Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/TK70HSGB-BTKnIHfBPZ5CO_eQ-I.roa
File: TK70HSGB-BTKnIHfBPZ5CO_eQ-I.roa (raw, json)
Hash identifier: Zameas4bAbzCPLA3BEseUp74USvOew3vsOfaTAXg7+Y=
Subject key identifier: 4C:AE:F4:1D:21:81:F8:14:CA:9C:81:DF:04:F6:79:08:EF:DE:43:E2
Certificate issuer: /CN=17e568417f59a21129fb2487f5e57bc171631f7b
Certificate serial: 1B350E22
Authority key identifier: 17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/TK70HSGB-BTKnIHfBPZ5CO_eQ-I.roa
Signing time: Sat 01 Jan 2022 07:03:05 +0000
ROA not before: Sat 01 Jan 2022 07:03:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30873
IP address blocks: 94.26.192.0/21 maxlen: 21
94.26.200.0/21 maxlen: 21
94.26.208.0/21 maxlen: 21
94.26.216.0/21 maxlen: 21
5.100.160.0/21 maxlen: 21
109.200.160.0/21 maxlen: 21
109.200.168.0/21 maxlen: 21
109.200.176.0/21 maxlen: 21
109.200.184.0/21 maxlen: 21
5.255.0.0/21 maxlen: 21
5.255.8.0/21 maxlen: 21
5.255.16.0/21 maxlen: 21
5.255.24.0/21 maxlen: 21
80.253.176.0/21 maxlen: 21
80.253.184.0/21 maxlen: 21
188.240.96.0/21 maxlen: 21
188.240.104.0/21 maxlen: 21
185.11.8.0/22 maxlen: 22
188.240.112.0/21 maxlen: 21
188.240.120.0/21 maxlen: 21
31.31.176.0/21 maxlen: 21
31.31.184.0/21 maxlen: 21
213.246.0.0/21 maxlen: 21
213.246.8.0/21 maxlen: 21
81.91.24.0/21 maxlen: 21
213.246.16.0/21 maxlen: 21
213.246.24.0/21 maxlen: 21
78.137.72.0/21 maxlen: 21
78.137.80.0/21 maxlen: 21
78.137.88.0/21 maxlen: 21
131.117.160.0/21 maxlen: 21
134.35.152.0/21 maxlen: 21
134.35.160.0/21 maxlen: 21
134.35.168.0/21 maxlen: 21
134.35.176.0/21 maxlen: 21
134.35.184.0/21 maxlen: 21
134.35.192.0/21 maxlen: 21
134.35.96.0/21 maxlen: 21
134.35.104.0/21 maxlen: 21
134.35.112.0/21 maxlen: 21
134.35.120.0/21 maxlen: 21
176.123.16.0/21 maxlen: 21
134.35.128.0/21 maxlen: 21
176.123.24.0/21 maxlen: 21
134.35.136.0/21 maxlen: 21
134.35.144.0/21 maxlen: 21
178.130.80.0/21 maxlen: 21
110.238.32.0/21 maxlen: 21
175.110.32.0/21 maxlen: 21
178.130.88.0/21 maxlen: 21
110.238.40.0/21 maxlen: 21
175.110.40.0/21 maxlen: 21
178.130.96.0/21 maxlen: 21
178.130.104.0/21 maxlen: 21
110.238.48.0/21 maxlen: 21
175.110.48.0/21 maxlen: 21
110.238.56.0/21 maxlen: 21
175.110.56.0/21 maxlen: 21
178.130.112.0/21 maxlen: 21
178.130.120.0/21 maxlen: 21
78.137.64.0/21 maxlen: 21
134.35.200.0/21 maxlen: 21
134.35.208.0/21 maxlen: 21
134.35.216.0/21 maxlen: 21
134.35.224.0/21 maxlen: 21
175.110.0.0/21 maxlen: 21
134.35.232.0/21 maxlen: 21
175.110.8.0/21 maxlen: 21
178.130.64.0/21 maxlen: 21
175.110.16.0/21 maxlen: 21
134.35.240.0/21 maxlen: 21
175.110.24.0/21 maxlen: 21
134.35.248.0/21 maxlen: 21
178.130.72.0/21 maxlen: 21
188.209.232.0/21 maxlen: 21
188.209.240.0/21 maxlen: 21
188.209.248.0/21 maxlen: 21
188.209.224.0/21 maxlen: 21
134.35.40.0/21 maxlen: 21
134.35.48.0/21 maxlen: 21
134.35.56.0/21 maxlen: 21
46.35.64.0/21 maxlen: 21
