Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Gyy1R3v7TRGX64rDuAUA152_lU4.roa
File: Gyy1R3v7TRGX64rDuAUA152_lU4.roa (raw, json)
Hash identifier: EEYTRnUJE9qCHjVnxQHFV8QQOp1DQNDU35yWL0/Ln5g=
Subject key identifier: 1B:2C:B5:47:7B:FB:4D:11:97:EB:8A:C3:B8:05:00:D7:9D:BF:95:4E
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 17F2D99E
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Gyy1R3v7TRGX64rDuAUA152_lU4.roa
Signing time: Tue 12 Apr 2022 14:46:14 +0000
ROA not before: Tue 12 Apr 2022 14:46:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58272
IP address blocks: 188.72.119.0/24 maxlen: 24
37.18.0.0/24 maxlen: 24
185.4.150.0/24 maxlen: 24
37.18.15.0/24 maxlen: 24
185.4.149.0/24 maxlen: 24
185.4.148.0/24 maxlen: 24
185.4.151.0/24 maxlen: 24
188.72.83.0/24 maxlen: 24
188.72.81.0/24 maxlen: 24
188.72.80.0/24 maxlen: 24
188.72.85.0/24 maxlen: 24
188.72.84.0/24 maxlen: 24
188.72.86.0/24 maxlen: 24
188.72.88.0/24 maxlen: 24
188.72.90.0/24 maxlen: 24
37.18.63.0/24 maxlen: 24
37.230.187.0/24 maxlen: 24
178.170.231.0/24 maxlen: 24
178.170.139.0/24 maxlen: 24
178.170.137.0/24 maxlen: 24
178.170.140.0/24 maxlen: 24
217.150.90.0/24 maxlen: 24
217.150.89.0/24 maxlen: 24
217.150.88.0/24 maxlen: 24
217.150.91.0/24 maxlen: 24
217.150.94.0/24 maxlen: 24
217.150.93.0/24 maxlen: 24
217.150.92.0/24 maxlen: 24
178.170.146.0/24 maxlen: 24
217.150.95.0/24 maxlen: 24
46.243.149.0/24 maxlen: 24
141.101.248.0/24 maxlen: 24
141.101.255.0/24 maxlen: 24
46.243.139.0/24 maxlen: 24
46.243.138.0/24 maxlen: 24
37.230.134.0/24 maxlen: 24
37.230.163.0/24 maxlen: 24
37.230.170.0/24 maxlen: 24
37.230.171.0/24 maxlen: 24
37.230.176.0/24 maxlen: 24
37.230.183.0/24 maxlen: 24
37.230.182.0/24 maxlen: 24
46.243.204.0/24 maxlen: 24
46.243.213.0/24 maxlen: 24
46.243.208.0/24 maxlen: 24
46.243.207.0/24 maxlen: 24
46.243.214.0/24 maxlen: 24
46.243.217.0/24 maxlen: 24
46.243.216.0/24 maxlen: 24
46.243.222.0/24 maxlen: 24
46.243.221.0/24 maxlen: 24
46.243.225.0/24 maxlen: 24
46.243.223.0/24 maxlen: 24
46.243.232.0/24 maxlen: 24
46.243.233.0/24 maxlen: 24
46.243.240.0/24 maxlen: 24
46.243.236.0/24 maxlen: 24
46.243.235.0/24 maxlen: 24
46.243.234.0/24 maxlen: 24
46.243.238.0/24 maxlen: 24
46.243.237.0/24 maxlen: 24
46.243.243.0/24 maxlen: 24
46.243.242.0/24 maxlen: 24
46.243.241.0/24 maxlen: 24
46.243.246.0/24 maxlen: 24
46.243.250.0/24 maxlen: 24
46.243.249.0/24 maxlen: 24
46.243.248.0/24 maxlen: 24
46.243.247.0/24 maxlen: 24
37.230.131.0/24 maxlen: 24
46.243.251.0/24 maxlen: 24
128.0.71.0/24 maxlen: 24
141.101.191.0/24 maxlen: 24
141.101.132.0/24 maxlen: 24
141.101.133.0/24 maxlen: 24
141.101.135.0/24 maxlen: 24
141.101.145.0/24 maxlen: 24
141.101.143.0/24 maxlen: 24
141.101.148.0/24 maxlen: 24
141.101.147.0/24 maxlen: 24
141.101.150.0/24 maxlen: 24
141.101.149.0/24 maxlen: 24
