Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/R1BYfNougwsnnr58A57DyVuamr4.roa
File: R1BYfNougwsnnr58A57DyVuamr4.roa (raw, json)
Hash identifier: nXvHzCqCdbPNbnojV9oIuNwSk6r85qYrcYGuwRyaH8Q=
Subject key identifier: 47:50:58:7C:DA:2E:83:0B:27:9E:BE:7C:03:9E:C3:C9:5B:9A:9A:BE
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 0EC6DFCE
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/R1BYfNougwsnnr58A57DyVuamr4.roa
Signing time: Wed 04 May 2022 09:23:37 +0000
ROA not before: Wed 04 May 2022 09:23:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61323
IP address blocks: 81.201.128.0/20 maxlen: 20
80.66.200.0/22 maxlen: 22
185.241.248.0/22 maxlen: 24
185.221.204.0/22 maxlen: 22
193.39.252.0/22 maxlen: 22
194.39.164.0/22 maxlen: 22
185.160.252.0/23 maxlen: 23
185.160.254.0/24 maxlen: 24
78.137.112.0/20 maxlen: 20
178.238.128.0/20 maxlen: 20
45.84.20.0/22 maxlen: 24
185.181.196.0/22 maxlen: 22
176.124.52.0/22 maxlen: 24
185.210.196.0/22 maxlen: 22
185.207.108.0/22 maxlen: 22
195.69.102.0/24 maxlen: 24
185.234.36.0/22 maxlen: 22
78.109.160.0/20 maxlen: 20
185.197.60.0/22 maxlen: 22
185.160.180.0/22 maxlen: 22
80.244.176.0/20 maxlen: 20
45.157.40.0/22 maxlen: 22
192.166.44.0/24 maxlen: 24
192.166.45.0/24 maxlen: 24
192.166.46.0/23 maxlen: 23
159.253.208.0/21 maxlen: 21
185.226.220.0/22 maxlen: 22
185.162.224.0/22 maxlen: 22
31.193.0.0/20 maxlen: 20
185.217.40.0/22 maxlen: 22
185.220.60.0/22 maxlen: 22
185.156.64.0/24 maxlen: 24
185.156.65.0/24 maxlen: 24
185.156.66.0/23 maxlen: 23
37.220.88.0/21 maxlen: 21
185.55.78.0/23 maxlen: 23
185.55.77.0/24 maxlen: 24
185.166.128.0/22 maxlen: 22
45.131.136.0/22 maxlen: 22
109.108.128.0/19 maxlen: 19
185.216.76.0/22 maxlen: 22
78.24.89.0/24 maxlen: 24
78.24.90.0/23 maxlen: 23
78.24.88.0/24 maxlen: 24
185.182.88.0/22 maxlen: 22
45.145.100.0/22 maxlen: 22
46.37.160.0/19 maxlen: 19
94.229.160.0/20 maxlen: 20
2a02:21a8:5::/48 maxlen: 48
2a02:21a8:6::/48 maxlen: 48
2a02:22d0::/32 maxlen: 32
2a09:b600:5::/48 maxlen: 48
2a02:21a8:2::/48 maxlen: 48
2a09:ba00:4::/48 maxlen: 48
2a02:22d0:c::/48 maxlen: 48
2a09:b200:6::/48 maxlen: 48
2a0c:3dc0::/29 maxlen: 29
2a02:21a8::/48 maxlen: 48
2a02:21a8:1::/48 maxlen: 48
2a02:21a8:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247914446 (0xec6dfce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: May 4 09:23:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4750587cda2e830b279ebe7c039ec3c95b9a9abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:4e:34:38:eb:af:8e:c4:c0:17:d1:a6:b2:
