Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/cNBqw0BnB_6bKnpAJ-r9_gRBCtE.roa
File: cNBqw0BnB_6bKnpAJ-r9_gRBCtE.roa (raw, json)
Hash identifier: 9M820kWrgJZvT+ddhAWTTXmD/gE0lyTIj5rCpPLNakg=
Subject key identifier: 70:D0:6A:C3:40:67:07:FE:9B:2A:7A:40:27:EA:FD:FE:04:41:0A:D1
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0182D05C370BE73862BDF8739A85B84B1004
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/cNBqw0BnB_6bKnpAJ-r9_gRBCtE.roa
Signing time: Wed 24 Aug 2022 14:58:00 +0000
ROA not before: Wed 24 Aug 2022 14:58:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 95.174.160.0/19 maxlen: 24
87.255.128.0/19 maxlen: 24
217.19.192.0/20 maxlen: 24
159.20.8.0/21 maxlen: 24
213.222.64.0/18 maxlen: 24
95.168.0.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
185.147.204.0/22 maxlen: 24
79.174.192.0/18 maxlen: 24
85.168.0.0/14 maxlen: 24
194.6.128.0/19 maxlen: 24
195.146.192.0/19 maxlen: 24
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 24
62.106.128.0/17 maxlen: 24
217.112.224.0/20 maxlen: 24
194.153.89.0/24 maxlen: 24
194.153.90.0/24 maxlen: 24
194.153.88.0/23 maxlen: 24
194.153.97.0/24 maxlen: 24
194.153.92.0/24 maxlen: 24
178.18.176.0/20 maxlen: 24
87.100.0.0/17 maxlen: 24
212.39.128.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
178.19.0.0/20 maxlen: 24
81.220.0.0/16 maxlen: 24
77.233.96.0/19 maxlen: 24
78.112.0.0/12 maxlen: 24
62.85.128.0/19 maxlen: 24
37.64.0.0/13 maxlen: 24
46.165.64.0/18 maxlen: 24
89.185.160.0/19 maxlen: 24
84.205.128.0/19 maxlen: 24
212.23.160.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
91.91.0.0/16 maxlen: 24
88.219.0.0/16 maxlen: 24
81.64.0.0/14 maxlen: 24
80.118.0.0/15 maxlen: 24
195.132.0.0/16 maxlen: 24
195.98.96.0/19 maxlen: 24
78.159.0.0/19 maxlen: 24
84.4.0.0/14 maxlen: 24
85.192.192.0/18 maxlen: 24
79.132.32.0/19 maxlen: 24
77.192.0.0/12 maxlen: 24
86.64.0.0/12 maxlen: 24
80.70.32.0/20 maxlen: 24
80.124.0.0/15 maxlen: 24
82.151.0.0/19 maxlen: 24
95.157.192.0/18 maxlen: 24
212.198.0.0/16 maxlen: 24
93.191.80.0/21 maxlen: 24
77.84.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 24
86.63.224.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
77.144.0.0/12 maxlen: 24
217.70.80.0/20 maxlen: 24
85.117.128.0/19 maxlen: 24
195.3.0.0/18 maxlen: 24
95.171.128.0/19 maxlen: 24
80.185.0.0/16 maxlen: 24
81.185.0.0/16 maxlen: 24
84.96.0.0/13 maxlen: 24
87.231.0.0/16 maxlen: 24
62.62.169.0/24 maxlen: 24
89.2.0.0/15 maxlen: 24
188.224.0.0/17 maxlen: 24
95.136.128.0/17 maxlen: 24
194.183.192.0/19 maxlen: 24
62.62.128.0/17 maxlen: 24
89.157.88.0/21 maxlen: 24
89.157.96.0/19 maxlen: 24
141.170.216.0/21 maxlen: 24
213.245.0.0/16 maxlen: 24
185.150.120.0/22 maxlen: 24
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 24
213.169.160.0/19 maxlen: 24
93.0.0.0/11 maxlen: 24
109.0.0.0/11 maxlen: 24
93.182.192.0/18 maxlen: 24
81.1.0.0/18 maxlen: 24
88.136.0.0/13 maxlen: 24
213.176.192.0/19 maxlen: 24
84.55.128.0/18 maxlen: 24
89.170.0.0/16 maxlen: 24
62.129.160.0/19 maxlen: 24
62.8.0.0/19 maxlen: 24
46.35.0.0/19 maxlen: 24
77.136.0.0/15 maxlen: 24
80.236.0.0/17 maxlen: 24
77.128.0.0/13 maxlen: 24
188.7.0.0/16 maxlen: 24
212.94.160.0/19 maxlen: 24
83.141.128.0/17 maxlen: 24
188.141.128.0/17 maxlen: 24
213.128.32.0/19 maxlen: 24
194.242.176.0/20 maxlen: 24
195.7.96.0/19 maxlen: 24
92.88.0.0/13 maxlen: 24
85.68.0.0/15 maxlen: 24
213.223.0.0/16 maxlen: 24
91.68.0.0/14 maxlen: 24
91.88.0.0/16 maxlen: 24
82.216.0.0/16 maxlen: 24
95.175.160.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
78.155.128.0/19 maxlen: 24
2a00:6200::/29 maxlen: 48
