Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/AbRWZvQftMcc4FbhnW4HAhiWnoA.roa
File: AbRWZvQftMcc4FbhnW4HAhiWnoA.roa (raw, json)
Hash identifier: NvYtyIAn92eQSH3+kJJeuIdA2Y7+LQfShxUu5aTkVnQ=
Subject key identifier: 01:B4:56:66:F4:1F:B4:C7:1C:E0:56:E1:9D:6E:07:02:18:96:9E:80
Certificate issuer: /CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Certificate serial: 01847B99BEFFB46FD3910C2F905F1D344993
Authority key identifier: 17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/AbRWZvQftMcc4FbhnW4HAhiWnoA.roa
Signing time: Tue 15 Nov 2022 14:03:04 +0000
ROA not before: Tue 15 Nov 2022 14:03:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15685
IP address blocks: 82.208.56.0/24 maxlen: 24
82.208.58.0/24 maxlen: 24
82.208.60.0/24 maxlen: 24
82.208.60.0/22 maxlen: 22
109.123.202.0/23 maxlen: 24
109.123.205.0/24 maxlen: 24
82.208.4.0/22 maxlen: 22
109.123.206.0/23 maxlen: 24
82.208.8.0/22 maxlen: 22
109.123.209.0/24 maxlen: 24
109.123.208.0/22 maxlen: 24
82.208.14.0/24 maxlen: 24
109.123.217.0/24 maxlen: 24
109.123.216.0/21 maxlen: 24
109.123.218.0/24 maxlen: 24
109.123.219.0/24 maxlen: 24
109.123.214.0/23 maxlen: 24
109.123.216.0/24 maxlen: 24
82.208.16.0/23 maxlen: 23
82.208.17.0/24 maxlen: 24
82.208.12.0/24 maxlen: 24
82.208.16.0/24 maxlen: 24
82.208.18.0/24 maxlen: 24
109.123.222.0/24 maxlen: 24
109.123.221.0/24 maxlen: 24
82.208.28.0/23 maxlen: 23
82.208.26.0/23 maxlen: 23
82.208.32.0/22 maxlen: 22
82.208.44.0/24 maxlen: 24
82.208.39.0/24 maxlen: 24
82.208.40.0/23 maxlen: 23
82.208.50.0/24 maxlen: 24
82.208.46.0/23 maxlen: 23
82.208.48.0/23 maxlen: 23
217.11.254.0/24 maxlen: 24
217.11.224.0/23 maxlen: 23
217.11.230.0/24 maxlen: 24
217.11.232.0/23 maxlen: 23
217.11.227.0/24 maxlen: 24
217.11.228.0/23 maxlen: 23
217.11.236.0/24 maxlen: 24
217.11.235.0/24 maxlen: 24
217.11.245.0/24 maxlen: 24
217.11.246.0/23 maxlen: 23
217.11.242.0/23 maxlen: 23
217.11.251.0/24 maxlen: 24
217.11.248.0/23 maxlen: 23
217.11.249.0/24 maxlen: 24
109.123.192.0/21 maxlen: 24
81.0.217.0/24 maxlen: 24
81.0.214.0/24 maxlen: 24
81.0.226.0/24 maxlen: 24
81.0.225.0/24 maxlen: 24
81.0.230.0/23 maxlen: 23
77.78.96.0/20 maxlen: 20
81.0.232.0/21 maxlen: 21
77.78.94.0/23 maxlen: 23
81.0.228.0/24 maxlen: 24
81.0.240.0/22 maxlen: 22
77.78.112.0/21 maxlen: 21
81.0.250.0/24 maxlen: 24
77.78.123.0/24 maxlen: 24
77.78.124.0/22 maxlen: 22
81.0.254.0/23 maxlen: 23
85.239.227.0/24 maxlen: 24
81.0.192.0/22 maxlen: 22
81.0.199.0/24 maxlen: 24
81.0.206.0/23 maxlen: 23
77.78.76.0/22 maxlen: 22
85.239.252.0/23 maxlen: 23
81.0.208.0/23 maxlen: 23
81.0.212.0/23 maxlen: 23
