Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/QnYFFyhZRxVnDRByl_ZSIH2BSaU.roa
File: QnYFFyhZRxVnDRByl_ZSIH2BSaU.roa (raw, json)
Hash identifier: 3Gf8Bt5RZOSav2pAgAY7XdxFgJwigaeCDVz+s1/eeZA=
Subject key identifier: 42:76:05:17:28:59:47:15:67:0D:10:72:97:F6:52:20:7D:81:49:A5
Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial: 769CBF
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/QnYFFyhZRxVnDRByl_ZSIH2BSaU.roa
Signing time: Sat 01 Jan 2022 01:57:14 +0000
ROA not before: Sat 01 Jan 2022 01:57:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29084
IP address blocks: 109.160.98.0/24 maxlen: 24
109.160.4.0/22 maxlen: 22
109.160.4.0/24 maxlen: 24
109.160.5.0/24 maxlen: 24
109.160.6.0/24 maxlen: 24
109.160.7.0/24 maxlen: 24
109.160.13.0/24 maxlen: 24
109.160.24.0/21 maxlen: 21
109.160.24.0/24 maxlen: 24
109.160.25.0/24 maxlen: 24
109.160.26.0/24 maxlen: 24
109.160.29.0/24 maxlen: 24
109.160.27.0/24 maxlen: 24
109.160.28.0/24 maxlen: 24
109.160.30.0/24 maxlen: 24
109.160.31.0/24 maxlen: 24
109.160.43.0/24 maxlen: 24
109.160.42.0/24 maxlen: 24
109.160.42.0/23 maxlen: 23
217.174.48.0/24 maxlen: 24
217.174.50.0/24 maxlen: 24
217.174.51.0/24 maxlen: 24
217.174.48.0/20 maxlen: 20
217.174.49.0/24 maxlen: 24
217.174.57.0/24 maxlen: 24
217.174.58.0/24 maxlen: 24
217.174.56.0/24 maxlen: 24
217.174.54.0/24 maxlen: 24
217.174.55.0/24 maxlen: 24
217.174.52.0/24 maxlen: 24
217.174.53.0/24 maxlen: 24
217.174.61.0/24 maxlen: 24
217.174.62.0/24 maxlen: 24
217.174.59.0/24 maxlen: 24
217.174.60.0/24 maxlen: 24
217.174.63.0/24 maxlen: 24
87.246.35.0/24 maxlen: 24
79.132.3.0/24 maxlen: 24
79.132.0.0/19 maxlen: 19
79.132.1.0/24 maxlen: 24
79.132.2.0/24 maxlen: 24
79.132.4.0/24 maxlen: 24
79.132.0.0/24 maxlen: 24
79.132.9.0/24 maxlen: 24
79.132.5.0/24 maxlen: 24
79.132.6.0/24 maxlen: 24
79.132.7.0/24 maxlen: 24
185.78.36.0/22 maxlen: 22
79.132.10.0/24 maxlen: 24
185.78.37.0/24 maxlen: 24
185.78.38.0/24 maxlen: 24
79.132.8.0/24 maxlen: 24
79.132.11.0/24 maxlen: 24
185.78.36.0/24 maxlen: 24
79.132.17.0/24 maxlen: 24
79.132.15.0/24 maxlen: 24
79.132.16.0/24 maxlen: 24
79.132.13.0/24 maxlen: 24
79.132.14.0/24 maxlen: 24
79.132.12.0/24 maxlen: 24
185.78.39.0/24 maxlen: 24
79.132.20.0/24 maxlen: 24
79.132.21.0/24 maxlen: 24
79.132.18.0/24 maxlen: 24
79.132.19.0/24 maxlen: 24
79.132.24.0/24 maxlen: 24
79.132.22.0/24 maxlen: 24
79.132.23.0/24 maxlen: 24
79.132.30.0/24 maxlen: 24
79.132.31.0/24 maxlen: 24
79.132.29.0/24 maxlen: 24
79.132.27.0/24 maxlen: 24
79.132.28.0/24 maxlen: 24
79.132.25.0/24 maxlen: 24
79.132.26.0/24 maxlen: 24
212.70.150.0/24 maxlen: 24
212.70.157.0/24 maxlen: 24
78.108.242.0/24 maxlen: 24
84.54.187.0/24 maxlen: 24
37.209.173.0/24 maxlen: 24
84.54.190.0/24 maxlen: 24
84.54.188.0/24 maxlen: 24
37.209.174.0/24 maxlen: 24
84.54.189.0/24 maxlen: 24
83.222.168.0/24 maxlen: 24
83.222.175.0/24 maxlen: 24
83.222.182.0/24 maxlen: 24
84.54.137.0/24 maxlen: 24
