Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/AJma41Rx6KK5Yv-jBn4qJ9g9vqk.roa
File: AJma41Rx6KK5Yv-jBn4qJ9g9vqk.roa (raw, json)
Hash identifier: dIqCXsjm8PpHVOI5A6fGsjUVjod4uQwfXHfYoRlxhrY=
Subject key identifier: 00:99:9A:E3:54:71:E8:A2:B9:62:FF:A3:06:7E:2A:27:D8:3D:BE:A9
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 029FDCB1
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/AJma41Rx6KK5Yv-jBn4qJ9g9vqk.roa
Signing time: Tue 17 May 2022 07:36:29 +0000
ROA not before: Tue 17 May 2022 07:36:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 88.202.0.0/17 maxlen: 17
88.202.0.0/18 maxlen: 18
88.202.4.0/24 maxlen: 24
88.202.8.0/24 maxlen: 24
88.202.5.0/24 maxlen: 24
88.202.7.0/24 maxlen: 24
88.202.6.0/24 maxlen: 24
88.202.18.0/24 maxlen: 24
84.254.139.0/24 maxlen: 24
84.254.138.0/24 maxlen: 24
84.254.135.0/24 maxlen: 24
84.254.133.0/24 maxlen: 24
84.254.143.0/24 maxlen: 24
84.254.141.0/24 maxlen: 24
84.254.152.0/24 maxlen: 24
84.254.150.0/24 maxlen: 24
84.254.149.0/24 maxlen: 24
84.254.151.0/24 maxlen: 24
84.254.148.0/24 maxlen: 24
84.254.159.0/24 maxlen: 24
84.254.157.0/24 maxlen: 24
84.254.156.0/24 maxlen: 24
84.254.158.0/24 maxlen: 24
84.254.153.0/24 maxlen: 24
84.254.155.0/24 maxlen: 24
84.254.154.0/24 maxlen: 24
84.254.164.0/23 maxlen: 23
84.254.163.0/24 maxlen: 24
84.254.160.0/24 maxlen: 24
84.254.162.0/24 maxlen: 24
84.254.161.0/24 maxlen: 24
84.254.166.0/24 maxlen: 24
84.254.171.0/24 maxlen: 24
84.254.170.0/24 maxlen: 24
84.254.172.0/24 maxlen: 24
84.254.167.0/24 maxlen: 24
84.254.169.0/24 maxlen: 24
84.254.168.0/24 maxlen: 24
84.254.174.0/24 maxlen: 24
84.254.173.0/24 maxlen: 24
84.254.176.0/21 maxlen: 21
84.254.175.0/24 maxlen: 24
84.254.184.0/22 maxlen: 22
176.227.128.0/20 maxlen: 20
84.254.132.0/24 maxlen: 24
84.254.129.0/24 maxlen: 24
84.254.128.0/24 maxlen: 24
84.254.131.0/24 maxlen: 24
84.254.128.0/18 maxlen: 18
84.254.188.0/23 maxlen: 23
84.254.190.0/24 maxlen: 24
95.210.192.0/20 maxlen: 20
95.210.192.0/19 maxlen: 19
95.210.224.0/20 maxlen: 20
95.210.136.0/24 maxlen: 24
95.210.138.0/24 maxlen: 24
95.210.140.0/24 maxlen: 24
95.210.143.0/24 maxlen: 24
95.210.142.0/24 maxlen: 24
95.210.152.0/24 maxlen: 24
95.210.157.0/24 maxlen: 24
95.210.156.0/24 maxlen: 24
95.210.160.0/19 maxlen: 19
95.210.240.0/21 maxlen: 21
95.210.252.0/23 maxlen: 23
95.210.248.0/22 maxlen: 22
95.210.255.0/24 maxlen: 24
95.210.254.0/24 maxlen: 24
5.61.192.0/21 maxlen: 21
5.61.197.0/24 maxlen: 24
5.61.193.0/24 maxlen: 24
5.61.195.0/24 maxlen: 24
95.210.0.0/22 maxlen: 22
95.210.8.0/21 maxlen: 21
95.210.0.0/16 maxlen: 16
95.210.11.0/24 maxlen: 24
95.210.10.0/24 maxlen: 24
95.210.7.0/24 maxlen: 24
95.210.12.0/24 maxlen: 24
95.210.13.0/24 maxlen: 24
213.209.176.0/20 maxlen: 24
213.209.184.0/22 maxlen: 22
95.210.94.0/24 maxlen: 24
95.210.105.0/24 maxlen: 24
95.210.104.0/24 maxlen: 24
95.210.112.0/22 maxlen: 22
95.210.110.0/24 maxlen: 24
95.210.109.0/24 maxlen: 24
95.210.108.0/24 maxlen: 24
95.210.107.0/24 maxlen: 24
95.210.116.0/22 maxlen: 22
95.210.128.0/24 maxlen: 24
