Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/zVj8Ldkr47JUngTCSsqapOStBBU.roa
File: zVj8Ldkr47JUngTCSsqapOStBBU.roa (raw, json)
Hash identifier: XCeg4mS3csUOn2cvy7EeQdZlC+KQx98zoGpYS//i/+Y=
Subject key identifier: CD:58:FC:2D:D9:2B:E3:B2:54:9E:04:C2:4A:CA:9A:A4:E4:AD:04:15
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0183A354C76EA7BCDA90300B98A095489CF1
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/zVj8Ldkr47JUngTCSsqapOStBBU.roa
Signing time: Tue 04 Oct 2022 14:09:45 +0000
ROA not before: Tue 04 Oct 2022 14:09:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15557
IP address blocks: 80.124.0.0/16 maxlen: 16
80.70.32.0/20 maxlen: 20
217.19.192.0/20 maxlen: 20
88.141.0.0/16 maxlen: 16
212.198.0.0/16 maxlen: 16
91.151.112.0/20 maxlen: 20
213.144.192.0/19 maxlen: 19
217.70.80.0/20 maxlen: 20
79.80.0.0/12 maxlen: 12
185.147.204.0/22 maxlen: 22
77.144.0.0/12 maxlen: 12
79.174.192.0/18 maxlen: 18
195.3.0.0/18 maxlen: 18
77.137.196.0/22 maxlen: 22
85.168.0.0/14 maxlen: 14
77.137.200.0/21 maxlen: 21
77.137.208.0/20 maxlen: 20
194.6.128.0/19 maxlen: 19
195.146.192.0/19 maxlen: 19
84.96.0.0/13 maxlen: 13
77.136.172.0/24 maxlen: 24
88.140.0.0/16 maxlen: 16
77.136.173.0/24 maxlen: 24
77.136.175.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
87.231.0.0/16 maxlen: 16
62.39.0.0/16 maxlen: 16
77.140.0.0/14 maxlen: 14
89.2.0.0/15 maxlen: 15
62.106.128.0/17 maxlen: 17
217.112.224.0/20 maxlen: 20
194.183.192.0/19 maxlen: 19
141.170.216.0/21 maxlen: 21
212.39.128.0/19 maxlen: 19
213.245.0.0/16 maxlen: 16
62.241.64.0/18 maxlen: 18
81.220.0.0/16 maxlen: 16
89.156.0.0/14 maxlen: 14
213.169.160.0/19 maxlen: 19
109.0.0.0/11 maxlen: 11
93.0.0.0/11 maxlen: 11
81.1.0.0/18 maxlen: 18
81.65.0.0/16 maxlen: 16
77.136.63.0/24 maxlen: 24
84.55.128.0/18 maxlen: 18
62.129.160.0/19 maxlen: 19
78.112.0.0/12 maxlen: 12
62.8.0.0/19 maxlen: 19
77.136.0.0/16 maxlen: 16
46.35.0.0/19 maxlen: 19
88.136.0.0/14 maxlen: 14
77.136.47.0/24 maxlen: 24
37.64.0.0/13 maxlen: 13
77.128.0.0/13 maxlen: 13
80.236.0.0/17 maxlen: 17
212.94.160.0/19 maxlen: 19
81.185.160.0/20 maxlen: 20
80.125.0.0/16 maxlen: 16
83.141.128.0/17 maxlen: 17
84.205.128.0/19 maxlen: 19
77.134.204.0/24 maxlen: 24
84.205.144.0/20 maxlen: 20
81.64.0.0/14 maxlen: 14
213.128.32.0/19 maxlen: 19
80.118.0.0/15 maxlen: 15
194.242.176.0/20 maxlen: 20
92.88.0.0/13 maxlen: 13
195.7.96.0/19 maxlen: 19
91.68.0.0/22 maxlen: 22
195.132.0.0/16 maxlen: 16
85.68.0.0/15 maxlen: 15
195.98.96.0/19 maxlen: 19
213.223.0.0/16 maxlen: 16
91.68.0.0/14 maxlen: 14
84.4.0.0/14 maxlen: 14