134.35.64.0/21 maxlen: 21
134.35.72.0/21 maxlen: 21
46.35.72.0/21 maxlen: 21
46.35.80.0/21 maxlen: 21
134.35.80.0/21 maxlen: 21
46.35.88.0/21 maxlen: 21
134.35.88.0/21 maxlen: 21
134.35.0.0/21 maxlen: 21
134.35.8.0/21 maxlen: 21
134.35.16.0/21 maxlen: 21
134.35.24.0/21 maxlen: 21
134.35.32.0/21 maxlen: 21
46.161.232.0/21 maxlen: 21
46.161.240.0/21 maxlen: 21
46.161.248.0/21 maxlen: 21
109.74.32.0/21 maxlen: 21
109.74.40.0/21 maxlen: 21
82.114.160.0/21 maxlen: 21
82.114.160.0/22 maxlen: 22
82.114.164.0/22 maxlen: 22
82.114.168.0/21 maxlen: 21
82.114.176.0/21 maxlen: 21
46.161.224.0/21 maxlen: 21
82.114.184.0/21 maxlen: 21
89.189.72.0/21 maxlen: 21
89.189.80.0/21 maxlen: 21
89.189.88.0/21 maxlen: 21
89.189.64.0/21 maxlen: 21
2a02:2719::/32 maxlen: 32
2a02:271a::/32 maxlen: 32
2a02:271c::/32 maxlen: 32
2a02:271d::/32 maxlen: 32
2a02:2719:4400::/44 maxlen: 44
2a02:2719:4300::/44 maxlen: 44
2a02:2719:4100::/44 maxlen: 44
2a02:271b::/32 maxlen: 32
2a02:2719:4410::/44 maxlen: 44
2a02:2719:4310::/44 maxlen: 44
2a02:2719:4110::/44 maxlen: 44
2a02:271f::/32 maxlen: 32
2a02:2718::/32 maxlen: 32
2a02:271e::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456461858 (0x1b350e22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17e568417f59a21129fb2487f5e57bc171631f7b
Validity
Not Before: Jan 1 07:03:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4caef41d2181f814ca9c81df04f67908efde43e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d1:ec:af:89:b7:8c:ba:fb:a7:20:3f:ce:05:
57:0e:7b:29:ac:f8:79:5b:ba:83:23:ce:1e:18:61:
af:7c:76:40:a6:b3:a9:03:a0:f2:28:b5:9c:aa:c4:
a7:9b:4f:4b:5e:10:38:bb:f1:b8:6f:f3:de:5b:ce:
20:54:06:1a:da:16:f7:42:4b:2f:e5:c1:7b:63:20:
f6:ad:e4:64:76:4f:34:de:fc:8c:60:ee:68:9e:8c:
84:90:9e:7f:de:78:37:ec:7d:32:28:b6:0d:66:34:
a0:6f:ad:4f:65:4d:38:ef:af:60:56:0e:73:90:0b:
1c:a9:44:8f:fd:43:9f:65:6b:57:b1:7a:b1:1c:f4:
e8:76:79:80:b6:6f:d2:3f:2c:e3:26:5d:e9:86:43:
b1:26:b5:3d:69:64:c7:c2:c3:b2:4a:78:af:da:00:
45:6c:12:10:44:bf:28:1c:a2:c9:c6:fe:c1:fb:99:
48:bb:ad:4e:4c:c7:d1:d9:4e:d0:cf:a7:c2:33:ba:
b4:4f:cd:3a:c4:77:40:e9:52:17:b2:87:32:8e:73:
d6:4b:55:56:10:81:6a:df:27:41:a4:f6:5e:66:b3:
cf:ac:6a:ce:82:28:2e:64:b1:c1:bb:b2:97:cf:29:
27:b8:c6:fa:f4:6e:21:6d:17:d1:a1:4a:48:1c:f8:
9d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AE:F4:1D:21:81:F8:14:CA:9C:81:DF:04:F6:79:08:EF:DE:43:E2
X509v3 Authority Key Identifier:
keyid:17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/TK70HSGB-BTKnIHfBPZ5CO_eQ-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.160.0/21
5.255.0.0/19
31.31.176.0/20
46.35.64.0/19
46.161.224.0/19
78.137.64.0/19
80.253.176.0/20
81.91.24.0/21
82.114.160.0/19
89.189.64.0/19
94.26.192.0/19
109.74.32.0/20
109.200.160.0/19
110.238.32.0/19
131.117.160.0/21
134.35.0.0/16
175.110.0.0/18
176.123.16.0/20
178.130.64.0/18
185.11.8.0/22
188.209.224.0/19
