Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/iQNJNS8SGtzAhDzxRrY0P-Bwr5Q.roa
File: iQNJNS8SGtzAhDzxRrY0P-Bwr5Q.roa (raw, json)
Hash identifier: OxwMYUcLFSapEbpPhUBaUWfzdTwRRGk0MbmCke9PnXM=
Subject key identifier: 89:03:49:35:2F:12:1A:DC:C0:84:3C:F1:46:B6:34:3F:E0:70:AF:94
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 0186CAB966DBA6A1B743ED95459AADCBB628
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/iQNJNS8SGtzAhDzxRrY0P-Bwr5Q.roa
Signing time: Fri 10 Mar 2023 08:53:13 +0000
ROA not before: Fri 10 Mar 2023 08:53:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198610
IP address blocks: 45.80.68.0/22 maxlen: 22
45.80.68.0/24 maxlen: 24
45.80.69.0/24 maxlen: 24
45.80.70.0/24 maxlen: 24
45.80.71.0/24 maxlen: 24
45.147.176.0/22 maxlen: 22
45.147.176.0/24 maxlen: 24
45.147.177.0/24 maxlen: 24
45.147.178.0/24 maxlen: 24
45.147.179.0/24 maxlen: 24
5.181.109.0/24 maxlen: 24
5.181.110.0/24 maxlen: 24
5.181.111.0/24 maxlen: 24
5.181.108.0/24 maxlen: 24
5.181.108.0/22 maxlen: 22
45.141.77.0/24 maxlen: 24
45.141.76.0/22 maxlen: 22
45.141.78.0/24 maxlen: 24
45.141.76.0/24 maxlen: 24
45.67.57.0/24 maxlen: 24
45.67.58.0/24 maxlen: 24
45.141.79.0/24 maxlen: 24
45.67.56.0/24 maxlen: 24
45.67.56.0/22 maxlen: 22
45.67.59.0/24 maxlen: 24
185.19.204.0/22 maxlen: 22
185.19.204.0/24 maxlen: 24
185.19.205.0/24 maxlen: 24
185.19.206.0/24 maxlen: 24
185.19.207.0/24 maxlen: 24
193.168.46.0/24 maxlen: 24
193.168.46.0/23 maxlen: 23
193.168.47.0/24 maxlen: 24
193.168.48.0/23 maxlen: 23
193.168.48.0/24 maxlen: 24
193.168.49.0/24 maxlen: 24
45.12.16.0/24 maxlen: 24
45.12.17.0/24 maxlen: 24
45.12.16.0/22 maxlen: 22
45.12.18.0/24 maxlen: 24
45.12.19.0/24 maxlen: 24
95.214.61.0/24 maxlen: 24
95.214.62.0/24 maxlen: 24
95.214.63.0/24 maxlen: 24
95.214.60.0/24 maxlen: 24
95.214.60.0/22 maxlen: 22
81.200.112.0/24 maxlen: 24
81.200.113.0/24 maxlen: 24
213.139.208.0/22 maxlen: 22
81.200.112.0/21 maxlen: 21
213.139.208.0/24 maxlen: 24
81.200.114.0/24 maxlen: 24
213.139.209.0/24 maxlen: 24
81.200.115.0/24 maxlen: 24
81.200.116.0/24 maxlen: 24
81.200.118.0/24 maxlen: 24
81.200.117.0/24 maxlen: 24
213.139.210.0/24 maxlen: 24
213.139.211.0/24 maxlen: 24
81.200.119.0/24 maxlen: 24
45.146.164.0/24 maxlen: 24
45.146.165.0/24 maxlen: 24
45.146.166.0/24 maxlen: 24
45.146.164.0/22 maxlen: 22
45.146.167.0/24 maxlen: 24
91.106.206.0/24 maxlen: 24
91.106.200.0/21 maxlen: 21
91.106.200.0/24 maxlen: 24
91.106.201.0/24 maxlen: 24
91.106.202.0/24 maxlen: 24
91.106.203.0/24 maxlen: 24
91.106.204.0/24 maxlen: 24
91.106.205.0/24 maxlen: 24
91.106.207.0/24 maxlen: 24
62.113.97.0/24 maxlen: 24
62.113.98.0/24 maxlen: 24
62.113.96.0/20 maxlen: 20
