Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/1JsnoWdlVwa7Bp345sG9uqaiCyc.roa
File: 1JsnoWdlVwa7Bp345sG9uqaiCyc.roa (raw, json)
Hash identifier: vZVZ9w1UAcAQupq2UY1jT1S3qLI27hteQ/8sQ3S6UiA=
Subject key identifier: D4:9B:27:A1:67:65:57:06:BB:06:9D:F8:E6:C1:BD:BA:A6:A2:0B:27
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0187BD4B4E6A1895634CBB0A2553A6C85005
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/1JsnoWdlVwa7Bp345sG9uqaiCyc.roa
Signing time: Wed 26 Apr 2023 11:20:41 +0000
ROA not before: Wed 26 Apr 2023 11:20:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212046
IP address blocks: 84.46.160.0/21 maxlen: 21
84.46.172.0/22 maxlen: 22
84.46.168.0/23 maxlen: 23
84.46.176.0/20 maxlen: 20
82.140.160.0/20 maxlen: 20
82.140.176.0/23 maxlen: 23
82.140.177.0/24 maxlen: 24
82.140.179.0/24 maxlen: 24
82.140.184.0/22 maxlen: 22
82.140.180.0/23 maxlen: 23
82.140.190.0/23 maxlen: 23
82.140.188.0/24 maxlen: 24
84.46.128.0/19 maxlen: 19
84.46.192.0/21 maxlen: 21
84.46.202.0/23 maxlen: 23
84.46.204.0/22 maxlen: 22
84.46.201.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.208.0/20 maxlen: 20
84.46.207.0/24 maxlen: 24
84.46.224.0/21 maxlen: 21
84.46.232.0/23 maxlen: 23
86.38.244.0/23 maxlen: 23
86.38.191.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.192.0/21 maxlen: 21
86.38.201.0/24 maxlen: 24
86.38.206.0/23 maxlen: 23
86.38.212.0/23 maxlen: 23
86.38.208.0/22 maxlen: 22
86.38.215.0/24 maxlen: 24
86.38.222.0/23 maxlen: 23
86.38.224.0/24 maxlen: 24
86.38.222.0/24 maxlen: 24
86.38.228.0/22 maxlen: 22
86.38.233.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.227.0/24 maxlen: 24
86.38.236.0/23 maxlen: 23
86.38.240.0/24 maxlen: 24
86.38.239.0/24 maxlen: 24
86.38.236.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
82.140.130.0/24 maxlen: 24
82.140.132.0/22 maxlen: 22
82.140.128.0/23 maxlen: 23
82.140.136.0/21 maxlen: 21
82.140.144.0/20 maxlen: 20
82.140.159.0/24 maxlen: 24
86.38.28.0/22 maxlen: 22
86.38.26.0/23 maxlen: 23
86.38.26.0/24 maxlen: 24
86.38.25.0/24 maxlen: 24
86.38.34.0/23 maxlen: 23
86.38.36.0/24 maxlen: 24
86.38.33.0/24 maxlen: 24
86.38.40.0/21 maxlen: 21
86.38.38.0/23 maxlen: 23
86.38.48.0/20 maxlen: 20
86.38.64.0/18 maxlen: 18
86.38.73.0/24 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.0.0/23 maxlen: 23
86.38.2.0/24 maxlen: 24
86.38.6.0/24 maxlen: 24
86.38.16.0/21 maxlen: 21
86.38.144.0/22 maxlen: 22
86.38.152.0/22 maxlen: 22
86.38.148.0/23 maxlen: 23
86.38.152.0/24 maxlen: 24
86.38.150.0/24 maxlen: 24
86.38.158.0/23 maxlen: 23
86.38.157.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.160.0/21 maxlen: 21
86.38.160.0/24 maxlen: 24
86.38.168.0/22 maxlen: 22
86.38.172.0/23 maxlen: 23
86.38.176.0/24 maxlen: 24
86.38.174.0/24 maxlen: 24
86.38.128.0/20 maxlen: 20
86.38.129.0/24 maxlen: 24
86.38.128.0/24 maxlen: 24
86.38.130.0/24 maxlen: 24
89.117.232.0/21 maxlen: 21
89.117.240.0/24 maxlen: 24
89.117.240.0/22 maxlen: 22
89.117.242.0/24 maxlen: 24
89.117.241.0/24 maxlen: 24
89.117.252.0/23 maxlen: 23
89.117.248.0/23 maxlen: 23
89.117.253.0/24 maxlen: 24
89.117.252.0/24 maxlen: 24
89.117.251.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.248.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.86.0/24 maxlen: 24
89.117.92.0/23 maxlen: 23
89.117.100.0/24 maxlen: 24
89.117.110.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.39.0/24 maxlen: 24
89.117.176.0/21 maxlen: 21
89.117.184.0/22 maxlen: 22
217.9.240.0/24 maxlen: 24
217.9.244.0/22 maxlen: 22
89.117.192.0/20 maxlen: 20
217.9.243.0/24 maxlen: 24
217.9.248.0/22 maxlen: 22
217.9.252.0/23 maxlen: 23
89.117.208.0/22 maxlen: 22
89.117.212.0/23 maxlen: 23
89.117.214.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.224.0/23 maxlen: 23
89.117.220.0/23 maxlen: 23
89.117.125.0/24 maxlen: 24
89.117.119.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.140.0/23 maxlen: 23
89.117.166.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.170.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.57.0/24 maxlen: 24
