Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/puOxqviN6ryzKD-_yvcd0cxjIF0.roa
File: puOxqviN6ryzKD-_yvcd0cxjIF0.roa (raw, json)
Hash identifier: rcQKgleJMu/AVL0lCLzzkRHIChkzvmUPmlM1OoW6ibo=
Subject key identifier: A6:E3:B1:AA:F8:8D:EA:BC:B3:28:3F:BF:CA:F7:1D:D1:CC:63:20:5D
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0183AD6AAF7ED05C568272C2FA6F483E980E
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/puOxqviN6ryzKD-_yvcd0cxjIF0.roa
Signing time: Thu 06 Oct 2022 13:09:53 +0000
ROA not before: Thu 06 Oct 2022 13:09:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15557
IP address blocks: 80.124.0.0/16 maxlen: 16
80.70.32.0/20 maxlen: 20
217.19.192.0/20 maxlen: 20
88.141.0.0/16 maxlen: 16
212.198.0.0/16 maxlen: 16
91.151.112.0/20 maxlen: 20
213.144.192.0/19 maxlen: 19
217.70.80.0/20 maxlen: 20
79.80.0.0/12 maxlen: 12
185.147.204.0/22 maxlen: 22
77.144.0.0/12 maxlen: 12
79.174.192.0/18 maxlen: 18
195.3.0.0/18 maxlen: 18
77.137.196.0/22 maxlen: 22
85.168.0.0/14 maxlen: 14
77.137.200.0/21 maxlen: 21
77.137.208.0/20 maxlen: 20
79.174.232.0/21 maxlen: 21
194.6.128.0/19 maxlen: 19
195.146.192.0/19 maxlen: 19
84.96.0.0/13 maxlen: 13
77.136.172.0/24 maxlen: 24
88.140.0.0/16 maxlen: 16
77.136.173.0/24 maxlen: 24
77.136.175.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
87.231.0.0/16 maxlen: 16
62.39.0.0/16 maxlen: 16
77.140.0.0/14 maxlen: 14
89.2.0.0/15 maxlen: 15
62.106.128.0/17 maxlen: 17
217.112.224.0/20 maxlen: 20
194.183.192.0/19 maxlen: 19
141.170.216.0/21 maxlen: 21
212.39.128.0/19 maxlen: 19
213.245.0.0/16 maxlen: 16
62.241.64.0/18 maxlen: 18
81.220.0.0/16 maxlen: 16
89.156.0.0/14 maxlen: 14
213.169.160.0/19 maxlen: 19
93.0.0.0/11 maxlen: 11
109.0.0.0/11 maxlen: 11
81.1.0.0/18 maxlen: 18
81.65.0.0/16 maxlen: 16
77.136.63.0/24 maxlen: 24
84.55.128.0/18 maxlen: 18
62.129.160.0/19 maxlen: 19
78.112.0.0/12 maxlen: 12
62.8.0.0/19 maxlen: 19
77.136.0.0/16 maxlen: 16
46.35.0.0/19 maxlen: 19
88.136.0.0/14 maxlen: 14
77.136.47.0/24 maxlen: 24
37.64.0.0/13 maxlen: 13
77.128.0.0/13 maxlen: 13
80.236.0.0/17 maxlen: 17
212.94.160.0/19 maxlen: 19
81.185.160.0/20 maxlen: 20
80.125.0.0/16 maxlen: 16
83.141.128.0/17 maxlen: 17
84.205.128.0/19 maxlen: 19
77.134.204.0/24 maxlen: 24
84.205.144.0/20 maxlen: 20
81.64.0.0/14 maxlen: 14
213.128.32.0/19 maxlen: 19
80.118.0.0/15 maxlen: 15