77.192.0.0/12 maxlen: 12
86.64.0.0/12 maxlen: 12
82.216.0.0/16 maxlen: 16
195.115.0.0/16 maxlen: 16
78.155.128.0/19 maxlen: 19
88.142.0.0/16 maxlen: 16
2a00:7180::/32 maxlen: 32
2a02:8400::/25 maxlen: 25
2a00:6200::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a3:54:c7:6e:a7:bc:da:90:30:0b:98:a0:95:48:9c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Oct 4 14:09:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd58fc2dd92be3b2549e04c24aca9aa4e4ad0415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:12:9b:c9:e2:3c:53:55:d6:e1:eb:a5:be:4a:
19:4a:d9:b4:00:e2:b6:44:ea:4e:63:e0:33:76:b4:
35:69:b3:97:d9:01:9e:35:9b:5e:2e:fe:b3:62:a2:
c9:18:70:a6:5e:8a:1c:e7:b5:6f:1a:e0:de:3e:25:
5a:2c:7b:9a:98:35:ab:1e:92:27:9a:d2:4f:32:9e:
f9:db:9a:34:05:7d:b3:89:07:7d:ce:33:00:36:a9:
d6:53:df:6a:0d:21:96:cd:5c:06:23:31:e1:2c:81:
ec:7d:9a:ef:67:e9:80:21:de:dd:82:b5:c8:6c:2b:
5e:bb:47:17:e5:26:77:a0:2b:41:3a:8c:37:72:66:
c7:d2:81:ce:bc:64:40:f1:f6:cc:ed:90:c5:59:56:
ee:be:2f:15:01:36:81:89:b0:a2:10:32:1d:e3:3a:
ef:28:af:06:47:d1:45:37:ae:5d:67:1e:4a:c0:ac:
4b:bd:62:28:f4:5e:85:d7:84:93:53:d0:1c:3f:ed:
f1:89:a0:87:69:98:84:cb:61:d1:29:f5:a7:ac:32:
e6:e2:cb:e6:5b:df:36:7d:fb:5e:8d:05:af:aa:3b:
c7:8e:9b:05:63:2b:bf:c0:39:fe:20:22:90:91:8d:
ca:62:01:fe:41:1e:8b:52:e6:50:f2:bb:ab:bd:10:
02:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:58:FC:2D:D9:2B:E3:B2:54:9E:04:C2:4A:CA:9A:A4:E4:AD:04:15
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/zVj8Ldkr47JUngTCSsqapOStBBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.160.0/20
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0-88.142.255.255
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
3f:0b:d1:6f:8d:f5:76:05:fb:6a:26:6c:96:8a:98:b3:a5:85:
42:56:6f:df:96:92:c9:08:cd:d3:72:c9:25:6f:10:d8:f5:b8:
e2:99:5f:75:4f:63:a3:09:9c:d4:fe:c3:48:0d:3c:8c:50:fb:
9f:c5:8d:5f:6a:60:87:ed:98:6e:7d:39:59:1f:7d:ef:fa:cb:
50:ba:48:c9:67:13:bd:00:2a:45:1d:fd:a8:73:52:f4:94:59:
7b:ce:84:bf:2b:1e:90:73:72:38:71:a3:dd:02:7a:3e:dd:23:
c8:e3:5f:71:98:ca:3c:28:18:99:b1:88:4e:5e:4e:dd:10:0b:
e4:3e:84:71:4e:1b:21:49:3c:85:99:cf:66:36:63:c5:89:71:
2f:a2:1a:90:51:81:3b:d9:45:57:2d:62:b8:18:29:18:9c:88:
d8:a9:b1:61:8d:1e:b7:21:1b:03:b5:21:be:27:49:71:04:46:
72:2d:7d:33:4e:df:0e:1a:41:5a:d2:e4:4b:4a:88:f0:62:c1:
36:19:80:8a:9f:71:b9:b4:16:89:63:ff:3d:87:17:cd:a7:02:
a7:30:fd:69:66:14:17:7e:37:51:7c:02:19:c8:50:9b:ec:d6:
fe:44:ae:7b:5e:57:89:ec:b4:6b:27:f8:70:5a:30:a1:7b:73:
2d:b7:93:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:37:19 2025 by rpki-client