188.240.96.0/19
213.246.0.0/19
IPv6:
2a02:2718::/29
Signature Algorithm: sha256WithRSAEncryption
22:bd:81:74:6e:bc:4d:ed:4d:87:41:fc:28:41:08:bb:b7:0f:
54:78:e7:44:aa:f7:b4:a6:ad:7c:79:86:96:4d:16:9d:91:15:
ac:96:e1:6a:b4:da:80:bb:99:c6:a5:71:af:66:f3:98:db:dc:
5c:87:f9:c1:81:d0:2e:b0:16:a8:2f:b3:b8:ae:5e:47:f9:12:
52:08:63:78:8e:cc:a8:42:47:8c:c2:aa:8f:9f:f1:ed:16:30:
5e:c7:c4:4c:bc:9b:dd:1d:60:d8:d6:74:f2:45:e4:15:3a:27:
82:c5:43:fe:1b:48:e2:a6:2b:98:dc:3d:4b:d6:ef:08:85:01:
5b:cc:af:14:dd:25:de:b7:ff:5a:30:c3:e3:5a:e1:ab:aa:57:
ce:86:c2:cb:00:6d:a8:3e:42:fb:21:67:b1:bf:2a:31:fd:81:
93:0f:3a:5d:79:3d:30:1f:2f:6f:8b:28:8b:b8:9f:ba:1a:d0:
fb:2a:ca:db:5e:da:40:96:15:7f:1b:54:7c:f6:df:8c:bc:b5:
f1:61:6f:88:86:7a:c0:56:7d:36:93:ca:42:f6:6d:dd:9c:12:
85:91:81:eb:c2:72:23:5a:0b:2e:cb:54:08:45:43:fb:8c:c0:
b8:ef:3f:83:6b:7c:86:4f:9f:56:92:d4:da:3e:08:b2:19:0e:
83:7b:3b:20
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgIEGzUOIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
N2U1Njg0MTdmNTlhMjExMjlmYjI0ODdmNWU1N2JjMTcxNjMxZjdiMB4XDTIyMDEw
MTA3MDMwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGNhZWY0MWQyMTgx
ZjgxNGNhOWM4MWRmMDRmNjc5MDhlZmRlNDNlMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANrR7K+Jt4y6+6cgP84FVw57Kaz4eVu6gyPOHhhhr3x2QKaz
qQOg8ii1nKrEp5tPS14QOLvxuG/z3lvOIFQGGtoW90JLL+XBe2Mg9q3kZHZPNN78
jGDuaJ6MhJCef954N+x9Mii2DWY0oG+tT2VNOO+vYFYOc5ALHKlEj/1Dn2VrV7F6
sRz06HZ5gLZv0j8s4yZd6YZDsSa1PWlkx8LDskp4r9oARWwSEES/KByiycb+wfuZ
SLutTkzH0dlO0M+nwjO6tE/NOsR3QOlSF7KHMo5z1ktVVhCBat8nQaT2Xmazz6xq
zoIoLmSxwbuyl88pJ7jG+vRuIW0X0aFKSBz4nbECAwEAAaOCAqAwggKcMB0GA1Ud
DgQWBBRMrvQdIYH4FMqcgd8E9nkI795D4jAfBgNVHSMEGDAWgBQX5WhBf1miESn7
JIf15XvBcWMfezAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0YtVm9RWDlab2hFcC15U0g5ZVY3d1hGakgzcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjcvMDAxNDRmLTg1ZjMtNDU1Ny1iMWQ2LTllM2U5YWFmYmNlNC8x
L1RLNzBIU0dCLUJUS25JSGZCUFo1Q09fZVEtSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcv
MDAxNDRmLTg1ZjMtNDU1Ny1iMWQ2LTllM2U5YWFmYmNlNC8xL0YtVm9RWDlab2hF
cC15U0g5ZVY3d1hGakgzcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
tQYIKwYBBQUHAQcBAf8EgaUwgaIwgZAEAgABMIGJAwQDBWSgAwQFBf8AAwQEHx+w
AwQFLiNAAwQFLqHgAwQFTolAAwQEUP2wAwQDUVsYAwQFUnKgAwQFWb1AAwQFXhrA
AwQEbUogAwQFbcigAwQFbu4gAwQDg3WgAwMAhiMDBAavbgADBASwexADBAaygkAD
BAK5CwgDBAW80eADBAW88GADBAXV9gAwDQQCAAIwBwMFAyoCJxgwDQYJKoZIhvcN
AQELBQADggEBACK9gXRuvE3tTYdB/ChBCLu3D1R450Sq97SmrXx5hpZNFp2RFayW
4Wq02oC7mcalca9m85jb3FyH+cGB0C6wFqgvs7iuXkf5ElIIY3iOzKhCR4zCqo+f
8e0WMF7HxEy8m90dYNjWdPJF5BU6J4LFQ/4bSOKmK5jcPUvW7wiFAVvMrxTdJd63
/1oww+Na4auqV86GwssAbag+QvshZ7G/KjH9gZMPOl15PTAfL2+LKIu4n7oa0Psq
ytte2kCWFX8bVHz234y8tfFhb4iGesBWfTaTykL2bd2cEoWRgevCciNaCy7LVAhF
Q/uMwLjvP4NrfIZPn1aS1No+CLIZDoN7OyA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:23 2024 by rpki-client on console-ams.rpki-client.org