Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/gmXpn9p5gnucvBmSK-W330gJviA.roa
File: gmXpn9p5gnucvBmSK-W330gJviA.roa (raw, json)
Hash identifier: tNhOtHFg6AGaoxheywCDPI9RAqM6vonzdOwH+5tR7d4=
Subject key identifier: 82:65:E9:9F:DA:79:82:7B:9C:BC:19:92:2B:E5:B7:DF:48:09:BE:20
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 34ED2D5D
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/gmXpn9p5gnucvBmSK-W330gJviA.roa
Signing time: Sat 01 Jan 2022 03:58:50 +0000
ROA not before: Sat 01 Jan 2022 03:58:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6830
IP address blocks: 83.144.64.0/19 maxlen: 19
83.144.64.0/18 maxlen: 18
31.178.0.0/16 maxlen: 16
83.144.96.0/19 maxlen: 19
31.178.0.0/15 maxlen: 15
91.150.192.0/20 maxlen: 20
91.150.192.0/19 maxlen: 19
91.150.208.0/20 maxlen: 20
188.93.164.0/22 maxlen: 22
188.93.160.0/21 maxlen: 21
188.93.160.0/22 maxlen: 22
84.10.0.0/17 maxlen: 17
213.134.160.0/20 maxlen: 20
213.134.160.0/19 maxlen: 19
84.10.0.0/16 maxlen: 16
213.134.176.0/20 maxlen: 20
95.158.64.0/18 maxlen: 18
85.222.64.0/18 maxlen: 18
85.222.0.0/18 maxlen: 18
85.222.0.0/17 maxlen: 17
81.18.192.0/20 maxlen: 20
81.18.192.0/21 maxlen: 21
194.187.40.0/22 maxlen: 22
81.18.196.0/22 maxlen: 22
81.18.194.0/23 maxlen: 23
81.18.200.0/21 maxlen: 21
81.18.208.0/21 maxlen: 21
81.18.208.0/20 maxlen: 20
81.18.216.0/21 maxlen: 21
212.76.32.0/20 maxlen: 20
212.76.32.0/19 maxlen: 19
212.76.48.0/20 maxlen: 20
31.187.0.0/18 maxlen: 18
31.187.0.0/19 maxlen: 19
31.187.32.0/19 maxlen: 19
178.73.32.0/19 maxlen: 19
178.73.0.0/18 maxlen: 18
178.73.0.0/19 maxlen: 19
94.75.64.0/19 maxlen: 19
94.75.64.0/18 maxlen: 18
89.72.0.0/13 maxlen: 13
31.186.192.0/19 maxlen: 19
87.207.0.0/16 maxlen: 16
92.244.32.0/20 maxlen: 20
92.244.32.0/19 maxlen: 19
92.244.48.0/20 maxlen: 20
94.75.96.0/19 maxlen: 19
77.236.0.0/20 maxlen: 20
77.236.0.0/19 maxlen: 19
89.64.0.0/13 maxlen: 13
77.236.16.0/20 maxlen: 20
84.10.128.0/17 maxlen: 17
89.64.0.0/12 maxlen: 12
31.179.0.0/16 maxlen: 16
83.175.176.0/20 maxlen: 20
83.175.176.0/21 maxlen: 21
83.175.184.0/21 maxlen: 21
87.206.0.0/16 maxlen: 16
87.206.0.0/15 maxlen: 15
2001:4050::/32 maxlen: 32
2001:4050::/33 maxlen: 33
2001:4050:8000::/33 maxlen: 33
2a02:a300::/28 maxlen: 28
2a02:a310::/28 maxlen: 28
2a02:a300::/27 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887958877 (0x34ed2d5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Jan 1 03:58:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8265e99fda79827b9cbc19922be5b7df4809be20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:14:ca:e8:c6:4c:b2:11:b4:f2:cc:a6:12:a8:
18:c6:d7:b1:4f:fc:01:bd:22:39:6c:be:d7:80:71:
f5:71:75:23:c0:f1:e3:c9:75:f4:36:8e:33:c0:38:
b7:f9:51:9f:15:3d:54:52:a9:10:55:5d:3a:65:c4:
9c:4b:34:7b:49:28:2c:d9:1f:ff:1c:31:1f:7f:95:
50:c1:dd:b2:aa:47:97:2c:12:15:79:fa:f0:30:d5:
7c:c9:6f:04:b7:04:f9:fd:9d:87:40:cc:d0:0e:d4:
fc:f4:c5:f0:cb:19:90:f3:3e:fb:68:3a:3d:64:08:
c7:a2:dd:dc:96:69:87:dc:99:90:95:82:db:df:23:
c4:a7:ba:ec:63:70:b6:ad:ca:cd:79:30:ba:c6:38:
11:f8:0c:04:0a:85:af:2b:c6:89:fe:1b:19:ca:d3:
53:a7:56:dc:c5:ee:f9:d2:94:d2:b3:d3:15:c3:7e:
f5:77:9a:57:52:64:59:9f:46:5e:01:f2:f9:a8:97:
67:72:35:fa:05:7a:f1:17:50:d3:4b:6a:db:90:4d:
23:e3:48:5e:5a:02:ec:89:d6:0c:c3:02:67:b7:c7:
ce:4a:58:bc:61:44:c4:07:9b:84:7a:1b:43:b8:8b:
9e:16:f2:28:4f:f8:08:f1:24:13:20:ab:55:57:0a:
