Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IKFBycPt73qIPvCESCI78XZks68.roa
File: IKFBycPt73qIPvCESCI78XZks68.roa (raw, json)
Hash identifier: G74xbWBLHOLcAx2ITnlYtGBDySlScFE3FmhficWOmUg=
Subject key identifier: 20:A1:41:C9:C3:ED:EF:7A:88:3E:F0:84:48:22:3B:F1:76:64:B3:AF
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0DDAB142
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IKFBycPt73qIPvCESCI78XZks68.roa
Signing time: Mon 11 Apr 2022 07:51:51 +0000
ROA not before: Mon 11 Apr 2022 07:51:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 37.46.148.0/24 maxlen: 24
92.114.0.0/24 maxlen: 24
5.181.112.0/22 maxlen: 24
89.39.164.0/23 maxlen: 24
89.39.162.0/23 maxlen: 24
193.19.107.0/24 maxlen: 24
45.12.180.0/22 maxlen: 24
89.46.115.0/24 maxlen: 24
89.33.0.0/22 maxlen: 24
93.113.220.0/23 maxlen: 24
93.114.85.0/24 maxlen: 24
45.134.136.0/22 maxlen: 24
185.228.224.0/24 maxlen: 24
93.114.132.0/24 maxlen: 24
86.107.196.0/24 maxlen: 24
86.107.107.0/24 maxlen: 24
91.235.113.0/24 maxlen: 24
188.215.66.0/23 maxlen: 24
93.114.67.0/24 maxlen: 24
45.134.130.0/24 maxlen: 24
45.134.128.0/24 maxlen: 24
86.106.92.0/24 maxlen: 24
185.160.80.0/22 maxlen: 24
93.113.38.0/23 maxlen: 24
188.213.241.0/24 maxlen: 24
185.214.8.0/23 maxlen: 24
185.214.11.0/24 maxlen: 24
95.214.156.0/22 maxlen: 24
89.32.190.0/24 maxlen: 24
89.32.188.0/24 maxlen: 24
89.38.39.0/24 maxlen: 24
188.240.72.0/22 maxlen: 24
86.105.148.0/23 maxlen: 24
86.105.150.0/24 maxlen: 24
84.247.24.0/22 maxlen: 24
86.105.168.0/24 maxlen: 24
89.45.8.0/24 maxlen: 24
188.240.15.0/24 maxlen: 24
45.11.8.0/22 maxlen: 24
203.159.84.0/24 maxlen: 24
203.159.88.0/24 maxlen: 24
203.159.86.0/24 maxlen: 24
89.31.217.0/24 maxlen: 24
89.45.14.0/24 maxlen: 24
84.247.52.0/23 maxlen: 24
86.105.221.0/24 maxlen: 24
185.205.188.0/22 maxlen: 24
45.145.44.0/22 maxlen: 24
193.84.133.0/24 maxlen: 24
89.37.105.0/24 maxlen: 24
185.192.18.0/23 maxlen: 24
86.104.134.0/24 maxlen: 24
5.10.198.0/24 maxlen: 24
5.10.196.0/24 maxlen: 24
5.10.194.0/24 maxlen: 24
89.44.114.0/24 maxlen: 24
89.44.126.0/23 maxlen: 24
185.239.240.0/24 maxlen: 24
89.37.138.0/24 maxlen: 24
89.37.137.0/24 maxlen: 24
45.10.184.0/22 maxlen: 24
94.103.248.0/22 maxlen: 24
193.218.33.0/24 maxlen: 24
185.184.132.0/22 maxlen: 24
185.211.116.0/22 maxlen: 24
45.9.92.0/22 maxlen: 24
188.212.4.0/24 maxlen: 24
89.36.172.0/24 maxlen: 24
45.9.184.0/22 maxlen: 24
93.117.136.0/24 maxlen: 24
