AAwQE2ROAMA0EAgACMAcDBQAqAnOAMA0GCSqGSIb3DQEB
CwUAA4IBAQA/fp8bhC6rXBYujTjaK7XITeI8MfJwG2dd/73YHkFapIJA7IZFSRQx
KhNbBft0mQ5cwe83OzedtmS+CvDr5f8aOPRYIJGMN0vcqYs3E+R6EeaDUg7roNEs
BedcDhsDMXGg0m341hdx8RppE5XJh8VCsDyZe4ulzu/l12knmxvwQ0BzkotR8WfC
WeyfK/OyesKwpe/i/dUUnk09LAd5ofGjyDA8pRZ7I/1on6bCyWq1yRYMZA7210o8
A0bhAWqFDHP7+DEGomwVYhqxBfHo5soJx1vKa6cFem9ZlmG29zV7uLSMrFjmLvcx
eBRa0WJbkimui2Lo6YulFBCLbxgRfkR/
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:04 2025 by rpki-client