Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/K5cOb92jHcgfd2zV9viLGyjzIA0.roa
File: K5cOb92jHcgfd2zV9viLGyjzIA0.roa (raw, json)
Hash identifier: fV5k/Xkxs3hBqQ/Oz7i8BF9baTBfzBwjWQ6hm+YjfRk=
Subject key identifier: 2B:97:0E:6F:DD:A3:1D:C8:1F:77:6C:D5:F6:F8:8B:1B:28:F3:20:0D
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018BDD96FBD8129EF9751FB7AC49B096083C
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/K5cOb92jHcgfd2zV9viLGyjzIA0.roa
Signing time: Fri 17 Nov 2023 14:02:21 +0000
ROA not before: Fri 17 Nov 2023 14:02:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212046
IP address blocks: 84.46.160.0/21 maxlen: 21
84.46.172.0/22 maxlen: 22
84.46.168.0/23 maxlen: 23
84.46.176.0/20 maxlen: 20
82.140.160.0/20 maxlen: 20
82.140.176.0/23 maxlen: 23
82.140.177.0/24 maxlen: 24
82.140.179.0/24 maxlen: 24
82.140.184.0/22 maxlen: 22
82.140.180.0/23 maxlen: 23
82.140.190.0/23 maxlen: 23
82.140.188.0/24 maxlen: 24
84.46.128.0/19 maxlen: 19
84.46.192.0/21 maxlen: 21
84.46.202.0/23 maxlen: 23
84.46.204.0/22 maxlen: 22
84.46.201.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.208.0/20 maxlen: 20
84.46.207.0/24 maxlen: 24
84.46.224.0/21 maxlen: 21
84.46.232.0/23 maxlen: 23
86.38.244.0/23 maxlen: 23
86.38.191.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.192.0/21 maxlen: 21
86.38.201.0/24 maxlen: 24
86.38.206.0/23 maxlen: 23
86.38.212.0/23 maxlen: 23
86.38.208.0/22 maxlen: 22
86.38.215.0/24 maxlen: 24
86.38.222.0/23 maxlen: 23
86.38.224.0/24 maxlen: 24
86.38.222.0/24 maxlen: 24
86.38.228.0/22 maxlen: 22
86.38.233.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.229.0/24 maxlen: 24
86.38.227.0/24 maxlen: 24
86.38.236.0/23 maxlen: 23
86.38.240.0/24 maxlen: 24
86.38.239.0/24 maxlen: 24
86.38.236.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
82.140.130.0/24 maxlen: 24
82.140.132.0/22 maxlen: 22
82.140.128.0/23 maxlen: 23
82.140.136.0/21 maxlen: 21
82.140.144.0/20 maxlen: 20
82.140.159.0/24 maxlen: 24
86.38.28.0/22 maxlen: 22
86.38.26.0/23 maxlen: 23
86.38.26.0/24 maxlen: 24
86.38.25.0/24 maxlen: 24
86.38.34.0/23 maxlen: 23
86.38.36.0/24 maxlen: 24
86.38.33.0/24 maxlen: 24
86.38.40.0/21 maxlen: 21
86.38.38.0/23 maxlen: 23
86.38.48.0/20 maxlen: 20
86.38.64.0/18 maxlen: 18
86.38.73.0/24 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.0.0/23 maxlen: 23
86.38.2.0/24 maxlen: 24
86.38.6.0/24 maxlen: 24
86.38.16.0/21 maxlen: 21
86.38.144.0/22 maxlen: 22
86.38.144.0/24 maxlen: 24
86.38.152.0/22 maxlen: 22
86.38.148.0/23 maxlen: 23
86.38.146.0/23 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.150.0/24 maxlen: 24
86.38.158.0/23 maxlen: 23
86.38.157.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.160.0/21 maxlen: 21
86.38.160.0/24 maxlen: 24
86.38.168.0/22 maxlen: 22
86.38.172.0/23 maxlen: 23
86.38.176.0/24 maxlen: 24
86.38.174.0/24 maxlen: 24
86.38.128.0/20 maxlen: 20
86.38.129.0/24 maxlen: 24
86.38.128.0/24 maxlen: 24
86.38.130.0/24 maxlen: 24
89.117.232.0/21 maxlen: 21
89.117.240.0/22 maxlen: 22
89.117.248.0/23 maxlen: 23
89.117.253.0/24 maxlen: 24
89.117.251.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.248.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.86.0/24 maxlen: 24
89.117.92.0/23 maxlen: 23
89.117.100.0/24 maxlen: 24
89.117.110.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.39.0/24 maxlen: 24
89.117.176.0/21 maxlen: 21
89.117.184.0/22 maxlen: 22
217.9.240.0/24 maxlen: 24
217.9.244.0/23 maxlen: 24
217.9.244.0/22 maxlen: 22
89.117.192.0/20 maxlen: 20
217.9.243.0/24 maxlen: 24
217.9.247.0/24 maxlen: 24
217.9.248.0/22 maxlen: 22
217.9.252.0/23 maxlen: 23
89.117.213.0/24 maxlen: 24
89.117.208.0/22 maxlen: 22
89.117.212.0/23 maxlen: 23
89.117.214.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.224.0/23 maxlen: 23
89.117.220.0/23 maxlen: 23
89.117.125.0/24 maxlen: 24
89.117.119.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.140.0/23 maxlen: 23
89.117.166.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.170.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.57.0/24 maxlen: 24
