Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/fBPKzja3df3wnlIjg-59TXfl6gY.roa
File: fBPKzja3df3wnlIjg-59TXfl6gY.roa (raw, json)
Hash identifier: caH9+1pbVQfe9Cr9XTqSkIQ6vzAAImK3lJeQI9AHcrk=
Subject key identifier: 7C:13:CA:CE:36:B7:75:FD:F0:9E:52:23:83:EE:7D:4D:77:E5:EA:06
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 11736027
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/fBPKzja3df3wnlIjg-59TXfl6gY.roa
Signing time: Sat 01 Jan 2022 10:57:40 +0000
ROA not before: Sat 01 Jan 2022 10:57:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197328
IP address blocks: 176.53.112.0/24 maxlen: 24
176.53.118.0/24 maxlen: 24
176.53.117.0/24 maxlen: 24
176.53.116.0/24 maxlen: 24
176.53.115.0/24 maxlen: 24
176.53.114.0/24 maxlen: 24
176.53.113.0/24 maxlen: 24
176.53.17.0/24 maxlen: 24
176.53.16.0/24 maxlen: 24
176.53.21.0/24 maxlen: 24
176.53.20.0/24 maxlen: 24
176.53.19.0/24 maxlen: 24
176.53.18.0/24 maxlen: 24
176.53.24.0/24 maxlen: 24
176.53.23.0/24 maxlen: 24
176.53.22.0/24 maxlen: 24
176.53.31.0/24 maxlen: 24
176.53.30.0/24 maxlen: 24
176.53.29.0/24 maxlen: 24
176.53.28.0/24 maxlen: 24
176.53.27.0/24 maxlen: 24
176.53.26.0/24 maxlen: 24
176.53.25.0/24 maxlen: 24
176.53.119.0/24 maxlen: 24
176.53.125.0/24 maxlen: 24
176.53.124.0/24 maxlen: 24
176.53.123.0/24 maxlen: 24
176.53.122.0/24 maxlen: 24
176.53.121.0/24 maxlen: 24
176.53.120.0/24 maxlen: 24
176.53.126.0/24 maxlen: 24
176.53.127.0/24 maxlen: 24
46.45.178.0/24 maxlen: 24
46.45.177.0/24 maxlen: 24
46.45.176.0/24 maxlen: 24
46.45.175.0/24 maxlen: 24
46.45.174.0/24 maxlen: 24
46.45.173.0/24 maxlen: 24
46.45.179.0/24 maxlen: 24
46.45.183.0/24 maxlen: 24
46.45.182.0/24 maxlen: 24
46.45.181.0/24 maxlen: 24
46.45.180.0/24 maxlen: 24
46.45.128.0/24 maxlen: 24
46.45.136.0/24 maxlen: 24
46.45.139.0/24 maxlen: 24
46.45.138.0/24 maxlen: 24
46.45.137.0/24 maxlen: 24
46.45.143.0/24 maxlen: 24
46.45.142.0/24 maxlen: 24
46.45.141.0/24 maxlen: 24
46.45.140.0/24 maxlen: 24
46.45.171.0/24 maxlen: 24
46.45.170.0/24 maxlen: 24
46.45.169.0/24 maxlen: 24
46.45.168.0/24 maxlen: 24
46.45.172.0/24 maxlen: 24
178.211.44.0/24 maxlen: 24
178.211.43.0/24 maxlen: 24
178.211.41.0/24 maxlen: 24
178.211.40.0/24 maxlen: 24
178.211.39.0/24 maxlen: 24
178.211.47.0/24 maxlen: 24
178.211.46.0/24 maxlen: 24
178.211.45.0/24 maxlen: 24
178.211.33.0/24 maxlen: 24
178.211.32.0/24 maxlen: 24
178.211.38.0/24 maxlen: 24
178.211.37.0/24 maxlen: 24
178.211.36.0/24 maxlen: 24
178.211.35.0/24 maxlen: 24
178.211.34.0/24 maxlen: 24
31.210.98.0/24 maxlen: 24
31.210.97.0/24 maxlen: 24
31.210.96.0/24 maxlen: 24
