Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/pGcchx-mYjVvqmHzReOJAaOyPMY.roa
File: pGcchx-mYjVvqmHzReOJAaOyPMY.roa (raw, json)
Hash identifier: UI1od9Ry/YXuD0PfyCIyFZh5ps63j5c7+BI5yyc3GXc=
Subject key identifier: A4:67:1C:87:1F:A6:62:35:6F:AA:61:F3:45:E3:89:01:A3:B2:3C:C6
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0187A4112BFE804EDFD68EF321CBF4376CE8
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/pGcchx-mYjVvqmHzReOJAaOyPMY.roa
Signing time: Fri 21 Apr 2023 13:46:41 +0000
ROA not before: Fri 21 Apr 2023 13:46:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 80.70.32.0/20 maxlen: 20
80.124.0.0/16 maxlen: 24
217.19.192.0/20 maxlen: 20
88.141.0.0/16 maxlen: 24
212.198.0.0/16 maxlen: 16
91.151.112.0/20 maxlen: 20
213.144.192.0/19 maxlen: 19
217.70.80.0/20 maxlen: 20
79.80.0.0/12 maxlen: 24
185.147.204.0/22 maxlen: 22
77.144.0.0/12 maxlen: 24
79.174.192.0/18 maxlen: 18
195.3.0.0/18 maxlen: 18
77.137.196.0/22 maxlen: 24
85.168.0.0/14 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
79.174.232.0/21 maxlen: 21
81.185.0.0/16 maxlen: 24
194.6.128.0/19 maxlen: 19
195.146.192.0/19 maxlen: 19
84.96.0.0/13 maxlen: 24
77.136.172.0/24 maxlen: 24
88.140.0.0/16 maxlen: 24
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 24
89.2.0.0/15 maxlen: 24
62.106.128.0/17 maxlen: 24
217.112.224.0/20 maxlen: 20
194.183.192.0/19 maxlen: 19
62.62.128.0/17 maxlen: 24
141.170.216.0/21 maxlen: 21
212.39.128.0/19 maxlen: 19
213.245.0.0/16 maxlen: 16
86.66.127.0/24 maxlen: 24
62.241.64.0/18 maxlen: 24
81.220.0.0/16 maxlen: 24
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 24
213.169.160.0/19 maxlen: 19
109.0.0.0/11 maxlen: 11
93.0.0.0/11 maxlen: 11
81.1.0.0/18 maxlen: 24
81.65.0.0/16 maxlen: 16
84.55.128.0/18 maxlen: 18
62.129.160.0/19 maxlen: 24
78.112.0.0/12 maxlen: 24
62.8.0.0/19 maxlen: 19
77.136.0.0/16 maxlen: 24
46.35.0.0/19 maxlen: 19
88.136.0.0/14 maxlen: 24
37.64.0.0/13 maxlen: 24
80.236.0.0/17 maxlen: 24
77.128.0.0/13 maxlen: 24
212.94.160.0/19 maxlen: 19
81.185.160.0/20 maxlen: 20
81.185.160.0/21 maxlen: 21
80.125.0.0/16 maxlen: 24
81.185.168.0/21 maxlen: 21
83.141.128.0/17 maxlen: 24
84.205.128.0/19 maxlen: 24
77.134.204.0/24 maxlen: 24
212.30.96.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
80.118.4.0/24 maxlen: 24
81.64.0.0/14 maxlen: 24
213.128.32.0/19 maxlen: 19
80.118.0.0/15 maxlen: 24
194.242.176.0/20 maxlen: 20
92.88.0.0/13 maxlen: 13
195.7.96.0/19 maxlen: 19
91.68.0.0/22 maxlen: 22
195.132.0.0/16 maxlen: 16
85.68.0.0/15 maxlen: 24
195.98.96.0/19 maxlen: 19
213.223.0.0/16 maxlen: 16
91.68.0.0/14 maxlen: 14
84.4.0.0/14 maxlen: 24
77.192.0.0/12 maxlen: 24
