Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/yaixlZ515kxwntCSRFzlUnTQOvs.roa
File: yaixlZ515kxwntCSRFzlUnTQOvs.roa (raw, json)
Hash identifier: UjmGHpjc5j9iB4GlAis3e3tV5Xu7A6o/2t5YZRyJkZM=
Subject key identifier: C9:A8:B1:95:9E:75:E6:4C:70:9E:D0:92:44:5C:E5:52:74:D0:3A:FB
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018A99D5A5AB929E48CDCD731DEEB6481F85
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/yaixlZ515kxwntCSRFzlUnTQOvs.roa
Signing time: Fri 15 Sep 2023 17:13:50 +0000
ROA not before: Fri 15 Sep 2023 17:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 217.19.192.0/20 maxlen: 24
88.141.0.0/16 maxlen: 24
79.80.0.0/12 maxlen: 24
185.147.204.0/22 maxlen: 24
79.174.192.0/18 maxlen: 24
85.168.0.0/14 maxlen: 24
79.174.232.0/21 maxlen: 21
194.6.128.0/19 maxlen: 19
195.146.192.0/19 maxlen: 24
88.140.0.0/16 maxlen: 24
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 24
62.106.128.0/17 maxlen: 24
217.112.224.0/20 maxlen: 24
212.39.128.0/19 maxlen: 24
86.66.127.0/24 maxlen: 24
62.241.64.0/18 maxlen: 24
81.220.0.0/16 maxlen: 24
81.65.0.0/16 maxlen: 16
78.112.0.0/12 maxlen: 24
37.64.0.0/13 maxlen: 24
81.185.160.0/20 maxlen: 20
81.185.160.0/21 maxlen: 21
80.125.0.0/16 maxlen: 24
81.185.168.0/21 maxlen: 21
84.205.128.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
80.118.4.0/24 maxlen: 24
81.64.0.0/14 maxlen: 24
80.118.0.0/15 maxlen: 24
195.132.0.0/16 maxlen: 24
195.98.96.0/19 maxlen: 24
84.4.0.0/14 maxlen: 24
77.192.0.0/12 maxlen: 24
86.64.0.0/12 maxlen: 24
80.124.0.0/16 maxlen: 24
80.70.32.0/20 maxlen: 24
212.198.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 24
213.144.192.0/19 maxlen: 24
217.70.80.0/20 maxlen: 24
77.144.0.0/12 maxlen: 24
195.3.0.0/18 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
81.185.0.0/16 maxlen: 24
84.96.0.0/13 maxlen: 24
77.136.172.0/24 maxlen: 24
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
89.2.0.0/15 maxlen: 24
194.183.192.0/19 maxlen: 19
62.62.128.0/17 maxlen: 24
141.170.216.0/21 maxlen: 24
213.245.0.0/16 maxlen: 24
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 24
213.169.160.0/19 maxlen: 24
109.0.0.0/11 maxlen: 24
93.0.0.0/11 maxlen: 24
81.1.0.0/18 maxlen: 24
84.55.128.0/18 maxlen: 24
62.129.160.0/19 maxlen: 24
62.8.0.0/19 maxlen: 19
77.136.0.0/16 maxlen: 24
46.35.0.0/19 maxlen: 24
88.136.0.0/14 maxlen: 24
80.236.0.0/17 maxlen: 24
77.128.0.0/13 maxlen: 24
212.94.160.0/19 maxlen: 24
83.141.128.0/17 maxlen: 24
77.134.204.0/24 maxlen: 24