31.210.101.0/24 maxlen: 24
31.210.100.0/24 maxlen: 24
31.210.99.0/24 maxlen: 24
31.210.105.0/24 maxlen: 24
31.210.104.0/24 maxlen: 24
31.210.103.0/24 maxlen: 24
31.210.102.0/24 maxlen: 24
31.210.108.0/24 maxlen: 24
31.210.107.0/24 maxlen: 24
31.210.106.0/24 maxlen: 24
31.210.112.0/24 maxlen: 24
31.210.111.0/24 maxlen: 24
31.210.110.0/24 maxlen: 24
31.210.109.0/24 maxlen: 24
31.210.118.0/24 maxlen: 24
31.210.117.0/24 maxlen: 24
31.210.116.0/24 maxlen: 24
31.210.115.0/24 maxlen: 24
31.210.114.0/24 maxlen: 24
31.210.113.0/24 maxlen: 24
31.210.122.0/24 maxlen: 24
31.210.121.0/24 maxlen: 24
31.210.120.0/24 maxlen: 24
31.210.119.0/24 maxlen: 24
31.210.125.0/24 maxlen: 24
31.210.124.0/24 maxlen: 24
31.210.123.0/24 maxlen: 24
31.210.127.0/24 maxlen: 24
31.210.126.0/24 maxlen: 24
213.128.84.0/24 maxlen: 24
213.128.83.0/24 maxlen: 24
213.128.82.0/24 maxlen: 24
213.128.81.0/24 maxlen: 24
213.128.80.0/24 maxlen: 24
213.128.85.0/24 maxlen: 24
213.128.87.0/24 maxlen: 24
213.128.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292773927 (0x11736027)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Jan 1 10:57:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c13cace36b775fdf09e522383ee7d4d77e5ea06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:13:38:e3:dc:ec:66:9e:18:78:02:97:4f:15:
8b:23:d7:c4:69:26:ae:d9:81:80:0f:c2:50:ad:f2:
46:a0:cb:3e:4c:43:b7:f7:dd:f5:a3:70:02:8c:a4:
cb:71:94:71:fa:84:29:8e:a8:0a:fa:39:b9:6f:1c:
e1:b3:88:f6:c8:7a:79:66:31:13:d9:4e:f1:70:b1:
2d:ff:0a:37:1f:31:41:4d:ed:9c:f3:b3:d1:bf:70:
c5:a2:0f:5a:5f:84:3c:f1:8c:a3:d6:16:f4:1b:de:
6f:7f:94:83:53:1b:58:7b:71:d4:29:b1:74:d4:bd:
52:34:5f:d9:5c:af:54:c8:1e:70:e5:18:a8:52:1b:
0a:f1:27:3c:0e:33:17:90:dd:cd:d6:cd:e4:23:00:
36:e4:6c:dc:f2:d8:ad:10:e8:b3:f6:fd:2f:95:df:
f6:86:b0:63:7f:c3:f7:e1:30:4b:c2:82:b2:57:4f:
71:fc:8d:cf:ff:a8:9e:ce:3a:60:6d:45:6f:9b:3b:
5d:9f:b5:62:9e:56:9e:d0:59:c5:3e:00:7a:6a:2e:
67:d4:1c:05:95:4d:09:c5:66:50:a2:ef:64:09:85:
de:2a:3a:83:c7:6e:52:09:5b:60:62:64:88:a4:72:
5a:d9:ab:2d:d2:f8:14:db:27:82:32:6b:e8:24:4e:
b6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:13:CA:CE:36:B7:75:FD:F0:9E:52:23:83:EE:7D:4D:77:E5:EA:06
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/fBPKzja3df3wnlIjg-59TXfl6gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.96.0/19
46.45.128.0/24
46.45.136.0/21
46.45.168.0-46.45.183.255
176.53.16.0/20
176.53.112.0/20
178.211.32.0-178.211.41.255
178.211.43.0-178.211.47.255
213.128.80.0/21
Signature Algorithm: sha256WithRSAEncryption
21:24:ff:88:6f:37:e4:58:41:64:5d:c0:e2:e2:6d:8b:65:64:
b5:5a:7a:83:8f:a1:19:43:aa:92:43:93:1f:ee:ba:17:4e:83:
cc:4f:69:ba:bb:9c:28:8e:03:d8:de:fb:51:d7:6e:8c:f7:c1:
81:3b:88:92:cc:07:de:d0:38:9f:18:e5:9d:46:85:78:97:70:
91:d5:6a:00:bd:4c:dd:ef:fb:6f:3b:2c:45:bb:66:92:bf:09:
b7:0e:fb:f4:ed:5f:ae:ab:aa:d8:0f:a6:95:39:88:0f:e1:03:
6e:19:07:c6:b7:55:25:89:da:1f:3c:df:00:7f:b5:08:90:b3:
43:02:a7:5d:25:47:52:bf:b9:fb:e3:19:34:a5:8b:f5:2e:bc:
98:e5:36:9e:ce:bc:95:1f:c2:5e:86:37:4a:b2:6b:23:bd:ef:
86:21:f3:e6:85:b9:13:29:2d:0f:fb:38:26:bb:9b:5e:d0:d0:
95:c2:29:77:cb:13:2e:e5:04:44:17:fb:84:a4:a9:8e:83:de:
48:b1:6a:ab:ea:4d:53:20:68:d3:a9:54:4c:d7:0f:d0:bf:ed:
62:11:a7:d1:1a:a4:c6:f6:df:9e:ca:84:f6:68:b8:c2:52:86:
ff:97:b6:8d:43:0d:4a:32:1a:7a:a9:6c:d2:cd:52:0b:31:e1:
5d:d4:9b:11
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIEEXNgJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NTcxYmJmMWQzZDNjMGVmZTM2ZGUxMTAzOTJiZTBjN2FjNDQ3YTg0MB4XDTIyMDEw
MTEwNTc0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2MxM2NhY2UzNmI3
NzVmZGYwOWU1MjIzODNlZTdkNGQ3N2U1ZWEwNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJUTOOPc7GaeGHgCl08ViyPXxGkmrtmBgA/CUK3yRqDLPkxD
t/fd9aNwAoyky3GUcfqEKY6oCvo5uW8c4bOI9sh6eWYxE9lO8XCxLf8KNx8xQU3t
nPOz0b9wxaIPWl+EPPGMo9YW9Bveb3+Ug1MbWHtx1CmxdNS9UjRf2VyvVMgecOUY
qFIbCvEnPA4zF5DdzdbN5CMANuRs3PLYrRDos/b9L5Xf9oawY3/D9+EwS8KCsldP
cfyNz/+ons46YG1Fb5s7XZ+1Yp5WntBZxT4AemouZ9QcBZVNCcVmUKLvZAmF3io6
g8duUglbYGJkiKRyWtmrLdL4FNsngjJr6CROto8CAwEAAaOCAlEwggJNMB0GA1Ud
DgQWBBR8E8rONrd1/fCeUiOD7n1Nd+XqBjAfBgNVHSMEGDAWgBT1cbvx09PA7+Nt
4RA5K+DHrER6hDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzlYRzc4ZFBUd09famJlRVFPU3ZneDZ4RWVvUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWIvNjgzMDNmLWU4YjAtNGZlMC05NmI2LWE5NjU3ZWIxZjhkNy8x
L2ZCUEt6amEzZGYzd25sSWpnLTU5VFhmbDZnWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIv
NjgzMDNmLWU4YjAtNGZlMC05NmI2LWE5NjU3ZWIxZjhkNy8xLzlYRzc4ZFBUd09f
amJlRVFPU3ZneDZ4RWVvUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBn
BggrBgEFBQcBBwEB/wRYMFYwVAQCAAEwTgMEBR/SYAMEAC4tgAMEAy4tiDAMAwQD
Li2oAwQDLi2wAwQEsDUQAwQEsDVwMAwDBAWy0yADBAGy0ygwDAMEALLTKwMEBLLT
IAMEA9WAUDANBgkqhkiG9w0BAQsFAAOCAQEAIST/iG835FhBZF3A4uJti2VktVp6
g4+hGUOqkkOTH+66F06DzE9purucKI4D2N77UddujPfBgTuIkswH3tA4nxjlnUaF
eJdwkdVqAL1M3e/7bzssRbtmkr8Jtw779O1frquq2A+mlTmID+EDbhkHxrdVJYna
HzzfAH+1CJCzQwKnXSVHUr+5++MZNKWL9S68mOU2ns68lR/CXoY3SrJrI73vhiHz
5oW5EyktD/s4JrubXtDQlcIpd8sTLuUERBf7hKSpjoPeSLFqq+pNUyBo06lUTNcP
0L/tYhGn0RqkxvbfnsqE9mi4wlKG/5e2jUMNSjIaeqls0s1SCzHhXdSbEQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:55 2023 by rpki-client on console-ams.rpki-client.org