Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/M4ILswqMQ6WD8_qzg-fKNz7C5L0.roa
File: M4ILswqMQ6WD8_qzg-fKNz7C5L0.roa (raw, json)
Hash identifier: TEi7HrcGhhiQ/M1Se7MQ6Q8IIaMDrXIQ6u5ZczkJ07c=
Subject key identifier: 33:82:0B:B3:0A:8C:43:A5:83:F3:FA:B3:83:E7:CA:37:3E:C2:E4:BD
Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial: 01857139B84A759EC2E168E226647A0A91E4
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/M4ILswqMQ6WD8_qzg-fKNz7C5L0.roa
Signing time: Mon 02 Jan 2023 06:44:46 +0000
ROA not before: Mon 02 Jan 2023 06:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41798
IP address blocks: 37.208.43.0/24 maxlen: 24
37.208.42.0/24 maxlen: 24
37.208.44.0/24 maxlen: 24
37.208.41.0/24 maxlen: 24
37.208.40.0/24 maxlen: 24
37.208.45.0/24 maxlen: 24
37.208.46.0/24 maxlen: 24
37.208.47.0/24 maxlen: 24
87.255.203.0/24 maxlen: 24
87.255.202.0/24 maxlen: 24
87.255.205.0/24 maxlen: 24
87.255.204.0/24 maxlen: 24
87.255.206.0/24 maxlen: 24
87.255.208.0/24 maxlen: 24
87.255.210.0/24 maxlen: 24
87.255.209.0/24 maxlen: 24
87.255.207.0/24 maxlen: 24
87.255.212.0/24 maxlen: 24
87.255.211.0/24 maxlen: 24
87.255.219.0/24 maxlen: 24
87.255.218.0/24 maxlen: 24
87.255.215.0/24 maxlen: 24
87.255.217.0/24 maxlen: 24
87.255.216.0/24 maxlen: 24
87.255.214.0/24 maxlen: 24
87.255.222.0/24 maxlen: 24
87.255.223.0/24 maxlen: 24
87.255.221.0/24 maxlen: 24
87.255.220.0/24 maxlen: 24
176.98.226.0/24 maxlen: 24
176.98.225.0/24 maxlen: 24
176.98.224.0/20 maxlen: 20
176.98.224.0/24 maxlen: 24
176.98.228.0/24 maxlen: 24
176.98.233.0/24 maxlen: 24
176.98.232.0/24 maxlen: 24
176.98.230.0/24 maxlen: 24
176.98.229.0/24 maxlen: 24
176.98.231.0/24 maxlen: 24
176.98.235.0/24 maxlen: 24
176.98.234.0/24 maxlen: 24
176.98.240.0/24 maxlen: 24
176.98.239.0/24 maxlen: 24
176.98.237.0/24 maxlen: 24
176.98.236.0/24 maxlen: 24
176.98.238.0/24 maxlen: 24
37.17.176.0/24 maxlen: 24
37.17.178.0/24 maxlen: 24
37.17.177.0/24 maxlen: 24
37.17.179.0/24 maxlen: 24
37.17.183.0/24 maxlen: 24
37.17.182.0/24 maxlen: 24
37.17.181.0/24 maxlen: 24
176.98.243.0/24 maxlen: 24
176.98.242.0/24 maxlen: 24
176.98.241.0/24 maxlen: 24
2.57.96.0/24 maxlen: 24
2.57.98.0/24 maxlen: 24
2.57.97.0/24 maxlen: 24
2.57.99.0/24 maxlen: 24
91.246.80.0/24 maxlen: 24
91.246.85.0/24 maxlen: 24
91.246.82.0/24 maxlen: 24
91.246.81.0/24 maxlen: 24
91.246.84.0/24 maxlen: 24
91.246.83.0/24 maxlen: 24
91.246.89.0/24 maxlen: 24
91.246.88.0/24 maxlen: 24
91.246.91.0/24 maxlen: 24
91.246.90.0/24 maxlen: 24