89.116.55.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.79.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.94.0/23 maxlen: 23
89.116.98.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.195.0/24 maxlen: 24
89.116.0.0/24 maxlen: 24
89.116.14.0/24 maxlen: 24
89.116.18.0/24 maxlen: 24
89.116.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:4b:4e:6a:18:95:63:4c:bb:0a:25:53:a6:c8:50:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Apr 26 11:20:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d49b27a167655706bb069df8e6c1bdbaa6a20b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fc:e3:16:1f:22:aa:63:c5:8e:9a:0c:0b:24:
80:95:29:d2:05:30:01:64:04:56:9c:75:f9:db:0e:
fd:b9:a7:fd:39:e4:de:37:bc:25:d2:16:e2:b9:97:
4f:03:87:08:7a:e6:75:e7:10:b7:eb:a5:6f:64:e9:
5f:8d:64:82:29:80:19:d5:7c:a2:7d:11:f1:3d:db:
0f:3e:87:f9:5f:da:b9:1c:c7:d9:ef:99:f7:6c:a5:
44:1b:51:27:f7:99:08:ba:ca:7d:49:12:f9:65:b0:
b4:b6:91:a7:e6:9e:82:4d:07:9c:5b:e7:f5:61:b4:
9c:41:b5:14:bc:fc:45:73:85:b9:6a:9e:a3:3e:77:
bf:05:03:f4:69:eb:48:a7:da:4a:71:b3:79:58:7e:
33:b9:97:2e:f9:20:85:85:03:d8:4e:28:cc:d0:62:
88:52:d1:84:44:3b:dc:78:f5:db:aa:c0:11:79:2f:
e8:c1:1c:21:f7:28:1b:a4:8b:dc:8f:c4:ec:bb:8f:
70:b1:50:18:84:e4:28:03:46:ea:d6:1d:f8:c5:5b:
e6:bb:9d:07:32:64:5a:e9:0d:2b:71:5a:4f:a6:4d:
67:e1:76:6d:7d:6f:e7:62:63:37:44:7c:e7:bd:96:
dc:0b:01:b2:45:cd:6e:08:02:45:82:d2:fc:46:33:
8c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9B:27:A1:67:65:57:06:BB:06:9D:F8:E6:C1:BD:BA:A6:A2:0B:27
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/1JsnoWdlVwa7Bp345sG9uqaiCyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.128.0-82.140.130.255
82.140.132.0-82.140.177.255
82.140.179.0-82.140.181.255
82.140.184.0-82.140.188.255
82.140.190.0/23
84.46.128.0-84.46.169.255
84.46.172.0-84.46.199.255
84.46.201.0-84.46.233.255
86.38.0.0-86.38.2.255
86.38.6.0/24
86.38.16.0/21
86.38.25.0-86.38.31.255
86.38.33.0-86.38.36.255
86.38.38.0-86.38.150.255
86.38.152.0/22
86.38.157.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.191.0-86.38.199.255
86.38.201.0/24
86.38.206.0-86.38.213.255
86.38.215.0/24
86.38.222.0-86.38.224.255
86.38.227.0-86.38.231.255
86.38.233.0-86.38.234.255
86.38.236.0/23
86.38.239.0-86.38.240.255
86.38.244.0/23
89.116.0.0/24
89.116.14.0/24
89.116.18.0/24
89.116.40.0/24
89.116.55.0/24
89.116.57.0/24
89.116.71.0/24
89.116.77.0-89.116.79.255
89.116.90.0/24
89.116.93.0-89.116.95.255
89.116.97.0-89.116.98.255
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.195.0/24
89.116.232.0/24
89.116.235.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.39.0/24
89.117.69.0/24
89.117.86.0/24
89.117.92.0/23
89.117.100.0/24
89.117.108.0/24
89.117.110.0/24
89.117.119.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/23
89.117.165.0-89.117.166.255
89.117.170.0/24
89.117.176.0-89.117.187.255
89.117.192.0-89.117.214.255
89.117.219.0-89.117.221.255
89.117.223.0-89.117.225.255
89.117.232.0-89.117.243.255
89.117.247.0-89.117.249.255
89.117.251.0-89.117.253.255
217.9.240.0/24
217.9.243.0-217.9.253.255
Signature Algorithm: sha256WithRSAEncryption
47:bd:86:fa:5d:3e:3e:f1:f3:47:cb:76:6c:47:5a:9f:82:3c:
13:7c:cd:89:62:8e:8c:7e:84:d3:31:53:9c:59:c6:6e:4c:43:
f3:71:02:71:b1:99:e0:1e:b0:f1:20:1c:a9:2d:53:77:78:ec:
68:6f:59:ee:14:ea:d0:cb:49:63:75:4a:b7:ee:39:65:ce:20:
6c:98:ed:70:03:41:de:28:e9:70:de:61:00:9e:1a:44:f1:ed:
e1:36:66:51:d7:af:2a:38:64:7c:bf:d7:f9:76:41:65:9d:dd:
2f:9a:79:95:b5:6f:8d:81:45:1c:a8:43:d4:8a:46:94:71:bd:
07:5c:42:3d:92:be:b9:25:16:90:bf:92:9d:41:a5:7c:c1:4d:
88:62:f5:99:0b:e3:9f:e4:33:2b:64:cb:9f:aa:8a:7f:cd:05:
a8:a7:39:22:af:c2:e5:86:1f:44:af:d6:0d:21:31:69:63:03:
8d:d9:2c:72:25:b2:b6:8a:73:17:f6:6b:8f:3f:95:e7:bb:05:
f7:e9:53:d6:3d:a7:d8:55:2b:0a:45:a9:07:e0:39:45:54:d8:
68:80:07:b0:c8:a0:d8:4c:f7:29:b4:2c:e9:7a:7c:fa:02:3e:
7b:7d:91:7e:8d:3a:ab:82:a5:1b:4e:78:0b:f6:00:27:4f:29:
f7:62:56:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:27 2025 by rpki-client