Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/GEi3hAcimkeH4He9tD9Lr3rrOXk.roa
File: GEi3hAcimkeH4He9tD9Lr3rrOXk.roa (raw, json)
Hash identifier: eIPbRUmwyMEDIVILPSgdnUU/6Q2MrhJSNvHfObRO1WU=
Subject key identifier: 18:48:B7:84:07:22:9A:47:87:E0:77:BD:B4:3F:4B:AF:7A:EB:39:79
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0182010C2A43369A105ABBD9A17600CD62B5
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/GEi3hAcimkeH4He9tD9Lr3rrOXk.roa
Signing time: Fri 15 Jul 2022 08:49:10 +0000
ROA not before: Fri 15 Jul 2022 08:49:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 95.174.160.0/19 maxlen: 24
87.255.128.0/19 maxlen: 24
217.19.192.0/20 maxlen: 24
159.20.8.0/21 maxlen: 24
213.222.64.0/18 maxlen: 24
95.168.0.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
185.147.204.0/22 maxlen: 24
79.174.192.0/18 maxlen: 24
85.168.0.0/14 maxlen: 24
194.6.128.0/19 maxlen: 24
195.146.192.0/19 maxlen: 24
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 24
62.106.128.0/17 maxlen: 24
217.112.224.0/20 maxlen: 24
194.153.89.0/24 maxlen: 24
194.153.90.0/24 maxlen: 24
194.153.88.0/23 maxlen: 24
194.153.97.0/24 maxlen: 24
194.153.92.0/24 maxlen: 24
178.18.176.0/20 maxlen: 24
87.100.0.0/17 maxlen: 24
212.39.128.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
178.19.0.0/20 maxlen: 24
81.220.0.0/16 maxlen: 24
77.233.96.0/19 maxlen: 24
78.112.0.0/12 maxlen: 24
62.85.128.0/19 maxlen: 24
37.64.0.0/13 maxlen: 24
46.165.64.0/18 maxlen: 24
89.185.160.0/19 maxlen: 24
84.205.128.0/19 maxlen: 24
212.23.160.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
91.91.0.0/16 maxlen: 24
88.219.0.0/16 maxlen: 24
81.64.0.0/14 maxlen: 24
80.118.0.0/15 maxlen: 24
195.132.0.0/16 maxlen: 24
195.98.96.0/19 maxlen: 24
78.159.0.0/19 maxlen: 24
84.4.0.0/14 maxlen: 24
85.192.192.0/18 maxlen: 24
79.132.32.0/19 maxlen: 24
77.192.0.0/12 maxlen: 24
86.64.0.0/12 maxlen: 24
80.70.32.0/20 maxlen: 24
80.124.0.0/15 maxlen: 24
82.151.0.0/19 maxlen: 24
95.157.192.0/18 maxlen: 24
212.198.0.0/16 maxlen: 24
93.191.80.0/21 maxlen: 24
77.84.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 24
86.63.224.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
77.144.0.0/12 maxlen: 24
217.70.80.0/20 maxlen: 24
85.117.128.0/19 maxlen: 24
195.3.0.0/18 maxlen: 24
95.171.128.0/19 maxlen: 24
80.185.0.0/16 maxlen: 24
81.185.0.0/16 maxlen: 24
84.96.0.0/13 maxlen: 24
87.231.0.0/16 maxlen: 24
62.62.169.0/24 maxlen: 24
89.2.0.0/15 maxlen: 24
188.224.0.0/17 maxlen: 24
95.136.128.0/17 maxlen: 24
194.183.192.0/19 maxlen: 24
62.62.128.0/17 maxlen: 24
89.157.88.0/21 maxlen: 24
89.157.96.0/19 maxlen: 24
141.170.216.0/21 maxlen: 24
213.245.0.0/16 maxlen: 24
185.150.120.0/22 maxlen: 24
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 24
213.169.160.0/19 maxlen: 24
93.0.0.0/11 maxlen: 24
109.0.0.0/11 maxlen: 24
93.182.192.0/18 maxlen: 24
81.1.0.0/18 maxlen: 24
88.136.0.0/13 maxlen: 24
213.176.192.0/19 maxlen: 24
84.55.128.0/18 maxlen: 24
89.170.0.0/16 maxlen: 24
62.129.160.0/19 maxlen: 24
62.8.0.0/19 maxlen: 24
46.35.0.0/19 maxlen: 24
77.136.0.0/15 maxlen: 24
80.236.0.0/17 maxlen: 24