84.54.138.0/24 maxlen: 24
84.54.136.0/24 maxlen: 24
84.54.139.0/24 maxlen: 24
84.54.134.0/24 maxlen: 24
84.54.135.0/24 maxlen: 24
84.54.133.0/24 maxlen: 24
84.54.141.0/24 maxlen: 24
84.54.142.0/24 maxlen: 24
84.54.144.0/24 maxlen: 24
84.54.145.0/24 maxlen: 24
84.54.143.0/24 maxlen: 24
84.54.151.0/24 maxlen: 24
84.54.152.0/24 maxlen: 24
84.54.149.0/24 maxlen: 24
84.54.146.0/24 maxlen: 24
84.54.147.0/24 maxlen: 24
84.54.158.0/24 maxlen: 24
84.54.159.0/24 maxlen: 24
84.54.157.0/24 maxlen: 24
84.54.156.0/24 maxlen: 24
84.54.153.0/24 maxlen: 24
84.54.154.0/24 maxlen: 24
84.54.166.0/24 maxlen: 24
84.54.160.0/24 maxlen: 24
84.54.165.0/24 maxlen: 24
84.54.163.0/24 maxlen: 24
84.54.164.0/24 maxlen: 24
84.54.162.0/24 maxlen: 24
84.54.161.0/24 maxlen: 24
84.54.169.0/24 maxlen: 24
84.54.167.0/24 maxlen: 24
84.54.168.0/24 maxlen: 24
84.54.172.0/24 maxlen: 24
84.54.170.0/24 maxlen: 24
84.54.171.0/24 maxlen: 24
84.54.179.0/24 maxlen: 24
84.54.177.0/24 maxlen: 24
84.54.178.0/24 maxlen: 24
84.54.173.0/24 maxlen: 24
84.54.176.0/24 maxlen: 24
84.54.174.0/24 maxlen: 24
84.54.175.0/24 maxlen: 24
37.209.170.0/24 maxlen: 24
84.54.180.0/24 maxlen: 24
37.209.169.0/24 maxlen: 24
84.54.183.0/24 maxlen: 24
84.54.181.0/24 maxlen: 24
84.54.182.0/24 maxlen: 24
37.209.168.0/21 maxlen: 21
37.209.171.0/24 maxlen: 24
37.209.172.0/24 maxlen: 24
37.209.168.0/24 maxlen: 24
84.54.186.0/24 maxlen: 24
84.54.185.0/24 maxlen: 24
84.54.128.0/24 maxlen: 24
84.54.130.0/24 maxlen: 24
84.54.128.0/18 maxlen: 18
84.54.131.0/24 maxlen: 24
84.54.129.0/24 maxlen: 24
84.54.132.0/24 maxlen: 24
2a02:1c0::/29 maxlen: 29
2a02:1c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7773375 (0x769cbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Validity
Not Before: Jan 1 01:57:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4276051728594715670d107297f652207d8149a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:57:db:13:e0:12:9a:9c:db:90:2d:0b:01:
26:fe:ca:58:ac:61:1b:4a:57:cf:ba:25:cc:a8:f7:
03:6a:fc:a8:cb:84:ea:80:60:e9:86:b5:7a:c9:d5:
a4:5f:61:32:78:c0:42:b6:d0:8d:c9:bc:39:b5:d1:
d7:bc:d0:c8:e1:3a:3b:52:86:72:c7:36:51:6a:17:
ab:a0:55:11:e1:0c:ab:aa:b3:95:e6:5b:de:a6:98:
d2:29:58:78:6c:6e:bd:82:47:78:37:c7:74:55:34:
5b:d7:1c:e5:1f:cd:83:b5:14:fd:48:04:b4:0c:45:
5e:68:a0:48:1b:ab:4c:b6:bc:a2:91:ff:08:8c:78:
77:51:be:43:8d:f4:c7:d7:19:9d:96:9d:a0:40:ee:
2b:94:f0:e0:14:ed:93:70:49:11:13:31:ef:44:be:
21:e9:85:fc:7c:b6:26:d7:ed:95:78:b6:55:d0:15:
a9:46:62:b7:e0:1d:69:d3:55:61:e5:2b:d1:72:14:
ef:5d:74:4b:2f:3f:15:a8:1a:eb:74:6f:20:7d:40:
61:19:dd:54:92:f0:54:6d:46:b6:95:1d:3b:b2:eb:
d0:45:81:8d:69:3b:4f:23:ae:c9:5e:1e:91:ab:b1:
37:59:89:0a:d4:eb:7e:52:e0:bd:c0:0b:3a:b1:e1:
88:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:76:05:17:28:59:47:15:67:0D:10:72:97:F6:52:20:7D:81:49:A5
X509v3 Authority Key Identifier:
keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/QnYFFyhZRxVnDRByl_ZSIH2BSaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.168.0/21