91.246.87.0/24 maxlen: 24
91.246.86.0/24 maxlen: 24
91.246.92.0/24 maxlen: 24
91.246.94.0/24 maxlen: 24
91.246.93.0/24 maxlen: 24
91.246.96.0/24 maxlen: 24
91.246.95.0/24 maxlen: 24
91.246.98.0/24 maxlen: 24
91.246.97.0/24 maxlen: 24
91.246.103.0/24 maxlen: 24
91.246.102.0/24 maxlen: 24
91.246.99.0/24 maxlen: 24
91.246.101.0/24 maxlen: 24
91.246.100.0/24 maxlen: 24
193.104.253.0/24 maxlen: 24
91.185.16.0/24 maxlen: 24
91.185.17.0/24 maxlen: 24
91.185.13.0/24 maxlen: 24
91.185.12.0/24 maxlen: 24
91.185.15.0/24 maxlen: 24
91.185.14.0/24 maxlen: 24
91.185.20.0/24 maxlen: 24
91.185.19.0/24 maxlen: 24
91.185.22.0/24 maxlen: 24
91.185.21.0/24 maxlen: 24
91.185.18.0/24 maxlen: 24
91.185.23.0/24 maxlen: 24
91.185.24.0/24 maxlen: 24
91.185.30.0/24 maxlen: 24
91.185.31.0/24 maxlen: 24
91.185.27.0/24 maxlen: 24
91.185.26.0/24 maxlen: 24
91.185.29.0/24 maxlen: 24
91.185.25.0/24 maxlen: 24
91.185.2.0/24 maxlen: 24
91.185.4.0/24 maxlen: 24
91.185.3.0/24 maxlen: 24
91.185.1.0/24 maxlen: 24
91.185.0.0/24 maxlen: 24
91.185.6.0/24 maxlen: 24
91.185.5.0/24 maxlen: 24
91.185.8.0/24 maxlen: 24
91.185.7.0/24 maxlen: 24
91.185.9.0/24 maxlen: 24
91.185.11.0/24 maxlen: 24
178.22.172.0/24 maxlen: 24
178.22.169.0/24 maxlen: 24
178.22.168.0/24 maxlen: 24
178.22.171.0/24 maxlen: 24
178.22.170.0/24 maxlen: 24
178.22.175.0/24 maxlen: 24
178.22.174.0/24 maxlen: 24
178.22.173.0/24 maxlen: 24
94.141.226.0/24 maxlen: 24
94.141.225.0/24 maxlen: 24
94.141.224.0/24 maxlen: 24
94.141.228.0/24 maxlen: 24
94.141.227.0/24 maxlen: 24
94.141.233.0/24 maxlen: 24
94.141.230.0/24 maxlen: 24
94.141.229.0/24 maxlen: 24
94.141.232.0/24 maxlen: 24
94.141.231.0/24 maxlen: 24
94.141.234.0/24 maxlen: 24
94.141.235.0/24 maxlen: 24
94.141.240.0/24 maxlen: 24
94.141.237.0/24 maxlen: 24
94.141.236.0/24 maxlen: 24
94.141.239.0/24 maxlen: 24
94.141.238.0/24 maxlen: 24
94.141.241.0/24 maxlen: 24
94.141.242.0/24 maxlen: 24
94.141.243.0/24 maxlen: 24
94.141.251.0/24 maxlen: 24
94.141.250.0/24 maxlen: 24
94.141.248.0/24 maxlen: 24
94.141.249.0/24 maxlen: 24
2a00:ab40:7201::/48 maxlen: 48
2a00:ab40:7301::/48 maxlen: 48
2a00:ab40:7401::/48 maxlen: 48
2a00:ab40:3000::/48 maxlen: 48
2a00:ab40:4000::/48 maxlen: 48
2a00:ab40:5000::/48 maxlen: 48
2a00:ab40:7200::/48 maxlen: 48
2a00:ab40:7300::/48 maxlen: 48
2a00:ab40:7400::/48 maxlen: 48
2a00:ab40::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:b8:4a:75:9e:c2:e1:68:e2:26:64:7a:0a:91:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
Validity
