Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/mj2bmpfrbA_PeMce53Wh-OaQaUQ.roa
File: mj2bmpfrbA_PeMce53Wh-OaQaUQ.roa (raw, json)
Hash identifier: T/ZpeeB+L/Qn3cH/T42sN5cgUG8W4yL/jEYbJ90NDTs=
Subject key identifier: 9A:3D:9B:9A:97:EB:6C:0F:CF:78:C7:1E:E7:75:A1:F8:E6:90:69:44
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 08A8FA21
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/mj2bmpfrbA_PeMce53Wh-OaQaUQ.roa
Signing time: Fri 04 Mar 2022 08:24:18 +0000
ROA not before: Fri 04 Mar 2022 08:24:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212046
IP address blocks: 84.46.160.0/21 maxlen: 21
84.46.172.0/22 maxlen: 22
84.46.168.0/23 maxlen: 23
84.46.176.0/20 maxlen: 20
82.140.160.0/20 maxlen: 20
82.140.176.0/23 maxlen: 23
82.140.177.0/24 maxlen: 24
82.140.179.0/24 maxlen: 24
82.140.184.0/22 maxlen: 22
82.140.180.0/23 maxlen: 23
82.140.190.0/23 maxlen: 23
82.140.188.0/24 maxlen: 24
84.46.128.0/19 maxlen: 19
84.46.192.0/21 maxlen: 21
84.46.202.0/23 maxlen: 23
84.46.204.0/22 maxlen: 22
84.46.201.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.208.0/20 maxlen: 20
84.46.207.0/24 maxlen: 24
84.46.224.0/21 maxlen: 21
84.46.232.0/23 maxlen: 23
86.38.244.0/23 maxlen: 23
86.38.191.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.192.0/21 maxlen: 21
86.38.201.0/24 maxlen: 24
86.38.206.0/23 maxlen: 23
86.38.212.0/23 maxlen: 23
86.38.208.0/22 maxlen: 22
86.38.215.0/24 maxlen: 24
86.38.222.0/23 maxlen: 23
86.38.224.0/24 maxlen: 24
86.38.222.0/24 maxlen: 24
86.38.228.0/22 maxlen: 22
86.38.233.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.227.0/24 maxlen: 24
86.38.236.0/23 maxlen: 23
86.38.240.0/24 maxlen: 24
86.38.239.0/24 maxlen: 24
86.38.236.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
82.140.130.0/24 maxlen: 24
82.140.132.0/22 maxlen: 22
82.140.128.0/23 maxlen: 23
82.140.136.0/21 maxlen: 21
82.140.144.0/20 maxlen: 20
82.140.159.0/24 maxlen: 24
86.38.28.0/22 maxlen: 22
86.38.26.0/23 maxlen: 23
86.38.26.0/24 maxlen: 24
86.38.25.0/24 maxlen: 24
86.38.34.0/23 maxlen: 23
86.38.36.0/24 maxlen: 24
86.38.33.0/24 maxlen: 24
86.38.40.0/21 maxlen: 21
86.38.38.0/23 maxlen: 23
86.38.48.0/20 maxlen: 20
86.38.64.0/18 maxlen: 18
86.38.73.0/24 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.0.0/23 maxlen: 23
86.38.2.0/24 maxlen: 24
86.38.6.0/24 maxlen: 24
86.38.16.0/21 maxlen: 21
86.38.144.0/22 maxlen: 22
86.38.152.0/22 maxlen: 22
86.38.148.0/23 maxlen: 23
86.38.152.0/24 maxlen: 24
86.38.150.0/24 maxlen: 24
86.38.158.0/23 maxlen: 23
86.38.157.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.160.0/21 maxlen: 21
86.38.160.0/24 maxlen: 24
