Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/YUiYDgcjg29LxxZhtHX3Q02WSbs.roa
File: YUiYDgcjg29LxxZhtHX3Q02WSbs.roa (raw, json)
Hash identifier: 5SVyfgumq4j1KRkTqO5JqL6pJ6gygDmOC7bUFiiJRzY=
Subject key identifier: 61:48:98:0E:07:23:83:6F:4B:C7:16:61:B4:75:F7:43:4D:96:49:BB
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018964D5605E308E6EE779646480B248E64F
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/YUiYDgcjg29LxxZhtHX3Q02WSbs.roa
Signing time: Mon 17 Jul 2023 17:10:52 +0000
ROA not before: Mon 17 Jul 2023 17:10:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 95.174.160.0/19 maxlen: 24
87.255.128.0/19 maxlen: 24
217.19.192.0/20 maxlen: 24
159.20.8.0/21 maxlen: 24
213.222.64.0/18 maxlen: 24
95.168.0.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
185.147.204.0/22 maxlen: 24
79.174.192.0/18 maxlen: 24
85.168.0.0/14 maxlen: 24
194.6.128.0/19 maxlen: 24
195.146.192.0/19 maxlen: 24
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 24
62.106.128.0/17 maxlen: 24
217.112.224.0/20 maxlen: 24
194.153.89.0/24 maxlen: 24
194.153.90.0/24 maxlen: 24
194.153.88.0/23 maxlen: 24
194.153.97.0/24 maxlen: 24
194.153.92.0/24 maxlen: 24
178.18.176.0/20 maxlen: 24
87.100.0.0/17 maxlen: 24
212.39.128.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
178.19.0.0/20 maxlen: 24
81.220.0.0/16 maxlen: 24
77.233.96.0/19 maxlen: 24
78.112.0.0/12 maxlen: 24
62.85.128.0/19 maxlen: 24
37.64.0.0/13 maxlen: 24
46.165.64.0/18 maxlen: 24
89.185.160.0/19 maxlen: 24
84.205.128.0/19 maxlen: 24
212.23.160.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
91.91.0.0/16 maxlen: 24
88.219.0.0/16 maxlen: 24
81.64.0.0/14 maxlen: 24
80.118.0.0/15 maxlen: 24
195.132.0.0/16 maxlen: 24
195.98.96.0/19 maxlen: 24
78.159.0.0/19 maxlen: 24
84.4.0.0/14 maxlen: 24
85.192.192.0/18 maxlen: 24
79.132.32.0/19 maxlen: 24
77.192.0.0/12 maxlen: 24
86.64.0.0/12 maxlen: 24
80.70.32.0/20 maxlen: 24
80.124.0.0/15 maxlen: 24
82.151.0.0/19 maxlen: 24
95.157.192.0/18 maxlen: 24
212.198.0.0/16 maxlen: 24
93.191.80.0/21 maxlen: 24
77.84.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 24
86.63.224.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
77.144.0.0/12 maxlen: 24
217.70.80.0/20 maxlen: 24
85.117.128.0/19 maxlen: 24
195.3.0.0/18 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
95.171.128.0/19 maxlen: 24
77.137.208.0/20 maxlen: 24
81.185.0.0/16 maxlen: 24
80.185.0.0/16 maxlen: 24
