Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/SbQfsdFjYXhRT_Be0gh3wOedh_I.roa
File: SbQfsdFjYXhRT_Be0gh3wOedh_I.roa (raw, json)
Hash identifier: fFarJQzpCATFh65e8s+1JvqsyEAUkIErRHY30X6CuFE=
Subject key identifier: 49:B4:1F:B1:D1:63:61:78:51:4F:F0:5E:D2:08:77:C0:E7:9D:87:F2
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 025DE0A8
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/SbQfsdFjYXhRT_Be0gh3wOedh_I.roa
Signing time: Thu 21 Apr 2022 13:13:01 +0000
ROA not before: Thu 21 Apr 2022 13:13:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 88.202.0.0/17 maxlen: 17
88.202.0.0/18 maxlen: 18
88.202.4.0/24 maxlen: 24
88.202.8.0/24 maxlen: 24
88.202.5.0/24 maxlen: 24
88.202.7.0/24 maxlen: 24
88.202.6.0/24 maxlen: 24
88.202.18.0/24 maxlen: 24
84.254.139.0/24 maxlen: 24
84.254.138.0/24 maxlen: 24
84.254.135.0/24 maxlen: 24
84.254.133.0/24 maxlen: 24
84.254.143.0/24 maxlen: 24
84.254.141.0/24 maxlen: 24
84.254.152.0/24 maxlen: 24
84.254.150.0/24 maxlen: 24
84.254.149.0/24 maxlen: 24
84.254.151.0/24 maxlen: 24
84.254.148.0/24 maxlen: 24
84.254.159.0/24 maxlen: 24
84.254.157.0/24 maxlen: 24
84.254.156.0/24 maxlen: 24
84.254.158.0/24 maxlen: 24
84.254.153.0/24 maxlen: 24
84.254.155.0/24 maxlen: 24
84.254.154.0/24 maxlen: 24
84.254.164.0/23 maxlen: 23
84.254.163.0/24 maxlen: 24
84.254.160.0/24 maxlen: 24
84.254.162.0/24 maxlen: 24
84.254.161.0/24 maxlen: 24
84.254.166.0/24 maxlen: 24
84.254.171.0/24 maxlen: 24
84.254.170.0/24 maxlen: 24
84.254.172.0/24 maxlen: 24
84.254.167.0/24 maxlen: 24
84.254.169.0/24 maxlen: 24
84.254.168.0/24 maxlen: 24
84.254.174.0/24 maxlen: 24
84.254.173.0/24 maxlen: 24
84.254.176.0/21 maxlen: 21
84.254.175.0/24 maxlen: 24
84.254.184.0/22 maxlen: 22
176.227.128.0/20 maxlen: 20
84.254.132.0/24 maxlen: 24
84.254.129.0/24 maxlen: 24
84.254.128.0/24 maxlen: 24
84.254.131.0/24 maxlen: 24
84.254.128.0/18 maxlen: 18
84.254.188.0/23 maxlen: 23
84.254.190.0/24 maxlen: 24
95.210.192.0/20 maxlen: 20
95.210.192.0/19 maxlen: 19
95.210.224.0/20 maxlen: 20
95.210.136.0/24 maxlen: 24
95.210.138.0/24 maxlen: 24
95.210.140.0/24 maxlen: 24
95.210.143.0/24 maxlen: 24
95.210.142.0/24 maxlen: 24
95.210.152.0/24 maxlen: 24
95.210.157.0/24 maxlen: 24
95.210.156.0/24 maxlen: 24
95.210.160.0/19 maxlen: 19
95.210.240.0/21 maxlen: 21
95.210.252.0/23 maxlen: 23
95.210.248.0/22 maxlen: 22
5.61.192.0/21 maxlen: 21
5.61.197.0/24 maxlen: 24
