Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/7CNAq_BMY6hfgqxAvr0lPDy-CsQ.roa
File: 7CNAq_BMY6hfgqxAvr0lPDy-CsQ.roa (raw, json)
Hash identifier: svIR6gkng5FrmyWo/6zq2fZbWv66ZQ1p6beNUTqkDjs=
Subject key identifier: EC:23:40:AB:F0:4C:63:A8:5F:82:AC:40:BE:BD:25:3C:3C:BE:0A:C4
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 3CEE73AF
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/7CNAq_BMY6hfgqxAvr0lPDy-CsQ.roa
Signing time: Wed 23 Feb 2022 10:21:49 +0000
ROA not before: Wed 23 Feb 2022 10:21:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197207
IP address blocks: 5.215.0.0/16 maxlen: 18
80.242.0.0/20 maxlen: 20
5.208.0.0/16 maxlen: 17
86.107.0.0/20 maxlen: 20
172.80.160.0/19 maxlen: 19
130.255.224.0/19 maxlen: 19
172.80.192.0/18 maxlen: 24
188.229.0.0/17 maxlen: 24
5.201.192.0/18 maxlen: 19
172.80.128.0/19 maxlen: 19
172.80.128.0/18 maxlen: 18
130.255.192.0/18 maxlen: 19
83.121.0.0/16 maxlen: 17
204.18.192.0/18 maxlen: 18
5.52.128.0/17 maxlen: 17
5.106.128.0/17 maxlen: 17
176.65.192.0/19 maxlen: 19
176.65.194.0/24 maxlen: 24
176.65.193.0/24 maxlen: 24
176.65.195.0/24 maxlen: 24
5.214.0.0/16 maxlen: 17
82.180.224.0/19 maxlen: 19
91.133.192.0/18 maxlen: 18
83.120.0.0/17 maxlen: 17
83.120.0.0/16 maxlen: 19
91.133.128.0/18 maxlen: 18
91.133.128.0/17 maxlen: 17
82.180.192.0/19 maxlen: 19
185.5.156.0/22 maxlen: 24
185.5.156.0/24 maxlen: 24
185.5.157.0/24 maxlen: 24
185.5.159.0/24 maxlen: 24
69.194.64.0/18 maxlen: 19
204.18.0.0/18 maxlen: 18
204.18.0.0/16 maxlen: 16
46.51.92.0/22 maxlen: 22
46.51.98.0/24 maxlen: 24
46.51.104.0/24 maxlen: 24
46.51.105.0/24 maxlen: 24
46.51.108.0/23 maxlen: 23
46.51.110.0/23 maxlen: 23
46.51.112.0/22 maxlen: 22
46.51.116.0/22 maxlen: 22
46.51.120.0/22 maxlen: 22
46.51.124.0/22 maxlen: 22
5.52.0.0/17 maxlen: 17
5.52.0.0/16 maxlen: 16
5.106.0.0/17 maxlen: 24
5.106.4.0/24 maxlen: 24
5.106.6.0/23 maxlen: 23
5.106.0.0/16 maxlen: 21
5.106.6.0/24 maxlen: 24
5.106.5.0/24 maxlen: 24
5.106.11.0/24 maxlen: 24
5.106.10.0/24 maxlen: 24
5.106.20.0/24 maxlen: 24
204.18.128.0/18 maxlen: 18
89.45.48.0/20 maxlen: 24
89.45.49.0/24 maxlen: 24
204.18.64.0/18 maxlen: 18
89.45.54.0/24 maxlen: 24
89.199.0.0/17 maxlen: 17
89.199.0.0/16 maxlen: 16
37.98.0.0/18 maxlen: 24