89.116.55.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.79.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.94.0/23 maxlen: 23
89.116.98.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.195.0/24 maxlen: 24
89.116.0.0/24 maxlen: 24
89.116.14.0/24 maxlen: 24
89.116.18.0/24 maxlen: 24
89.116.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:96:fb:d8:12:9e:f9:75:1f:b7:ac:49:b0:96:08:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Nov 17 14:02:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b970e6fdda31dc81f776cd5f6f88b1b28f3200d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:17:4f:8d:74:6e:ef:a1:1a:c0:1a:b9:49:f5:
c9:6e:74:a8:59:93:61:c9:6a:de:1b:21:47:3c:70:
fc:7e:b8:42:e7:7f:66:56:8f:52:c4:e1:91:e6:28:
5c:1e:b2:1f:4f:d0:7f:b0:fd:81:92:e3:b1:5d:e9:
79:de:03:61:1f:62:19:db:e6:8e:ff:83:9e:7e:37:
56:a7:ed:fd:ec:21:93:67:4c:b1:70:be:c3:87:ca:
48:77:31:66:fc:26:bf:d4:7d:8e:71:e0:5b:8d:e0:
5b:d0:9e:ee:2f:ae:c2:0b:1d:ed:13:12:d1:ba:0d:
3e:b4:e4:b0:db:31:a0:73:57:eb:0f:24:f8:09:2f:
35:23:cb:78:aa:29:e2:18:b7:2f:6f:2e:27:ff:f7:
8f:4f:7b:a6:ff:09:f1:2d:df:c9:cb:b6:cb:c0:1a:
05:01:2a:0e:68:b5:af:b6:4f:c7:34:2a:52:4f:3a:
c5:0c:30:7b:2b:06:b5:6e:7c:3d:15:82:b5:69:86:
d5:70:0d:92:77:b8:ec:55:c4:a2:b4:92:3d:32:ff:
9d:6d:95:5a:ac:23:50:d1:ba:a6:91:e5:41:db:ac:
b6:96:07:aa:7f:b5:61:d4:6d:ed:f5:9e:56:5d:e2:
8a:27:d5:02:49:2e:82:45:0c:18:19:8c:be:e9:a4:
c0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:97:0E:6F:DD:A3:1D:C8:1F:77:6C:D5:F6:F8:8B:1B:28:F3:20:0D
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/K5cOb92jHcgfd2zV9viLGyjzIA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.128.0-82.140.130.255
82.140.132.0-82.140.177.255
82.140.179.0-82.140.181.255
82.140.184.0-82.140.188.255
82.140.190.0/23
84.46.128.0-84.46.169.255
84.46.172.0-84.46.199.255
84.46.201.0-84.46.233.255
86.38.0.0-86.38.2.255
86.38.6.0/24
86.38.16.0/21
86.38.25.0-86.38.31.255
86.38.33.0-86.38.36.255
86.38.38.0-86.38.150.255
86.38.152.0/22
86.38.157.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.191.0-86.38.199.255
86.38.201.0/24
86.38.206.0-86.38.213.255
86.38.215.0/24
86.38.222.0-86.38.224.255
86.38.227.0-86.38.231.255
86.38.233.0-86.38.234.255
86.38.236.0/23
86.38.239.0-86.38.240.255
86.38.244.0/23
89.116.0.0/24
89.116.14.0/24
89.116.18.0/24
89.116.40.0/24
89.116.55.0/24
89.116.57.0/24
89.116.71.0/24
89.116.77.0-89.116.79.255
89.116.90.0/24
89.116.93.0-89.116.95.255
89.116.97.0-89.116.98.255
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.195.0/24
89.116.232.0/24
89.116.235.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.39.0/24
89.117.69.0/24
89.117.86.0/24
89.117.92.0/23
89.117.100.0/24
89.117.108.0/24
89.117.110.0/24
89.117.119.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/23
89.117.165.0-89.117.166.255
89.117.170.0/24
89.117.176.0-89.117.187.255
89.117.192.0-89.117.214.255
89.117.219.0-89.117.221.255
89.117.223.0-89.117.225.255
89.117.232.0-89.117.243.255
89.117.247.0-89.117.249.255
89.117.251.0/24
89.117.253.0/24
217.9.240.0/24
217.9.243.0-217.9.253.255
Signature Algorithm: sha256WithRSAEncryption
98:94:f8:b0:f1:ba:a3:0c:be:91:94:ea:37:c6:b3:9f:62:a6:
f8:4d:df:81:94:eb:54:dc:95:fd:1e:86:5e:09:12:9f:e4:b3:
ca:13:b8:b0:3d:71:b5:7d:2e:7f:59:84:68:ea:14:31:09:c3:
93:61:2b:f2:e5:c6:f0:53:6b:e7:59:ec:33:ab:6b:d2:5b:3f:
ea:3f:59:dc:6d:c3:3b:02:2e:81:f6:ca:bb:6b:2f:d7:61:d8:
c3:93:51:c2:49:e9:5f:a4:cb:4e:5c:17:9a:cd:b9:e7:de:15:
54:6d:8a:0f:1e:56:01:19:d2:24:e9:01:7f:64:d5:fb:94:91:
74:52:51:09:38:61:b6:11:5b:73:89:23:b4:48:1f:12:f1:6e:
ab:b9:c0:f9:55:30:27:38:5f:21:09:8e:09:e3:bd:4d:62:2d:
82:2f:07:a1:2b:cc:20:67:c9:12:a4:ea:81:f9:ad:01:fa:d1:
92:39:78:33:d5:3f:14:cf:39:5f:fb:38:67:c7:59:9a:06:0c:
4f:3b:bc:51:9e:74:7c:6c:a5:57:5e:55:eb:f0:fa:c3:71:ac:
18:51:63:d5:56:8c:27:01:c4:9a:32:8a:e2:eb:a0:4b:2a:45:
85:6d:f6:3e:e0:d5:69:78:4d:be:f9:d3:29:76:54:0e:f0:d8:
3d:fd:53:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:06 2025 by rpki-client