5.61.193.0/24 maxlen: 24
5.61.195.0/24 maxlen: 24
95.210.0.0/22 maxlen: 22
95.210.8.0/21 maxlen: 21
95.210.0.0/16 maxlen: 16
95.210.11.0/24 maxlen: 24
95.210.10.0/24 maxlen: 24
95.210.7.0/24 maxlen: 24
95.210.12.0/24 maxlen: 24
213.209.176.0/20 maxlen: 24
213.209.184.0/22 maxlen: 22
95.210.94.0/24 maxlen: 24
95.210.105.0/24 maxlen: 24
95.210.104.0/24 maxlen: 24
95.210.112.0/22 maxlen: 22
95.210.110.0/24 maxlen: 24
95.210.109.0/24 maxlen: 24
95.210.108.0/24 maxlen: 24
95.210.107.0/24 maxlen: 24
95.210.116.0/22 maxlen: 22
95.210.128.0/24 maxlen: 24
95.210.37.0/24 maxlen: 24
95.210.36.0/24 maxlen: 24
95.210.32.0/23 maxlen: 23
95.210.34.0/24 maxlen: 24
95.210.44.0/23 maxlen: 23
95.210.43.0/24 maxlen: 24
95.210.42.0/24 maxlen: 24
95.210.46.0/23 maxlen: 23
95.210.48.0/22 maxlen: 22
95.210.55.0/24 maxlen: 24
95.210.64.0/20 maxlen: 20
95.210.61.0/24 maxlen: 24
95.210.63.0/24 maxlen: 24
95.210.71.0/24 maxlen: 24
95.210.68.0/24 maxlen: 24
95.210.70.0/24 maxlen: 24
95.210.69.0/24 maxlen: 24
95.210.78.0/24 maxlen: 24
95.210.75.0/24 maxlen: 24
95.210.77.0/24 maxlen: 24
95.210.76.0/24 maxlen: 24
95.210.73.0/24 maxlen: 24
95.210.72.0/24 maxlen: 24
88.202.85.0/24 maxlen: 24
88.202.81.0/24 maxlen: 24
88.202.84.0/24 maxlen: 24
88.202.79.0/24 maxlen: 24
88.202.88.0/24 maxlen: 24
88.202.90.0/24 maxlen: 24
88.202.87.0/24 maxlen: 24
88.202.86.0/24 maxlen: 24
88.202.96.0/24 maxlen: 24
88.202.95.0/24 maxlen: 24
88.202.98.0/24 maxlen: 24
88.202.97.0/24 maxlen: 24
88.202.93.0/24 maxlen: 24
88.202.105.0/24 maxlen: 24
88.202.103.0/24 maxlen: 24
88.202.102.0/24 maxlen: 24
88.202.104.0/24 maxlen: 24
88.202.99.0/24 maxlen: 24
88.202.101.0/24 maxlen: 24
88.202.100.0/24 maxlen: 24
88.202.112.0/24 maxlen: 24
88.202.106.0/24 maxlen: 24
88.202.107.0/24 maxlen: 24
88.202.116.0/22 maxlen: 22
88.202.121.0/24 maxlen: 24
88.202.30.0/24 maxlen: 24
88.202.32.0/24 maxlen: 24
5.175.64.0/20 maxlen: 20
88.202.47.0/24 maxlen: 24
88.202.46.0/24 maxlen: 24
88.202.48.0/24 maxlen: 24
88.202.55.0/24 maxlen: 24
5.175.77.0/24 maxlen: 24
88.202.64.0/24 maxlen: 24
5.175.76.0/24 maxlen: 24
88.202.63.0/24 maxlen: 24
88.202.68.0/23 maxlen: 23
88.202.70.0/23 maxlen: 23
88.202.66.0/24 maxlen: 24
88.202.76.0/23 maxlen: 23
88.202.72.0/22 maxlen: 22
213.209.164.0/24 maxlen: 24
213.209.163.0/24 maxlen: 24
213.209.161.0/24 maxlen: 24
213.209.160.0/19 maxlen: 19
213.209.162.0/24 maxlen: 24