164.138.128.0/19 maxlen: 19
164.138.128.0/18 maxlen: 19
95.64.0.0/17 maxlen: 24
46.51.40.0/22 maxlen: 22
46.51.44.0/22 maxlen: 22
158.58.0.0/17 maxlen: 19
89.199.128.0/17 maxlen: 17
46.51.80.0/22 maxlen: 22
46.51.84.0/22 maxlen: 22
5.213.0.0/16 maxlen: 17
46.51.88.0/22 maxlen: 22
46.51.0.0/17 maxlen: 17
46.51.16.0/22 maxlen: 22
46.51.20.0/22 maxlen: 22
46.51.24.0/22 maxlen: 22
46.51.28.0/22 maxlen: 22
85.239.192.0/19 maxlen: 19
46.51.34.0/24 maxlen: 24
46.51.37.0/24 maxlen: 24
46.51.36.0/24 maxlen: 24
46.51.38.0/24 maxlen: 24
46.51.33.0/24 maxlen: 24
46.51.36.0/22 maxlen: 22
46.51.32.0/22 maxlen: 22
37.63.128.0/18 maxlen: 18
46.164.64.0/18 maxlen: 19
89.198.0.0/17 maxlen: 17
89.198.0.0/16 maxlen: 16
89.198.0.0/15 maxlen: 17
5.212.0.0/16 maxlen: 19
188.212.48.0/20 maxlen: 20
37.63.192.0/18 maxlen: 18
89.198.128.0/17 maxlen: 17
188.210.192.0/20 maxlen: 20
185.22.28.0/24 maxlen: 24
185.22.29.0/24 maxlen: 24
192.15.128.0/17 maxlen: 17
91.251.0.0/17 maxlen: 18
83.123.0.0/16 maxlen: 18
91.251.0.0/16 maxlen: 18
5.22.0.0/17 maxlen: 18
5.218.0.0/16 maxlen: 17
93.110.64.0/18 maxlen: 18
31.2.128.0/17 maxlen: 18
5.211.0.0/16 maxlen: 17
93.110.0.0/20 maxlen: 20
93.110.0.0/16 maxlen: 22
83.123.129.0/24 maxlen: 24
91.251.128.0/17 maxlen: 18
188.122.96.0/19 maxlen: 21
86.55.0.0/17 maxlen: 17
86.55.0.0/16 maxlen: 16
113.203.64.0/18 maxlen: 18
5.210.0.0/16 maxlen: 17
109.108.160.0/19 maxlen: 19
113.203.0.0/18 maxlen: 18
113.203.0.0/17 maxlen: 17
94.101.240.0/20 maxlen: 20
188.209.192.0/20 maxlen: 20
37.129.0.0/17 maxlen: 18
37.129.0.0/16 maxlen: 18
37.129.128.0/17 maxlen: 18
192.15.0.0/17 maxlen: 17
192.15.0.0/16 maxlen: 16
86.55.128.0/17 maxlen: 17
188.210.64.0/20 maxlen: 20
5.217.0.0/16 maxlen: 18
188.229.116.0/24 maxlen: 24
86.107.208.0/20 maxlen: 20
188.229.24.0/23 maxlen: 23
188.229.24.0/24 maxlen: 24
172.80.253.0/24 maxlen: 24
172.80.255.0/24 maxlen: 24
172.80.254.0/24 maxlen: 24
5.209.0.0/16 maxlen: 17
89.196.0.0/16 maxlen: 17
5.250.0.0/17 maxlen: 18
83.122.0.0/16 maxlen: 18
5.216.0.0/16 maxlen: 17
2a02:4540:e000::/43 maxlen: 43
2a02:4540:7000::/43 maxlen: 43
2a02:4540:c000::/43 maxlen: 43
2a02:4540::100/120 maxlen: 120
2a02:4544:e0::/46 maxlen: 46
2a02:4540:7044::/46 maxlen: 46
2a02:4545:e0::/56 maxlen: 56