213.128.32.0/19 maxlen: 24
194.242.176.0/20 maxlen: 20
92.88.0.0/13 maxlen: 24
195.7.96.0/19 maxlen: 24
91.68.0.0/22 maxlen: 22
85.68.0.0/15 maxlen: 24
213.223.0.0/16 maxlen: 24
91.68.0.0/14 maxlen: 24
82.216.0.0/16 maxlen: 24
195.115.0.0/16 maxlen: 24
78.155.128.0/19 maxlen: 24
88.142.0.0/16 maxlen: 24
2a02:8400::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a02:8440:5000::/36 maxlen: 36
2a02:8400:11::/48 maxlen: 48
2a00:8d80::/32 maxlen: 32
2a00:ec80::/32 maxlen: 32
2a02:8400:13::/48 maxlen: 48
2a00:6200::/29 maxlen: 48
2a00:8380::/32 maxlen: 32
2a00:7180::/32 maxlen: 32
2a02:8400::/25 maxlen: 48
2a02:8400:12::/48 maxlen: 48
2a00:9380::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:99:d5:a5:ab:92:9e:48:cd:cd:73:1d:ee:b6:48:1f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Sep 15 17:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9a8b1959e75e64c709ed092445ce55274d03afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:b2:3e:38:01:63:c5:d2:55:62:a0:11:64:
25:75:94:27:9e:67:0a:c8:0a:83:52:95:74:9a:32:
a2:d7:62:a0:74:d7:71:84:ac:e6:28:7c:48:c6:42:
3b:85:50:29:6b:f0:39:37:94:05:7f:12:c1:48:80:
af:a1:64:ce:6f:51:3b:f9:26:f4:06:a0:c8:97:ca:
f8:f0:f3:90:00:87:1b:b7:80:ca:1f:1a:b3:a4:9e:
51:95:38:3c:93:9e:8b:c1:2b:ba:32:22:80:4e:b3:
de:0d:0d:21:41:ec:4c:c8:bf:2a:c9:dc:52:32:24:
df:a9:08:08:ea:f1:ff:db:e8:72:17:ba:a0:27:03:
59:69:e7:95:df:f9:a0:f8:95:6e:3c:ca:97:1b:95:
42:50:72:64:2a:80:4a:a8:cc:fc:49:49:77:8f:73:
2f:2c:3a:2c:94:f5:56:87:5b:bc:f1:81:c4:b9:15:
c7:c4:d6:02:4b:a4:6d:62:1d:d5:d3:1d:31:a8:51:
33:82:91:64:c2:2b:b3:dc:c4:6d:97:6e:84:35:45:
07:72:b9:da:a7:e1:3e:1c:ec:92:e9:54:4b:4b:a9:
d5:b9:86:33:31:da:90:ba:92:35:e9:bc:38:d1:ab:
b9:01:fa:f1:f0:d7:61:c9:d4:70:33:2f:7c:b8:1d:
57:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A8:B1:95:9E:75:E6:4C:70:9E:D0:92:44:5C:E5:52:74:D0:3A:FB
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/yaixlZ515kxwntCSRFzlUnTQOvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0-88.142.255.255
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a00:8380::/32
2a00:8d80::/32
2a00:9380::/32
2a00:ec80::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
7b:dd:f4:d5:eb:14:88:2e:1e:1c:ff:72:99:5d:1a:79:ac:90:
29:e1:5e:ca:f4:e8:ee:9b:3b:34:56:38:88:b0:f1:75:34:cb:
24:30:ee:e6:ab:38:fc:b0:73:d2:6a:4f:d6:2e:de:f3:6c:8c:
a1:64:a0:4a:e5:ab:6e:89:e1:c2:30:28:f9:6f:f1:f1:40:88:
1d:b0:0f:b4:62:7a:db:28:e3:ea:fe:a4:c1:3d:5e:83:30:f1:
4a:73:00:7c:0e:d8:a2:f8:82:a5:80:6d:41:3e:2a:e2:b6:c2:
59:4a:ea:77:aa:09:69:47:da:a0:fc:9b:90:ff:d5:ff:50:9c:
9d:f8:09:25:1d:98:9a:0b:08:98:e2:59:51:69:aa:a1:4d:c4:
76:e0:f7:62:bb:ff:dd:4d:89:9a:60:87:1e:80:c6:8e:14:85:
fb:bb:0f:ef:72:74:f6:f8:ae:30:4f:95:80:8d:60:35:5b:9b:
cc:ae:07:5b:7e:21:89:5f:0e:94:3d:ff:c9:4c:92:10:59:d1:
3a:a9:55:ca:0a:dd:8f:e9:8c:ec:b8:98:d7:44:02:d1:48:e5:
c7:3d:f1:98:74:8b:24:e7:5e:19:84:8d:68:fc:d4:14:72:d9:
f1:a0:3c:eb:8e:67:d7:54:3e:60:c6:ba:e7:c1:ba:09:08:04:
5a:80:a4:8a
-----BEGIN CERTIFICATE-----
MIIGxDCCBaygAwIBAgISAYqZ1aWrkp5Izc1zHe62SB+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz
YzQwM2UwHhcNMjMwOTE1MTcxMzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWE4YjE5NTllNzVlNjRjNzA5ZWQwOTI0NDVjZTU1Mjc0ZDAzYWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZGyPjgBY8XSVWKgEWQldZQnnmcK
yAqDUpV0mjKi12KgdNdxhKzmKHxIxkI7hVApa/A5N5QFfxLBSICvoWTOb1E7+Sb0
BqDIl8r48POQAIcbt4DKHxqzpJ5RlTg8k56LwSu6MiKATrPeDQ0hQexMyL8qydxS
MiTfqQgI6vH/2+hyF7qgJwNZaeeV3/mg+JVuPMqXG5VCUHJkKoBKqMz8SUl3j3Mv
LDoslPVWh1u88YHEuRXHxNYCS6RtYh3V0x0xqFEzgpFkwiuz3MRtl26ENUUHcrna
p+E+HOyS6VRLS6nVuYYzMdqQupI16bw40au5Afrx8NdhydRwMy98uB1XVQIDAQAB
o4ID0DCCA8wwHQYDVR0OBBYEFMmosZWedeZMcJ7QkkRc5VJ00Dr7MB8GA1UdIwQY
MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEveWFpeGxaNTE1a3h3bnRDU1JGemxVblRRT3ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB5AYIKwYBBQUHAQcBAf8EggHTMIIBzzCCAZIEAgABMIIB
igMDAyVAAwQFLiMAAwQFPggAAwMAPicDBAc+PoADBAc+aoADBAU+gaADBAY+8UAw
CgMDB02AAwMATYgwDAMEAk2JxAMEBU2JwDAKAwMCTYwDAwVNgAMDBE3AAwMETnAD
BAVOm4ADAwRPUAMEBk+uwAMEBFBGIAMDAVB2AwMBUHwDBAdQ7AADBAZRAQADAwJR
QAMDAFG5AwMAUdwDAwBS2AMEB1ONgAMDAlQEAwQGVDeAAwMDVGADBAVUzYADAwFV
RAMDAlWoAwMEVkADAwBX5zAKAwMDWIgDAwBYjgMDAVkCAwMCWZwDAwJbRAMEBFuX
cAMDA1xYAwMFXQADAwVtAAMEA42q2AMEArmTzAMEBcIGgAMEBcK3wAMEBMLysAME
BsMDAAMEBcMHYAMEBcNiYAMDAMNzAwMAw4QDBAXDksADBAXUHmADBAXUJ4ADBAXU
XqADAwDUxgMEBdWAIAMEBdWQwAMEBdWpoAMEBtXLQAMDANXfAwMA1fUDBATZE8AD
BATZRlADBATZcOAwNwQCAAIwMQMFAyoAYgADBQAqAHGAAwUAKgCDgAMFACoAjYAD
BQAqAJOAAwUAKgDsgAMFByoChAAwDQYJKoZIhvcNAQELBQADggEBAHvd9NXrFIgu
Hhz/cpldGnmskCnhXsr06O6bOzRWOIiw8XU0yyQw7uarOPywc9JqT9Yu3vNsjKFk
oErlq26J4cIwKPlv8fFAiB2wD7Rietso4+r+pME9XoMw8UpzAHwO2KL4gqWAbUE+
KuK2wllK6neqCWlH2qD8m5D/1f9QnJ34CSUdmJoLCJjiWVFpqqFNxHbg92K7/91N
iZpghx6Axo4Uhfu7D+9ydPb4rjBPlYCNYDVbm8yuB1t+IYlfDpQ9/8lMkhBZ0Tqp
VcoK3Y/pjOy4mNdEAtFI5cc98Zh0iyTnXhmEjWj81BRy2fGgPOuOZ9dUPmDGuufB
ugkIBFqApIo=
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:13:33 2025 by rpki-client