Not Before: Jan 2 06:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33820bb30a8c43a583f3fab383e7ca373ec2e4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:31:7a:10:12:80:bb:16:01:27:f2:8a:2b:e1:
c0:b7:24:e5:74:1a:4e:8c:5f:85:53:89:5d:e7:50:
97:ca:a0:ab:d3:79:24:4b:7a:54:4d:14:0e:7a:89:
f7:8f:90:03:20:a1:db:94:4a:02:6f:0c:23:da:bd:
c1:27:03:9c:6e:a6:6b:e4:9b:5a:8a:75:72:da:70:
79:47:27:aa:89:6c:d4:d3:08:4e:c8:c6:f6:2d:5d:
cd:0c:86:db:ed:ab:4a:80:ec:58:bc:fa:a5:4b:b6:
55:38:e8:50:66:28:cc:53:0a:11:a9:53:50:ad:40:
76:52:5b:0d:34:08:92:88:1e:24:92:d1:23:70:fe:
6c:16:df:97:d0:e6:b9:75:f1:95:3e:cd:dd:1b:fd:
05:a8:5d:ee:08:12:61:55:4f:00:98:25:b7:da:fa:
3e:c6:f5:27:69:13:df:b7:5f:c8:dd:b9:66:91:11:
e1:ef:ca:d7:2c:b8:b3:b6:34:25:cb:99:fb:5b:70:
07:b1:d0:4a:57:3b:89:47:0a:87:ab:0d:20:b0:7c:
c8:6c:59:a7:73:5e:dc:b0:c5:0b:80:24:16:d7:88:
38:83:58:9f:d7:38:fe:6b:04:8d:c3:3e:2e:84:29:
c3:d6:0b:f5:57:08:28:33:5a:e2:aa:cc:a2:e8:65:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:82:0B:B3:0A:8C:43:A5:83:F3:FA:B3:83:E7:CA:37:3E:C2:E4:BD
X509v3 Authority Key Identifier:
keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/M4ILswqMQ6WD8_qzg-fKNz7C5L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.96.0/22
37.17.176.0/22
37.17.181.0-37.17.183.255
37.208.40.0/21
87.255.202.0-87.255.212.255
87.255.214.0-87.255.223.255
91.185.0.0-91.185.9.255
91.185.11.0-91.185.27.255
91.185.29.0-91.185.31.255
91.246.80.0-91.246.103.255
94.141.224.0-94.141.243.255
94.141.248.0/22
176.98.224.0-176.98.243.255
178.22.168.0/21
193.104.253.0/24
IPv6:
2a00:ab40::/32
Signature Algorithm: sha256WithRSAEncryption
56:24:fe:8f:3b:b9:06:36:54:26:56:44:d4:7b:bb:67:64:7d:
20:a6:49:33:dd:ee:2b:88:e6:4a:b7:df:60:81:d7:ac:5d:ba:
b5:0c:5d:da:ef:32:20:d0:62:14:ed:33:4f:52:81:5d:c7:33:
c1:28:4d:03:b1:fa:75:d5:90:a5:21:7b:00:7b:52:82:ed:f3:
3f:7b:68:e0:66:61:c0:6e:73:5e:79:6e:9b:7b:8e:9c:c0:f5:
c2:17:c3:35:25:44:9c:4d:97:dd:8b:b6:e8:27:f3:01:ad:68:
82:70:3d:8f:54:52:64:92:ec:b6:cd:85:90:7b:6e:ab:33:b3:
7b:46:8d:e7:f8:f9:58:b7:85:f3:0e:ff:50:50:8c:b2:6c:41:
4b:2e:1b:f2:12:d4:b2:f0:be:7d:cc:8c:6e:3c:2f:42:e5:ff:
0b:38:9b:83:e7:6c:92:96:8e:2c:78:77:04:12:6c:04:ef:a8:
90:2c:e6:99:05:f7:6b:3e:d2:12:64:22:7a:8d:46:12:09:8b:
6a:a6:b4:ad:95:86:ca:ae:1c:51:6e:5c:68:d6:27:a4:46:85:
29:69:51:cd:af:7c:74:39:bb:d8:cb:6c:f5:66:9a:b0:4a:e6:
90:57:3c:f8:cc:d9:0d:bd:45:0d:0d:42:91:e8:2a:f5:27:32:
19:77:0e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:39 2025 by rpki-client