77.128.0.0/13 maxlen: 24
188.7.0.0/16 maxlen: 24
212.94.160.0/19 maxlen: 24
83.141.128.0/17 maxlen: 24
188.141.128.0/17 maxlen: 24
213.128.32.0/19 maxlen: 24
194.242.176.0/20 maxlen: 24
195.7.96.0/19 maxlen: 24
92.88.0.0/13 maxlen: 24
85.68.0.0/15 maxlen: 24
213.223.0.0/16 maxlen: 24
91.68.0.0/14 maxlen: 24
91.88.0.0/16 maxlen: 24
82.216.0.0/16 maxlen: 24
95.175.160.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
78.155.128.0/19 maxlen: 24
2a00:6200::/29 maxlen: 48
2a00:7180::/32 maxlen: 46
2a02:8400::/25 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:01:0c:2a:43:36:9a:10:5a:bb:d9:a1:76:00:cd:62:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 15 08:49:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1848b78407229a4787e077bdb43f4baf7aeb3979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:d8:24:03:8c:1d:a9:ff:23:07:53:2e:92:
3e:3f:05:bd:7f:f2:cc:30:b7:ac:e3:f9:0f:f2:24:
cd:fe:f0:3e:10:fc:85:59:31:70:85:12:2a:32:d5:
70:31:ea:29:de:ca:8f:b5:cf:59:ae:d5:e8:ba:b8:
59:44:75:4c:06:09:4c:65:7a:e3:55:6e:ba:5c:92:
50:8e:f1:d2:09:72:63:5d:0c:11:03:b7:2c:e6:cb:
ff:be:53:15:df:ac:5d:53:83:8f:b8:c2:b6:d8:f5:
d3:e9:51:80:25:f9:8c:a6:66:b0:8e:1c:7b:94:5d:
90:22:66:db:fa:c1:90:b4:3e:b8:76:ed:0e:90:a9:
b0:91:b3:96:57:a7:a9:ca:e8:27:83:5a:50:a8:7a:
dc:1f:b3:e1:4e:79:79:f2:38:42:96:97:bc:19:bc:
b1:35:a1:f5:62:70:19:c3:03:88:f9:39:78:ab:7f:
84:32:3a:b1:6a:08:a3:a6:e4:ae:a6:23:0a:d1:72:
5c:36:13:82:7b:ec:80:e3:83:95:6f:24:39:20:ea:
e3:07:1e:06:07:f5:8f:96:33:2a:c0:2a:71:51:c1:
f6:6d:ba:88:af:9f:32:5e:92:8f:31:ab:68:03:4f:
5f:5a:61:58:8c:9f:38:58:db:fc:85:a5:10:70:4f:
a8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:48:B7:84:07:22:9A:47:87:E0:77:BD:B4:3F:4B:AF:7A:EB:39:79
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/GEi3hAcimkeH4He9tD9Lr3rrOXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
46.165.64.0/18
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.85.128.0/19
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.84.0.0/16
77.128.0.0-77.137.255.255
77.140.0.0-77.159.255.255
77.192.0.0/12
77.233.96.0/19
78.112.0.0/12
78.155.128.0/19
78.159.0.0/19
79.80.0.0/12
79.132.32.0/19
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.185.0.0/16
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.151.0.0/19
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.117.128.0/19
85.168.0.0/14
85.192.192.0/18
86.63.224.0-86.79.255.255
87.100.0.0/17
87.231.0.0/16
87.255.128.0/19
88.136.0.0/13
88.219.0.0/16
89.2.0.0/15
89.156.0.0/14
89.170.0.0/16
89.185.160.0/19
91.68.0.0/14
91.88.0.0/16
91.91.0.0/16
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
93.182.192.0/18
93.191.80.0/21
95.136.128.0/17
95.157.192.0/18
95.168.0.0/19
95.171.128.0/19
95.174.160.0/19
95.175.160.0/19
109.0.0.0/11
141.170.216.0/21
159.20.8.0/21
178.18.176.0/20
178.19.0.0/20
185.147.204.0/22
185.150.120.0/22
188.7.0.0/16
188.141.128.0/17
188.224.0.0/17
194.6.128.0/19
194.153.88.0-194.153.90.255
194.153.92.0/24
194.153.97.0/24
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.23.160.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.176.192.0/19
213.203.64.0/18