77.137.224.0/19 maxlen: 24
84.96.0.0/13 maxlen: 24
87.231.0.0/16 maxlen: 24
62.62.169.0/24 maxlen: 24
89.2.0.0/15 maxlen: 24
188.224.0.0/17 maxlen: 24
95.136.128.0/17 maxlen: 24
194.183.192.0/19 maxlen: 24
62.62.128.0/17 maxlen: 24
89.157.88.0/21 maxlen: 24
89.157.96.0/19 maxlen: 24
141.170.216.0/21 maxlen: 24
213.245.0.0/16 maxlen: 24
185.150.120.0/22 maxlen: 24
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 24
213.169.160.0/19 maxlen: 24
109.0.0.0/11 maxlen: 24
93.0.0.0/11 maxlen: 24
93.182.192.0/18 maxlen: 24
81.1.0.0/18 maxlen: 24
88.136.0.0/13 maxlen: 24
213.176.192.0/19 maxlen: 24
84.55.128.0/18 maxlen: 24
89.170.0.0/16 maxlen: 24
62.129.160.0/19 maxlen: 24
62.8.0.0/19 maxlen: 24
77.136.0.0/16 maxlen: 24
46.35.0.0/19 maxlen: 24
80.236.0.0/17 maxlen: 24
77.128.0.0/13 maxlen: 24
188.7.0.0/16 maxlen: 24
212.94.160.0/19 maxlen: 24
188.141.128.0/17 maxlen: 24
83.141.128.0/17 maxlen: 24
213.128.32.0/19 maxlen: 24
194.242.176.0/20 maxlen: 24
195.7.96.0/19 maxlen: 24
92.88.0.0/13 maxlen: 24
85.68.0.0/15 maxlen: 24
213.223.0.0/16 maxlen: 24
91.68.0.0/14 maxlen: 24
91.88.0.0/16 maxlen: 24
82.216.0.0/16 maxlen: 24
95.175.160.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
78.155.128.0/19 maxlen: 24
2a00:ec80::/32 maxlen: 48
2a00:5e80::/32 maxlen: 48
2a00:ec81::/32 maxlen: 48
2a00:6200::/29 maxlen: 48
2a00:8380::/32 maxlen: 48
2a00:7180::/32 maxlen: 48
2a02:8400::/25 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:d5:60:5e:30:8e:6e:e7:79:64:64:80:b2:48:e6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 17 17:10:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6148980e0723836f4bc71661b475f7434d9649bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:28:5c:2a:46:0c:1c:56:d1:61:e7:05:c7:b6:
4e:8e:ce:17:b6:63:10:f3:94:c0:16:62:a0:c2:d5:
e6:26:97:49:a6:52:be:8b:bf:c1:f4:60:b3:61:c4:
17:db:04:16:9a:7d:b0:c9:9c:f6:87:a1:ac:6f:66:
64:da:60:34:36:58:ea:22:2e:f7:87:cf:52:54:5b:
50:87:da:c6:ca:e8:e2:04:44:ce:1a:ef:cf:8c:71:
d1:01:76:8e:85:da:da:89:ac:ff:30:01:62:c4:68:
9a:73:7f:52:fd:88:c3:e8:e6:07:bc:43:70:4e:a6:
e6:20:ea:d2:04:3c:e0:68:63:7f:de:b5:b8:9f:1a:
ba:c0:63:e1:15:6d:c0:26:1a:b6:0e:eb:fa:24:c4:
ed:75:74:4f:ea:cb:0a:8b:dd:b9:ac:69:ac:59:2b:
40:f3:a5:eb:ee:72:1d:88:4a:2d:c8:99:3b:f6:c8:
90:79:27:48:9e:5e:eb:7a:05:4d:13:f1:51:c2:6b:
9f:61:a2:d9:b6:9d:73:2f:51:fa:31:2c:b6:50:be:
cc:e1:0c:b1:65:6a:9b:47:d8:e6:bb:06:c0:3b:6c:
fb:ff:72:9e:43:c6:b8:16:5a:3c:1d:3f:17:a2:20:
ad:3d:e5:0d:bc:40:77:fb:71:95:3c:c0:3a:39:b0:
3e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:48:98:0E:07:23:83:6F:4B:C7:16:61:B4:75:F7:43:4D:96:49:BB
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/YUiYDgcjg29LxxZhtHX3Q02WSbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
46.165.64.0/18
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.85.128.0/19
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.84.0.0/16
77.128.0.0-77.136.255.255
77.137.196.0-77.137.255.255
77.140.0.0-77.159.255.255
77.192.0.0/12
77.233.96.0/19
78.112.0.0/12
78.155.128.0/19
78.159.0.0/19
79.80.0.0/12
79.132.32.0/19
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.185.0.0/16
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.151.0.0/19
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.117.128.0/19
85.168.0.0/14
85.192.192.0/18
86.63.224.0-86.79.255.255
87.100.0.0/17
87.231.0.0/16
87.255.128.0/19
88.136.0.0/13
88.219.0.0/16
89.2.0.0/15
89.156.0.0/14
89.170.0.0/16
89.185.160.0/19
91.68.0.0/14
91.88.0.0/16
91.91.0.0/16
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
93.182.192.0/18
93.191.80.0/21
95.136.128.0/17
95.157.192.0/18
95.168.0.0/19
95.171.128.0/19
95.174.160.0/19
95.175.160.0/19
109.0.0.0/11
141.170.216.0/21
159.20.8.0/21
178.18.176.0/20
178.19.0.0/20
185.147.204.0/22
185.150.120.0/22
188.7.0.0/16
188.141.128.0/17
188.224.0.0/17
194.6.128.0/19
194.153.88.0-194.153.90.255
194.153.92.0/24
194.153.97.0/24
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.23.160.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.176.192.0/19
213.203.64.0/18
213.222.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:5e80::/32
2a00:6200::/29
2a00:7180::/32
2a00:8380::/32
2a00:ec80::/31
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
7e:4f:49:d4:ed:d0:36:ef:ec:1a:f3:97:be:1a:b9:6b:ed:f8:
75:a9:c4:e4:14:1c:f7:68:fa:c7:2a:b1:c8:5e:f5:9b:8f:62:
75:f3:5c:30:61:57:0f:d0:d0:8c:ab:25:3e:90:0f:45:77:fa:
0f:fe:86:0d:eb:4d:b4:e7:6a:7e:e4:49:90:be:aa:fe:b6:70:
30:19:d4:d8:cc:93:a4:a2:0b:f8:f5:9a:75:3c:b5:a2:9f:e7:
64:69:37:f3:78:9f:9b:74:d5:15:e7:21:71:9d:f0:f4:ac:7d:
6f:50:b6:1b:b4:eb:7c:df:27:28:fd:b2:62:af:f5:38:1c:9b:
f4:c7:d2:58:7b:57:01:65:45:99:45:58:5f:f5:b0:92:80:03:
80:a8:41:7d:3c:4e:66:64:72:bc:6c:af:90:d0:90:9c:56:57:
a8:52:49:da:24:62:53:bd:bd:5e:2d:af:e6:c8:d3:7b:fc:2d:
1f:97:de:f5:bf:b3:ca:9f:1c:25:40:9f:2a:f1:f9:1a:56:62:
10:d3:c8:ff:dc:ec:39:5c:14:e3:c7:8c:2c:33:7e:85:f1:df:
fd:ea:49:2c:b7:3d:63:2b:97:7f:5a:3a:d6:57:97:6d:6a:9e:
4f:a3:a5:63:89:50:bf:54:c1:dd:e1:79:8f:e8:af:21:db:9e:
4e:43:f3:ee
-----BEGIN CERTIFICATE-----
MIIHojCCBoqgAwIBAgISAYlk1WBeMI5u53lkZICySOZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz
YzQwM2UwHhcNMjMwNzE3MTcxMDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTQ4OTgwZTA3MjM4MzZmNGJjNzE2NjFiNDc1Zjc0MzRkOTY0OWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyhcKkYMHFbRYecFx7ZOjs4XtmMQ
85TAFmKgwtXmJpdJplK+i7/B9GCzYcQX2wQWmn2wyZz2h6Gsb2Zk2mA0NljqIi73
h89SVFtQh9rGyujiBETOGu/PjHHRAXaOhdraiaz/MAFixGiac39S/YjD6OYHvENw
TqbmIOrSBDzgaGN/3rW4nxq6wGPhFW3AJhq2Duv6JMTtdXRP6ssKi925rGmsWStA
86Xr7nIdiEotyJk79siQeSdInl7regVNE/FRwmufYaLZtp1zL1H6MSy2UL7M4Qyx
ZWqbR9jmuwbAO2z7/3KeQ8a4Flo8HT8XoiCtPeUNvEB3+3GVPMA6ObA+IQIDAQAB
o4IErjCCBKowHQYDVR0OBBYEFGFImA4HI4NvS8cWYbR190NNlkm7MB8GA1UdIwQY
MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvWVVpWURnY2pnMjlMeHhaaHRIWDNRMDJXU2JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICwgYIKwYBBQUHAQcBAf8EggKxMIICrTCCAncEAgABMIIC
bwMDAyVAAwQFLiMAAwQGLqVAAwQFPggAAwMAPicDBAc+PoADBAU+VYADBAc+aoAD
BAU+gaADBAY+8UADAwBNVDAKAwMHTYADAwBNiDALAwQCTYnEAwMBTYgwCgMDAk2M
AwMFTYADAwRNwAMEBU3pYAMDBE5wAwQFTpuAAwQFTp8AAwMET1ADBAVPhCADBAZP
rsADBARQRiADAwFQdgMDAVB8AwMAULkDBAdQ7AADBAZRAQADAwJRQAMDAFG5AwMA
UdwDBAVSlwADAwBS2AMEB1ONgAMDAlQEAwQGVDeAAwMDVGADBAVUzYADAwFVRAME
BVV1gAMDAlWoAwQGVcDAMAsDBAVWP+ADAwRWQAMEB1dkAAMDAFfnAwQFV/+AAwMD
WIgDAwBY2wMDAVkCAwMCWZwDAwBZqgMEBVm5oAMDAltEAwMAW1gDAwBbWwMEBFuX
cAMDA1xYAwMFXQADBAZdtsADBANdv1ADBAdfiIADBAZfncADBAVfqAADBAVfq4AD
BAVfrqADBAVfr6ADAwVtAAMEA42q2AMEA58UCAMEBLISsAMEBLITAAMEArmTzAME
ArmWeAMDALwHAwQHvI2AAwQHvOAAAwQFwgaAMAwDBAPCmVgDBADCmVoDBADCmVwD
BADCmWEDBAXCt8ADBATC8rADBAbDAwADBAXDB2ADBAXDYmADAwDDcwMDAMOEAwQF
w5LAAwQF1BegAwQF1B5gAwQF1CeAAwQF1F6gAwMA1MYDBAXVgCADBAXVkMADBAXV
qaADBAXVsMADBAbVy0ADBAbV3kADAwDV3wMDANX1AwQE2RPAAwQE2UZQAwQE2XDg
MDAEAgACMCoDBQAqAF6AAwUDKgBiAAMFACoAcYADBQAqAIOAAwUBKgDsgAMFByoC
hAAwDQYJKoZIhvcNAQELBQADggEBAH5PSdTt0Dbv7Brzl74auWvt+HWpxOQUHPdo
+scqsche9ZuPYnXzXDBhVw/Q0IyrJT6QD0V3+g/+hg3rTbTnan7kSZC+qv62cDAZ
1NjMk6SiC/j1mnU8taKf52RpN/N4n5t01RXnIXGd8PSsfW9Qthu063zfJyj9smKv
9Tgcm/TH0lh7VwFlRZlFWF/1sJKAA4CoQX08TmZkcrxsr5DQkJxWV6hSSdokYlO9
vV4tr+bI03v8LR+X3vW/s8qfHCVAnyrx+RpWYhDTyP/c7DlcFOPHjCwzfoXx3/3q
SSy3PWMrl39aOtZXl21qnk+jpWOJUL9Uwd3heY/oryHbnk5D8+4=
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:10:58 2025 by rpki-client