Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/FulgJJOt-t79kmqbExQ-z0WIczU.roa
File: FulgJJOt-t79kmqbExQ-z0WIczU.roa (raw, json)
Hash identifier: 7ozZS3dToZvwkPZeyK+0JBwdY0G3MyDNhwFLpxpA86M=
Subject key identifier: 16:E9:60:24:93:AD:FA:DE:FD:92:6A:9B:13:14:3E:CF:45:88:73:35
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 020402C1
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/FulgJJOt-t79kmqbExQ-z0WIczU.roa
Signing time: Fri 01 Apr 2022 06:52:26 +0000
ROA not before: Fri 01 Apr 2022 06:52:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 88.202.0.0/17 maxlen: 17
88.202.4.0/24 maxlen: 24
88.202.8.0/24 maxlen: 24
88.202.5.0/24 maxlen: 24
88.202.7.0/24 maxlen: 24
88.202.6.0/24 maxlen: 24
88.202.18.0/24 maxlen: 24
84.254.138.0/24 maxlen: 24
84.254.133.0/24 maxlen: 24
84.254.143.0/24 maxlen: 24
84.254.141.0/24 maxlen: 24
84.254.152.0/24 maxlen: 24
84.254.150.0/24 maxlen: 24
84.254.149.0/24 maxlen: 24
84.254.151.0/24 maxlen: 24
84.254.148.0/24 maxlen: 24
84.254.159.0/24 maxlen: 24
84.254.157.0/24 maxlen: 24
84.254.156.0/24 maxlen: 24
84.254.158.0/24 maxlen: 24
84.254.153.0/24 maxlen: 24
84.254.155.0/24 maxlen: 24
84.254.154.0/24 maxlen: 24
84.254.163.0/24 maxlen: 24
84.254.160.0/24 maxlen: 24
84.254.162.0/24 maxlen: 24
84.254.161.0/24 maxlen: 24
84.254.166.0/24 maxlen: 24
84.254.171.0/24 maxlen: 24
84.254.172.0/24 maxlen: 24
84.254.167.0/24 maxlen: 24
84.254.169.0/24 maxlen: 24
84.254.168.0/24 maxlen: 24
84.254.174.0/24 maxlen: 24
84.254.173.0/24 maxlen: 24
84.254.175.0/24 maxlen: 24
176.227.128.0/20 maxlen: 20
84.254.129.0/24 maxlen: 24
84.254.128.0/24 maxlen: 24
84.254.131.0/24 maxlen: 24
84.254.128.0/18 maxlen: 18
84.254.190.0/24 maxlen: 24
95.210.192.0/20 maxlen: 20
95.210.136.0/24 maxlen: 24
95.210.138.0/24 maxlen: 24
95.210.140.0/24 maxlen: 24
95.210.143.0/24 maxlen: 24
95.210.142.0/24 maxlen: 24
95.210.152.0/24 maxlen: 24
95.210.157.0/24 maxlen: 24
95.210.156.0/24 maxlen: 24
5.61.192.0/21 maxlen: 21
5.61.197.0/24 maxlen: 24
5.61.193.0/24 maxlen: 24
5.61.195.0/24 maxlen: 24
95.210.0.0/22 maxlen: 22
95.210.0.0/16 maxlen: 16
95.210.11.0/24 maxlen: 24
95.210.10.0/24 maxlen: 24
95.210.12.0/24 maxlen: 24
95.210.94.0/24 maxlen: 24
95.210.105.0/24 maxlen: 24
95.210.104.0/24 maxlen: 24
95.210.110.0/24 maxlen: 24
95.210.109.0/24 maxlen: 24
95.210.108.0/24 maxlen: 24
95.210.107.0/24 maxlen: 24
95.210.37.0/24 maxlen: 24
95.210.36.0/24 maxlen: 24
95.210.34.0/24 maxlen: 24
95.210.55.0/24 maxlen: 24
95.210.71.0/24 maxlen: 24
95.210.68.0/24 maxlen: 24
95.210.70.0/24 maxlen: 24
95.210.69.0/24 maxlen: 24