95.210.37.0/24 maxlen: 24
95.210.36.0/24 maxlen: 24
95.210.32.0/23 maxlen: 23
95.210.35.0/24 maxlen: 24
95.210.34.0/24 maxlen: 24
95.210.44.0/23 maxlen: 23
95.210.43.0/24 maxlen: 24
95.210.42.0/24 maxlen: 24
95.210.46.0/23 maxlen: 23
95.210.48.0/22 maxlen: 22
95.210.55.0/24 maxlen: 24
95.210.64.0/20 maxlen: 20
95.210.61.0/24 maxlen: 24
95.210.63.0/24 maxlen: 24
95.210.71.0/24 maxlen: 24
95.210.68.0/24 maxlen: 24
95.210.70.0/24 maxlen: 24
95.210.69.0/24 maxlen: 24
95.210.78.0/24 maxlen: 24
95.210.75.0/24 maxlen: 24
95.210.77.0/24 maxlen: 24
95.210.76.0/24 maxlen: 24
95.210.73.0/24 maxlen: 24
95.210.72.0/24 maxlen: 24
88.202.85.0/24 maxlen: 24
88.202.81.0/24 maxlen: 24
88.202.84.0/24 maxlen: 24
88.202.79.0/24 maxlen: 24
88.202.88.0/24 maxlen: 24
88.202.90.0/24 maxlen: 24
88.202.87.0/24 maxlen: 24
88.202.86.0/24 maxlen: 24
88.202.96.0/24 maxlen: 24
88.202.95.0/24 maxlen: 24
88.202.98.0/24 maxlen: 24
88.202.97.0/24 maxlen: 24
88.202.93.0/24 maxlen: 24
88.202.105.0/24 maxlen: 24
88.202.103.0/24 maxlen: 24
88.202.102.0/24 maxlen: 24
88.202.104.0/24 maxlen: 24
88.202.99.0/24 maxlen: 24
88.202.101.0/24 maxlen: 24
88.202.100.0/24 maxlen: 24
88.202.112.0/24 maxlen: 24
88.202.106.0/24 maxlen: 24
88.202.107.0/24 maxlen: 24
88.202.116.0/22 maxlen: 22
88.202.121.0/24 maxlen: 24
88.202.30.0/24 maxlen: 24
88.202.32.0/24 maxlen: 24
88.202.51.0/24 maxlen: 24
5.175.64.0/20 maxlen: 20
88.202.47.0/24 maxlen: 24
88.202.46.0/24 maxlen: 24
88.202.48.0/24 maxlen: 24
88.202.55.0/24 maxlen: 24
5.175.77.0/24 maxlen: 24
88.202.64.0/24 maxlen: 24
5.175.76.0/24 maxlen: 24
88.202.63.0/24 maxlen: 24
88.202.68.0/23 maxlen: 23
88.202.70.0/23 maxlen: 23
88.202.66.0/24 maxlen: 24
88.202.76.0/23 maxlen: 23
88.202.72.0/22 maxlen: 22
213.209.164.0/24 maxlen: 24
213.209.163.0/24 maxlen: 24
213.209.161.0/24 maxlen: 24
213.209.160.0/19 maxlen: 19
213.209.162.0/24 maxlen: 24
213.209.169.0/24 maxlen: 24
213.209.170.0/24 maxlen: 24
213.209.172.0/22 maxlen: 24
2a00:ca0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44031153 (0x29fdcb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: May 17 07:36:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00999ae35471e8a2b962ffa3067e2a27d83dbea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:fa:08:4d:a7:c9:67:78:e7:8e:2a:3f:55:
8c:3b:9a:08:20:6e:13:82:6f:07:68:87:4d:60:66:
dd:5c:42:77:a0:f3:76:9e:65:c2:67:e7:6e:16:46:
d9:d4:de:b2:31:06:25:6d:31:2d:7a:02:5c:21:a9:
84:66:67:ff:c2:dc:49:8d:5f:51:f0:25:80:0a:9e:
55:8b:4c:63:d3:61:a0:d0:4b:f4:f9:09:54:a9:9a:
dc:23:f5:b7:46:88:b4:37:3e:21:96:a0:ad:f8:2a:
f8:ab:8c:7b:33:c7:b2:b3:95:c0:9e:18:c7:f7:13:
2e:44:a9:8d:95:4a:b9:8c:6c:09:30:7c:75:a7:87:
17:9f:e0:fc:26:99:7a:cd:55:49:68:84:51:77:0d:
68:c8:34:75:c3:d6:5e:3b:16:57:42:b8:c3:75:2a:
5f:a8:60:c1:15:c1:7e:39:d6:ef:75:0d:9c:5f:6f:
7f:84:b6:bd:0f:67:d5:95:0a:91:a4:1f:c2:dd:cf:
ad:9d:57:e3:5b:87:a3:55:ac:d8:ec:9f:49:7b:c7:
16:83:57:b5:06:0a:38:b7:2b:b0:81:0b:2e:38:99:
ca:0a:54:bb:79:d3:c2:c1:ef:5f:7d:04:47:33:cf:
75:26:1c:f0:46:1c:b7:7b:5a:ba:3e:9b:c1:93:87:
94:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:99:9A:E3:54:71:E8:A2:B9:62:FF:A3:06:7E:2A:27:D8:3D:BE:A9
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/AJma41Rx6KK5Yv-jBn4qJ9g9vqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.192.0/21
5.175.64.0/20
84.254.128.0/18
88.202.0.0/17
95.210.0.0/16
176.227.128.0/20
213.209.160.0/19
IPv6:
2a00:ca0::/32
Signature Algorithm: sha256WithRSAEncryption
3f:61:85:fc:06:fd:b7:c4:19:a8:55:3b:33:44:51:54:34:78:
56:f7:d9:bb:c0:e6:9e:d7:44:a1:57:fc:3b:ec:f1:3e:1a:3f:
af:25:b0:37:05:69:cc:20:8f:81:04:ac:54:67:dd:ca:06:6d:
2d:ea:b9:a7:a5:7d:bf:d8:d0:22:7a:20:23:8a:1d:50:66:26:
1c:ce:17:f6:c9:e3:db:6c:8d:c4:2a:6a:df:05:39:51:39:65:
4e:3a:13:79:93:a2:74:9a:7b:33:e1:77:e7:07:fb:c9:7e:b9:
ee:b9:7a:1f:ef:68:52:25:a3:b5:3b:58:e3:18:f0:48:10:63:
f1:57:91:2f:b0:4c:69:4b:d3:f9:7d:92:d7:6d:1d:18:b6:a6:
36:9f:ce:2b:18:60:74:ad:fa:13:97:b4:88:02:c7:e2:81:d3:
31:02:93:46:1e:6b:3a:7b:4e:59:13:3e:de:d2:88:2e:f0:38:
61:23:01:bb:20:2d:f0:f4:25:30:99:81:a5:4c:55:9d:18:79:
a4:26:d3:fa:94:9a:e7:b7:8a:22:9f:0c:03:93:ae:7c:dc:d9:
74:10:cf:db:93:6f:80:db:73:60:b1:71:1c:b7:ed:db:54:dc:
18:c0:72:68:98:9c:ca:f9:b4:aa:b2:cb:7d:ee:8c:19:c6:1b:
0e:e5:9d:63
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIEAp/csTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NzU1NzAyNDY3NzcwZWQ2OWIzNjdiNzdiYmU2NDBiYzZkYjQxNTNlMB4XDTIyMDUx
NzA3MzYyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDA5OTlhZTM1NDcx
ZThhMmI5NjJmZmEzMDY3ZTJhMjdkODNkYmVhOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMqz+ghNp8lneOeOKj9VjDuaCCBuE4JvB2iHTWBm3VxCd6Dz
dp5lwmfnbhZG2dTesjEGJW0xLXoCXCGphGZn/8LcSY1fUfAlgAqeVYtMY9NhoNBL
9PkJVKma3CP1t0aItDc+IZagrfgq+KuMezPHsrOVwJ4Yx/cTLkSpjZVKuYxsCTB8
daeHF5/g/CaZes1VSWiEUXcNaMg0dcPWXjsWV0K4w3UqX6hgwRXBfjnW73UNnF9v
f4S2vQ9n1ZUKkaQfwt3PrZ1X41uHo1Ws2OyfSXvHFoNXtQYKOLcrsIELLjiZygpU
u3nTwsHvX30ERzPPdSYc8EYct3tauj6bwZOHlLcCAwEAAaOCAjswggI3MB0GA1Ud
DgQWBBQAmZrjVHHoorli/6MGfion2D2+qTAfBgNVHSMEGDAWgBTHVXAkZ3cO1ps2
e3e75kC8bbQVPjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3gxVndKR2QzRHRhYk5udDN1LVpBdkcyMEZUNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzcvMjQzZjkxLTg3NDctNDk4MS05Y2JmLTFkMzczNDk5OTI0ZS8x
L0FKbWE0MVJ4NktLNVl2LWpCbjRxSjlnOXZxay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcv
MjQzZjkxLTg3NDctNDk4MS05Y2JmLTFkMzczNDk5OTI0ZS8xL3gxVndKR2QzRHRh
Yk5udDN1LVpBdkcyMEZUNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBR
BggrBgEFBQcBBwEB/wRCMEAwLwQCAAEwKQMEAwU9wAMEBAWvQAMEBlT+gAMEB1jK
AAMDAF/SAwQEsOOAAwQF1dGgMA0EAgACMAcDBQAqAAygMA0GCSqGSIb3DQEBCwUA
A4IBAQA/YYX8Bv23xBmoVTszRFFUNHhW99m7wOae10ShV/w77PE+Gj+vJbA3BWnM
II+BBKxUZ93KBm0t6rmnpX2/2NAieiAjih1QZiYczhf2yePbbI3EKmrfBTlROWVO
OhN5k6J0mnsz4XfnB/vJfrnuuXof72hSJaO1O1jjGPBIEGPxV5EvsExpS9P5fZLX
bR0YtqY2n84rGGB0rfoTl7SIAsfigdMxApNGHms6e05ZEz7e0ogu8DhhIwG7IC3w
9CUwmYGlTFWdGHmkJtP6lJrnt4oinwwDk6583Nl0EM/bk2+A23NgsXEct+3bVNwY
wHJomJzK+bSqsst97owZxhsO5Z1j
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:19 2024 by rpki-client on console-fra.rpki-client.org