2a02:4540:c4::/46 maxlen: 46
2a02:4545:e0::/46 maxlen: 46
2a02:4540:e030::/44 maxlen: 44
2a02:4540:c030::/44 maxlen: 44
2a02:4540::/42 maxlen: 42
2a02:4540:9010::/49 maxlen: 49
2a02:4540:7040::/48 maxlen: 48
2a02:4540:60::/44 maxlen: 44
2a02:4540:7040::/49 maxlen: 49
2a02:4544:e0:300::/112 maxlen: 112
2a02:4540:9010::/44 maxlen: 44
2a02:4540:5010::/44 maxlen: 44
2a02:4540:e010::/44 maxlen: 44
2a02:4540:e020::/64 maxlen: 64
2a02:4540:7040::/46 maxlen: 46
2a02:4540:5040::/46 maxlen: 46
2a02:4540:c040::/46 maxlen: 46
2a02:4540:9040::/46 maxlen: 46
2a02:4540:e040::/46 maxlen: 46
2a02:4540:c0::/46 maxlen: 46
2a02:4544:e0:500::/112 maxlen: 112
2a02:4540:40::/44 maxlen: 44
2a02:4544:e4::/46 maxlen: 46
2a02:4540:70::/44 maxlen: 44
2a02:4540:7048::/46 maxlen: 46
2a02:4540:6fc0::/64 maxlen: 64
2a02:4540:c020::/44 maxlen: 44
2a02:4545:e0::b/128 maxlen: 128
2a02:4545:e0::c/128 maxlen: 128
2a02:4540:9000::/49 maxlen: 49
2a02:4545:e0::/48 maxlen: 48
2a02:4540:50::/44 maxlen: 44
2a02:4544:e8::/46 maxlen: 46
2a02:4540:5000::/44 maxlen: 44
2a02:4540:9000::/44 maxlen: 44
2a02:4540:e000::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1022260143 (0x3cee73af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Feb 23 10:21:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec2340abf04c63a85f82ac40bebd253c3cbe0ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5b:f9:5c:1a:18:5d:3e:72:39:1a:9d:55:78:
53:2e:15:3a:59:27:41:7e:d5:82:2e:07:d7:d5:d0:
0e:3a:85:c6:32:cd:ca:63:8b:0f:ba:0c:ab:dc:47:
22:5e:2c:97:60:46:34:dc:56:b7:46:7b:86:1f:c3:
14:ca:59:0e:11:f5:7c:da:4e:f8:1e:02:f0:f3:ad:
ef:18:aa:b6:9a:25:3a:9a:7d:58:4a:7b:95:75:82:
17:dd:2f:03:82:61:2f:29:70:0a:25:6d:2a:45:ce:
61:5a:53:ed:b7:ed:3f:6e:4e:44:f2:50:5b:ac:34:
55:8a:c0:5d:9b:d5:08:74:ab:aa:3d:32:2e:42:69:
2e:69:24:a8:e8:74:46:22:ed:1f:38:73:8d:7e:09:
a0:40:e9:7b:00:54:a5:1a:b9:80:ac:00:40:81:fc:
95:ec:a2:5e:b5:3b:18:4d:42:58:74:51:9c:86:46:
48:1e:c7:f9:98:ab:61:53:39:3b:a5:ed:88:5f:b4:
08:1d:ca:fe:a2:a2:9a:9a:02:c4:8e:de:5f:f5:ec:
4a:88:e0:dc:64:1e:97:3a:99:78:9e:c8:65:70:15:
44:c7:26:d0:f0:7d:c9:ff:c1:95:a9:5e:01:e0:86:
3e:07:d3:b6:50:53:21:e9:0b:09:e5:d7:c8:35:ea:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:23:40:AB:F0:4C:63:A8:5F:82:AC:40:BE:BD:25:3C:3C:BE:0A:C4
