Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/kiV5k9AOAIqJX_yGKzrSED34pp4.roa
File: kiV5k9AOAIqJX_yGKzrSED34pp4.roa (raw, json)
Hash identifier: Ufk9oRhBqMRbXxaMIcRYPsTVRuWqoYp0VbSn6DeKzOc=
Subject key identifier: 92:25:79:93:D0:0E:00:8A:89:5F:FC:86:2B:3A:D2:10:3D:F8:A6:9E
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 1B9748D0
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/kiV5k9AOAIqJX_yGKzrSED34pp4.roa
Signing time: Tue 08 Mar 2022 17:33:28 +0000
ROA not before: Tue 08 Mar 2022 17:33:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15557
IP address blocks: 80.124.0.0/16 maxlen: 16
217.19.192.0/20 maxlen: 20
88.141.0.0/16 maxlen: 16
212.198.0.0/16 maxlen: 16
217.70.80.0/20 maxlen: 20
79.80.0.0/12 maxlen: 12
185.147.204.0/22 maxlen: 22
77.144.0.0/12 maxlen: 12
195.3.0.0/18 maxlen: 18
77.137.196.0/22 maxlen: 22
85.168.0.0/14 maxlen: 14
77.137.200.0/21 maxlen: 21
77.137.208.0/20 maxlen: 20
195.146.192.0/19 maxlen: 19
84.96.0.0/13 maxlen: 13
77.136.172.0/24 maxlen: 24
88.140.0.0/16 maxlen: 16
77.136.173.0/24 maxlen: 24
77.136.175.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
87.231.0.0/16 maxlen: 16
62.39.0.0/16 maxlen: 16
77.140.0.0/14 maxlen: 14
89.2.0.0/15 maxlen: 15
62.106.128.0/17 maxlen: 17
217.112.224.0/20 maxlen: 20
194.183.192.0/19 maxlen: 19
213.245.0.0/16 maxlen: 16
62.241.64.0/18 maxlen: 18
81.220.0.0/16 maxlen: 16
89.156.0.0/14 maxlen: 14
213.169.160.0/19 maxlen: 19
93.0.0.0/11 maxlen: 11
109.0.0.0/11 maxlen: 11
81.1.0.0/18 maxlen: 18
81.65.0.0/16 maxlen: 16
77.136.63.0/24 maxlen: 24
62.129.160.0/19 maxlen: 19
62.8.0.0/19 maxlen: 19
77.136.0.0/16 maxlen: 16
88.136.0.0/14 maxlen: 14
77.136.47.0/24 maxlen: 24
37.64.0.0/13 maxlen: 13
77.128.0.0/13 maxlen: 13
80.236.0.0/17 maxlen: 17
212.94.160.0/19 maxlen: 19
81.185.160.0/20 maxlen: 20
80.125.0.0/16 maxlen: 16
83.141.128.0/17 maxlen: 17
84.205.128.0/19 maxlen: 19
77.134.204.0/24 maxlen: 24
84.205.144.0/20 maxlen: 20
81.64.0.0/14 maxlen: 14
213.128.32.0/19 maxlen: 19
80.118.0.0/15 maxlen: 15
194.242.176.0/20 maxlen: 20
92.88.0.0/13 maxlen: 13
91.68.0.0/22 maxlen: 22
195.132.0.0/16 maxlen: 16
85.68.0.0/15 maxlen: 15
195.98.96.0/19 maxlen: 19
91.68.0.0/14 maxlen: 14
77.192.0.0/12 maxlen: 12
86.64.0.0/12 maxlen: 12
82.216.0.0/16 maxlen: 16
88.142.0.0/16 maxlen: 16
2a02:8400::/25 maxlen: 25
2a00:6200::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462899408 (0x1b9748d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Mar 8 17:33:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92257993d00e008a895ffc862b3ad2103df8a69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:04:39:41:15:d3:db:ef:4d:2c:71:75:1c:a8:
5d:18:1b:17:c9:6b:2c:7e:97:9d:24:78:7b:00:d5:
a6:d9:c9:75:76:60:0e:be:37:81:d0:fd:a2:3d:56:
c4:b1:6a:91:4f:a6:f1:06:b3:d4:60:97:a4:c1:c0:
5b:15:a3:54:5e:ce:7f:27:cf:22:2e:e1:65:46:dd:
b5:db:d8:91:2e:57:84:c8:a8:9f:0c:99:38:48:58:
6a:0d:39:26:d6:2a:29:42:f0:3f:57:13:ec:63:1a:
df:60:1b:d1:56:9d:62:13:98:cc:0c:29:74:dc:24:
73:d2:bb:50:7f:f8:39:f8:97:f3:67:6d:35:8c:c2:
53:24:7a:2a:20:c7:e7:72:08:5c:76:23:de:91:bd:
05:91:44:c2:19:62:cc:f2:c1:32:2d:a4:7f:f6:e4:
13:db:3e:86:95:5e:68:04:11:41:36:ad:1b:78:d0:
bd:4c:fc:a5:42:19:2c:de:29:0f:0c:20:3d:3c:43:
e6:be:44:96:b4:aa:c9:48:1c:dc:19:35:dd:63:e4:
c4:12:9c:48:3e:85:f5:df:3a:05:73:2b:6e:5b:6c:
0a:d9:d5:88:ff:37:67:9b:4b:d2:1f:1c:34:7e:e9:
50:72:c4:d3:44:9b:bd:f9:ff:b6:01:91:58:f0:45:
6e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:25:79:93:D0:0E:00:8A:89:5F:FC:86:2B:3A:D2:10:3D:F8:A6:9E
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/kiV5k9AOAIqJX_yGKzrSED34pp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
62.8.0.0/19
62.39.0.0/16
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
79.80.0.0/12
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.160.0/20
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0-88.142.255.255
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
185.147.204.0/22
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.98.96.0/19
195.132.0.0/16
195.146.192.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.169.160.0/19
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
87:7a:c3:3d:1b:38:29:ab:40:c4:fa:9f:bd:e5:49:9d:ba:26:
c8:95:5c:f5:16:56:59:04:4d:1f:38:55:ff:f5:8a:54:2f:89:
ac:13:3f:53:85:76:4f:1d:a7:cc:ae:5a:96:2c:4d:92:b8:9e:
1f:51:21:2a:ee:82:6d:4c:b2:75:8f:68:ea:70:c8:50:c5:45:
be:cf:9c:95:94:f2:77:9b:41:37:74:db:bf:00:2a:93:48:ba:
0f:ea:6d:fe:44:f4:61:51:7b:44:61:63:1f:36:ac:5b:db:3c:
9e:fa:6e:5a:dd:c4:e0:9e:4e:24:78:f1:40:e3:b8:41:62:6d:
3c:0c:62:15:b8:f5:68:68:15:34:61:ec:11:05:76:04:7a:61:
6b:4f:04:56:35:02:b4:38:9f:69:02:a6:04:36:ab:e3:b9:f0:
a3:26:61:14:4d:09:22:03:95:d1:2d:56:cb:2e:37:13:54:03:
a2:ed:b9:ff:55:25:ca:16:22:74:b0:c0:62:ff:8a:7f:0a:05:
3e:2b:7a:ec:3a:5b:89:cc:ea:08:46:1f:ec:9d:53:ae:43:f9:
bf:07:4e:5c:13:cb:b1:53:6d:eb:19:e7:09:61:f6:5d:71:7a:
37:74:0f:db:c7:c3:ba:ad:e0:f9:43:54:9a:50:54:9c:5d:4b:
55:66:a8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:10:54 2025 by rpki-client