86.38.168.0/22 maxlen: 22
86.38.172.0/23 maxlen: 23
86.38.176.0/24 maxlen: 24
86.38.174.0/24 maxlen: 24
86.38.128.0/20 maxlen: 20
86.38.129.0/24 maxlen: 24
86.38.128.0/24 maxlen: 24
86.38.130.0/24 maxlen: 24
89.117.232.0/21 maxlen: 21
89.117.240.0/24 maxlen: 24
89.117.240.0/22 maxlen: 22
89.117.242.0/24 maxlen: 24
89.117.241.0/24 maxlen: 24
89.117.252.0/23 maxlen: 23
89.117.248.0/23 maxlen: 23
89.117.253.0/24 maxlen: 24
89.117.252.0/24 maxlen: 24
89.117.251.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.248.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.86.0/24 maxlen: 24
89.117.100.0/24 maxlen: 24
89.117.110.0/24 maxlen: 24
89.117.108.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.26.0/24 maxlen: 24
89.117.39.0/24 maxlen: 24
89.117.176.0/21 maxlen: 21
89.117.184.0/22 maxlen: 22
217.9.240.0/24 maxlen: 24
217.9.244.0/22 maxlen: 22
89.117.192.0/20 maxlen: 20
217.9.243.0/24 maxlen: 24
217.9.248.0/22 maxlen: 22
217.9.252.0/23 maxlen: 23
89.117.208.0/22 maxlen: 22
89.117.212.0/23 maxlen: 23
89.117.214.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.224.0/23 maxlen: 23
89.117.125.0/24 maxlen: 24
89.117.119.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.140.0/23 maxlen: 23
89.117.166.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.170.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.57.0/24 maxlen: 24
89.116.55.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.79.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.94.0/23 maxlen: 23
89.116.98.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.195.0/24 maxlen: 24
89.116.0.0/24 maxlen: 24
89.116.14.0/24 maxlen: 24
89.116.18.0/24 maxlen: 24
89.116.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145291809 (0x8a8fa21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Mar 4 08:24:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a3d9b9a97eb6c0fcf78c71ee775a1f8e6906944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:e1:27:85:36:a0:20:02:d7:a4:11:f6:37:
2f:96:2f:83:ad:54:fd:ea:fe:13:b6:94:d7:6d:65:
12:70:3f:5d:31:56:c3:4d:34:5c:87:ba:40:34:e3:
07:0a:a1:e0:d0:f5:3e:9e:fc:a2:81:f3:4d:4a:d5:
da:97:22:92:c3:6a:dd:f9:ab:4f:3b:0c:8f:2a:93:
bf:d7:98:8a:27:2d:84:fc:13:24:82:53:30:b5:d8:
60:e2:8e:d7:7b:68:b3:4c:a5:cb:1d:8e:b8:4b:ab:
58:b2:e6:d2:53:78:6a:06:15:c3:ac:a8:d2:9a:01:
86:ef:3d:24:9c:30:ed:f9:40:51:a8:0e:ea:9b:0a:
53:5c:69:80:c3:fe:10:9b:ff:2f:8d:73:21:85:d7:
69:92:b3:bb:ed:cf:19:81:f3:9c:91:92:3c:23:0a:
34:4a:80:21:81:92:17:a1:8f:b9:0f:8c:93:fd:c2:
26:ca:24:23:80:96:49:ee:26:15:27:1a:e5:6c:d4:
c1:2c:1f:2d:e2:a6:f2:48:7d:9e:cd:3b:dd:c1:78:
eb:0c:27:74:90:05:df:52:76:82:df:0d:c5:6f:c9:
55:a7:08:a3:34:a2:b9:fe:d1:21:c2:46:d9:57:65:
86:0a:55:e6:6a:4e:b7:a6:86:8c:3c:48:7a:ec:86:
fb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3D:9B:9A:97:EB:6C:0F:CF:78:C7:1E:E7:75:A1:F8:E6:90:69:44
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/mj2bmpfrbA_PeMce53Wh-OaQaUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.128.0-82.140.130.255
82.140.132.0-82.140.177.255
82.140.179.0-82.140.181.255
82.140.184.0-82.140.188.255
82.140.190.0/23
84.46.128.0-84.46.169.255
84.46.172.0-84.46.199.255
84.46.201.0-84.46.233.255
86.38.0.0-86.38.2.255
86.38.6.0/24
86.38.16.0/21
86.38.25.0-86.38.31.255
86.38.33.0-86.38.36.255
86.38.38.0-86.38.150.255
86.38.152.0/22
86.38.157.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.191.0-86.38.199.255
86.38.201.0/24
86.38.206.0-86.38.213.255
86.38.215.0/24
86.38.222.0-86.38.224.255
86.38.227.0-86.38.231.255
86.38.233.0-86.38.234.255
86.38.236.0/23
86.38.239.0-86.38.240.255
86.38.244.0/23
89.116.0.0/24
89.116.14.0/24
89.116.18.0/24
89.116.40.0/24
89.116.55.0/24
89.116.57.0/24
89.116.71.0/24
89.116.77.0-89.116.79.255
89.116.90.0/24
89.116.93.0-89.116.95.255
89.116.97.0-89.116.98.255
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.195.0/24
89.116.232.0/24
89.116.235.0/24
89.117.10.0/24
89.117.14.0/24
89.117.26.0/24
89.117.39.0/24
89.117.69.0/24
89.117.86.0/24
89.117.100.0/24
89.117.108.0/24
89.117.110.0/24
89.117.119.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/23
89.117.165.0-89.117.166.255
89.117.170.0/24
89.117.176.0-89.117.187.255
89.117.192.0-89.117.214.255
89.117.219.0/24
89.117.223.0-89.117.225.255
89.117.232.0-89.117.243.255
89.117.247.0-89.117.249.255
89.117.251.0-89.117.253.255
217.9.240.0/24
217.9.243.0-217.9.253.255
Signature Algorithm: sha256WithRSAEncryption
5c:80:04:a1:2a:fe:53:6d:91:04:58:29:63:c1:c3:a6:ed:11:
1b:9f:99:42:fb:04:0f:2f:e1:12:ed:c1:c3:b1:26:19:c3:d0:
6f:7f:62:c4:98:8b:ec:9a:e0:87:c6:fc:8b:28:09:61:df:34:
e5:7b:1d:0f:80:9b:0c:60:47:95:8d:20:68:7d:8c:ed:b7:3f:
d2:e7:f4:d2:b2:a3:e9:8b:c0:53:7f:cf:7c:4e:c6:da:94:47:
39:ae:fc:6b:d3:8b:4f:80:f7:fb:c3:13:d4:43:01:83:a2:06:
56:93:a4:71:a2:6e:ac:e2:95:3e:b0:2d:7a:53:f7:07:26:fe:
25:b7:96:61:b4:09:20:c2:5b:a5:ad:2f:82:20:46:a6:a5:55:
72:91:46:fc:2a:84:5f:9c:3d:2b:e3:b5:7d:3e:5c:df:36:f5:
f1:3e:28:7a:f7:34:8c:05:c7:61:97:fc:25:af:6b:dc:61:02:
2b:4e:da:81:ea:48:97:78:25:c9:2c:1d:85:e8:da:89:c0:62:
af:96:47:e2:40:d4:ff:0c:d6:4c:6a:7f:9a:32:05:c8:c6:28:
30:ec:f7:73:95:13:71:79:b6:80:94:86:03:11:f5:0f:03:6f:
5e:9b:50:35:f4:b0:89:ed:df:bc:5f:ba:f9:90:1a:e5:f5:14:
88:9a:2b:16
-----BEGIN CERTIFICATE-----