62.113.96.0/24 maxlen: 24
62.113.104.0/24 maxlen: 24
62.113.105.0/24 maxlen: 24
62.113.99.0/24 maxlen: 24
62.113.100.0/24 maxlen: 24
62.113.101.0/24 maxlen: 24
62.113.102.0/24 maxlen: 24
62.113.103.0/24 maxlen: 24
62.113.110.0/24 maxlen: 24
62.113.111.0/24 maxlen: 24
62.113.106.0/24 maxlen: 24
62.113.107.0/24 maxlen: 24
62.113.108.0/24 maxlen: 24
62.113.109.0/24 maxlen: 24
193.200.72.0/22 maxlen: 22
193.200.72.0/24 maxlen: 24
193.200.73.0/24 maxlen: 24
193.200.74.0/24 maxlen: 24
193.200.75.0/24 maxlen: 24
217.172.24.0/22 maxlen: 22
217.172.24.0/24 maxlen: 24
217.172.27.0/24 maxlen: 24
217.172.25.0/24 maxlen: 24
217.172.26.0/24 maxlen: 24
185.78.30.0/24 maxlen: 24
185.78.28.0/22 maxlen: 22
185.78.31.0/24 maxlen: 24
185.78.28.0/24 maxlen: 24
185.78.29.0/24 maxlen: 24
45.84.224.0/24 maxlen: 24
45.84.225.0/24 maxlen: 24
45.84.224.0/22 maxlen: 22
45.84.226.0/24 maxlen: 24
45.84.227.0/24 maxlen: 24
185.225.34.0/24 maxlen: 24
185.225.32.0/22 maxlen: 22
185.225.35.0/24 maxlen: 24
185.225.32.0/24 maxlen: 24
185.225.33.0/24 maxlen: 24
185.50.24.0/24 maxlen: 24
185.50.24.0/22 maxlen: 22
45.90.32.0/24 maxlen: 24
45.90.33.0/24 maxlen: 24
45.90.34.0/24 maxlen: 24
45.90.35.0/24 maxlen: 24
45.90.32.0/22 maxlen: 22
5.101.153.244/32 maxlen: 32
87.236.17.122/32 maxlen: 32
5.101.153.242/32 maxlen: 32
185.50.25.0/24 maxlen: 24
185.50.26.0/24 maxlen: 24
185.50.27.0/24 maxlen: 24
45.9.40.0/24 maxlen: 24
45.9.40.0/22 maxlen: 24
45.9.41.0/24 maxlen: 24
45.9.42.0/24 maxlen: 24
45.9.43.0/24 maxlen: 24
62.217.177.0/24 maxlen: 24
62.217.178.0/24 maxlen: 24
62.217.179.0/24 maxlen: 24
62.217.176.0/21 maxlen: 21
62.217.176.0/24 maxlen: 24
62.217.183.0/24 maxlen: 24
62.217.180.0/24 maxlen: 24
62.217.181.0/24 maxlen: 24
62.217.182.0/24 maxlen: 24
45.130.42.0/24 maxlen: 24
45.130.43.0/24 maxlen: 24
45.130.40.0/22 maxlen: 22
45.130.40.0/24 maxlen: 24
45.130.41.0/24 maxlen: 24
193.176.76.0/24 maxlen: 24
193.176.77.0/24 maxlen: 24
193.176.78.0/24 maxlen: 24
193.176.76.0/22 maxlen: 22
193.176.79.0/24 maxlen: 24
5.101.154.191/32 maxlen: 32
31.129.96.0/20 maxlen: 20
31.129.98.0/24 maxlen: 24
31.129.96.0/24 maxlen: 24
87.236.16.0/24 maxlen: 24
87.236.17.0/24 maxlen: 24
87.236.16.0/21 maxlen: 21
87.236.21.0/24 maxlen: 24
87.236.22.0/24 maxlen: 24
87.236.23.0/24 maxlen: 24
87.236.18.0/24 maxlen: 24
87.236.19.0/24 maxlen: 24
87.236.20.0/24 maxlen: 24
185.155.118.0/24 maxlen: 24
5.101.152.0/24 maxlen: 24
5.101.152.0/21 maxlen: 21
5.101.153.0/24 maxlen: 24
5.101.154.0/24 maxlen: 24
5.101.155.0/24 maxlen: 24
5.101.156.0/24 maxlen: 24
5.101.157.0/24 maxlen: 24
5.101.158.0/24 maxlen: 24
5.101.159.0/24 maxlen: 24