5.183.224.0/22 maxlen: 24
185.244.136.0/24 maxlen: 24
37.156.247.0/24 maxlen: 24
94.177.60.0/22 maxlen: 24
81.21.236.0/22 maxlen: 24
45.143.52.0/22 maxlen: 24
89.35.114.0/24 maxlen: 24
91.190.108.0/22 maxlen: 24
85.204.117.0/24 maxlen: 24
185.245.4.0/24 maxlen: 24
185.245.6.0/24 maxlen: 24
62.197.130.0/23 maxlen: 24
171.22.100.0/22 maxlen: 24
89.34.216.0/23 maxlen: 24
94.176.4.0/24 maxlen: 24
46.229.254.0/24 maxlen: 24
193.223.72.0/22 maxlen: 24
89.34.179.0/24 maxlen: 24
94.176.41.0/24 maxlen: 24
46.102.154.0/24 maxlen: 24
46.102.172.0/24 maxlen: 24
46.102.176.0/24 maxlen: 24
46.102.181.0/24 maxlen: 24
37.156.66.0/24 maxlen: 24
89.47.95.0/24 maxlen: 24
45.13.180.0/22 maxlen: 24
89.40.180.0/24 maxlen: 24
188.215.249.0/24 maxlen: 24
185.67.138.0/24 maxlen: 24
77.81.3.0/24 maxlen: 24
185.67.136.0/24 maxlen: 24
89.47.90.0/24 maxlen: 24
185.216.2.0/24 maxlen: 24
185.216.0.0/24 maxlen: 24
89.34.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232436034 (0xddab142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 11 07:51:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20a141c9c3edef7a883ef08448223bf17664b3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:0c:b4:a6:2e:b7:0c:fd:3c:03:9f:c7:d8:
d6:dc:20:89:8e:69:04:ce:77:88:9c:9a:70:ff:ff:
1b:42:77:da:de:e8:fb:69:50:50:03:82:8b:d0:ba:
f3:da:8c:0a:82:99:c3:69:a4:6d:ee:09:46:61:37:
4e:07:33:af:4a:fe:cb:d0:a9:32:71:19:9c:9d:9f:
bf:e5:60:27:b4:f2:b0:49:4a:26:33:63:87:bb:8b:
a1:6a:17:a1:ce:40:b8:db:50:5a:89:3b:63:94:9d:
de:9d:82:00:6f:aa:7f:49:82:67:23:f4:43:34:73:
2d:cc:2b:e7:72:1c:b0:02:b9:e5:ec:a9:17:a9:b6:
16:f1:db:74:b7:64:45:ee:ca:c5:8a:fd:3b:4c:28:
68:31:3a:59:d1:9c:0f:c4:fa:38:fd:d5:bc:6f:87:
23:50:de:46:d3:11:cb:63:5e:e8:44:d9:19:b7:da:
fe:b9:73:f5:bb:7f:0a:e1:62:eb:fa:9f:33:00:21:
62:91:36:ef:be:ca:ba:44:d8:85:7f:32:d0:59:68:
08:92:fe:7f:91:24:ad:bd:44:9a:ef:50:a4:6b:f8:
ea:8f:76:bc:4e:62:73:95:58:03:7c:d8:aa:f7:77:
f8:c5:62:5f:94:49:82:cb:e2:3b:7f:87:ef:85:b2:
19:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A1:41:C9:C3:ED:EF:7A:88:3E:F0:84:48:22:3B:F1:76:64:B3:AF
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IKFBycPt73qIPvCESCI78XZks68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.194.0/24
5.10.196.0/24
5.10.198.0/24
5.181.112.0/22
5.183.224.0/22
37.46.148.0/24
37.156.66.0/24
37.156.247.0/24
45.9.92.0/22
45.9.184.0/22
45.10.184.0/22
45.11.8.0/22
45.12.180.0/22
45.13.180.0/22
45.134.128.0/24
