Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/wNNcX9NPOj-pUeaSCU6eCKDLOOc.roa
File: wNNcX9NPOj-pUeaSCU6eCKDLOOc.roa (raw, json)
Hash identifier: pwwpWh6b19TMf714xqRUnK3DI+eGHy+ma1xhkaTiw2c=
Subject key identifier: C0:D3:5C:5F:D3:4F:3A:3F:A9:51:E6:92:09:4E:9E:08:A0:CB:38:E7
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018BFFB08ADA048F77FE7757B8475B0ECECF
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/wNNcX9NPOj-pUeaSCU6eCKDLOOc.roa
Signing time: Fri 24 Nov 2023 04:57:21 +0000
ROA not before: Fri 24 Nov 2023 04:57:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204916
IP address blocks: 95.215.109.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
194.113.105.0/24 maxlen: 24
45.142.210.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.243.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
2a09:3d00::/29 maxlen: 36
2a11:207::/32 maxlen: 32
2a11:206::/32 maxlen: 32
2a10:c0c3::/32 maxlen: 32
2a10:c0c0::/29 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a11:205::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a10:c0c1::/32 maxlen: 32
2a10:c0c7:5000::/36 maxlen: 36
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c0::/32 maxlen: 32
2a0d:5ec0::/29 maxlen: 36
2a06:d900::/29 maxlen: 29
2a09:4e03::/32 maxlen: 32
2a09:3b00::/29 maxlen: 29
2a10:c0c6::/32 maxlen: 32
2a0f:cc81::/32 maxlen: 32
2a0d:8b03::/32 maxlen: 32
2a0f:cc87::/36 maxlen: 36
2a11:b80::/29 maxlen: 36
2a09:b680::/29 maxlen: 36
2a09:3800::/32 maxlen: 32
2a11:200:a000::/36 maxlen: 36
2a11:200:9000::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200:c000::/36 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a09:3505:9000::/36 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a0d:8b04::/32 maxlen: 32
2a09:3802::/32 maxlen: 32
2a0d:8b07::/32 maxlen: 32
2a11:e82::/32 maxlen: 32
2a11:780::/29 maxlen: 36
2a09:3506::/32 maxlen: 32
2a09:3801::/32 maxlen: 32
2a10:c0c5::/32 maxlen: 32
2a09:4e01:a000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a0c:2104::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:204::/32 maxlen: 32
2a10:c340::/29 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ff:b0:8a:da:04:8f:77:fe:77:57:b8:47:5b:0e:ce:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Nov 24 04:57:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0d35c5fd34f3a3fa951e692094e9e08a0cb38e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:07:26:20:a3:23:0c:eb:87:36:30:fe:9b:08:
26:08:69:f7:68:8c:98:e3:33:8c:b2:0f:a9:32:6e:
a9:f0:c8:1e:ea:a1:6e:89:2e:b7:62:82:2e:64:7a:
57:f0:d0:49:ff:82:b8:21:bb:73:c8:c2:1e:47:16:
ee:27:85:a8:c8:2d:0a:98:c4:81:df:d9:e1:e7:2e:
19:af:59:13:a7:ca:3e:50:36:13:5d:d4:cf:67:dc:
c0:9e:4b:07:01:cc:e0:f1:f8:00:3b:7a:99:f9:fe:
4f:0d:89:d5:00:5b:44:d2:88:f6:7d:f3:f1:d3:5a:
10:d7:8b:ab:ad:75:82:65:82:21:71:7d:c1:94:aa:
97:e9:50:85:79:50:62:69:ff:03:08:8d:89:e9:cd:
4d:1e:1e:2f:d1:14:1e:8d:a8:f8:09:5e:8a:8d:7a:
7d:a7:14:63:3a:cc:1d:4d:34:4e:47:c8:d3:b5:dd:
2f:db:52:45:80:d4:76:e7:28:93:84:a1:01:42:66:
e5:48:f0:54:61:4f:29:e5:bb:9f:89:4b:2a:26:78:
ad:6b:f9:fd:5e:2d:e0:cc:27:9a:d7:0c:2d:3f:3c:
1f:28:27:f9:cf:67:f9:5c:67:31:74:c4:7b:ce:07:
b8:5d:32:59:e0:9e:3a:3f:30:05:a2:bd:86:b4:24:
52:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D3:5C:5F:D3:4F:3A:3F:A9:51:E6:92:09:4E:9E:08:A0:CB:38:E7
