Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/AFLD6uLLzPwzsyLuaL4sWPBUBOg.roa
File: AFLD6uLLzPwzsyLuaL4sWPBUBOg.roa (raw, json)
Hash identifier: br9X10+evtk6I9I/5Y4f7dv9J6mkOmxqokMW775zpGY=
Subject key identifier: 00:52:C3:EA:E2:CB:CC:FC:33:B3:22:EE:68:BE:2C:58:F0:54:04:E8
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 018ABC41669C1A88015ABB281CE93DCDAE4B
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/AFLD6uLLzPwzsyLuaL4sWPBUBOg.roa
Signing time: Fri 22 Sep 2023 09:38:37 +0000
ROA not before: Fri 22 Sep 2023 09:38:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 88.202.4.0/24 maxlen: 24
88.202.0.0/24 maxlen: 24
88.202.9.0/24 maxlen: 24
88.202.8.0/24 maxlen: 24
88.202.5.0/24 maxlen: 24
88.202.7.0/24 maxlen: 24
88.202.6.0/24 maxlen: 24
88.202.18.0/24 maxlen: 24
84.254.135.0/24 maxlen: 24
84.254.137.0/24 maxlen: 24
84.254.133.0/24 maxlen: 24
84.254.139.0/24 maxlen: 24
84.254.138.0/24 maxlen: 24
84.254.143.0/24 maxlen: 24
84.254.141.0/24 maxlen: 24
84.254.140.0/24 maxlen: 24
84.254.152.0/24 maxlen: 24
84.254.150.0/24 maxlen: 24
84.254.149.0/24 maxlen: 24
84.254.151.0/24 maxlen: 24
84.254.146.0/24 maxlen: 24
84.254.148.0/24 maxlen: 24
84.254.159.0/24 maxlen: 24
84.254.157.0/24 maxlen: 24
84.254.156.0/24 maxlen: 24
84.254.158.0/24 maxlen: 24
84.254.153.0/24 maxlen: 24
84.254.155.0/24 maxlen: 24
84.254.154.0/24 maxlen: 24
84.254.163.0/24 maxlen: 24
84.254.160.0/24 maxlen: 24
84.254.162.0/24 maxlen: 24
84.254.161.0/24 maxlen: 24
84.254.166.0/24 maxlen: 24
84.254.171.0/24 maxlen: 24
84.254.170.0/24 maxlen: 24
84.254.172.0/24 maxlen: 24
84.254.167.0/24 maxlen: 24
84.254.169.0/24 maxlen: 24
84.254.168.0/24 maxlen: 24
84.254.174.0/24 maxlen: 24
84.254.173.0/24 maxlen: 24
84.254.175.0/24 maxlen: 24
176.227.132.0/24 maxlen: 24
176.227.128.0/24 maxlen: 24
176.227.130.0/24 maxlen: 24
176.227.139.0/24 maxlen: 24
176.227.138.0/24 maxlen: 24
176.227.135.0/24 maxlen: 24
176.227.137.0/24 maxlen: 24
176.227.136.0/24 maxlen: 24
176.227.134.0/24 maxlen: 24
84.254.132.0/24 maxlen: 24
176.227.142.0/24 maxlen: 24
84.254.129.0/24 maxlen: 24
84.254.128.0/24 maxlen: 24
176.227.143.0/24 maxlen: 24
176.227.141.0/24 maxlen: 24
176.227.140.0/24 maxlen: 24
84.254.190.0/24 maxlen: 24
95.210.136.0/24 maxlen: 24
95.210.135.0/24 maxlen: 24
95.210.138.0/24 maxlen: 24
95.210.145.0/24 maxlen: 24
95.210.141.0/24 maxlen: 24
95.210.140.0/24 maxlen: 24
95.210.143.0/24 maxlen: 24
95.210.142.0/24 maxlen: 24
95.210.152.0/24 maxlen: 24
95.210.146.0/24 maxlen: 24
95.210.157.0/24 maxlen: 24
95.210.156.0/24 maxlen: 24
95.210.172.0/24 maxlen: 24
95.210.169.0/24 maxlen: 24
95.210.173.0/24 maxlen: 24
95.210.255.0/24 maxlen: 24
95.210.254.0/24 maxlen: 24
5.61.197.0/24 maxlen: 24
5.61.199.0/24 maxlen: 24
5.61.198.0/24 maxlen: 24
5.61.193.0/24 maxlen: 24
5.61.195.0/24 maxlen: 24
95.210.1.0/24 maxlen: 24