2a00:7180::/32 maxlen: 48
2a02:8400::/25 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d0:5c:37:0b:e7:38:62:bd:f8:73:9a:85:b8:4b:10:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Aug 24 14:58:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70d06ac3406707fe9b2a7a4027eafdfe04410ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c8:ad:9a:91:21:26:6c:0b:18:47:2e:cc:05:
fe:1f:d9:00:c3:82:98:fa:c4:45:b8:c5:c8:74:67:
fc:a7:1d:ea:87:37:ea:89:15:51:02:ac:fb:4c:97:
11:80:82:95:4c:23:f2:00:c4:27:9d:5d:72:ec:c1:
bb:1e:66:e6:72:bc:6c:08:8e:e9:f1:f2:ef:48:b0:
b9:1a:5e:50:c4:ef:2e:8c:c9:7d:cb:d0:95:f4:34:
1d:c1:12:9e:35:da:e6:28:b2:ba:8b:eb:d1:fe:ad:
6b:0c:68:d1:a4:a0:9e:57:56:e7:23:26:88:5d:1d:
17:55:db:22:86:21:44:03:b4:97:a4:11:22:1a:ef:
d3:37:a8:29:5c:60:77:ab:2a:59:2e:54:62:60:5b:
09:48:35:61:d4:2b:7f:53:40:94:9b:a2:1f:5a:7b:
a6:e2:59:3a:a1:52:51:18:2d:cc:1c:ee:8f:0a:61:
22:fb:7b:d7:f3:f5:bb:de:be:aa:dc:30:48:f3:52:
bc:3d:72:c7:55:28:2f:e8:71:75:d9:41:86:3b:a4:
35:03:a6:80:0f:03:11:1c:6b:3f:9b:0b:08:a5:4a:
b7:fd:8e:da:b6:18:44:d8:8c:46:b9:49:d3:5a:c1:
34:92:eb:76:10:e6:b9:bf:5f:5c:17:ce:52:a4:9b:
3a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D0:6A:C3:40:67:07:FE:9B:2A:7A:40:27:EA:FD:FE:04:41:0A:D1
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/cNBqw0BnB_6bKnpAJ-r9_gRBCtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
46.165.64.0/18
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.85.128.0/19
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.84.0.0/16
77.128.0.0-77.137.255.255
77.140.0.0-77.159.255.255
77.192.0.0/12
77.233.96.0/19
78.112.0.0/12
78.155.128.0/19
78.159.0.0/19
79.80.0.0/12
79.132.32.0/19
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.185.0.0/16
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.151.0.0/19
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.117.128.0/19
85.168.0.0/14
85.192.192.0/18
86.63.224.0-86.79.255.255
87.100.0.0/17
87.231.0.0/16
87.255.128.0/19
88.136.0.0/13
88.219.0.0/16
89.2.0.0/15
89.156.0.0/14
89.170.0.0/16
89.185.160.0/19
91.68.0.0/14
91.88.0.0/16
91.91.0.0/16
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
93.182.192.0/18
93.191.80.0/21
95.136.128.0/17
95.157.192.0/18
95.168.0.0/19
95.171.128.0/19
95.174.160.0/19
95.175.160.0/19
109.0.0.0/11
141.170.216.0/21
159.20.8.0/21
178.18.176.0/20
178.19.0.0/20
185.147.204.0/22
185.150.120.0/22
188.7.0.0/16
188.141.128.0/17
188.224.0.0/17
194.6.128.0/19
194.153.88.0-194.153.90.255
194.153.92.0/24
194.153.97.0/24
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.23.160.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.176.192.0/19
213.203.64.0/18
213.222.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
69:e2:76:01:f6:bc:57:87:b1:31:43:d0:94:51:76:c3:d0:fb:
1a:64:51:ec:9d:40:7d:ee:de:d7:26:44:57:ad:3b:6c:b1:60:
d7:09:03:80:94:33:95:eb:7b:5a:18:97:d0:0c:fa:3a:4d:3d:
3b:28:cc:3f:a9:6e:b6:a4:04:4c:64:65:16:5a:de:2f:03:59:
f1:ee:ce:03:f7:3c:7c:10:21:1f:02:a5:29:b1:d4:76:f5:54:
c0:b5:50:38:12:6b:68:99:88:6e:9d:d5:c2:a8:c4:d5:16:40:
0c:55:d4:de:ce:db:49:4f:ae:ee:93:6e:e1:0c:29:aa:b6:0c:
90:c7:a2:10:2e:f5:97:d9:c1:a9:56:35:1f:3a:a1:93:fe:f2:
83:15:9e:6a:2a:76:6c:4d:6c:ac:52:4d:65:46:5f:d3:4a:8c:
a7:6d:8f:ee:dc:51:6f:85:a8:fa:e9:12:69:0a:bb:af:ab:7f:
ca:1c:c3:36:1b:a3:98:2b:a4:df:ed:6e:12:dd:63:6b:3b:42:
11:04:df:22:bd:90:f8:c6:84:98:da:2c:fd:cc:44:05:8d:a6:
a4:cb:83:c0:46:4b:d7:96:9e:7b:37:50:69:62:a9:9a:40:e6:
bc:ee:c1:40:37:f4:f1:97:73:4b:7b:22:1c:33:7b:02:e4:1e:
f3:ef:82:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:50:41 2025 by rpki-client