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/wNNcX9NPOj-pUeaSCU6eCKDLOOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/24
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
95.215.109.0/24
194.113.105.0/24
IPv6:
2a06:d900::/29
2a09:3505:9000::/36
2a09:3506::/32
2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
2a09:4e03::/32
2a09:b680::/29
2a0c:2104::/32
2a0c:e8c0::/29
2a0d:5ec0::/29
2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:8b07::/32
2a0f:cc81::/32
2a0f:cc87::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
2a11:200:c000::/36
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/30
2a11:780::/29
2a11:980::/29
2a11:b80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::/32
Signature Algorithm: sha256WithRSAEncryption
ae:ec:14:45:e3:24:2e:aa:c9:e6:84:e3:14:b6:d8:8d:3f:c9:
01:72:f1:37:9b:7e:df:00:7d:9b:f4:0b:d4:d0:50:fb:21:0e:
bf:15:de:de:3d:54:60:71:8e:4b:69:ac:6b:8b:a4:e4:71:07:
17:d3:7e:ce:72:00:70:27:d4:3a:b0:55:d0:8d:26:cf:c2:eb:
0a:4b:55:4f:2e:86:74:b6:bc:eb:2b:0e:1d:19:10:00:a3:a1:
91:99:ac:3d:2f:10:5e:62:bf:47:30:4c:69:6a:3d:84:84:86:
8b:6a:fe:c4:ea:3f:28:38:c1:c5:37:25:6d:90:12:83:3c:2a:
14:7c:b7:1c:26:48:72:1c:fa:65:a3:f8:7b:e7:26:d0:cc:a6:
11:b1:6c:6c:88:6a:b6:e3:9f:56:8d:2b:59:33:3f:16:7c:8b:
7b:ad:00:ac:bb:84:7b:12:fc:e5:26:10:1b:00:d8:67:ec:d4:
5c:0f:57:df:e5:82:ac:d8:84:18:6e:d4:a2:a4:93:90:b8:03:
53:e5:23:7e:40:dc:93:48:18:27:b1:62:32:c8:d2:41:e0:d5:
06:0d:1b:13:a9:82:67:4b:c0:cd:8e:93:f2:c2:77:85:37:dc:
9d:ed:1d:6b:46:20:8a:fc:82:41:f1:99:ef:47:17:e6:68:77:
31:a8:12:f3
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgISAYv/sIraBI93/ndXuEdbDs7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjMxMTI0MDQ1NzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGQzNWM1ZmQzNGYzYTNmYTk1MWU2OTIwOTRlOWUwOGEwY2IzOGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwcmIKMjDOuHNjD+mwgmCGn3aIyY
4zOMsg+pMm6p8Mge6qFuiS63YoIuZHpX8NBJ/4K4IbtzyMIeRxbuJ4WoyC0KmMSB
39nh5y4Zr1kTp8o+UDYTXdTPZ9zAnksHAczg8fgAO3qZ+f5PDYnVAFtE0oj2ffPx
01oQ14urrXWCZYIhcX3BlKqX6VCFeVBiaf8DCI2J6c1NHh4v0RQejaj4CV6KjXp9
pxRjOswdTTROR8jTtd0v21JFgNR25yiThKEBQmblSPBUYU8p5bufiUsqJnita/n9
Xi3gzCea1wwtPzwfKCf5z2f5XGcxdMR7zge4XTJZ4J46PzAFor2GtCRSwQIDAQAB
o4IDUzCCA08wHQYDVR0OBBYEFMDTXF/TTzo/qVHmkglOngigyzjnMB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvd05OY1g5TlBPai1wVWVhU0NVNmVDS0RMT09jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBZwYIKwYBBQUHAQcBAf8EggFWMIIBUjAqBAIAATAkAwQA
LY7SAwQALZeLAwQCU6vwAwQAVDYkAwQAX9dtAwQAwnFpMIIBIgQCAAIwggEaAwUD
KgbZAAMGBCoJNQWQAwUAKgk1BjANAwQDKgk4AwUAKgk4AgMFAyoJOwADBQMqCT0A
MBADBgQqCU4BMAMGBSoJTgFAMBADBgQqCU4BkAMGBCoJTgGgAwUAKglOAwMFAyoJ
toADBQAqDCEEAwUDKgzowAMFAyoNXsAwDgMFACoNiwMDBQAqDYsEAwUAKg2LBwMF
ACoPzIEDBgQqD8yHAAMFAyoQwMADBQMqEMNAAwYEKhECAAADBgUqEQIAQDAQAwYE
KhECAHADBgQqEQIAoAMGBCoRAgDAMA4DBQAqEQIBAwUAKhECAgMFAioRAgQDBQMq
EQeAAwUDKhEJgAMFAyoRC4ADBQAqEQ6CAwYEKhEOh2ADBQAqEa8BMA0GCSqGSIb3
DQEBCwUAA4IBAQCu7BRF4yQuqsnmhOMUttiNP8kBcvE3m37fAH2b9AvU0FD7IQ6/
Fd7ePVRgcY5Laaxri6TkcQcX037OcgBwJ9Q6sFXQjSbPwusKS1VPLoZ0trzrKw4d
GRAAo6GRmaw9LxBeYr9HMExpaj2EhIaLav7E6j8oOMHFNyVtkBKDPCoUfLccJkhy
HPplo/h75ybQzKYRsWxsiGq2459WjStZMz8WfIt7rQCsu4R7EvzlJhAbANhn7NRc
D1ff5YKs2IQYbtSipJOQuANT5SN+QNyTSBgnsWIyyNJB4NUGDRsTqYJnS8DNjpPy
wneFN9yd7R1rRiCK/IJB8ZnvRxfmaHcxqBLz
-----END CERTIFICATE-----
Generated at Tue Mar 11 05:04:34 2025 by rpki-client