45.134.130.0/24
45.134.136.0/22
45.143.52.0/22
45.145.44.0/22
46.102.154.0/24
46.102.172.0/24
46.102.176.0/24
46.102.181.0/24
46.229.254.0/24
62.197.130.0/23
77.81.3.0/24
81.21.236.0/22
84.247.24.0/22
84.247.52.0/23
85.204.117.0/24
86.104.134.0/24
86.105.148.0-86.105.150.255
86.105.168.0/24
86.105.221.0/24
86.106.92.0/24
86.107.107.0/24
86.107.196.0/24
89.31.217.0/24
89.32.188.0/24
89.32.190.0/24
89.33.0.0/22
89.34.77.0/24
89.34.179.0/24
89.34.216.0/23
89.35.114.0/24
89.36.172.0/24
89.37.105.0/24
89.37.137.0-89.37.138.255
89.38.39.0/24
89.39.162.0-89.39.165.255
89.40.180.0/24
89.44.114.0/24
89.44.126.0/23
89.45.8.0/24
89.45.14.0/24
89.46.115.0/24
89.47.90.0/24
89.47.95.0/24
91.190.108.0/22
91.235.113.0/24
92.114.0.0/24
93.113.38.0/23
93.113.220.0/23
93.114.67.0/24
93.114.85.0/24
93.114.132.0/24
93.117.136.0/24
94.103.248.0/22
94.176.4.0/24
94.176.41.0/24
94.177.60.0/22
95.214.156.0/22
171.22.100.0/22
185.67.136.0/24
185.67.138.0/24
185.160.80.0/22
185.184.132.0/22
185.192.18.0/23
185.205.188.0/22
185.211.116.0/22
185.214.8.0/23
185.214.11.0/24
185.216.0.0/24
185.216.2.0/24
185.228.224.0/24
185.239.240.0/24
185.244.136.0/24
185.245.4.0/24
185.245.6.0/24
188.212.4.0/24
188.213.241.0/24
188.215.66.0/23
188.215.249.0/24
188.240.15.0/24
188.240.72.0/22
193.19.107.0/24
193.84.133.0/24
193.218.33.0/24
193.223.72.0/22
203.159.84.0/24
203.159.86.0/24
203.159.88.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:86:47:3b:9b:f3:86:50:2b:1c:f4:2d:06:49:4f:ce:58:d8:
18:d4:d6:22:c4:85:9f:63:88:d3:d9:ab:0c:7d:98:00:0c:29:
3a:98:e0:77:16:ae:60:3f:45:c7:4a:49:a1:30:9e:1e:92:9f:
86:e5:27:04:45:70:6f:77:95:66:6c:d2:63:22:44:14:25:7e:
b9:3e:4c:1e:8f:58:4f:04:97:65:9e:5c:d6:f6:01:ab:eb:03:
e4:e9:1e:09:0c:cb:36:d9:c9:5c:cb:01:40:f6:d1:16:a7:eb:
b2:96:b9:31:56:dd:3a:52:17:e5:bc:22:dd:6b:c7:b3:e9:0e:
6f:f4:24:47:9c:a0:b4:20:fe:3b:15:06:e2:85:24:64:91:f5:
1d:5e:70:09:4c:ca:76:ea:cf:22:51:8a:59:95:e7:4d:18:ad:
40:bd:25:74:62:0e:a4:9c:57:4f:5e:8e:3a:2b:ed:77:50:fb:
83:e5:40:67:58:41:42:c6:ce:a2:3c:c8:74:d6:18:c3:45:ca:
40:42:49:07:e1:4c:41:97:8c:2e:53:fe:ba:54:60:93:b4:07:
7b:8a:d1:21:6c:ca:f3:a0:71:26:f8:ad:43:a0:d8:eb:57:33:
ae:6d:f1:60:07:5e:d9:c0:ed:c5:68:26:fe:11:89:8a:9b:73:
f6:11:4e:00
-----BEGIN CERTIFICATE-----
MIIHbzCCBlegAwIBAgIEDdqxQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NmMyYTRiN2Q1ZDczYzViNTcwNDYyMjNiZjMwZWI2NTMwMDViMGUyMB4XDTIyMDQx