3f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:65:E9:9F:DA:79:82:7B:9C:BC:19:92:2B:E5:B7:DF:48:09:BE:20
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/gmXpn9p5gnucvBmSK-W330gJviA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.178.0.0/15
31.186.192.0/19
31.187.0.0/18
77.236.0.0/19
81.18.192.0/19
83.144.64.0/18
83.175.176.0/20
84.10.0.0/16
85.222.0.0/17
87.206.0.0/15
89.64.0.0/12
91.150.192.0/19
92.244.32.0/19
94.75.64.0/18
95.158.64.0/18
178.73.0.0/18
188.93.160.0/21
194.187.40.0/22
212.76.32.0/19
213.134.160.0/19
IPv6:
2001:4050::/32
2a02:a300::/27
Signature Algorithm: sha256WithRSAEncryption
02:e1:95:2b:e4:cb:90:a1:34:b4:4f:32:5c:c1:06:63:9c:83:
2d:63:6f:1a:5e:7e:d7:69:d2:bc:1e:f3:d8:bb:eb:cf:3a:a1:
57:9b:ba:3a:bf:e4:8f:8c:e4:ec:d9:8b:41:1f:b4:34:29:49:
d9:e6:7a:cd:93:97:6f:9a:3e:08:05:d2:c9:56:3c:03:e7:a3:
08:cc:2e:eb:cb:e8:f9:ff:65:bc:d5:4f:9c:0c:52:19:2a:ab:
c2:89:cc:ef:3b:aa:05:53:37:08:d2:32:d2:92:dd:b7:f9:bd:
d1:5e:4a:e9:63:ef:72:bb:2f:03:2a:11:9a:be:6d:7d:52:96:
63:a3:ed:03:61:f4:75:69:57:03:93:0c:93:f1:da:e3:bd:ae:
f3:fa:ba:c2:8f:c5:99:eb:52:51:19:d9:4f:60:ce:ac:70:0d:
2d:c5:c8:40:8b:a4:0a:50:95:b9:50:44:d6:13:01:39:b0:be:
ec:0a:8b:13:2e:b5:ce:6f:72:98:33:0a:13:f9:28:a1:28:9e:
c8:e8:c8:5b:d8:71:fe:53:cf:b7:e1:0e:e3:bd:10:18:27:46:
7d:44:be:f3:67:81:80:38:b6:f1:f4:b2:a5:52:a2:b7:0e:62:
21:1b:7f:3d:cf:72:b7:2b:61:78:a7:46:ae:85:34:8d:45:ed:
c1:8d:0b:e5
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIENO0tXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NDE0N2M4YjNmMzc4NTBlOWY5MDc0OTkzODQ1YzRlMDY5ZjhlZmUyMB4XDTIyMDEw
MTAzNTg1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODI2NWU5OWZkYTc5
ODI3YjljYmMxOTkyMmJlNWI3ZGY0ODA5YmUyMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPUUyujGTLIRtPLMphKoGMbXsU/8Ab0iOWy+14Bx9XF1I8Dx
48l19DaOM8A4t/lRnxU9VFKpEFVdOmXEnEs0e0koLNkf/xwxH3+VUMHdsqpHlywS
FXn68DDVfMlvBLcE+f2dh0DM0A7U/PTF8MsZkPM++2g6PWQIx6Ld3JZph9yZkJWC
298jxKe67GNwtq3KzXkwusY4EfgMBAqFryvGif4bGcrTU6dW3MXu+dKU0rPTFcN+
9XeaV1JkWZ9GXgHy+aiXZ3I1+gV68RdQ00tq25BNI+NIXloC7InWDMMCZ7fHzkpY
vGFExAebhHobQ7iLnhbyKE/4CPEkEyCrVVcKPzECAwEAAaOCApAwggKMMB0GA1Ud
DgQWBBSCZemf2nmCe5y8GZIr5bffSAm+IDAfBgNVHSMEGDAWgBQkFHyLPzeFDp+Q
dJk4RcTgafjv4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pCUjhpejgzaFE2ZmtIU1pPRVhFNEduNDctSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODkvOGRhNWZlLWY0MDUtNGNlMC1iMmQxLWIzNTM1YjRjYTUwZi8x
L2dtWHBuOXA1Z251Y3ZCbVNLLVczMzBnSnZpQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkv
OGRhNWZlLWY0MDUtNGNlMC1iMmQxLWIzNTM1YjRjYTUwZi8xL0pCUjhpejgzaFE2
ZmtIU1pPRVhFNEduNDctSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
pQYIKwYBBQUHAQcBAf8EgZUwgZIwegQCAAEwdAMDAR+yAwQFH7rAAwQGH7sAAwQF
TewAAwQFURLAAwQGU5BAAwQEU6+wAwMAVAoDBAdV3gADAwFXzgMDBFlAAwQFW5bA
AwQFXPQgAwQGXktAAwQGX55AAwQGskkAAwQDvF2gAwQCwrsoAwQF1EwgAwQF1Yag
MBQEAgACMA4DBQAgAUBQAwUFKgKjADANBgkqhkiG9w0BAQsFAAOCAQEAAuGVK+TL
kKE0tE8yXMEGY5yDLWNvGl5+12nSvB7z2LvrzzqhV5u6Or/kj4zk7NmLQR+0NClJ
2eZ6zZOXb5o+CAXSyVY8A+ejCMwu68vo+f9lvNVPnAxSGSqrwonM7zuqBVM3CNIy
0pLdt/m90V5K6WPvcrsvAyoRmr5tfVKWY6PtA2H0dWlXA5MMk/Ha472u8/q6wo/F
metSURnZT2DOrHANLcXIQIukClCVuVBE1hMBObC+7AqLEy61zm9ymDMKE/kooSie
yOjIW9hx/lPPt+EO470QGCdGfUS+82eBgDi28fSypVKitw5iIRt/Pc9ytytheKdG
roU0jUXtwY0L5Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:18 2025 by rpki-client