213.222.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
5c:55:c7:6b:23:7a:33:78:19:6f:c2:96:fe:07:3b:ef:de:99:
4d:7c:d9:4c:fc:69:e2:38:d1:7f:4b:55:4e:1f:14:b2:7e:8f:
fe:d4:00:44:12:d0:c6:f5:b1:92:3f:de:d9:e3:9d:c0:84:40:
04:1b:de:38:64:96:c6:c6:bf:29:9f:fb:1c:a3:16:2c:30:5e:
9f:ee:e0:b3:f9:20:64:fe:6f:35:ba:c3:5f:4a:46:0c:25:56:
cf:d4:7c:48:2a:56:d1:79:2d:20:59:f9:f1:c6:b9:1b:95:d8:
94:b0:fa:8f:82:06:5f:bb:03:63:79:d4:7f:c3:52:da:36:e3:
f2:c2:fa:67:ba:4f:f2:68:12:47:e4:90:39:8b:88:c8:2d:aa:
1b:cb:6e:50:ca:19:07:23:ab:d5:32:bd:5c:b1:36:87:4e:03:
fd:99:34:d8:3e:ba:11:89:af:b0:f7:a2:3d:53:f5:86:c1:66:
8b:00:63:ef:c7:a9:4f:c2:c6:68:d2:12:89:fe:5a:89:f5:8b:
29:d2:23:2c:87:77:68:39:d3:e7:2a:37:7a:4b:3c:23:b3:ce:
f7:2f:13:c8:2c:e6:f5:bb:41:5a:d8:30:19:5b:db:9a:4c:e2:
b0:f4:4e:c3:a8:76:ad:be:df:d7:6a:9c:f6:d7:ba:8d:5e:b9:
58:de:2c:37
-----BEGIN CERTIFICATE-----
MIIHgDCCBmigAwIBAgISAYIBDCpDNpoQWrvZoXYAzWK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz
YzQwM2UwHhcNMjIwNzE1MDg0OTEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODQ4Yjc4NDA3MjI5YTQ3ODdlMDc3YmRiNDNmNGJhZjdhZWIzOTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/rYJAOMHan/IwdTLpI+PwW9f/LM
MLes4/kP8iTN/vA+EPyFWTFwhRIqMtVwMeop3sqPtc9ZrtXourhZRHVMBglMZXrj
VW66XJJQjvHSCXJjXQwRA7cs5sv/vlMV36xdU4OPuMK22PXT6VGAJfmMpmawjhx7
lF2QImbb+sGQtD64du0OkKmwkbOWV6epyugng1pQqHrcH7PhTnl58jhClpe8Gbyx
NaH1YnAZwwOI+Tl4q3+EMjqxagijpuSupiMK0XJcNhOCe+yA44OVbyQ5IOrjBx4G
B/WPljMqwCpxUcH2bbqIr58yXpKPMatoA09fWmFYjJ84WNv8haUQcE+oiQIDAQAB
o4IEjDCCBIgwHQYDVR0OBBYEFBhIt4QHIppHh+B3vbQ/S6966zl5MB8GA1UdIwQY
MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvR0VpM2hBY2lta2VINEhlOXREOUxyM3JyT1hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICoAYIKwYBBQUHAQcBAf8EggKPMIICizCCAmoEAgABMIIC
YgMDAyVAAwQFLiMAAwQGLqVAAwQFPggAAwMAPicDBAc+PoADBAU+VYADBAc+aoAD
BAU+gaADBAY+8UADAwBNVDAKAwMHTYADAwFNiDAKAwMCTYwDAwVNgAMDBE3AAwQF
TelgAwMETnADBAVOm4ADBAVOnwADAwRPUAMEBU+EIAMEBk+uwAMEBFBGIAMDAVB2
AwMBUHwDAwBQuQMEB1DsAAMEBlEBAAMDAlFAAwMAUbkDAwBR3AMEBVKXAAMDAFLY
AwQHU42AAwMCVAQDBAZUN4ADAwNUYAMEBVTNgAMDAVVEAwQFVXWAAwMCVagDBAZV
wMAwCwMEBVY/4AMDBFZAAwQHV2QAAwMAV+cDBAVX/4ADAwNYiAMDAFjbAwMBWQID
AwJZnAMDAFmqAwQFWbmgAwMCW0QDAwBbWAMDAFtbAwQEW5dwAwMDXFgDAwVdAAME
Bl22wAMEA12/UAMEB1+IgAMEBl+dwAMEBV+oAAMEBV+rgAMEBV+uoAMEBV+voAMD
BW0AAwQDjarYAwQDnxQIAwQEshKwAwQEshMAAwQCuZPMAwQCuZZ4AwMAvAcDBAe8
jYADBAe84AADBAXCBoAwDAMEA8KZWAMEAMKZWgMEAMKZXAMEAMKZYQMEBcK3wAME
BMLysAMEBsMDAAMEBcMHYAMEBcNiYAMDAMNzAwMAw4QDBAXDksADBAXUF6ADBAXU
HmADBAXUJ4ADBAXUXqADAwDUxgMEBdWAIAMEBdWQwAMEBdWpoAMEBdWwwAMEBtXL
QAMEBtXeQAMDANXfAwMA1fUDBATZE8ADBATZRlADBATZcOAwGwQCAAIwFQMFAyoA
YgADBQAqAHGAAwUHKgKEADANBgkqhkiG9w0BAQsFAAOCAQEAXFXHayN6M3gZb8KW
/gc7796ZTXzZTPxp4jjRf0tVTh8Usn6P/tQARBLQxvWxkj/e2eOdwIRABBveOGSW
xsa/KZ/7HKMWLDBen+7gs/kgZP5vNbrDX0pGDCVWz9R8SCpW0XktIFn58ca5G5XY
lLD6j4IGX7sDY3nUf8NS2jbj8sL6Z7pP8mgSR+SQOYuIyC2qG8tuUMoZByOr1TK9
XLE2h04D/Zk02D66EYmvsPeiPVP1hsFmiwBj78epT8LGaNISif5aifWLKdIjLId3
aDnT5yo3eks8I7PO9y8TyCzm9btBWtgwGVvbmkzisPROw6h2rb7f12qc9te6jV65
WN4sNw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:54 2023 by rpki-client on console-fra.rpki-client.org