95.210.78.0/24 maxlen: 24
95.210.75.0/24 maxlen: 24
95.210.77.0/24 maxlen: 24
95.210.76.0/24 maxlen: 24
95.210.73.0/24 maxlen: 24
95.210.72.0/24 maxlen: 24
88.202.85.0/24 maxlen: 24
88.202.84.0/24 maxlen: 24
88.202.90.0/24 maxlen: 24
88.202.96.0/24 maxlen: 24
88.202.95.0/24 maxlen: 24
88.202.98.0/24 maxlen: 24
88.202.97.0/24 maxlen: 24
88.202.93.0/24 maxlen: 24
88.202.105.0/24 maxlen: 24
88.202.103.0/24 maxlen: 24
88.202.102.0/24 maxlen: 24
88.202.104.0/24 maxlen: 24
88.202.99.0/24 maxlen: 24
88.202.101.0/24 maxlen: 24
88.202.100.0/24 maxlen: 24
88.202.106.0/24 maxlen: 24
88.202.107.0/24 maxlen: 24
88.202.121.0/24 maxlen: 24
88.202.30.0/24 maxlen: 24
88.202.32.0/24 maxlen: 24
5.175.64.0/20 maxlen: 20
88.202.47.0/24 maxlen: 24
88.202.55.0/24 maxlen: 24
5.175.77.0/24 maxlen: 24
88.202.64.0/24 maxlen: 24
5.175.76.0/24 maxlen: 24
88.202.63.0/24 maxlen: 24
88.202.66.0/24 maxlen: 24
213.209.164.0/24 maxlen: 24
213.209.163.0/24 maxlen: 24
213.209.161.0/24 maxlen: 24
213.209.160.0/19 maxlen: 19
213.209.162.0/24 maxlen: 24
213.209.169.0/24 maxlen: 24
213.209.170.0/24 maxlen: 24
2a00:ca0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33817281 (0x20402c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Apr 1 06:52:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16e9602493adfadefd926a9b13143ecf45887335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ef:27:37:56:a7:29:3e:09:68:5a:13:b1:b1:
fa:75:97:c3:86:be:d4:26:d8:41:5e:a9:a4:42:2e:
f5:54:fb:12:a6:0d:e6:85:a0:d7:ad:dc:9d:cb:b7:
3a:19:f8:ac:af:c0:2c:28:6f:d7:a7:d4:8a:2b:a0:
7d:b9:91:f6:33:1c:68:49:9a:91:31:1c:01:2f:37:
d3:d7:be:59:b5:82:32:a5:f0:7a:4d:7c:f0:1d:fd:
d6:b7:a7:3e:2c:37:e1:55:3a:84:30:84:f0:c3:5c:
37:fd:6b:4b:3a:74:3a:ff:ec:1a:74:7f:49:c5:e2:
d7:ed:6b:5c:71:23:ff:1b:e5:7c:39:fa:57:66:b8:
97:99:ce:9f:cd:2a:be:47:95:8f:72:76:23:01:42:
78:42:5a:31:2d:20:62:0b:34:49:63:d5:2d:14:92:
0a:8d:21:90:57:1e:62:25:99:ee:b8:ff:a7:22:69:
ad:0f:4e:fd:bb:2a:16:7a:8d:cf:c7:3d:81:7c:c9:
27:78:eb:4b:6a:73:40:6c:0b:08:7d:30:12:ef:79:
79:28:be:fc:0e:08:68:13:6d:43:74:7e:e0:07:b5:
d1:73:c4:d5:fc:ba:b4:29:ce:a4:80:30:04:da:c6:
73:6e:d1:90:b6:d7:8d:a6:60:e4:cf:63:20:b4:15:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E9:60:24:93:AD:FA:DE:FD:92:6A:9B:13:14:3E:CF:45:88:73:35
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/FulgJJOt-t79kmqbExQ-z0WIczU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.192.0/21
5.175.64.0/20
84.254.128.0/18
88.202.0.0/17
95.210.0.0/16
176.227.128.0/20
213.209.160.0/19
IPv6:
2a00:ca0::/32
Signature Algorithm: sha256WithRSAEncryption