141.101.155.0/24 maxlen: 24
141.101.154.0/24 maxlen: 24
141.101.153.0/24 maxlen: 24
141.101.159.0/24 maxlen: 24
141.101.158.0/24 maxlen: 24
141.101.156.0/24 maxlen: 24
141.101.162.0/24 maxlen: 24
141.101.161.0/24 maxlen: 24
141.101.160.0/24 maxlen: 24
141.101.166.0/24 maxlen: 24
141.101.165.0/24 maxlen: 24
141.101.164.0/24 maxlen: 24
141.101.168.0/24 maxlen: 24
141.101.167.0/24 maxlen: 24
141.101.171.0/24 maxlen: 24
141.101.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401791390 (0x17f2d99e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Apr 12 14:46:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b2cb5477bfb4d1197eb8ac3b80500d79dbf954e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:b5:71:f6:96:bb:c7:93:7a:fd:5c:1c:4f:
dd:e0:77:41:b8:23:dd:da:e3:b2:47:ae:d1:04:44:
73:98:02:32:62:fb:ad:c1:e0:38:eb:c7:c6:5b:71:
fb:f6:82:c7:d3:c8:a1:6e:51:61:78:2b:91:89:5b:
cf:e0:e5:92:80:cb:1a:9f:3d:c5:96:14:c1:11:d4:
d4:dc:61:90:e5:0b:89:e8:0e:2a:4e:de:66:76:df:
af:f8:3e:5f:fc:80:bb:e9:2e:05:d9:ac:11:8d:65:
e6:93:42:32:0a:3c:03:63:fa:ee:15:e3:e6:54:f2:
7e:0c:64:5c:8b:32:cb:9a:d1:d6:aa:40:88:05:e2:
fd:43:de:d9:83:b9:68:fa:96:1b:2c:33:bd:ff:d3:
2c:17:25:7e:91:4d:f6:72:0f:7c:96:81:e6:58:11:
7f:64:d5:31:b7:d9:5c:dc:38:06:d0:ff:ca:43:16:
aa:03:ac:6e:68:5e:f2:82:be:3d:4a:2a:5d:8a:6d:
dc:07:f5:ae:5b:15:96:e9:fe:a9:17:f9:41:c6:c0:
8b:0f:c4:66:e8:4b:7e:9a:01:75:64:37:7e:ff:22:
d0:e7:7f:11:b8:10:bd:62:de:12:fb:37:7e:fe:e3:
20:f7:2d:1e:a6:26:47:b5:53:46:68:d3:29:bd:ef:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2C:B5:47:7B:FB:4D:11:97:EB:8A:C3:B8:05:00:D7:9D:BF:95:4E
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Gyy1R3v7TRGX64rDuAUA152_lU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.0.0/24
37.18.15.0/24
37.18.63.0/24
37.230.131.0/24
37.230.134.0/24
37.230.163.0/24
37.230.170.0/23
37.230.176.0/24
37.230.182.0/23
37.230.187.0/24
46.243.138.0/23
46.243.149.0/24
46.243.204.0/24
46.243.207.0-46.243.208.255
46.243.213.0-46.243.214.255
46.243.216.0/23
46.243.221.0-46.243.223.255
46.243.225.0/24
46.243.232.0-46.243.238.255
46.243.240.0/22
46.243.246.0-46.243.251.255
128.0.71.0/24
141.101.132.0/23
141.101.135.0/24
141.101.143.0/24
141.101.145.0/24
141.101.147.0-141.101.150.255
141.101.153.0-141.101.156.255
141.101.158.0-141.101.162.255
141.101.164.0-141.101.168.255
141.101.170.0/23
141.101.191.0/24
141.101.248.0/24
141.101.255.0/24
178.170.137.0/24
178.170.139.0-178.170.140.255
178.170.146.0/24
178.170.231.0/24
185.4.148.0/22
188.72.80.0/23
188.72.83.0-188.72.86.255
188.72.88.0/24
188.72.90.0/24
188.72.119.0/24
217.150.88.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:62:c7:86:ed:fd:ff:12:5e:8c:ed:ae:96:1b:53:cf:75:fc:
48:e4:60:37:19:23:26:74:c8:25:4a:eb:c5:23:06:58:cc:0b:
bd:19:fc:d2:0c:a3:96:fe:6b:9f:65:df:44:0c:3b:ce:9c:5e:
3f:3d:48:ef:5e:74:22:65:66:ba:59:3a:01:13:4b:f9:2c:02:
0c:e2:12:e5:86:25:04:5e:42:6e:a4:02:39:66:f8:4e:a9:1a:
c3:a4:2f:b5:63:97:47:2d:82:58:f6:8c:fe:3a:be:2d:46:ff:
99:11:dd:9e:b0:99:b0:38:a0:7b:2a:47:ea:db:f0:3a:f3:fb:
a4:3d:77:50:90:76:ea:f0:2d:ed:7d:c0:27:22:44:40:b0:bf:
f1:a6:5e:05:91:79:27:9b:ab:41:f3:e2:d2:97:dd:8f:f3:06:
23:34:b7:00:17:39:9f:7d:73:40:c0:21:78:2b:bc:5d:b9:e4:
91:6b:a1:7b:ab:33:6e:1c:c6:01:48:31:b5:7b:57:78:b5:98:
e7:aa:6e:57:91:36:53:88:40:e5:84:e3:bb:14:23:ea:d4:14:
60:be:8c:85:72:5e:d4:09:af:bb:fb:bb:a1:07:90:4f:c6:c8:
b3:61:26:e1:50:c7:89:90:52:fe:ad:6e:15:b5:8e:8d:43:fb:
89:49:92:61
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIEF/LZnjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ODg1ZTg4NGMyZmM3YTc1ZDEyZGQxZGVhNDljZTIzNDljNDcwNjdlMB4XDTIyMDQx
MjE0NDYxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWIyY2I1NDc3YmZi
NGQxMTk3ZWI4YWMzYjgwNTAwZDc5ZGJmOTU0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMTZtXH2lrvHk3r9XBxP3eB3Qbgj3drjskeu0QREc5gCMmL7
rcHgOOvHxltx+/aCx9PIoW5RYXgrkYlbz+DlkoDLGp89xZYUwRHU1NxhkOULiegO
Kk7eZnbfr/g+X/yAu+kuBdmsEY1l5pNCMgo8A2P67hXj5lTyfgxkXIsyy5rR1qpA
iAXi/UPe2YO5aPqWGywzvf/TLBclfpFN9nIPfJaB5lgRf2TVMbfZXNw4BtD/ykMW
qgOsbmhe8oK+PUoqXYpt3Af1rlsVlun+qRf5QcbAiw/EZuhLfpoBdWQ3fv8i0Od/
EbgQvWLeEvs3fv7jIPctHqYmR7VTRmjTKb3vyv0CAwEAAaOCA3MwggNvMB0GA1Ud
DgQWBBQbLLVHe/tNEZfrisO4BQDXnb+VTjAfBgNVHSMEGDAWgBRYheiEwvx6ddEt
0d6knOI0nEcGfjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dJWG9oTUw4ZW5YUkxkSGVwSnppTkp4SEJuNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODYvNmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8x
L0d5eTFSM3Y3VFJHWDY0ckR1QVVBMTUyX2xVNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYv
NmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8xL1dJWG9oTUw4ZW5Y
UkxkSGVwSnppTkp4SEJuNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AYcGCCsGAQUFBwEHAQH/BIIBdjCCAXIwggFuBAIAATCCAWYDBAAlEgADBAAlEg8D
BAAlEj8DBAAl5oMDBAAl5oYDBAAl5qMDBAEl5qoDBAAl5rADBAEl5rYDBAAl5rsD
BAEu84oDBAAu85UDBAAu88wwDAMEAC7zzwMEAC7z0DAMAwQALvPVAwQALvPWAwQB
LvPYMAwDBAAu890DBAUu88ADBAAu8+EwDAMEAy7z6AMEAC7z7gMEAi7z8DAMAwQB
LvP2AwQCLvP4AwQAgABHAwQBjWWEAwQAjWWHAwQAjWWPAwQAjWWRMAwDBACNZZMD
BACNZZYwDAMEAI1lmQMEAI1lnDAMAwQBjWWeAwQAjWWiMAwDBAKNZaQDBACNZagD
BAGNZaoDBACNZb8DBACNZfgDBACNZf8DBACyqokwDAMEALKqiwMEALKqjAMEALKq
kgMEALKq5wMEArkElAMEAbxIUDAMAwQAvEhTAwQAvEhWAwQAvEhYAwQAvEhaAwQA
vEh3AwQD2ZZYMA0GCSqGSIb3DQEBCwUAA4IBAQC2YseG7f3/El6M7a6WG1PPdfxI
5GA3GSMmdMglSuvFIwZYzAu9GfzSDKOW/mufZd9EDDvOnF4/PUjvXnQiZWa6WToB
E0v5LAIM4hLlhiUEXkJupAI5ZvhOqRrDpC+1Y5dHLYJY9oz+Or4tRv+ZEd2esJmw
OKB7Kkfq2/A68/ukPXdQkHbq8C3tfcAnIkRAsL/xpl4FkXknm6tB8+LSl92P8wYj
NLcAFzmffXNAwCF4K7xdueSRa6F7qzNuHMYBSDG1e1d4tZjnqm5XkTZTiEDlhOO7
FCPq1BRgvoyFcl7UCa+7+7uhB5BPxsizYSbhUMeJkFL+rW4VtY6NQ/uJSZJh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org