Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/8Aoczfl45KEjFVEmPO9SV9uZveA.roa
File: 8Aoczfl45KEjFVEmPO9SV9uZveA.roa (raw, json)
Hash identifier: Msjf0DwV3tIxy+dOkXbbko1fRw4mbPoWA0rjJURionw=
Subject key identifier: F0:0A:1C:CD:F9:78:E4:A1:23:15:51:26:3C:EF:52:57:DB:99:BD:E0
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 026F2A36
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/8Aoczfl45KEjFVEmPO9SV9uZveA.roa
Signing time: Fri 29 Apr 2022 07:18:52 +0000
ROA not before: Fri 29 Apr 2022 07:18:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 88.202.0.0/17 maxlen: 17
88.202.0.0/18 maxlen: 18
88.202.4.0/24 maxlen: 24
88.202.8.0/24 maxlen: 24
88.202.5.0/24 maxlen: 24
88.202.7.0/24 maxlen: 24
88.202.6.0/24 maxlen: 24
88.202.18.0/24 maxlen: 24
84.254.139.0/24 maxlen: 24
84.254.138.0/24 maxlen: 24
84.254.135.0/24 maxlen: 24
84.254.133.0/24 maxlen: 24
84.254.143.0/24 maxlen: 24
84.254.141.0/24 maxlen: 24
84.254.152.0/24 maxlen: 24
84.254.150.0/24 maxlen: 24
84.254.149.0/24 maxlen: 24
84.254.151.0/24 maxlen: 24
84.254.148.0/24 maxlen: 24
84.254.159.0/24 maxlen: 24
84.254.157.0/24 maxlen: 24
84.254.156.0/24 maxlen: 24
84.254.158.0/24 maxlen: 24
84.254.153.0/24 maxlen: 24
84.254.155.0/24 maxlen: 24
84.254.154.0/24 maxlen: 24
84.254.164.0/23 maxlen: 23
84.254.163.0/24 maxlen: 24
84.254.160.0/24 maxlen: 24
84.254.162.0/24 maxlen: 24
84.254.161.0/24 maxlen: 24
84.254.166.0/24 maxlen: 24
84.254.171.0/24 maxlen: 24
84.254.170.0/24 maxlen: 24
84.254.172.0/24 maxlen: 24
84.254.167.0/24 maxlen: 24
84.254.169.0/24 maxlen: 24
84.254.168.0/24 maxlen: 24
84.254.174.0/24 maxlen: 24
84.254.173.0/24 maxlen: 24
84.254.176.0/21 maxlen: 21
84.254.175.0/24 maxlen: 24
84.254.184.0/22 maxlen: 22
176.227.128.0/20 maxlen: 20
84.254.132.0/24 maxlen: 24
84.254.129.0/24 maxlen: 24
84.254.128.0/24 maxlen: 24
84.254.131.0/24 maxlen: 24
84.254.128.0/18 maxlen: 18
84.254.188.0/23 maxlen: 23
84.254.190.0/24 maxlen: 24
95.210.192.0/20 maxlen: 20
95.210.192.0/19 maxlen: 19
95.210.224.0/20 maxlen: 20
95.210.136.0/24 maxlen: 24
95.210.138.0/24 maxlen: 24
95.210.140.0/24 maxlen: 24
95.210.143.0/24 maxlen: 24
95.210.142.0/24 maxlen: 24
95.210.152.0/24 maxlen: 24
95.210.157.0/24 maxlen: 24
95.210.156.0/24 maxlen: 24
95.210.160.0/19 maxlen: 19
95.210.240.0/21 maxlen: 21
95.210.252.0/23 maxlen: 23
95.210.248.0/22 maxlen: 22
95.210.255.0/24 maxlen: 24
5.61.192.0/21 maxlen: 21