MIIHuDCCBqCgAwIBAgIECKj6ITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MGRkODFhODMzZDliMDQzYzdmZmQ2MzVhNTk4N2Y1MzY5NzExODBkMB4XDTIyMDMw
NDA4MjQxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWEzZDliOWE5N2Vi
NmMwZmNmNzhjNzFlZTc3NWExZjhlNjkwNjk0NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMNt4SeFNqAgAtekEfY3L5Yvg61U/er+E7aU121lEnA/XTFW
w000XIe6QDTjBwqh4ND1Pp78ooHzTUrV2pciksNq3fmrTzsMjyqTv9eYiicthPwT
JIJTMLXYYOKO13tos0ylyx2OuEurWLLm0lN4agYVw6yo0poBhu89JJww7flAUagO
6psKU1xpgMP+EJv/L41zIYXXaZKzu+3PGYHznJGSPCMKNEqAIYGSF6GPuQ+Mk/3C
JsokI4CWSe4mFSca5WzUwSwfLeKm8kh9ns073cF46wwndJAF31J2gt8NxW/JVacI
ozSiuf7RIcJG2VdlhgpV5mpOt6aGjDxIeuyG+1cCAwEAAaOCBNIwggTOMB0GA1Ud
DgQWBBSaPZual+tsD894xx7ndaH45pBpRDAfBgNVHSMEGDAWgBTw3YGoM9mwQ8f/
1jWlmH9TaXEYDTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhOMkJxRFBac0VQSF85WTFwWmhfVTJseEdBMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmEvYThlYmU0LWQwYjMtNGU3ZC1hZjI1LTA0NjgwNDI0ODZkYy8x
L21qMmJtcGZyYkFfUGVNY2U1M1doLU9hUWFVUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEv
YThlYmU0LWQwYjMtNGU3ZC1hZjI1LTA0NjgwNDI0ODZkYy8xLzhOMkJxRFBac0VQ
SF85WTFwWmhfVTJseEdBMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AuYGCCsGAQUFBwEHAQH/BIIC1TCCAtEwggLNBAIAATCCAsUwDAMEB1KMgAMEAFKM
gjAMAwQCUoyEAwQBUoywMAwDBABSjLMDBAFSjLQwDAMEA1KMuAMEAFKMvAMEAVKM
vjAMAwQHVC6AAwQBVC6oMAwDBAJULqwDBANULsAwDAMEAFQuyQMEAVQu6DALAwMB
ViYDBABWJgIDBABWJgYDBANWJhAwDAMEAFYmGQMEBVYmADAMAwQAViYhAwQAViYk
MAwDBAFWJiYDBABWJpYDBAJWJpgwDAMEAFYmnQMEAFYmrgMEAFYmsAMEAFYmvDAM
AwQAVia/AwQDVibAAwQAVibJMAwDBAFWJs4DBAFWJtQDBABWJtcwDAMEAVYm3gME
AFYm4DAMAwQAVibjAwQDVibgMAwDBABWJukDBABWJuoDBAFWJuwwDAMEAFYm7wME
AFYm8AMEAVYm9AMEAFl0AAMEAFl0DgMEAFl0EgMEAFl0KAMEAFl0NwMEAFl0OQME
AFl0RzAMAwQAWXRNAwQEWXRAAwQAWXRaMAwDBABZdF0DBAVZdEAwDAMEAFl0YQME
AFl0YgMEAFl0fAMEAFl0gQMEAFl0jwMEAFl0lwMEAFl0mwMEAFl0oAMEAFl0ogME
AFl0rgMEAFl0sAMEAFl0sgMEAFl0wwMEAFl06AMEAFl06wMEAFl1CgMEAFl1DgME
AFl1GgMEAFl1JwMEAFl1RQMEAFl1VgMEAFl1ZAMEAFl1bAMEAFl1bgMEAFl1dwME
AFl1fTAMAwQAWXV/AwQAWXWAMAwDBABZdYkDBABZdYoDBAFZdYwwDAMEAFl1pQME
AFl1pgMEAFl1qjAMAwQEWXWwAwQCWXW4MAwDBAZZdcADBABZddYDBABZddswDAME
AFl13wMEAVl14DAMAwQDWXXoAwQCWXXwMAwDBABZdfcDBAFZdfgwDAMEAFl1+wME
AVl1/AMEANkJ8DAMAwQA2QnzAwQB2Qn8MA0GCSqGSIb3DQEBCwUAA4IBAQBcgASh
Kv5TbZEEWCljwcOm7REbn5lC+wQPL+ES7cHDsSYZw9Bvf2LEmIvsmuCHxvyLKAlh
3zTlex0PgJsMYEeVjSBofYzttz/S5/TSsqPpi8BTf898TsbalEc5rvxr04tPgPf7
wxPUQwGDogZWk6Rxom6s4pU+sC16U/cHJv4lt5ZhtAkgwlulrS+CIEampVVykUb8
KoRfnD0r47V9PlzfNvXxPih69zSMBcdhl/wlr2vcYQIrTtqB6kiXeCXJLB2F6NqJ
wGKvlkfiQNT/DNZMan+aMgXIxigw7PdzlRNxebaAlIYDEfUPA29em1A19LCJ7d+8
X7r5kBrl9RSImisW
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:07 2023 by rpki-client on console-ams.rpki-client.org