2a04:bac0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:b9:66:db:a6:a1:b7:43:ed:95:45:9a:ad:cb:b6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Mar 10 08:53:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=890349352f121adcc0843cf146b6343fe070af94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f6:db:b8:e2:c3:ac:a0:5d:4d:e8:96:f7:33:
ae:ca:4a:ae:08:81:8d:3d:de:ca:e0:c8:81:bb:9d:
06:72:5b:cd:73:52:d2:84:0d:25:a1:d9:d0:4e:11:
33:54:cc:0b:85:1e:be:df:c0:97:ea:cf:1a:d4:9c:
78:82:33:b0:d7:3d:7a:7d:ad:8b:ad:7f:c8:ba:d5:
9b:40:82:d9:b4:8c:d8:7f:fa:f9:34:14:a5:bd:31:
f6:ad:28:5c:42:f0:8b:9c:90:aa:b0:99:3c:5f:54:
a9:31:0f:cd:8d:3a:c6:f8:3d:c6:ce:91:04:25:a7:
7e:93:6d:41:30:2b:5e:d1:b1:6b:ab:13:a7:2c:75:
8f:ab:fa:e9:d1:a9:2d:0e:6e:98:84:01:90:ad:f7:
2d:72:20:6c:d3:f2:3f:23:f7:89:11:8e:7f:c4:cd:
d0:ed:28:36:74:1a:3b:0e:ea:33:1a:c7:fc:6a:36:
65:59:11:dc:52:11:96:1c:21:b6:bb:cd:b7:b3:2e:
bc:e4:13:91:ae:f8:5c:39:66:d1:cb:2a:fd:97:27:
76:25:dd:c5:76:cf:35:8d:89:ca:74:60:00:0b:cd:
06:81:6c:d7:ff:95:68:50:17:8d:19:fd:b2:6d:d2:
3a:a3:48:5f:fa:35:14:90:97:94:ea:b9:53:52:5d:
83:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:03:49:35:2F:12:1A:DC:C0:84:3C:F1:46:B6:34:3F:E0:70:AF:94
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/iQNJNS8SGtzAhDzxRrY0P-Bwr5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.152.0/21
5.181.108.0/22
31.129.96.0/20
45.9.40.0/22
45.12.16.0/22
45.67.56.0/22
45.80.68.0/22
45.84.224.0/22
45.90.32.0/22
45.130.40.0/22
45.141.76.0/22
45.146.164.0/22
45.147.176.0/22
62.113.96.0/20
62.217.176.0/21
81.200.112.0/21
87.236.16.0/21
91.106.200.0/21
95.214.60.0/22
185.19.204.0/22
185.50.24.0/22
185.78.28.0/22
185.155.118.0/24
185.225.32.0/22
193.168.46.0-193.168.49.255
193.176.76.0/22
193.200.72.0/22
213.139.208.0/22
217.172.24.0/22
IPv6:
2a04:bac0::/29
Signature Algorithm: sha256WithRSAEncryption
ad:af:27:f8:05:a5:5f:4b:bc:80:1a:1e:25:5a:0a:50:9b:ba:
98:56:0f:9e:f9:5c:b9:28:2f:5c:39:6e:bf:61:c6:e0:22:8d:
03:19:ea:61:6d:36:29:46:f1:8f:96:4e:d1:08:d3:15:b3:9c:
b7:ed:76:0c:9f:f5:fc:7b:2c:ab:95:a2:b7:32:47:66:d5:3f:
87:75:85:e8:77:54:71:a3:5f:33:f0:e7:18:ff:46:72:4a:21:
57:7e:de:59:33:c5:29:b2:fa:fc:ac:a7:90:97:50:75:b9:ed:
15:c5:1c:99:03:38:24:73:ea:aa:7f:4e:c1:04:e2:93:b8:7e:
90:ca:7a:77:1f:fc:e3:4e:23:5f:55:00:e1:f9:6c:98:59:6a:
4a:38:58:2d:08:d9:20:5e:06:94:6f:6f:62:e7:a4:29:73:8a:
bd:f2:3f:c1:93:d3:22:03:97:ce:b4:c0:3d:10:4b:62:dd:a7:
43:6b:18:47:55:bb:2f:8a:8c:46:2a:b7:1f:9c:db:0e:21:aa:
65:02:c2:11:fa:a3:4a:ae:0e:fb:63:5f:d4:69:5c:c5:e5:c5:
2a:48:23:3d:0a:cf:91:53:ee:14:85:81:4d:7d:f1:e1:4a:84:
61:ff:21:32:4c:d5:f2:43:86:8b:37:ab:8e:f2:78:e1:b5:00:
72:30:73:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:59 2025 by rpki-client