95.210.0.0/24 maxlen: 24
95.210.11.0/24 maxlen: 24
95.210.10.0/24 maxlen: 24
95.210.7.0/24 maxlen: 24
95.210.15.0/24 maxlen: 24
95.210.12.0/24 maxlen: 24
95.210.13.0/24 maxlen: 24
95.210.79.0/24 maxlen: 24
95.210.82.0/24 maxlen: 24
95.210.81.0/24 maxlen: 24
95.210.83.0/24 maxlen: 24
95.210.94.0/24 maxlen: 24
95.210.93.0/24 maxlen: 24
95.210.105.0/24 maxlen: 24
95.210.104.0/24 maxlen: 24
95.210.112.0/24 maxlen: 24
95.210.110.0/24 maxlen: 24
95.210.109.0/24 maxlen: 24
95.210.108.0/24 maxlen: 24
95.210.107.0/24 maxlen: 24
95.210.117.0/24 maxlen: 24
95.210.116.0/24 maxlen: 24
95.210.118.0/24 maxlen: 24
95.210.113.0/24 maxlen: 24
95.210.115.0/24 maxlen: 24
95.210.114.0/24 maxlen: 24
95.210.119.0/24 maxlen: 24
95.210.128.0/24 maxlen: 24
95.210.37.0/24 maxlen: 24
95.210.36.0/24 maxlen: 24
95.210.32.0/24 maxlen: 24
95.210.35.0/24 maxlen: 24
95.210.34.0/24 maxlen: 24
95.210.43.0/24 maxlen: 24
95.210.40.0/24 maxlen: 24
95.210.42.0/24 maxlen: 24
95.210.41.0/24 maxlen: 24
95.210.55.0/24 maxlen: 24
95.210.64.0/24 maxlen: 24
95.210.61.0/24 maxlen: 24
95.210.63.0/24 maxlen: 24
95.210.71.0/24 maxlen: 24
95.210.68.0/24 maxlen: 24
95.210.67.0/24 maxlen: 24
95.210.70.0/24 maxlen: 24
95.210.69.0/24 maxlen: 24
95.210.66.0/24 maxlen: 24
95.210.78.0/24 maxlen: 24
95.210.75.0/24 maxlen: 24
95.210.77.0/24 maxlen: 24
95.210.76.0/24 maxlen: 24
95.210.73.0/24 maxlen: 24
95.210.72.0/24 maxlen: 24
88.202.116.0/22 maxlen: 22
5.175.64.0/20 maxlen: 20
88.202.68.0/23 maxlen: 23
88.202.70.0/23 maxlen: 23
88.202.76.0/23 maxlen: 23
88.202.72.0/22 maxlen: 22
213.209.164.0/24 maxlen: 24
213.209.163.0/24 maxlen: 24
213.209.161.0/24 maxlen: 24
213.209.162.0/24 maxlen: 24
213.209.169.0/24 maxlen: 24
213.209.170.0/24 maxlen: 24
88.202.0.0/17 maxlen: 17
88.202.0.0/18 maxlen: 18
84.254.164.0/23 maxlen: 23
84.254.176.0/21 maxlen: 21
84.254.184.0/22 maxlen: 22
176.227.128.0/20 maxlen: 20
84.254.128.0/18 maxlen: 18
84.254.188.0/23 maxlen: 23
95.210.192.0/20 maxlen: 20
95.210.192.0/19 maxlen: 19
95.210.224.0/20 maxlen: 20
95.210.160.0/19 maxlen: 19
95.210.240.0/21 maxlen: 21
95.210.252.0/23 maxlen: 23
95.210.248.0/22 maxlen: 22
5.61.192.0/21 maxlen: 21
95.210.0.0/22 maxlen: 22
95.210.8.0/21 maxlen: 21
95.210.0.0/16 maxlen: 16
213.209.184.0/22 maxlen: 22
95.210.96.0/21 maxlen: 24
95.210.112.0/22 maxlen: 22
95.210.116.0/22 maxlen: 22
185.28.64.0/24 maxlen: 24
95.210.32.0/23 maxlen: 23
95.210.44.0/23 maxlen: 23
185.28.65.0/24 maxlen: 24
95.210.46.0/23 maxlen: 23
95.210.48.0/22 maxlen: 22
95.210.64.0/20 maxlen: 20
88.202.85.0/24 maxlen: 24
88.202.81.0/24 maxlen: 24
88.202.84.0/24 maxlen: 24
88.202.79.0/24 maxlen: 24
88.202.88.0/24 maxlen: 24
88.202.90.0/24 maxlen: 24
88.202.87.0/24 maxlen: 24
88.202.86.0/24 maxlen: 24
88.202.96.0/24 maxlen: 24
88.202.95.0/24 maxlen: 24
88.202.98.0/24 maxlen: 24
88.202.97.0/24 maxlen: 24