MTA3NTE1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjBhMTQxYzljM2Vk
ZWY3YTg4M2VmMDg0NDgyMjNiZjE3NjY0YjNhZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMCUDLSmLrcM/TwDn8fY1twgiY5pBM53iJyacP//G0J32t7o
+2lQUAOCi9C689qMCoKZw2mkbe4JRmE3Tgczr0r+y9CpMnEZnJ2fv+VgJ7TysElK
JjNjh7uLoWoXoc5AuNtQWok7Y5Sd3p2CAG+qf0mCZyP0QzRzLcwr53IcsAK55eyp
F6m2FvHbdLdkRe7KxYr9O0woaDE6WdGcD8T6OP3VvG+HI1DeRtMRy2Ne6ETZGbfa
/rlz9bt/CuFi6/qfMwAhYpE2777KukTYhX8y0FloCJL+f5Ekrb1Emu9QpGv46o92
vE5ic5VYA3zYqvd3+MViX5RJgsviO3+H74WyGZ0CAwEAAaOCBIkwggSFMB0GA1Ud
DgQWBBQgoUHJw+3veog+8IRIIjvxdmSzrzAfBgNVHSMEGDAWgBQ2wqS31dc8W1cE
YiO/MOtlMAWw4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05zS2t0OVhYUEZ0WEJHSWp2ekRyWlRBRnNPSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmMvOGRkODVhLWJmOGYtNDI1ZS1hMjRiLTJjY2VkYjk2NmE1OC8x
L0lLRkJ5Y1B0NzNxSVB2Q0VTQ0k3OFhaa3M2OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMv
OGRkODVhLWJmOGYtNDI1ZS1hMjRiLTJjY2VkYjk2NmE1OC8xL05zS2t0OVhYUEZ0
WEJHSWp2ekRyWlRBRnNPSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
Ap0GCCsGAQUFBwEHAQH/BIICjDCCAogwggKEBAIAATCCAnwDBAAFCsIDBAAFCsQD
BAAFCsYDBAIFtXADBAIFt+ADBAAlLpQDBAAlnEIDBAAlnPcDBAItCVwDBAItCbgD
BAItCrgDBAItCwgDBAItDLQDBAItDbQDBAAthoADBAAthoIDBAIthogDBAItjzQD
BAItkSwDBAAuZpoDBAAuZqwDBAAuZrADBAAuZrUDBAAu5f4DBAE+xYIDBABNUQMD
BAJRFewDBAJU9xgDBAFU9zQDBABVzHUDBABWaIYwDAMEAlZplAMEAFZplgMEAFZp
qAMEAFZp3QMEAFZqXAMEAFZrawMEAFZrxAMEAFkf2QMEAFkgvAMEAFkgvgMEAlkh
AAMEAFkiTQMEAFkiswMEAVki2AMEAFkjcgMEAFkkrAMEAFklaTAMAwQAWSWJAwQA
WSWKAwQAWSYnMAwDBAFZJ6IDBAFZJ6QDBABZKLQDBABZLHIDBAFZLH4DBABZLQgD
BABZLQ4DBABZLnMDBABZL1oDBABZL18DBAJbvmwDBABb63EDBABccgADBAFdcSYD
BAFdcdwDBABdckMDBABdclUDBABdcoQDBABddYgDBAJeZ/gDBABesAQDBABesCkD
BAJesTwDBAJf1pwDBAKrFmQDBAC5Q4gDBAC5Q4oDBAK5oFADBAK5uIQDBAG5wBID
BAK5zbwDBAK503QDBAG51ggDBAC51gsDBAC52AADBAC52AIDBAC55OADBAC57/AD
BAC59IgDBAC59QQDBAC59QYDBAC81AQDBAC81fEDBAG810IDBAC81/kDBAC88A8D
BAK88EgDBADBE2sDBADBVIUDBADB2iEDBALB30gDBADLn1QDBADLn1YDBADLn1gw
DQYJKoZIhvcNAQELBQADggEBAAyGRzub84ZQKxz0LQZJT85Y2BjU1iLEhZ9jiNPZ
qwx9mAAMKTqY4HcWrmA/RcdKSaEwnh6Sn4blJwRFcG93lWZs0mMiRBQlfrk+TB6P
WE8El2WeXNb2AavrA+TpHgkMyzbZyVzLAUD20Ran67KWuTFW3TpSF+W8It1rx7Pp
Dm/0JEecoLQg/jsVBuKFJGSR9R1ecAlMynbqzyJRilmV500YrUC9JXRiDqScV09e
jjor7XdQ+4PlQGdYQULGzqI8yHTWGMNFykBCSQfhTEGXjC5T/rpUYJO0B3uK0SFs
yvOgcSb4rUOg2OtXM65t8WAHXtnA7cVoJv4RiYqbc/YRTgA=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:54 2023 by rpki-client on console-ams.rpki-client.org