4c:15:fe:5b:68:73:a7:cc:a6:9f:71:0d:d8:ab:91:
59:3f:68:80:78:ce:b0:76:31:69:72:ed:45:c3:64:
23:1b:9a:34:0d:09:dc:5f:79:b8:22:93:e7:3f:96:
cb:87:c1:b2:55:30:84:89:7a:02:72:13:20:3c:58:
3f:4e:a9:74:36:85:b4:4c:07:08:c4:f5:8b:f0:4e:
a3:5b:6d:85:46:ed:48:56:b9:cd:92:86:0c:27:bb:
bf:4d:01:d7:06:68:bb:0e:4f:e0:ad:60:56:72:5a:
b0:65:dd:4e:ee:90:ef:5e:d3:c5:a1:a7:9c:15:cb:
d0:ff:68:66:09:46:fe:36:68:38:1b:52:4b:b6:22:
cd:51:94:cd:a5:17:32:b0:74:a8:53:bc:45:b4:ad:
c3:77:03:df:a3:72:ac:39:7f:64:cd:1c:2f:2b:fd:
9d:c1:f9:a1:c5:e7:c2:ea:de:ca:c9:2a:a2:36:3f:
d3:b2:89:79:fd:4b:46:3b:5b:ce:56:9c:c9:ab:40:
a7:54:1d:b8:87:9a:f1:54:87:78:c9:68:38:ab:25:
bf:91:f6:dd:6a:88:fb:ae:ef:93:4a:dd:e7:8e:47:
5e:e5:11:b4:1e:7d:3f:4d:48:1b:d3:40:e1:f3:69:
05:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:50:58:7C:DA:2E:83:0B:27:9E:BE:7C:03:9E:C3:C9:5B:9A:9A:BE
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/R1BYfNougwsnnr58A57DyVuamr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.0.0/20
37.220.88.0/21
45.84.20.0/22
45.131.136.0/22
45.145.100.0/22
45.157.40.0/22
46.37.160.0/19
78.24.88.0/22
78.109.160.0/20
78.137.112.0/20
80.66.200.0/22
80.244.176.0/20
81.201.128.0/20
94.229.160.0/20
109.108.128.0/19
159.253.208.0/21
176.124.52.0/22
178.238.128.0/20
185.55.77.0-185.55.79.255
185.156.64.0/22
185.160.180.0/22
185.160.252.0-185.160.254.255
185.162.224.0/22
185.166.128.0/22
185.181.196.0/22
185.182.88.0/22
185.197.60.0/22
185.207.108.0/22
185.210.196.0/22
185.216.76.0/22
185.217.40.0/22
185.220.60.0/22
185.221.204.0/22
185.226.220.0/22
185.234.36.0/22
185.241.248.0/22
192.166.44.0/22
193.39.252.0/22
194.39.164.0/22
195.69.102.0/24
IPv6:
2a02:21a8::-2a02:21a8:2:ffff:ffff:ffff:ffff:ffff
2a02:21a8:4::-2a02:21a8:6:ffff:ffff:ffff:ffff:ffff
2a02:22d0::/32
2a09:b200:6::/48
2a09:b600:5::/48
2a09:ba00:4::/48
2a0c:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
cd:52:30:13:2d:fb:ad:fa:37:1e:5e:6a:f0:86:0b:99:45:2e:
2c:be:bd:9c:ec:61:16:81:a5:22:9a:d3:04:5c:ca:41:03:78:
ed:e2:bd:78:e4:7c:41:ff:43:63:4f:e9:c1:fc:24:5f:ef:b4:
3e:28:16:f5:4b:93:76:d8:0d:31:9d:8d:3d:3e:d4:d2:c7:05:
39:1b:7b:3c:fa:2b:84:26:76:28:43:64:bb:47:8d:66:63:c6:
05:01:92:0b:ac:83:e6:c3:c2:34:57:a8:a2:5d:f2:4e:0b:7a:
c0:45:dd:67:0a:dc:80:d8:c9:40:c2:14:ed:5e:8d:0a:b5:9b:
98:d2:e4:05:7b:51:86:fe:17:41:c5:36:72:01:af:47:59:59:
3b:57:91:31:33:04:fa:2e:dc:13:22:2e:4b:d6:9c:f2:ae:48:
fb:b7:64:80:31:f7:2d:a2:12:3d:7b:b5:b3:b4:94:2d:f1:71:
61:4d:fe:9c:9b:81:0a:3d:b5:28:38:1f:f5:ad:f5:d6:4b:96:
13:ce:19:7c:11:ad:8d:8c:32:c8:c5:82:b2:04:ee:a8:b6:f2:
f8:c6:c4:c9:26:68:97:76:57:25:98:3f:b5:08:56:b0:00:ff:
65:8c:d5:07:e1:00:32:2c:17:32:64:a8:df:c6:c0:0c:72:84:
e8:07:bd:af
-----BEGIN CERTIFICATE-----
MIIGSjCCBTKgAwIBAgIEDsbfzjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MGM4YTM5MGRkZTVlMTUxOWE0YmQzZGE3NTRhOTNlOTg4NDkyZDY3MB4XDTIyMDUw
NDA5MjMzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDc1MDU4N2NkYTJl
ODMwYjI3OWViZTdjMDM5ZWMzYzk1YjlhOWFiZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMC9TjQ466+OxMAX0aayTBX+W2hzp8ymn3EN2KuRWT9ogHjO
sHYxaXLtRcNkIxuaNA0J3F95uCKT5z+Wy4fBslUwhIl6AnITIDxYP06pdDaFtEwH
CMT1i/BOo1tthUbtSFa5zZKGDCe7v00B1wZouw5P4K1gVnJasGXdTu6Q717TxaGn
nBXL0P9oZglG/jZoOBtSS7YizVGUzaUXMrB0qFO8RbStw3cD36NyrDl/ZM0cLyv9
ncH5ocXnwureyskqojY/07KJef1LRjtbzlacyatAp1QduIea8VSHeMloOKslv5H2
3WqI+67vk0rd545HXuURtB59P01IG9NA4fNpBZkCAwEAAaOCA2QwggNgMB0GA1Ud
DgQWBBRHUFh82i6DCyeevnwDnsPJW5qavjAfBgNVHSMEGDAWgBTgyKOQ3eXhUZpL
09p1SpPpiEktZzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRNaWprTjNsNFZHYVM5UGFkVXFUNlloSkxXYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzEvODY5YjMwLWZjZDYtNDhkZi04ZDI1LWJlZjNiYTIxYzcxNS8x
L1IxQllmTm91Z3dzbm5yNThBNTdEeVZ1YW1yNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEv
ODY5YjMwLWZjZDYtNDhkZi04ZDI1LWJlZjNiYTIxYzcxNS8xLzRNaWprTjNsNFZH
YVM5UGFkVXFUNlloSkxXYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AXgGCCsGAQUFBwEHAQH/BIIBZzCCAWMwggEIBAIAATCCAQADBAQfwQADBAMl3FgD
BAItVBQDBAItg4gDBAItkWQDBAItnSgDBAUuJaADBAJOGFgDBARObaADBAROiXAD
BAJQQsgDBARQ9LADBARRyYADBARe5aADBAVtbIADBAOf/dADBAKwfDQDBASy7oAw
DAMEALk3TQMEBLk3QAMEArmcQAMEArmgtDAMAwQCuaD8AwQAuaD+AwQCuaLgAwQC
uaaAAwQCubXEAwQCubZYAwQCucU8AwQCuc9sAwQCudLEAwQCudhMAwQCudkoAwQC
udw8AwQCud3MAwQCueLcAwQCueokAwQCufH4AwQCwKYsAwQCwSf8AwQCwiekAwQA
w0VmMFUEAgACME8wEAMFAyoCIagDBwAqAiGoAAIwEgMHAioCIagABAMHACoCIagA
BgMFACoCItADBwAqCbIAAAYDBwAqCbYAAAUDBwAqCboAAAQDBQMqDD3AMA0GCSqG
SIb3DQEBCwUAA4IBAQDNUjATLfut+jceXmrwhguZRS4svr2c7GEWgaUimtMEXMpB
A3jt4r145HxB/0NjT+nB/CRf77Q+KBb1S5N22A0xnY09PtTSxwU5G3s8+iuEJnYo
Q2S7R41mY8YFAZILrIPmw8I0V6iiXfJOC3rARd1nCtyA2MlAwhTtXo0KtZuY0uQF
e1GG/hdBxTZyAa9HWVk7V5ExMwT6LtwTIi5L1pzyrkj7t2SAMfctohI9e7WztJQt
8XFhTf6cm4EKPbUoOB/1rfXWS5YTzhl8Ea2NjDLIxYKyBO6otvL4xsTJJmiXdlcl
mD+1CFawAP9ljNUH4QAyLBcyZKjfxsAMcoToB72v
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:25 2025 by rpki-client