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/7CNAq_BMY6hfgqxAvr0lPDy-CsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.0.0/17
5.52.0.0/16
5.106.0.0/16
5.201.192.0/18
5.208.0.0-5.218.255.255
5.250.0.0/17
31.2.128.0/17
37.63.128.0/17
37.98.0.0/18
37.129.0.0/16
46.51.0.0/17
46.164.64.0/18
69.194.64.0/18
80.242.0.0/20
82.180.192.0/18
83.120.0.0/14
85.239.192.0/19
86.55.0.0/16
86.107.0.0/20
86.107.208.0/20
89.45.48.0/20
89.196.0.0/16
89.198.0.0/15
91.133.128.0/17
91.251.0.0/16
93.110.0.0/16
94.101.240.0/20
95.64.0.0/17
109.108.160.0/19
113.203.0.0/17
130.255.192.0/18
158.58.0.0/17
164.138.128.0/18
172.80.128.0/17
176.65.192.0/19
185.5.156.0/22
185.22.28.0/23
188.122.96.0/19
188.209.192.0/20
188.210.64.0/20
188.210.192.0/20
188.212.48.0/20
188.229.0.0/17
192.15.0.0/16
204.18.0.0/16
IPv6:
2a02:4540::/41
2a02:4540:c0::/45
2a02:4540:5000::/43
2a02:4540:5040::/46
2a02:4540:6fc0::/64
2a02:4540:7000::/43
2a02:4540:7040::-2a02:4540:704b:ffff:ffff:ffff:ffff:ffff
2a02:4540:9000::/43
2a02:4540:9040::/46
2a02:4540:c000::-2a02:4540:c043:ffff:ffff:ffff:ffff:ffff
2a02:4540:e000::-2a02:4540:e020:0:ffff:ffff:ffff:ffff
2a02:4540:e030::-2a02:4540:e043:ffff:ffff:ffff:ffff:ffff
2a02:4544:e0::-2a02:4544:eb:ffff:ffff:ffff:ffff:ffff
2a02:4545:e0::/46
Signature Algorithm: sha256WithRSAEncryption
46:09:ea:52:af:7a:ff:ae:6e:31:d6:cc:8d:96:c6:19:65:3e:
ed:b0:b0:fc:a0:ce:33:08:76:ab:e5:c6:4b:01:c2:f6:d9:09:
8e:ca:a3:d6:79:5b:18:ea:d1:ba:b0:0f:53:8c:b3:20:2b:4e:
fc:ac:52:dc:a6:66:fd:58:08:b9:d2:23:30:79:dd:1d:01:68:
23:ed:22:4f:1d:02:bb:5e:1a:05:85:b8:48:30:b6:2b:c2:ca:
e7:34:4c:6b:e3:3d:58:47:f4:9a:a5:f5:85:91:b5:6d:de:c5:
3e:1f:96:1b:82:05:02:ca:d2:7d:b2:9a:f3:c1:0b:47:49:12:
9c:44:76:9e:9b:26:4c:23:b6:1c:80:6a:e2:48:ca:59:96:3e:
5b:78:c9:4e:2e:0d:96:c9:8e:bd:6e:4f:27:50:96:db:6c:85:
fe:fe:5c:4c:02:a2:d8:3a:b9:af:13:b2:59:3f:2f:e0:01:ad:
2c:c7:68:0d:af:32:39:d2:6e:de:53:e2:03:45:98:b1:d4:b5:
56:01:d2:92:59:91:a2:0b:dd:98:69:74:4e:1e:1d:c4:76:6a:
c3:1a:88:51:86:47:b2:0a:0f:39:41:e0:3f:61:91:b3:25:1d:
4f:13:cc:12:e1:93:62:38:a5:7e:64:ac:0b:f9:24:ea:71:e8:
98:c0:57:90
-----BEGIN CERTIFICATE-----
MIIGvTCCBaWgAwIBAgIEPO5zrzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ODQ3YWE5MWIwNmQ4YzZiODcyODRmM2Y0NWEyMWRjMjgxZjdiYTU1MB4XDTIyMDIy