5.61.197.0/24 maxlen: 24
5.61.193.0/24 maxlen: 24
5.61.195.0/24 maxlen: 24
95.210.0.0/22 maxlen: 22
95.210.8.0/21 maxlen: 21
95.210.0.0/16 maxlen: 16
95.210.11.0/24 maxlen: 24
95.210.10.0/24 maxlen: 24
95.210.7.0/24 maxlen: 24
95.210.12.0/24 maxlen: 24
213.209.176.0/20 maxlen: 24
213.209.184.0/22 maxlen: 22
95.210.94.0/24 maxlen: 24
95.210.105.0/24 maxlen: 24
95.210.104.0/24 maxlen: 24
95.210.112.0/22 maxlen: 22
95.210.110.0/24 maxlen: 24
95.210.109.0/24 maxlen: 24
95.210.108.0/24 maxlen: 24
95.210.107.0/24 maxlen: 24
95.210.116.0/22 maxlen: 22
95.210.128.0/24 maxlen: 24
95.210.37.0/24 maxlen: 24
95.210.36.0/24 maxlen: 24
95.210.32.0/23 maxlen: 23
95.210.34.0/24 maxlen: 24
95.210.44.0/23 maxlen: 23
95.210.43.0/24 maxlen: 24
95.210.42.0/24 maxlen: 24
95.210.46.0/23 maxlen: 23
95.210.48.0/22 maxlen: 22
95.210.55.0/24 maxlen: 24
95.210.64.0/20 maxlen: 20
95.210.61.0/24 maxlen: 24
95.210.63.0/24 maxlen: 24
95.210.71.0/24 maxlen: 24
95.210.68.0/24 maxlen: 24
95.210.70.0/24 maxlen: 24
95.210.69.0/24 maxlen: 24
95.210.78.0/24 maxlen: 24
95.210.75.0/24 maxlen: 24
95.210.77.0/24 maxlen: 24
95.210.76.0/24 maxlen: 24
95.210.73.0/24 maxlen: 24
95.210.72.0/24 maxlen: 24
88.202.85.0/24 maxlen: 24
88.202.81.0/24 maxlen: 24
88.202.84.0/24 maxlen: 24
88.202.79.0/24 maxlen: 24
88.202.88.0/24 maxlen: 24
88.202.90.0/24 maxlen: 24
88.202.87.0/24 maxlen: 24
88.202.86.0/24 maxlen: 24
88.202.96.0/24 maxlen: 24
88.202.95.0/24 maxlen: 24
88.202.98.0/24 maxlen: 24
88.202.97.0/24 maxlen: 24
88.202.93.0/24 maxlen: 24
88.202.105.0/24 maxlen: 24
88.202.103.0/24 maxlen: 24
88.202.102.0/24 maxlen: 24
88.202.104.0/24 maxlen: 24
88.202.99.0/24 maxlen: 24
88.202.101.0/24 maxlen: 24
88.202.100.0/24 maxlen: 24
88.202.112.0/24 maxlen: 24
88.202.106.0/24 maxlen: 24
88.202.107.0/24 maxlen: 24
88.202.116.0/22 maxlen: 22
88.202.121.0/24 maxlen: 24
88.202.30.0/24 maxlen: 24
88.202.32.0/24 maxlen: 24
5.175.64.0/20 maxlen: 20
88.202.47.0/24 maxlen: 24
88.202.46.0/24 maxlen: 24
88.202.48.0/24 maxlen: 24
88.202.55.0/24 maxlen: 24
5.175.77.0/24 maxlen: 24
88.202.64.0/24 maxlen: 24
5.175.76.0/24 maxlen: 24
88.202.63.0/24 maxlen: 24
88.202.68.0/23 maxlen: 23
88.202.70.0/23 maxlen: 23
88.202.66.0/24 maxlen: 24
88.202.76.0/23 maxlen: 23
88.202.72.0/22 maxlen: 22
213.209.164.0/24 maxlen: 24
213.209.163.0/24 maxlen: 24
213.209.161.0/24 maxlen: 24
213.209.160.0/19 maxlen: 19
213.209.162.0/24 maxlen: 24
213.209.169.0/24 maxlen: 24