88.202.93.0/24 maxlen: 24
88.202.105.0/24 maxlen: 24
88.202.103.0/24 maxlen: 24
88.202.102.0/24 maxlen: 24
88.202.104.0/24 maxlen: 24
88.202.99.0/24 maxlen: 24
88.202.101.0/24 maxlen: 24
88.202.100.0/24 maxlen: 24
88.202.112.0/24 maxlen: 24
88.202.106.0/24 maxlen: 24
88.202.107.0/24 maxlen: 24
88.202.123.0/24 maxlen: 24
88.202.122.0/24 maxlen: 24
88.202.121.0/24 maxlen: 24
88.202.30.0/24 maxlen: 24
88.202.32.0/24 maxlen: 24
5.175.64.0/24 maxlen: 24
88.202.51.0/24 maxlen: 24
88.202.47.0/24 maxlen: 24
88.202.46.0/24 maxlen: 24
88.202.48.0/24 maxlen: 24
5.175.68.0/24 maxlen: 24
5.175.71.0/24 maxlen: 24
5.175.70.0/24 maxlen: 24
5.175.67.0/24 maxlen: 24
5.175.69.0/24 maxlen: 24
88.202.55.0/24 maxlen: 24
5.175.66.0/24 maxlen: 24
5.175.65.0/24 maxlen: 24
5.175.74.0/24 maxlen: 24
5.175.78.0/24 maxlen: 24
5.175.77.0/24 maxlen: 24
88.202.64.0/24 maxlen: 24
88.202.61.0/24 maxlen: 24
5.175.76.0/24 maxlen: 24
88.202.63.0/24 maxlen: 24
5.175.75.0/24 maxlen: 24
5.175.73.0/24 maxlen: 24
5.175.72.0/24 maxlen: 24
88.202.62.0/24 maxlen: 24
88.202.66.0/24 maxlen: 24
5.175.79.0/24 maxlen: 24
213.209.160.0/19 maxlen: 19
213.209.172.0/22 maxlen: 24
2a00:ca0:201e::/48 maxlen: 48
2a00:ca0:2008::/48 maxlen: 48
2a00:ca0:2005::/48 maxlen: 48
2a00:ca0:2002::/48 maxlen: 48
2a00:ca0:2003::/48 maxlen: 48
2a00:ca0:2000::/48 maxlen: 48
2a00:ca0:2012::/48 maxlen: 48
2a00:ca0:200c::/48 maxlen: 48
2a00:ca0:200f::/48 maxlen: 48
2a00:ca0:2006::/48 maxlen: 48
2a00:ca0:200a::/48 maxlen: 48
2a00:ca0:2004::/48 maxlen: 48
2a00:ca0:2001::/48 maxlen: 48
2a00:ca0:2016::/48 maxlen: 48
2a00:ca0::/32 maxlen: 32
2a00:ca0:2013::/48 maxlen: 48
2a00:ca0:2017::/48 maxlen: 48
2a00:ca0:200e::/48 maxlen: 48
2a00:ca0:201d::/48 maxlen: 48
2a00:ca0:201a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:41:66:9c:1a:88:01:5a:bb:28:1c:e9:3d:cd:ae:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Sep 22 09:38:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0052c3eae2cbccfc33b322ee68be2c58f05404e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cf:be:87:69:17:b9:f2:e1:d2:90:dc:fc:7b:
70:45:60:cb:79:ec:c3:df:0c:f2:dd:92:79:05:c7:
59:31:52:b9:50:27:82:00:02:0f:f5:43:5f:e1:97:
15:6f:6e:13:ed:48:5d:f4:ba:87:0f:9b:6c:7b:5b:
0f:2f:4d:e1:9f:10:a9:f9:39:0e:d6:6e:30:b3:37:
4c:04:61:27:95:63:31:64:c5:5d:e9:d3:87:26:a6:
e5:cf:21:ad:f2:73:06:65:eb:5b:ad:12:10:93:30:
65:7f:60:04:98:6b:97:d1:74:72:6d:12:8d:1c:23:
7d:c1:c7:85:aa:08:1a:a5:b5:15:fc:8c:fc:22:2c:
cc:57:6b:b9:4c:b4:e6:3f:b9:eb:be:97:28:2c:a0:
b9:67:15:d1:d2:08:4d:5c:eb:50:1c:7c:73:5e:18:
a2:70:47:30:d3:e7:60:06:64:18:48:aa:e3:5f:25:
e5:83:6e:93:c6:bc:b3:02:30:bf:80:38:78:76:da:
af:d0:bc:4e:2f:c8:96:70:ca:da:4f:60:63:95:7f:
7a:eb:f6:cc:f3:ab:3c:17:e2:3c:48:ea:f1:0e:ed:
2e:c3:0e:05:cb:f1:05:5c:cb:b4:e8:b4:44:2e:34:
9f:2f:ac:9b:4b:49:b7:b3:0f:06:8b:6c:d3:a8:85:
33:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:52:C3:EA:E2:CB:CC:FC:33:B3:22:EE:68:BE:2C:58:F0:54:04:E8
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/AFLD6uLLzPwzsyLuaL4sWPBUBOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.192.0/21
5.175.64.0/20
84.254.128.0/18
88.202.0.0/17
95.210.0.0/16
176.227.128.0/20
185.28.64.0/23
213.209.160.0/19
IPv6:
2a00:ca0::/32
Signature Algorithm: sha256WithRSAEncryption
4c:7e:d0:25:f9:54:e5:e0:4b:25:81:61:ba:57:9a:b8:7d:ee:
e0:b0:ff:ee:ae:4b:b1:48:72:eb:d1:e6:f2:a4:1e:cf:7c:fb:
ea:a0:87:9e:5a:46:75:e5:87:d1:1f:53:38:d3:26:bd:8b:77:
0b:43:20:2e:ec:37:12:44:49:79:e6:5f:e1:96:46:79:20:45:
97:3c:18:6b:25:bb:ff:f3:f6:ec:83:9b:15:c1:32:36:60:17:
5b:8e:9a:d5:b0:87:ac:61:df:22:70:47:26:13:da:bc:bf:d8:
e7:e6:f8:4c:f7:e0:5e:43:22:47:52:c2:9c:10:76:d4:66:d0:
b1:b1:61:59:f5:58:e4:f3:4f:b5:44:5f:32:29:c7:e3:13:7e:
ae:ff:c2:62:d4:f0:b7:5b:19:02:43:b4:c3:c3:85:c2:68:32:
23:b6:81:d3:be:92:9b:bf:af:f2:c4:55:fc:d1:b8:db:5c:83:
80:45:cd:a7:52:35:3c:d2:83:f6:e3:87:aa:6c:72:4b:82:ff:
b5:f7:43:8a:62:7a:b5:20:ce:f4:b4:c1:bd:e6:36:f0:e9:7e:
87:d5:48:48:d1:e2:b4:23:19:ac:e1:4d:8c:b3:bc:24:92:f1:
40:01:47:49:82:20:a8:28:24:bc:df:52:0e:65:63:b6:68:3d:
bc:87:5b:b5
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAYq8QWacGogBWrsoHOk9za5LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NTU3MDI0Njc3NzBlZDY5YjM2N2I3N2JiZTY0MGJjNmRi
NDE1M2UwHhcNMjMwOTIyMDkzODM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDUyYzNlYWUyY2JjY2ZjMzNiMzIyZWU2OGJlMmM1OGYwNTQwNGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3c++h2kXufLh0pDc/HtwRWDLeezD
3wzy3ZJ5BcdZMVK5UCeCAAIP9UNf4ZcVb24T7Uhd9LqHD5tse1sPL03hnxCp+TkO
1m4wszdMBGEnlWMxZMVd6dOHJqblzyGt8nMGZetbrRIQkzBlf2AEmGuX0XRybRKN
HCN9wceFqggapbUV/Iz8IizMV2u5TLTmP7nrvpcoLKC5ZxXR0ghNXOtQHHxzXhii
cEcw0+dgBmQYSKrjXyXlg26TxryzAjC/gDh4dtqv0LxOL8iWcMraT2BjlX966/bM
86s8F+I8SOrxDu0uww4Fy/EFXMu06LRELjSfL6ybS0m3sw8Gi2zTqIUzwwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFABSw+riy8z8M7Mi7mi+LFjwVAToMB8GA1UdIwQY
MBaAFMdVcCRndw7WmzZ7d7vmQLxttBU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYt
MWQzNzM0OTk5MjRlLzEvQUZMRDZ1TEx6UHd6c3lMdWFMNHNXUEJVQk9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYtMWQzNzM0OTk5MjRl
LzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjA1BAIAATAvAwQDBT3AAwQE
Ba9AAwQGVP6AAwQHWMoAAwMAX9IDBASw44ADBAG5HEADBAXV0aAwDQQCAAIwBwMF
ACoADKAwDQYJKoZIhvcNAQELBQADggEBAEx+0CX5VOXgSyWBYbpXmrh97uCw/+6u
S7FIcuvR5vKkHs98++qgh55aRnXlh9EfUzjTJr2LdwtDIC7sNxJESXnmX+GWRnkg
RZc8GGslu//z9uyDmxXBMjZgF1uOmtWwh6xh3yJwRyYT2ry/2Ofm+Ez34F5DIkdS
wpwQdtRm0LGxYVn1WOTzT7VEXzIpx+MTfq7/wmLU8LdbGQJDtMPDhcJoMiO2gdO+
kpu/r/LEVfzRuNtcg4BFzadSNTzSg/bjh6psckuC/7X3Q4pierUgzvS0wb3mNvDp
fofVSEjR4rQjGazhTYyzvCSS8UABR0mCIKgoJLzfUg5lY7ZoPbyHW7U=
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:34:09 2025 by rpki-client