213.209.169.0/24 maxlen: 24
213.209.170.0/24 maxlen: 24
2a00:ca0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39706792 (0x25de0a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Apr 21 13:13:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49b41fb1d1636178514ff05ed20877c0e79d87f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f9:6c:4f:cd:b5:7c:ad:5a:22:88:7c:3f:a0:
77:f6:f0:94:21:8f:72:c3:bd:bc:8d:64:3e:fb:8c:
79:ef:3d:11:f1:c4:35:41:9f:14:53:6c:54:cc:3d:
2d:b2:df:cd:d5:4b:26:85:43:3b:14:c6:ec:c3:f5:
76:89:20:6a:77:bd:68:5f:45:be:79:07:39:90:aa:
e6:09:a7:8c:b0:e0:b2:a3:23:3b:91:fb:ea:9f:f4:
e2:68:e8:ac:3c:ef:7c:b0:67:32:c1:64:8b:56:ed:
f2:9d:33:8c:03:65:ce:a7:e4:ab:7a:8a:d8:59:f7:
e0:82:9b:d5:f9:72:02:18:94:1a:a9:03:1e:73:d4:
ef:60:5b:c0:8c:71:23:18:70:2c:a9:f0:f2:05:8f:
54:b1:80:68:1e:5d:d7:51:6e:79:e8:a0:5c:3b:65:
63:73:99:c6:c5:76:85:97:14:4c:b8:e0:0e:9d:96:
52:bf:2f:98:ca:a2:ee:01:64:78:18:39:ae:89:0b:
fb:12:ee:80:f4:66:2d:0b:7e:f2:02:93:d1:07:d0:
91:5c:06:36:58:ed:39:70:57:5f:f3:27:05:6e:9b:
51:c1:f4:7e:cc:7b:92:31:58:f3:e1:83:bc:ac:d0:
a1:d2:08:63:42:c6:b3:ea:d3:e0:c1:22:d0:7e:b3:
d0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B4:1F:B1:D1:63:61:78:51:4F:F0:5E:D2:08:77:C0:E7:9D:87:F2
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/SbQfsdFjYXhRT_Be0gh3wOedh_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.192.0/21
5.175.64.0/20
84.254.128.0/18
88.202.0.0/17
95.210.0.0/16
176.227.128.0/20
213.209.160.0/19
IPv6:
2a00:ca0::/32
Signature Algorithm: sha256WithRSAEncryption
8b:3b:b3:a7:50:0c:99:8a:4c:e7:0f:44:23:81:2f:ca:86:9e:
b6:77:49:09:7d:aa:62:eb:28:d8:ae:cd:ff:48:e6:72:d9:56:
12:d0:57:c7:ad:0f:de:21:da:63:51:d3:e1:f8:69:6b:d5:9b:
04:31:d1:9e:0d:7e:7f:cf:53:08:7e:dd:13:77:a3:9d:ba:e2:
f8:55:66:96:da:99:d8:7c:6e:94:df:57:e5:ad:9e:6e:db:f7:
98:17:d8:6f:02:1e:f2:7c:96:50:41:98:de:c5:84:eb:72:43:
21:e9:c6:dd:72:98:aa:16:f4:cd:08:7e:79:5b:16:19:45:31:
1b:ba:ab:50:d1:f6:d1:b3:9e:c9:6e:00:ef:6c:e6:20:90:21:
24:43:51:31:db:27:ca:49:66:7b:85:ce:24:2c:09:8c:6f:a3:
d8:25:98:a0:30:b6:20:32:ff:9d:76:43:ff:39:c1:14:a0:d1:
a9:f9:25:26:64:13:15:bb:d6:7a:b4:43:c6:7d:b5:72:6b:9c:
46:f6:6a:01:86:ee:32:c6:a8:aa:b5:3f:c1:d7:ae:62:d0:97:
be:29:8d:95:6d:45:40:71:32:c3:01:f4:0d:bb:5a:61:d4:26:
58:12:7d:d3:bd:a7:d1:a9:7d:38:8c:e0:66:dc:fe:61:1f:31:
a5:ba:01:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:06 2025 by rpki-client