194.242.176.0/20 maxlen: 20
92.88.0.0/13 maxlen: 13
195.7.96.0/19 maxlen: 19
91.68.0.0/22 maxlen: 22
195.132.0.0/16 maxlen: 16
85.68.0.0/15 maxlen: 15
195.98.96.0/19 maxlen: 19
213.223.0.0/16 maxlen: 16
91.68.0.0/14 maxlen: 14
84.4.0.0/14 maxlen: 14
77.192.0.0/12 maxlen: 12
86.64.0.0/12 maxlen: 12
82.216.0.0/16 maxlen: 16
195.115.0.0/16 maxlen: 16
78.155.128.0/19 maxlen: 19
88.142.0.0/16 maxlen: 16
2a00:7180::/32 maxlen: 32
2a02:8400::/25 maxlen: 25
2a00:6200::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ad:6a:af:7e:d0:5c:56:82:72:c2:fa:6f:48:3e:98:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Oct 6 13:09:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6e3b1aaf88deabcb3283fbfcaf71dd1cc63205d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:8f:3c:f1:b8:ff:e1:a7:06:7b:66:28:1f:
a7:2e:6a:ad:e8:1b:87:4b:34:0e:d1:63:4f:5e:4d:
fc:ca:ff:61:06:9a:20:bd:b4:29:7d:d8:e1:2b:bf:
e7:ac:ea:8e:0e:22:6a:ba:84:f3:d5:ac:f4:07:27:
14:be:41:8b:f4:2b:c1:4a:7a:5b:3d:c1:14:df:6a:
8a:73:b9:3a:53:53:97:a5:d3:16:90:f2:40:29:ca:
2c:6b:08:c0:74:1e:d1:b1:9d:38:20:c4:26:d8:3c:
f0:23:89:31:9e:c1:7a:d0:65:81:20:51:9e:25:d9:
de:93:44:9c:cf:9f:8a:2e:43:ee:b6:b6:ee:17:86:
0a:db:bf:9d:31:b1:e8:58:78:48:d9:3d:7e:8a:77:
0f:f3:e4:f1:a3:2f:b0:29:c5:a2:fb:0a:dd:28:e7:
ab:8f:b4:39:82:02:9e:db:91:10:e4:4a:7a:6f:8c:
2e:ce:af:11:c8:1c:c5:3d:23:39:44:7e:ea:2a:d9:
1a:ef:0b:5e:c4:3c:f6:81:59:8c:1a:1e:3b:69:08:
f2:00:f7:70:20:52:45:59:7e:54:09:19:77:28:43:
5c:54:19:95:0d:e0:12:ff:aa:de:91:3f:f2:6e:06:
13:21:ca:89:ad:37:fd:1c:97:ac:ee:fd:11:8f:b5:
12:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E3:B1:AA:F8:8D:EA:BC:B3:28:3F:BF:CA:F7:1D:D1:CC:63:20:5D
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/puOxqviN6ryzKD-_yvcd0cxjIF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.160.0/20
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0-88.142.255.255
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
75:aa:ff:7d:d0:c6:f7:69:52:dd:b9:20:8d:10:57:40:9d:87:
b9:46:68:f9:2a:5d:2c:f9:70:ea:94:51:80:d6:08:46:f7:d2:
9b:d9:21:3e:48:97:13:4e:01:73:f4:bc:f9:94:a1:61:07:0f:
e1:df:f2:3e:80:87:67:5a:19:15:ac:96:27:da:ef:d6:1d:23:
9b:df:ce:09:af:e0:6b:d8:bd:f1:0b:68:40:05:94:72:23:dd:
38:65:fe:51:ae:23:f1:2c:e6:37:72:6e:25:78:7f:a4:a5:2b:
da:9c:81:a5:1d:bb:2e:b1:d5:32:0e:88:39:86:b4:20:33:ca:
b1:8c:14:d9:c5:e1:bb:dc:5d:57:67:ce:a3:b5:d3:e0:6c:e6:
86:ba:fa:4f:07:56:73:84:9c:cc:90:aa:29:f7:d6:a9:78:da:
e6:5a:9d:f2:35:a3:4a:4c:c1:54:2f:b6:41:68:17:a2:22:4c:
94:56:54:af:2e:05:98:b8:7e:82:3b:91:56:ca:b9:6b:6c:ff:
e6:e7:b2:b5:ac:01:cd:42:9d:f9:3b:86:28:ce:fd:35:ee:f6:
76:4a:13:b2:88:ba:fe:69:66:b5:3f:33:ff:9e:e2:db:5f:3e:
8c:6c:23:81:e2:8d:4d:3e:99:2b:04:09:13:39:9c:d7:4a:51:
e5:8c:4a:ca
-----BEGIN CERTIFICATE-----
MIIGlzCCBX+gAwIBAgISAYOtaq9+0FxWgnLC+m9IPpgOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz
YzQwM2UwHhcNMjIxMDA2MTMwOTUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmUzYjFhYWY4OGRlYWJjYjMyODNmYmZjYWY3MWRkMWNjNjMyMDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxOPPPG4/+GnBntmKB+nLmqt6BuH
SzQO0WNPXk38yv9hBpogvbQpfdjhK7/nrOqODiJquoTz1az0BycUvkGL9CvBSnpb
PcEU32qKc7k6U1OXpdMWkPJAKcosawjAdB7RsZ04IMQm2DzwI4kxnsF60GWBIFGe
Jdnek0Scz5+KLkPutrbuF4YK27+dMbHoWHhI2T1+incP8+Txoy+wKcWi+wrdKOer
j7Q5ggKe25EQ5Ep6b4wuzq8RyBzFPSM5RH7qKtka7wtexDz2gVmMGh47aQjyAPdw
IFJFWX5UCRl3KENcVBmVDeAS/6rekT/ybgYTIcqJrTf9HJes7v0Rj7UStQIDAQAB
o4IDozCCA58wHQYDVR0OBBYEFKbjsar4jeq8syg/v8r3HdHMYyBdMB8GA1UdIwQY
MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvcHVPeHF2aU42cnl6S0QtX3l2Y2QwY3hqSUYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBtwYIKwYBBQUHAQcBAf8EggGmMIIBojCCAYEEAgABMIIB
eQMDAyVAAwQFLiMAAwQFPggAAwMAPicDBAc+aoADBAU+gaADBAY+8UAwCgMDB02A
AwMATYgwDAMEAk2JxAMEBU2JwDAKAwMCTYwDAwVNgAMDBE3AAwMETnADBAVOm4AD
AwRPUAMEBk+uwAMEBFBGIAMDAVB2AwMBUHwDBAdQ7AADBAZRAQADAwJRQAMEBFG5
oAMDAFHcAwMAUtgDBAdTjYADAwJUBAMEBlQ3gAMDA1RgAwQFVM2AAwMBVUQDAwJV
qAMDBFZAAwMAV+cwCgMDA1iIAwMAWI4DAwFZAgMDAlmcAwMCW0QDBARbl3ADAwNc
WAMDBV0AAwMFbQADBAONqtgDBAK5k8wDBAXCBoADBAXCt8ADBATC8rADBAbDAwAD
BAXDB2ADBAXDYmADAwDDcwMDAMOEAwQFw5LAAwQF1CeAAwQF1F6gAwMA1MYDBAXV
gCADBAXVkMADBAXVqaADAwDV3wMDANX1AwQE2RPAAwQE2UZQAwQE2XDgMBsEAgAC
MBUDBQMqAGIAAwUAKgBxgAMFByoChAAwDQYJKoZIhvcNAQELBQADggEBAHWq/33Q
xvdpUt25II0QV0Cdh7lGaPkqXSz5cOqUUYDWCEb30pvZIT5IlxNOAXP0vPmUoWEH
D+Hf8j6Ah2daGRWslifa79YdI5vfzgmv4GvYvfELaEAFlHIj3Thl/lGuI/Es5jdy
biV4f6SlK9qcgaUduy6x1TIOiDmGtCAzyrGMFNnF4bvcXVdnzqO10+Bs5oa6+k8H
VnOEnMyQqin31ql42uZanfI1o0pMwVQvtkFoF6IiTJRWVK8uBZi4foI7kVbKuWts
/+bnsrWsAc1Cnfk7hijO/TXu9nZKE7KIuv5pZrU/M/+e4ttfPoxsI4HijU0+mSsE
CRM5nNdKUeWMSso=
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:16:07 2025 by rpki-client