213.209.170.0/24 maxlen: 24
2a00:ca0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40839734 (0x26f2a36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Apr 29 07:18:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f00a1ccdf978e4a1231551263cef5257db99bde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:43:60:bc:7c:94:67:b3:c8:68:a3:d3:48:20:
84:a0:d1:66:84:05:6c:27:1a:85:82:b9:c2:30:ba:
f4:49:b8:35:79:6f:3b:10:a8:0e:3e:97:2c:0e:6e:
e1:81:b0:d5:99:ff:6d:6a:69:e0:fc:8c:c1:bc:72:
a2:6d:e0:ae:35:82:11:c3:18:14:92:bd:ff:83:de:
af:8b:3f:68:75:a4:1c:38:2c:95:72:0e:5c:a0:a9:
e5:08:4f:b7:20:aa:bd:7d:5e:23:44:1b:c6:f8:33:
ce:fd:36:84:c0:74:03:60:6b:b4:cf:5a:36:8e:3b:
2c:f1:a1:47:23:2d:9e:19:f8:0d:0d:08:6b:9e:a3:
2c:91:6b:3a:8d:2e:01:bf:23:ec:01:31:c8:10:c5:
bb:2e:70:b6:7c:c6:47:7e:5b:9c:6a:8b:3d:d2:d5:
86:f0:16:56:2f:1f:8d:94:b6:18:bc:7f:ed:fd:b7:
39:16:e0:b4:95:c2:e2:e6:f7:4b:b1:89:2d:b3:a1:
df:42:32:b6:6c:15:12:a1:07:25:ad:d3:b5:d9:1b:
ee:71:1c:3c:57:99:04:b3:f1:f4:0f:34:35:39:34:
45:2d:21:c6:d9:bf:a8:a7:a6:02:06:4d:f7:9b:f4:
ba:5d:66:57:37:81:2a:42:52:2f:d3:21:40:84:a4:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0A:1C:CD:F9:78:E4:A1:23:15:51:26:3C:EF:52:57:DB:99:BD:E0
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/8Aoczfl45KEjFVEmPO9SV9uZveA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.192.0/21
5.175.64.0/20
84.254.128.0/18
88.202.0.0/17
95.210.0.0/16
176.227.128.0/20
213.209.160.0/19
IPv6:
2a00:ca0::/32
Signature Algorithm: sha256WithRSAEncryption
27:0f:3f:bb:c1:06:85:ef:b7:4f:c7:ff:28:f5:a1:d4:23:b4:
c1:43:51:96:51:13:8b:cb:f5:58:a7:be:77:52:2e:da:6d:72:
6b:37:d4:d2:ce:c2:43:81:29:ad:a4:61:eb:27:c6:8f:c4:ef:
fc:af:c3:45:bd:e8:3d:d7:ec:ba:4d:62:91:b9:9c:2c:5f:e7:
cf:27:ee:ad:b1:67:42:34:eb:d3:f1:09:d2:c4:c6:b5:76:4c:
17:18:a6:fc:a6:09:01:f5:85:f3:66:bf:01:8b:35:7e:83:76:
9e:ec:77:76:71:5f:e7:51:f4:7d:34:34:c4:d0:68:66:e7:f8:
76:99:22:c3:53:af:bc:9a:24:4d:b8:a8:77:e4:fd:31:82:a7:
fe:24:3c:fa:e3:17:62:e6:53:6b:e6:65:9d:e8:17:43:12:af:
f2:37:cd:93:d0:34:3e:b2:77:1a:47:28:96:87:94:1e:e9:41:
d0:be:60:c8:24:19:6a:5c:1a:10:23:18:08:46:60:ce:1b:57:
e8:d6:bd:d6:2a:84:7b:fe:13:39:14:75:8a:07:33:9b:ff:ad:
0d:cf:61:27:d3:b7:65:3a:f3:c5:eb:31:ae:47:13:ca:58:13:
bd:c5:14:20:ca:a6:f5:58:c6:4a:38:ed:aa:af:42:91:cb:51:
44:13:57:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:26 2024 by rpki-client on console-ams.rpki-client.org