2001:1528::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7b:99:be:ff:b4:6f:d3:91:0c:2f:90:5f:1d:34:49:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Validity
Not Before: Nov 15 14:03:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01b45666f41fb4c71ce056e19d6e070218969e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:06:91:78:d2:0e:cb:c5:36:01:f4:e0:8e:50:
05:61:82:f5:58:67:f7:7a:c6:c0:f2:a1:99:a0:4c:
4d:46:36:c7:59:7f:95:64:9f:22:e2:6e:a8:6b:6e:
a2:22:11:b4:77:fb:08:cc:92:41:e4:2c:3d:e6:6b:
55:c1:a7:7f:b1:84:e1:b9:57:dd:0a:47:81:19:a4:
e8:07:de:e8:38:20:b6:c3:ce:2b:7a:f2:9a:88:8e:
a5:97:d1:4f:3c:7f:e9:37:f0:89:ac:20:4f:a6:d7:
04:a8:96:6a:93:96:ee:38:73:00:86:5c:c2:36:e6:
ed:15:88:7d:77:f5:f5:68:bb:32:8b:82:6b:28:f8:
7b:94:e2:d9:60:1b:de:95:5a:7a:0b:fc:5e:2f:53:
f3:95:6d:fc:39:80:db:8c:78:d6:08:23:1e:6b:d6:
5f:50:25:1b:54:ad:af:21:d9:91:68:c5:fa:48:3b:
7a:35:f0:c4:8d:3b:92:74:b2:5b:a2:c6:bc:aa:1a:
bd:ff:01:25:ce:9f:5c:65:75:ed:9e:53:ed:94:e3:
c0:ca:1d:ef:16:a6:ca:69:35:cc:fd:ba:d2:c7:1b:
93:a1:6d:2a:6b:83:70:1b:15:40:74:f6:81:ea:e5:
59:42:b0:14:5c:25:cb:4d:98:b5:a4:51:c4:0f:76:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B4:56:66:F4:1F:B4:C7:1C:E0:56:E1:9D:6E:07:02:18:96:9E:80
X509v3 Authority Key Identifier:
keyid:17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/AbRWZvQftMcc4FbhnW4HAhiWnoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.76.0/22
77.78.94.0-77.78.119.255
77.78.123.0-77.78.127.255
81.0.192.0/22
81.0.199.0/24
81.0.206.0-81.0.209.255
81.0.212.0-81.0.214.255
81.0.217.0/24
81.0.225.0-81.0.226.255
81.0.228.0/24
81.0.230.0-81.0.243.255
81.0.250.0/24
81.0.254.0/23
82.208.4.0-82.208.12.255
82.208.14.0/24
82.208.16.0-82.208.18.255
82.208.26.0-82.208.29.255
82.208.32.0/22
82.208.39.0-82.208.41.255
82.208.44.0/24
82.208.46.0-82.208.50.255
82.208.56.0/24
82.208.58.0/24
82.208.60.0/22
85.239.227.0/24
85.239.252.0/23
109.123.192.0/21
109.123.202.0/23
109.123.205.0-109.123.211.255
109.123.214.0-109.123.223.255
217.11.224.0/23
217.11.227.0-217.11.230.255
217.11.232.0/23
217.11.235.0-217.11.236.255
217.11.242.0/23
217.11.245.0-217.11.249.255
217.11.251.0/24
217.11.254.0/24
IPv6:
2001:1528::/32
Signature Algorithm: sha256WithRSAEncryption
33:4e:40:3a:bc:83:ec:8b:fe:10:d9:db:19:ca:27:b7:26:0d:
7f:31:73:c6:d9:fc:ce:7e:f1:a9:c6:44:2c:79:5c:81:98:7c:
e2:75:06:9d:dc:4f:7e:e0:9a:c9:33:bd:3b:92:ab:59:2c:87:
d4:fe:05:a7:8e:0d:7e:dc:40:f6:3e:1a:ee:9e:18:cc:84:7d:
ac:bd:ae:3c:c2:08:c9:00:a1:85:06:9c:f5:e3:c7:24:f4:aa:
a7:9c:87:cd:ab:1a:c4:0e:fa:35:10:a2:1d:fa:df:fb:5d:e4:
75:1a:56:d5:3d:49:9f:9a:1c:4b:1e:7a:62:a7:f2:ac:7a:c9:
b4:cf:b1:e1:58:96:0e:82:4f:1e:a1:fe:ad:68:6e:fc:56:b5:
42:66:7b:65:82:04:94:7a:cd:02:68:72:7a:52:aa:bf:cc:9d:
89:f9:b8:13:65:35:2c:2d:f0:3d:88:f8:00:ca:b9:00:f1:52:
d8:da:90:88:ea:aa:5f:8b:21:4b:e6:fa:7d:0c:d1:db:61:b7:
f4:b5:c2:9b:76:ff:e6:e5:1f:b1:0c:25:c9:ed:87:3f:5a:35:
8d:68:32:74:2e:60:b0:5c:dc:36:56:d6:7f:a0:e5:63:27:e4:
bd:5d:d6:64:01:4d:bb:9d:b1:42:8b:0d:d2:93:9e:f2:16:bc:
69:60:ee:f4
-----BEGIN CERTIFICATE-----
MIIGdDCCBVygAwIBAgISAYR7mb7/tG/TkQwvkF8dNEmTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NDg0N2Y4NjY3ZDUyZmEyY2Y5Y2Y5YWZjYzQzYTA3OTE1
NTc1Y2EwHhcNMjIxMTE1MTQwMzA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWI0NTY2NmY0MWZiNGM3MWNlMDU2ZTE5ZDZlMDcwMjE4OTY5ZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwaReNIOy8U2AfTgjlAFYYL1WGf3
esbA8qGZoExNRjbHWX+VZJ8i4m6oa26iIhG0d/sIzJJB5Cw95mtVwad/sYThuVfd
CkeBGaToB97oOCC2w84revKaiI6ll9FPPH/pN/CJrCBPptcEqJZqk5buOHMAhlzC
NubtFYh9d/X1aLsyi4JrKPh7lOLZYBvelVp6C/xeL1PzlW38OYDbjHjWCCMea9Zf
UCUbVK2vIdmRaMX6SDt6NfDEjTuSdLJbosa8qhq9/wElzp9cZXXtnlPtlOPAyh3v
FqbKaTXM/brSxxuToW0qa4NwGxVAdPaB6uVZQrAUXCXLTZi1pFHED3Yk/QIDAQAB
o4IDgDCCA3wwHQYDVR0OBBYEFAG0Vmb0H7THHOBW4Z1uBwIYlp6AMB8GA1UdIwQY
MBaAFBdIR/hmfVL6LPnPmvzEOgeRVXXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjBoSC1HWjlVdm9zLWMtYV9NUTZCNUZWZGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83MmNjNGEtMmQ5Yy00ODA4LTgyM2Ut
MTQ1NGZmZTYxODJjLzEvQWJSV1p2UWZ0TWNjNEZiaG5XNEhBaGlXbm9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83MmNjNGEtMmQ5Yy00ODA4LTgyM2UtMTQ1NGZmZTYxODJj
LzEvRjBoSC1HWjlVdm9zLWMtYV9NUTZCNUZWZGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBlAYIKwYBBQUHAQcBAf8EggGDMIIBfzCCAWwEAgABMIIB
ZAMEAk1OTDAMAwQBTU5eAwQDTU5wMAwDBABNTnsDBAdNTgADBAJRAMADBABRAMcw
DAMEAVEAzgMEAVEA0DAMAwQCUQDUAwQAUQDWAwQAUQDZMAwDBABRAOEDBABRAOID
BABRAOQwDAMEAVEA5gMEAlEA8AMEAFEA+gMEAVEA/jAMAwQCUtAEAwQAUtAMAwQA
UtAOMAwDBARS0BADBABS0BIwDAMEAVLQGgMEAVLQHAMEAlLQIDAMAwQAUtAnAwQB
UtAoAwQAUtAsMAwDBAFS0C4DBABS0DIDBABS0DgDBABS0DoDBAJS0DwDBABV7+MD
BAFV7/wDBANte8ADBAFte8owDAMEAG17zQMEAm170DAMAwQBbXvWAwQFbXvAAwQB
2QvgMAwDBADZC+MDBADZC+YDBAHZC+gwDAMEANkL6wMEANkL7AMEAdkL8jAMAwQA
2Qv1AwQB2Qv4AwQA2Qv7AwQA2Qv+MA0EAgACMAcDBQAgARUoMA0GCSqGSIb3DQEB
CwUAA4IBAQAzTkA6vIPsi/4Q2dsZyie3Jg1/MXPG2fzOfvGpxkQseVyBmHzidQad
3E9+4JrJM707kqtZLIfU/gWnjg1+3ED2PhrunhjMhH2sva48wgjJAKGFBpz148ck
9KqnnIfNqxrEDvo1EKId+t/7XeR1GlbVPUmfmhxLHnpip/Ksesm0z7HhWJYOgk8e
of6taG78VrVCZntlggSUes0CaHJ6Uqq/zJ2J+bgTZTUsLfA9iPgAyrkA8VLY2pCI
6qpfiyFL5vp9DNHbYbf0tcKbdv/m5R+xDCXJ7Yc/WjWNaDJ0LmCwXNw2VtZ/oOVj
J+S9XdZkAU27nbFCiw3Sk57yFrxpYO70
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:04 2023 by rpki-client on console-fra.rpki-client.org