86.64.0.0/12 maxlen: 24
82.216.0.0/16 maxlen: 24
195.115.0.0/16 maxlen: 16
88.142.0.0/16 maxlen: 24
78.155.128.0/19 maxlen: 19
2a02:8400::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a00:7180::/32 maxlen: 32
2a02:8440:5000::/36 maxlen: 36
2a02:8400:11::/48 maxlen: 48
2a02:8400::/25 maxlen: 25
2a02:8400:12::/48 maxlen: 48
2a02:8400:13::/48 maxlen: 48
2a00:6200::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a4:11:2b:fe:80:4e:df:d6:8e:f3:21:cb:f4:37:6c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Apr 21 13:46:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4671c871fa662356faa61f345e38901a3b23cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:a9:c5:b0:4e:32:2d:a1:34:38:a8:55:06:
23:4e:d0:7e:9e:ea:b5:4c:e8:47:c3:74:bf:17:87:
bc:a6:9d:23:13:86:3d:bc:03:34:d6:2f:d6:c2:9b:
26:34:02:a2:a9:3b:d7:2d:b6:6c:92:4a:92:33:16:
26:e7:e9:8c:28:67:ba:91:88:78:cf:14:4d:ad:22:
ee:6e:b9:06:8e:1c:7e:16:53:71:3b:48:3a:6d:44:
d7:cf:32:3a:d4:0b:45:fa:6a:1d:47:a3:e7:d1:90:
76:99:0f:76:6f:0c:fb:55:95:4d:ec:fb:7d:45:c4:
11:22:23:69:47:f7:ef:35:31:ae:fc:1d:d5:25:f5:
68:e2:54:1b:17:2e:e8:0e:ef:c5:fc:38:c8:c5:28:
9d:59:a4:a0:6c:08:30:92:05:32:c1:a0:9d:85:c5:
15:56:38:82:95:c5:34:00:3f:70:7d:71:94:80:cf:
e6:bb:c4:74:ef:ab:4e:bc:ac:1c:a5:2e:b4:d3:2f:
c4:22:a8:a8:54:2d:50:6b:01:c7:e1:a4:28:d2:7c:
16:87:45:3b:d1:29:c4:c5:75:d2:c2:90:74:c6:aa:
97:78:85:da:87:84:e8:c6:ca:70:a9:5e:62:8f:a8:
6b:48:1e:eb:a7:56:9e:82:4e:ee:c7:00:45:be:f8:
c6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:67:1C:87:1F:A6:62:35:6F:AA:61:F3:45:E3:89:01:A3:B2:3C:C6
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/pGcchx-mYjVvqmHzReOJAaOyPMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0-88.142.255.255
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
2e:c2:b9:25:a7:5d:24:be:cd:69:a8:cd:4a:cd:65:ad:7c:40:
d2:21:bf:29:cb:0e:30:1c:16:f6:cc:02:b2:5b:65:f8:cc:c0:
b7:43:b8:08:c5:52:e7:48:6c:da:05:73:18:ac:31:ce:ff:1b:
05:a2:69:18:86:06:e5:4a:b5:e5:7f:a6:2f:a1:b7:64:f1:7b:
58:9b:ea:4d:b3:b2:82:c9:1b:16:85:fc:b7:e9:d7:1f:5b:32:
4c:17:ab:2f:d7:31:05:37:a3:e8:f7:08:d3:b9:af:87:aa:74:
e6:a0:a4:ed:46:c6:00:fe:3f:d8:45:49:9e:72:f5:d4:af:62:
f0:c7:e5:21:1a:c8:c2:0c:3d:00:a5:ec:26:e1:14:c3:d7:49:
2a:b6:98:2d:71:0e:46:94:47:47:96:1d:dd:b6:37:44:da:12:
03:2f:b8:0c:58:13:90:76:0a:3d:73:3a:3f:13:d8:c1:8f:8c:
fa:36:52:ec:ca:c5:27:b2:78:5d:63:fa:cb:29:6b:43:60:18:
71:0c:b8:88:bb:43:f6:ab:c4:90:77:20:9d:c0:6a:80:37:aa:
87:92:2e:12:93:45:cd:e7:b8:0b:7f:b8:f0:c8:03:1c:f5:a4:
ed:eb:ae:a7:38:ee:33:8f:3c:47:18:bc:68:e5:8a:8c:c5:49:
b2:e4:97:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:42:51 2025 by rpki-client