78.108.242.0/24
79.132.0.0/19
83.222.168.0/24
83.222.175.0/24
83.222.182.0/24
84.54.128.0/18
87.246.35.0/24
109.160.4.0/22
109.160.13.0/24
109.160.24.0/21
109.160.42.0/23
109.160.98.0/24
185.78.36.0/22
212.70.150.0/24
212.70.157.0/24
217.174.48.0/20
IPv6:
2a02:1c0::/29
Signature Algorithm: sha256WithRSAEncryption
19:0e:b5:b4:21:a9:28:75:06:8c:21:7d:8c:77:90:77:86:cc:
db:1b:d6:a8:d6:eb:bd:43:10:07:bc:2a:1a:f5:d0:f6:68:54:
6d:f3:fc:85:8f:1f:9f:a3:02:7b:40:19:ba:48:ff:20:3b:0f:
27:f7:d0:4e:c4:52:0c:15:f0:32:12:4c:0a:05:5f:27:2f:33:
8c:33:bb:3b:ac:62:1d:03:28:75:d2:4d:71:17:73:55:d1:d6:
61:05:b3:f4:d0:53:c8:23:a2:66:3c:25:fb:c7:10:3a:2a:f3:
39:9b:5f:b7:43:7f:de:42:d3:0d:e0:f3:38:e2:47:74:7b:b5:
d2:69:52:37:61:cf:59:25:6c:3c:dd:33:d2:68:1f:a2:36:c8:
b5:7a:0c:9c:80:ea:e5:62:7d:28:1f:de:87:2e:63:9c:58:26:
d6:3c:4c:8a:b5:48:4f:ea:0a:cf:75:eb:f1:cd:70:53:5d:ef:
26:b7:eb:38:c7:51:05:a5:5d:3b:de:7d:9f:2f:c9:60:b4:1b:
93:1a:86:42:e0:85:44:7e:ca:5d:9f:10:21:bf:bd:2b:15:09:
ef:77:66:99:54:80:ba:80:95:09:ca:2a:5c:74:a8:12:06:c2:
4a:51:89:e0:6c:68:b6:e0:93:5f:d1:f3:e7:60:e2:fa:1e:cb:
0e:83:3d:98
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIDdpy/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVk
ODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1ZmY0ODUwHhcNMjIwMTAx
MDE1NzE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0Mjc2MDUxNzI4NTk0
NzE1NjcwZDEwNzI5N2Y2NTIyMDdkODE0OWE1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxG9X2xPgEpqc25AtCwEm/spYrGEbSlfPuiXMqPcDavyoy4Tq
gGDphrV6ydWkX2EyeMBCttCNybw5tdHXvNDI4To7UoZyxzZRaheroFUR4QyrqrOV
5lveppjSKVh4bG69gkd4N8d0VTRb1xzlH82DtRT9SAS0DEVeaKBIG6tMtryikf8I
jHh3Ub5DjfTH1xmdlp2gQO4rlPDgFO2TcEkREzHvRL4h6YX8fLYm1+2VeLZV0BWp
RmK34B1p01Vh5SvRchTvXXRLLz8VqBrrdG8gfUBhGd1UkvBUbUa2lR07suvQRYGN
aTtPI67JXh6Rq7E3WYkK1Ot+UuC9wAs6seGIAwIDAQABo4ICeTCCAnUwHQYDVR0O
BBYEFEJ2BRcoWUcVZw0Qcpf2UiB9gUmlMB8GA1UdIwQYMBaAFF2I5PejAkEsMWo7
tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
WFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJkLzEv
UW5ZRkZ5aFpSeFZuRFJCeWxfWlNJSDJCU2FVLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83
NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4
YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGO
BggrBgEFBQcBBwEB/wR/MH0wbAQCAAEwZgMEAyXRqAMEAE5s8gMEBU+EAAMEAFPe
qAMEAFPerwMEAFPetgMEBlQ2gAMEAFf2IwMEAm2gBAMEAG2gDQMEA22gGAMEAW2g
KgMEAG2gYgMEArlOJAMEANRGlgMEANRGnQMEBNmuMDANBAIAAjAHAwUDKgIBwDAN
BgkqhkiG9w0BAQsFAAOCAQEAGQ61tCGpKHUGjCF9jHeQd4bM2xvWqNbrvUMQB7wq
GvXQ9mhUbfP8hY8fn6MCe0AZukj/IDsPJ/fQTsRSDBXwMhJMCgVfJy8zjDO7O6xi
HQModdJNcRdzVdHWYQWz9NBTyCOiZjwl+8cQOirzOZtft0N/3kLTDeDzOOJHdHu1
0mlSN2HPWSVsPN0z0mgfojbItXoMnIDq5WJ9KB/ehy5jnFgm1jxMirVIT+oKz3Xr
8c1wU13vJrfrOMdRBaVdO959ny/JYLQbkxqGQuCFRH7KXZ8QIb+9KxUJ73dmmVSA
uoCVCcoqXHSoEgbCSlGJ4GxotuCTX9Hz52Di+h7LDoM9mA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:18 2024 by rpki-client on console-fra.rpki-client.org