84:e0:01:da:7d:c3:45:8b:89:cb:85:22:9c:fe:a0:4a:59:54:
46:76:39:b2:48:8b:36:33:1b:28:6f:ff:d7:97:bc:bf:71:54:
f5:32:47:14:9e:fe:65:74:c1:0b:92:27:94:c2:ba:d8:20:b8:
13:c1:7e:a0:ed:25:5d:a1:5d:07:78:4c:48:73:95:2b:80:fe:
b7:72:5c:30:34:0c:1b:d5:ea:a3:b4:b2:de:f0:40:c7:ce:a8:
02:74:88:f5:05:60:01:b5:3a:26:f8:18:f3:e4:bd:09:80:2a:
3b:9d:9c:3d:82:f2:d8:51:ca:28:ae:f5:35:9e:6c:01:db:2c:
aa:42:43:c2:46:57:39:16:c6:a2:31:87:44:ad:01:65:d4:2c:
28:3f:93:5d:30:94:9e:17:79:3f:b8:b2:76:4d:58:0d:7e:9a:
78:94:db:40:2c:f2:42:eb:64:ee:76:a2:17:54:e9:21:3e:af:
52:d8:d9:1d:a9:c6:2d:e3:12:4a:c4:be:25:63:9a:c1:3a:2c:
ff:d8:28:72:b9:b0:83:dd:a1:75:f1:b9:ce:c0:49:ae:35:65:
fb:a0:b2:f6:e5:a3:6e:70:c7:cf:67:c3:df:96:57:48:76:2c:
ce:84:18:8f:0a:f6:8d:e3:f8:c3:d7:03:ab:5d:99:0c:76:fa:
77:06:ff:1e
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIEAgQCwTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NzU1NzAyNDY3NzcwZWQ2OWIzNjdiNzdiYmU2NDBiYzZkYjQxNTNlMB4XDTIyMDQw
MTA2NTIyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTZlOTYwMjQ5M2Fk
ZmFkZWZkOTI2YTliMTMxNDNlY2Y0NTg4NzMzNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAObvJzdWpyk+CWhaE7Gx+nWXw4a+1CbYQV6ppEIu9VT7EqYN
5oWg163cncu3Ohn4rK/ALChv16fUiiugfbmR9jMcaEmakTEcAS8309e+WbWCMqXw
ek188B391renPiw34VU6hDCE8MNcN/1rSzp0Ov/sGnR/ScXi1+1rXHEj/xvlfDn6
V2a4l5nOn80qvkeVj3J2IwFCeEJaMS0gYgs0SWPVLRSSCo0hkFceYiWZ7rj/pyJp
rQ9O/bsqFnqNz8c9gXzJJ3jrS2pzQGwLCH0wEu95eSi+/A4IaBNtQ3R+4Ae10XPE
1fy6tCnOpIAwBNrGc27RkLbXjaZg5M9jILQVUl0CAwEAAaOCAjswggI3MB0GA1Ud
DgQWBBQW6WAkk6363v2SapsTFD7PRYhzNTAfBgNVHSMEGDAWgBTHVXAkZ3cO1ps2
e3e75kC8bbQVPjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3gxVndKR2QzRHRhYk5udDN1LVpBdkcyMEZUNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzcvMjQzZjkxLTg3NDctNDk4MS05Y2JmLTFkMzczNDk5OTI0ZS8x
L0Z1bGdKSk90LXQ3OWttcWJFeFEtejBXSWN6VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcv
MjQzZjkxLTg3NDctNDk4MS05Y2JmLTFkMzczNDk5OTI0ZS8xL3gxVndKR2QzRHRh
Yk5udDN1LVpBdkcyMEZUNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBR
BggrBgEFBQcBBwEB/wRCMEAwLwQCAAEwKQMEAwU9wAMEBAWvQAMEBlT+gAMEB1jK
AAMDAF/SAwQEsOOAAwQF1dGgMA0EAgACMAcDBQAqAAygMA0GCSqGSIb3DQEBCwUA
A4IBAQCE4AHafcNFi4nLhSKc/qBKWVRGdjmySIs2Mxsob//Xl7y/cVT1MkcUnv5l
dMELkieUwrrYILgTwX6g7SVdoV0HeExIc5UrgP63clwwNAwb1eqjtLLe8EDHzqgC
dIj1BWABtTom+Bjz5L0JgCo7nZw9gvLYUcoorvU1nmwB2yyqQkPCRlc5FsaiMYdE
rQFl1CwoP5NdMJSeF3k/uLJ2TVgNfpp4lNtALPJC62TudqIXVOkhPq9S2NkdqcYt
4xJKxL4lY5rBOiz/2ChyubCD3aF18bnOwEmuNWX7oLL25aNucMfPZ8PflldIdizO
hBiPCvaN4/jD1wOrXZkMdvp3Bv8e
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:39:15 2025 by rpki-client