MzEwMjE0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWMyMzQwYWJmMDRj
NjNhODVmODJhYzQwYmViZDI1M2MzY2JlMGFjNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN1b+VwaGF0+cjkanVV4Uy4VOlknQX7Vgi4H19XQDjqFxjLN
ymOLD7oMq9xHIl4sl2BGNNxWt0Z7hh/DFMpZDhH1fNpO+B4C8POt7xiqtpolOpp9
WEp7lXWCF90vA4JhLylwCiVtKkXOYVpT7bftP25ORPJQW6w0VYrAXZvVCHSrqj0y
LkJpLmkkqOh0RiLtHzhzjX4JoEDpewBUpRq5gKwAQIH8leyiXrU7GE1CWHRRnIZG
SB7H+ZirYVM5O6XtiF+0CB3K/qKimpoCxI7eX/XsSojg3GQelzqZeJ7IZXAVRMcm
0PB9yf/BlaleAeCGPgfTtlBTIekLCeXXyDXqqqMCAwEAAaOCA9cwggPTMB0GA1Ud
DgQWBBTsI0Cr8ExjqF+CrEC+vSU8PL4KxDAfBgNVHSMEGDAWgBSIR6qRsG2Ma4co
Tz9Foh3Cgfe6VTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2lFZXFrYkJ0akd1SEtFOF9SYUlkd29IM3VsVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvZmRmMjk2LTc1ZTUtNDYzNS05NTQ2LWNlYTc1ZDBjZDY3MS8x
LzdDTkFxX0JNWTZoZmdxeEF2cjBsUER5LUNzUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
ZmRmMjk2LTc1ZTUtNDYzNS05NTQ2LWNlYTc1ZDBjZDY3MS8xL2lFZXFrYkJ0akd1
SEtFOF9SYUlkd29IM3VsVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AesGCCsGAQUFBwEHAQH/BIIB2jCCAdYwggERBAIAATCCAQkDBAcFFgADAwAFNAMD
AAVqAwQGBcnAMAoDAwQF0AMDAAXaAwQHBfoAAwQHHwKAAwQHJT+AAwQGJWIAAwMA
JYEDBAcuMwADBAYupEADBAZFwkADBARQ8gADBAZStMADAwJTeAMEBVXvwAMDAFY3
AwQEVmsAAwQEVmvQAwQEWS0wAwMAWcQDAwFZxgMEB1uFgAMDAFv7AwMAXW4DBARe
ZfADBAdfQAADBAVtbKADBAdxywADBAaC/8ADBAeeOgADBAakioADBAesUIADBAWw
QcADBAK5BZwDBAG5FhwDBAW8emADBAS80cADBAS80kADBAS80sADBAS81DADBAe8
5QADAwDADwMDAMwSMIG+BAIAAjCBtwMHByoCRUAAAAMHAyoCRUAAwAMHBSoCRUBQ
AAMHAioCRUBQQAMJACoCRUBvwAAAAwcFKgJFQHAAMBIDBwYqAkVAcEADBwIqAkVA
cEgDBwUqAkVAkAADBwIqAkVAkEAwEQMGBioCRUDAAwcCKgJFQMBAMBMDBgUqAkVA
4AMJACoCRUDgIAAAMBIDBwQqAkVA4DADBwIqAkVA4EAwEgMHBSoCRUQA4AMHAioC
RUQA6AMHAioCRUUA4DANBgkqhkiG9w0BAQsFAAOCAQEARgnqUq96/65uMdbMjZbG
GWU+7bCw/KDOMwh2q+XGSwHC9tkJjsqj1nlbGOrRurAPU4yzICtO/KxS3KZm/VgI
udIjMHndHQFoI+0iTx0Cu14aBYW4SDC2K8LK5zRMa+M9WEf0mqX1hZG1bd7FPh+W
G4IFAsrSfbKa88ELR0kSnER2npsmTCO2HIBq4kjKWZY+W3jJTi4NlsmOvW5PJ1CW
22yF/v5cTAKi2Dq5rxOyWT8v4AGtLMdoDa8yOdJu3lPiA0WYsdS1VgHSklmRogvd
mGl0Th4dxHZqwxqIUYZHsgoPOUHgP2GRsyUdTxPMEuGTYjilfmSsC/kk6nHomMBX
kA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:27 2024 by rpki-client on console-ams.rpki-client.org